last executing test programs:

7m44.17452571s ago: executing program 32 (id=139):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="0e08000000000000b89e08dc86dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

6m29.139165735s ago: executing program 0 (id=261):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
socket$kcm(0x10, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0)
ppoll(&(0x7f0000000140)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
connect$inet6(r3, 0x0, 0x0)

6m25.860184483s ago: executing program 0 (id=264):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x3d1a, 0x0, &(0x7f00000002c0), 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x80000000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2)

6m21.639205559s ago: executing program 0 (id=270):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x8, 0x4db7db71c383ef44, 0xf, 0x18}, @generic={0x66, 0x8, 0x0, 0xfffd}, @initr0, @exit, @call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8}, 0x94)

6m20.99007554s ago: executing program 0 (id=272):
socket$inet6(0xa, 0x80001, 0x0)
setfsgid(0xee00)
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x188, 0x0)
syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
getdents(r2, 0x0, 0x0)

6m20.395622747s ago: executing program 33 (id=251):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x822b01)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r0, &(0x7f0000002400)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

6m4.932357771s ago: executing program 34 (id=272):
socket$inet6(0xa, 0x80001, 0x0)
setfsgid(0xee00)
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x188, 0x0)
syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
getdents(r2, 0x0, 0x0)

6m2.198704643s ago: executing program 35 (id=278):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x8040)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020)
close_range(r6, 0xffffffffffffffff, 0x2)
set_mempolicy(0x2, 0x0, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', 0x0})
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r9, 0x0, 0x0, 0x400c0, &(0x7f00000001c0)={0xa, 0xcaa1, 0x0, @mcast2, 0x200000c}, 0x1c)

5m45.411321495s ago: executing program 36 (id=286):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f00000002c0)})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
write$input_event(r3, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

4m33.040423765s ago: executing program 7 (id=420):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'})

4m31.330073077s ago: executing program 7 (id=424):
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x842, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000001040)=ANY=[@ANYBLOB='showexec,shortname=winnt,shortname=lower,utf8=1,iocharset=cp865,shortname=win95,uni_xlate=1,shortname=win95,check=strict,shortname=winnt,utf8=0,iocharset=iso8859-5,codepage=874,shortname=mixed,shortname=win95,shortname=mixed,nonumtail=0,shortname=mixed,shortname=mixed,uni_xlate=1,rodir,nnonuni_xlate=1,shortname=win95,shortname=win95,utf8=0,nnonumtail=1,shortname=win95,shortname=win95,nnonumtail=1,uni_xlate=1,nfs=nostale_ro,\x00'/444], 0x6, 0x2d7, &(0x7f0000000340)="$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")
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x9, 0x815, 0x0, 0x2, 0xe2, 0x8, 0x1004, 0x9, 0xc591, 0x5, 0x8, 0x1, 0x100, 0x80000004000000, 0x1a], 0x80a0000, 0x2010d3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m29.616219039s ago: executing program 7 (id=427):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000008e000000d50000002a00c5"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

4m28.664385922s ago: executing program 7 (id=430):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x13, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m27.845183751s ago: executing program 7 (id=432):
fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000"], 0xf4}}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201)
r3 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x181882)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe9, 0x3, 0x641f, 0x9b48, 0x8001], [0x6, 0x101, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x100, 0x0, 0x1, 0x1, 0x1}, {0xf, 0x8008, 0x1, 0x1, 0x1}, {0x9, 0x200, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x80, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2})
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

4m12.423896449s ago: executing program 37 (id=432):
fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000"], 0xf4}}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201)
r3 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x181882)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe9, 0x3, 0x641f, 0x9b48, 0x8001], [0x6, 0x101, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x100, 0x0, 0x1, 0x1, 0x1}, {0xf, 0x8008, 0x1, 0x1, 0x1}, {0x9, 0x200, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x80, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2})
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x30, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

4m10.673853973s ago: executing program 8 (id=472):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'})

4m9.701070443s ago: executing program 8 (id=475):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r3, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003000)={0x98, 0x2d, 0x55cf56fd8d6916f9, 0x70bd2a, 0x25dbdbfc, "", [@typed={0x8, 0x3f, 0x0, 0x0, @u32=0x9}, @nested={0x80, 0xb5, 0x0, 0x1, [@nested={0x4, 0x91}, @typed={0xc, 0xda, 0x0, 0x0, @u64=0x5}, @generic="f9ce38b590538df31558e8f05b6b3de928876318dbcbd7c28bea18a521104164f917f3574f7e2ad1830fa8cdb1582f6361cc84a0997679d70af337b58885eb24ee65b97fb2b0f1521bf4f766534d7a76ad2c40f455203a1208a60597ee0b89b5067a8ddc32614814", @nested={0x4, 0x123}]}]}, 0x98}, {0x0}, {&(0x7f0000000240)={0x10, 0x3e, 0x0, 0x70bd27, 0x25dfdbfe}, 0x10}, {&(0x7f0000000580)={0x54, 0x24, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x3b, 0x135, 0x0, 0x1, [@generic="de9e1e69f8bc85c43a527498e39f2f6ceeebef6feace126593b9a80d293733b551d95a7a6235b7f030f6f2233b06ee69bc6fdfd73574d4"]}]}, 0x54}, {0x0}, {&(0x7f00000063c0)={0x38, 0x39, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x28, 0xf0, 0x0, 0x1, [@typed={0xf, 0x13c, 0x0, 0x0, @str='/dev/loop#\x00'}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@loopback}, @generic]}]}, 0x38}, {&(0x7f0000002c80)={0x16c, 0x41, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x20, 0x0, 0x0, @u32=0x4}, @nested={0xec, 0xe1, 0x0, 0x1, [@typed={0xe7, 0x5f, 0x0, 0x0, @binary="eae65837f3bee3b93b2559f5445a83c0b96e0bd5b699abdd93b5b0d8a2d2aa59c16f8d1027afe893e68758e8e5f77571119ceabc5973ea0b4fdcfc1a3791d172aa0fc3e1b2c83c00ceaa32ea6d23c588dc94d8a85077479826bfd98927cabeabb761da3157fe01e50d8d740ca9790000f2e3046794675f8289d9a00a7e7f410ab784c1d068a77dc1673cf1241fa76877ab0392e36540068ff4bb3d3673956bbb4b2da2ab5104bc2e92b9b2f0d0f4b6237076d613e96e96f71bdcddd64c4091a3b9b88e137fc6206b5cd7b7a29b1525c548445930c5088839c69102c139e8d8e2a20841"}]}, @generic="07030000000000000039c45b6bee", @nested={0x3c, 0x131, 0x0, 0x1, [@generic="815873804a46ab385436", @typed={0x8, 0xce, 0x0, 0x0, @fd}, @nested={0x4, 0x2}, @generic="d0165199e15ae91a8cafd5ed46e3351c9ff3", @nested={0x4, 0xcb}, @nested={0x4, 0x156}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x1c, 0xc6, 0x0, 0x1, [@typed={0x14, 0x52, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x5d}]}]}, 0x16c}, {0x0, 0x24}], 0x8}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000400fbdbdf250200000000000000000000000500130001000000"], 0x24}}, 0x44044)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x12, r4, 0x0)
ftruncate(0xffffffffffffffff, 0xc175)
set_mempolicy(0x0, &(0x7f0000000200)=0xffffffffffffff01, 0xaa7b)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4aafd89)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x59642, 0x0)
r6 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "050000009582"}})
r7 = fsmount(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x1, @meta={0x48435655, 0x1d32e442, 0x4b91, 0xa681, 0x63087e8e}}, 0x8})
fchdir(r7)

4m0.788906029s ago: executing program 8 (id=491):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x4, 0x3})
sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0)
ioctl$RTC_WKALM_SET(r6, 0x4028700f, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r7 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'})
ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0x5})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xada838c2a60a980, 0xfff3}, {0x3, 0xfff9}, {0xf}}}, 0x24}}, 0x0)
syz_usb_disconnect(r0)

3m47.97386105s ago: executing program 5 (id=498):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000008e000000d50000002a00c50095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

3m47.800273571s ago: executing program 9 (id=499):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea07", 0xd, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

3m47.462782522s ago: executing program 5 (id=500):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2}, 0x0)

3m46.964311213s ago: executing program 5 (id=501):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd)
sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x40804)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})

3m46.852443135s ago: executing program 9 (id=502):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

3m44.77419446s ago: executing program 9 (id=504):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3m41.660088023s ago: executing program 38 (id=491):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x4, 0x3})
sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0)
ioctl$RTC_WKALM_SET(r6, 0x4028700f, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r7 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'})
ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0x5})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xada838c2a60a980, 0xfff3}, {0x3, 0xfff9}, {0xf}}}, 0x24}}, 0x0)
syz_usb_disconnect(r0)

3m41.068031464s ago: executing program 5 (id=506):
socket(0x10, 0x803, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fanotify_init(0xf00, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x10040)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)

3m40.335615767s ago: executing program 5 (id=509):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000008e000000d50000002a00c50095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

3m39.724032923s ago: executing program 5 (id=510):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
r2 = syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace(0x10, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r4, 0x30d, 0x0, 0xfffffffe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3)
ptrace$peeksig(0x420e, r2, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000500)={0xb, 0x0, [{0xa, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000000, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bb, 0x7, 0x1, 0x2}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0x31cb, 0x6, 0x5566bb86, 0x3, 0xfffffffa, 0x101}, {0x6, 0xfffff85a, 0x1, 0xff, 0x2, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}, {0x285c2d1f321dc362, 0x6, 0x1, 0x200, 0xfffffff9, 0xc, 0x40}, {0xd, 0x0, 0x1, 0x3, 0x81, 0x7ff, 0x9}]})
r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x0, 0x4})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3})
r9 = semget$private(0x0, 0x1, 0x20)
semctl$GETALL(r9, 0x0, 0xd, &(0x7f0000000140)=""/126)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)

3m27.318534001s ago: executing program 39 (id=504):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3m24.47477265s ago: executing program 40 (id=510):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
r2 = syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace(0x10, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r4, 0x30d, 0x0, 0xfffffffe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3)
ptrace$peeksig(0x420e, r2, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000500)={0xb, 0x0, [{0xa, 0x4, 0x4, 0x7, 0x9, 0x7fff, 0x9}, {0xc0000000, 0x0, 0x0, 0x900, 0x3ff, 0xff}, {0x1, 0xa0bb, 0x7, 0x1, 0x2}, {0x80000001, 0x3, 0x1, 0x1, 0x6, 0xa0, 0x7}, {0x1, 0x4, 0x0, 0x6, 0x5, 0x4, 0x605}, {0x40000001, 0x31cb, 0x6, 0x5566bb86, 0x3, 0xfffffffa, 0x101}, {0x6, 0xfffff85a, 0x1, 0xff, 0x2, 0x5, 0x3}, {0xc0000001, 0x7, 0x0, 0x0, 0x4, 0xc, 0x9}, {0x4, 0x3, 0x4, 0x5800, 0x81, 0x6, 0x9}, {0x285c2d1f321dc362, 0x6, 0x1, 0x200, 0xfffffff9, 0xc, 0x40}, {0xd, 0x0, 0x1, 0x3, 0x81, 0x7ff, 0x9}]})
r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x0, 0x4})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3})
r9 = semget$private(0x0, 0x1, 0x20)
semctl$GETALL(r9, 0x0, 0xd, &(0x7f0000000140)=""/126)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)

2m47.909628591s ago: executing program 0 (id=515):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="0084ca000000000014001a801000048005000580"], 0x34}}, 0x0)

2m47.32620853s ago: executing program 0 (id=555):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x12})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8907, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x75, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3f, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @mcast2, @private2, [], "fb36eeca6fad50b375a22a584d16ca"}}}}}}}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$FICLONE(r7, 0x40049409, r0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
sendmsg$AUDIT_ADD_RULE(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x448, 0x3f3, 0x200, 0x70bd2b, 0x25dfdbfe, {0x4, 0x0, 0x1f, [0x6, 0xf, 0x7, 0xd7a, 0x7, 0x9, 0xe2f2, 0xfff, 0x0, 0x7, 0x7, 0x3, 0x8c6, 0x8, 0x3ff, 0x1ff, 0x7, 0x2, 0x0, 0x0, 0x200, 0x0, 0xfffffffb, 0xc, 0x2, 0x3, 0xb, 0x7, 0x4, 0x5, 0x3ff, 0x5, 0x8, 0x72, 0x5d, 0x1, 0x7, 0x10001, 0x400, 0x5b3, 0x5, 0x6, 0x1, 0x1, 0x7c1, 0x6905decb, 0x9, 0x6, 0xb8, 0x2, 0x1, 0x3, 0x2, 0x80000001, 0x2, 0xc24a, 0x81, 0x0, 0x9, 0x2, 0x3, 0x5, 0x8, 0x4], [0x4, 0xb, 0xbf88, 0x9, 0xffffffe8, 0x2, 0x1, 0x7, 0x2, 0x8, 0x9, 0x0, 0xd, 0x6, 0x8000, 0x28, 0x5, 0x4d6, 0x81, 0x7ff, 0x3, 0x7, 0xfffffffc, 0x7, 0x5a7, 0x0, 0x5, 0x5, 0x80, 0x600, 0xad, 0x1, 0x2, 0x8, 0x9, 0xffffffff, 0x8, 0xb3b, 0xf, 0x6, 0x7, 0x94, 0x0, 0x8, 0x10, 0x1, 0x8000, 0x12, 0x1, 0xf, 0xfffffffd, 0x0, 0x9, 0x3, 0x5, 0x7, 0x6, 0x1, 0x400, 0x7ff, 0x10001, 0x80000000, 0xe, 0x200], [0xc, 0x3, 0x5, 0x2, 0x5, 0xfe000000, 0x7ff, 0x8000, 0x9, 0x4, 0x7, 0x2, 0xc9, 0x88, 0x8, 0x5, 0x10, 0x8, 0x5, 0x4, 0x6, 0x0, 0x4, 0x4, 0xfffff964, 0x7, 0xf8b2, 0x7ee9, 0x8, 0xc0000000, 0x8000, 0x6, 0x8, 0x1ff, 0x3, 0x40, 0x81, 0x4, 0x101, 0x1, 0x0, 0x8, 0x10001, 0x74, 0x8, 0xffffffff, 0x4, 0x4, 0x6, 0x3, 0x5, 0xf1, 0x80000000, 0xb2b, 0x4, 0x4, 0xd6a7, 0x7, 0x9, 0x4, 0x6, 0x1, 0x7, 0x7ff], [0x1, 0x984, 0x5, 0xffffffff, 0x401, 0x0, 0x2963, 0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0x1, 0x92, 0x8019a29, 0xffff, 0x3, 0x0, 0xc1, 0x1, 0xfff, 0x4, 0x9, 0x8, 0x9, 0xfffffff8, 0x1, 0x1000, 0x1, 0x7, 0x9, 0x44, 0x24, 0x8, 0x7, 0x96, 0x1000, 0x10, 0x6, 0x5, 0x7, 0x0, 0xffff, 0x3, 0x1, 0x9, 0x8001, 0xfff, 0x2, 0x5d, 0xa, 0x5, 0x4, 0xd, 0x5, 0x7f, 0x0, 0xfffffffb, 0x4f6, 0x7ff, 0x0, 0x1, 0x8], 0x28, ['/dev/loop', ')^:/#\x00', '$!+\\\x00', '/dev/loop', '!\'\'-/#[:\x00', '+\x00']}}, 0x448}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}}, 0x4000004)

2m31.67307996s ago: executing program 41 (id=555):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x12})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8907, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x75, &(0x7f0000000340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x3f, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @mcast2, @private2, [], "fb36eeca6fad50b375a22a584d16ca"}}}}}}}, 0x0)
recvmsg$kcm(r6, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$FICLONE(r7, 0x40049409, r0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
sendmsg$AUDIT_ADD_RULE(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x448, 0x3f3, 0x200, 0x70bd2b, 0x25dfdbfe, {0x4, 0x0, 0x1f, [0x6, 0xf, 0x7, 0xd7a, 0x7, 0x9, 0xe2f2, 0xfff, 0x0, 0x7, 0x7, 0x3, 0x8c6, 0x8, 0x3ff, 0x1ff, 0x7, 0x2, 0x0, 0x0, 0x200, 0x0, 0xfffffffb, 0xc, 0x2, 0x3, 0xb, 0x7, 0x4, 0x5, 0x3ff, 0x5, 0x8, 0x72, 0x5d, 0x1, 0x7, 0x10001, 0x400, 0x5b3, 0x5, 0x6, 0x1, 0x1, 0x7c1, 0x6905decb, 0x9, 0x6, 0xb8, 0x2, 0x1, 0x3, 0x2, 0x80000001, 0x2, 0xc24a, 0x81, 0x0, 0x9, 0x2, 0x3, 0x5, 0x8, 0x4], [0x4, 0xb, 0xbf88, 0x9, 0xffffffe8, 0x2, 0x1, 0x7, 0x2, 0x8, 0x9, 0x0, 0xd, 0x6, 0x8000, 0x28, 0x5, 0x4d6, 0x81, 0x7ff, 0x3, 0x7, 0xfffffffc, 0x7, 0x5a7, 0x0, 0x5, 0x5, 0x80, 0x600, 0xad, 0x1, 0x2, 0x8, 0x9, 0xffffffff, 0x8, 0xb3b, 0xf, 0x6, 0x7, 0x94, 0x0, 0x8, 0x10, 0x1, 0x8000, 0x12, 0x1, 0xf, 0xfffffffd, 0x0, 0x9, 0x3, 0x5, 0x7, 0x6, 0x1, 0x400, 0x7ff, 0x10001, 0x80000000, 0xe, 0x200], [0xc, 0x3, 0x5, 0x2, 0x5, 0xfe000000, 0x7ff, 0x8000, 0x9, 0x4, 0x7, 0x2, 0xc9, 0x88, 0x8, 0x5, 0x10, 0x8, 0x5, 0x4, 0x6, 0x0, 0x4, 0x4, 0xfffff964, 0x7, 0xf8b2, 0x7ee9, 0x8, 0xc0000000, 0x8000, 0x6, 0x8, 0x1ff, 0x3, 0x40, 0x81, 0x4, 0x101, 0x1, 0x0, 0x8, 0x10001, 0x74, 0x8, 0xffffffff, 0x4, 0x4, 0x6, 0x3, 0x5, 0xf1, 0x80000000, 0xb2b, 0x4, 0x4, 0xd6a7, 0x7, 0x9, 0x4, 0x6, 0x1, 0x7, 0x7ff], [0x1, 0x984, 0x5, 0xffffffff, 0x401, 0x0, 0x2963, 0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0x1, 0x92, 0x8019a29, 0xffff, 0x3, 0x0, 0xc1, 0x1, 0xfff, 0x4, 0x9, 0x8, 0x9, 0xfffffff8, 0x1, 0x1000, 0x1, 0x7, 0x9, 0x44, 0x24, 0x8, 0x7, 0x96, 0x1000, 0x10, 0x6, 0x5, 0x7, 0x0, 0xffff, 0x3, 0x1, 0x9, 0x8001, 0xfff, 0x2, 0x5d, 0xa, 0x5, 0x4, 0xd, 0x5, 0x7f, 0x0, 0xfffffffb, 0x4f6, 0x7ff, 0x0, 0x1, 0x8], 0x28, ['/dev/loop', ')^:/#\x00', '$!+\\\x00', '/dev/loop', '!\'\'-/#[:\x00', '+\x00']}}, 0x448}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}}, 0x4000004)

1m23.869118154s ago: executing program 2 (id=711):
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r0 = getpgid(0x0)
syz_open_procfs(r0, &(0x7f0000001800)='attr/fscreate\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='smaps\x00')

1m23.047427878s ago: executing program 4 (id=713):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000280))
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x4, 0x3a, "6ac0a711d577cfcec6ab1e39deb0a88a3d7f876f052a3ee84165c65ac86c3ea3652d39f6db4bf9b94a4e440d73978f7d493f199a54e40dadf9ee"}, 0x42)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCSFWD(r3, 0x40047452, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0)

1m22.398791561s ago: executing program 2 (id=714):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x10008000000, 0x4, 0x7649, 0x1, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m21.325287486s ago: executing program 4 (id=717):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_io_uring_setup(0x3d1a, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2)

1m20.236638792s ago: executing program 2 (id=720):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x29, &(0x7f00000000c0)=[{0x25, '\x00', @buffer={"0bfaa144707ebdcf41d3b61caa6602154de73dde169c94903e84f2995049f801", 0x20}, 0x101}]})

1m19.701755044s ago: executing program 4 (id=722):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x1, 0x1, 0xa, 0x1ff, 0x1})

1m19.317153092s ago: executing program 2 (id=724):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port0\x00', 0x0, 0x40, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4})
quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f000000", @ANYRES32, @ANYBLOB="0000000000e2", @ANYRES32, @ANYBLOB], 0x50)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce6010203010902380001000000000904320001"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x0, "08000000000000000000000000000000000000b582000000010000000100", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4, <r5=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00"})

1m18.914843894s ago: executing program 4 (id=726):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x200c405a)

1m17.557601301s ago: executing program 4 (id=727):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x81000)
renameat2(r1, 0x0, r1, &(0x7f0000000980)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0xe, 0x1001, 0x7ffffffff, 0x10})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r5, 0x0, 0x34, 0x0, &(0x7f0000000040))
shmget$private(0x0, 0x3000, 0x184, &(0x7f0000e71000/0x3000)=nil)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f018, 0x1})

1m17.088237772s ago: executing program 4 (id=728):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0)
sendmsg$nl_xfrm(r2, 0x0, 0x800)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r7 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r7, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0)

1m15.32778341s ago: executing program 1 (id=731):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'nr0\x00', 0x1000})

1m14.626092053s ago: executing program 1 (id=732):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_io_uring_setup(0x3d1a, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2)

1m13.823271301s ago: executing program 3 (id=733):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

1m13.205976188s ago: executing program 1 (id=734):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600000000018060100000000000000000000000000000000fe8000000000000000000000000000aa04004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="68c2"], 0x0)

1m13.142687631s ago: executing program 3 (id=735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x22000000)

1m12.296706768s ago: executing program 3 (id=736):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x1, 0x1, 0xa, 0x1ff, 0x1})

1m11.515017063s ago: executing program 3 (id=738):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x81000)
renameat2(r1, 0x0, r1, &(0x7f0000000980)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0xe, 0x1001, 0x7ffffffff, 0x10})
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet(0x2, 0x3, 0x33)
getsockopt$inet_mreqsrc(r4, 0x0, 0x34, 0x0, &(0x7f0000000040))
shmget$private(0x0, 0x3000, 0x184, &(0x7f0000e71000/0x3000)=nil)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f018, 0x1})

1m11.138371537s ago: executing program 3 (id=739):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x48}}, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0xb6f1, 0x2})
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffe, 0x9a, 0x0, @buffer={0x0, 0x92, &(0x7f0000001040)=""/146}, &(0x7f0000000e80)="8ac6f29d3852d7965c0208005c1672cb64e90f3425c85f71797dee19d92d74c0eb3c8f95c39a243f7c3bf19e24c1e89183861f59a635c7e50d000000000000b354882bb4e98b7ff63d42b99602f37f65c8fcb9e3a1a1895e9f53dd0a8af3c8fcf79fef82cb65bab4487d709482d3723dbcbb1002ab2f976c9fd6ff0f0000b97e98b9321cffca9e5277991268dda772c5aa680f9c1d25a7c369a9", 0x0, 0xfffffff9, 0x10026, 0xffffffff, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = eventfd2(0x200007, 0x80801)
read$eventfd(r4, &(0x7f0000000280), 0x8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x4}}, &(0x7f0000000200)={0x0, 0x18, 0xffffff6a}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)

1m10.324084793s ago: executing program 1 (id=741):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendto$inet(r0, &(0x7f0000000680)="67ac2960dbf834b888a8b0", 0xb, 0x841, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000240)="2bd4e5f5", 0x4}, {&(0x7f0000000300)}, {0x0}], 0x3, &(0x7f0000000c80)=[{0x10, 0x108, 0x8}, {0x10, 0x104, 0x7}, {0x10, 0x1, 0x8}], 0x30}}], 0x2, 0x4000045)

1m10.286653534s ago: executing program 3 (id=742):
syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff)

1m9.533032564s ago: executing program 1 (id=743):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x10008000000, 0x4, 0x7649, 0x1, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m8.654017353s ago: executing program 2 (id=745):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

1m8.522933093s ago: executing program 1 (id=746):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"d1ed39d88b46d2e681cdb9e5c1a319675906d154a3f83e00", r4})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x1, 0x7, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20)

1m7.942521959s ago: executing program 2 (id=747):
socketpair(0x0, 0x7, 0x9, &(0x7f0000000040))
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2403)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000002c0)=0x8)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
r3 = socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
utimensat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x7, 0x0, r8})

57.957272533s ago: executing program 42 (id=728):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0)
sendmsg$nl_xfrm(r2, 0x0, 0x800)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r7 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r7, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0)

54.861937818s ago: executing program 43 (id=742):
syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff)

52.728119605s ago: executing program 44 (id=746):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"d1ed39d88b46d2e681cdb9e5c1a319675906d154a3f83e00", r4})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x1, 0x7, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20)

51.851036351s ago: executing program 45 (id=747):
socketpair(0x0, 0x7, 0x9, &(0x7f0000000040))
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2403)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000002c0)=0x8)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
r3 = socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
utimensat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x7, 0x0, r8})

9.04391373s ago: executing program 6 (id=775):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

5.990789778s ago: executing program 7 (id=749):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x200})
r1 = landlock_create_ruleset(&(0x7f0000000100)={0x3006, 0x5, 0x1}, 0x18, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
getdents(r8, &(0x7f0000002380)=""/130, 0x82)
mknodat(r8, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
io_uring_enter(r8, 0x643a, 0x143e, 0x22, &(0x7f0000000240)={[0x8]}, 0x8)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)
sendfile(r9, r9, 0x0, 0x200000)
r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$dsp(r11, &(0x7f00000000c0)=""/152, 0x98)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0xfce)

5.523677157s ago: executing program 6 (id=776):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040011)

4.573627695s ago: executing program 6 (id=777):
syz_io_uring_setup(0x313f, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x3f7, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @random="bdfec6d04adb", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

4.029315546s ago: executing program 8 (id=751):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = syz_open_pts(r0, 0x141601)
close(0x3)
unshare(0x8040600)
ppoll(&(0x7f0000000040)=[{r1, 0xa}], 0x1, 0x0, 0x0, 0x0)

3.920279429s ago: executing program 6 (id=778):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x90, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

3.391553336s ago: executing program 6 (id=779):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0)
getpid()
socket(0x840000000002, 0x3, 0x100)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x5, 0x1210, 0x0, 0x0}], 0x1})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0)

2.588293227s ago: executing program 8 (id=780):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103000100092100000088224e"], 0x0)

1.413035253s ago: executing program 9 (id=752):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = epoll_create(0x3ff)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000008})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418})
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

664.808848ms ago: executing program 6 (id=781):
socket(0x10, 0x803, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
syz_open_dev$MSR(0x0, 0x0, 0x0)
fanotify_init(0xf00, 0x1)
syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x10040)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)

637.343228ms ago: executing program 8 (id=782):
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004)
timer_delete(r0)

585.796492ms ago: executing program 9 (id=783):
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x81c0, 0x0)
r0 = getpgid(0x0)
syz_open_procfs(r0, &(0x7f0000001800)='attr/fscreate\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='smaps\x00')

0s ago: executing program 9 (id=784):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x7, 0x0, 0x3, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000040)=0xfa43)

kernel console output (not intermixed with test programs):

egistering): Port device team_slave_0 removed
[  393.852007][ T7145] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  393.934009][ T7145] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  394.014365][ T7145] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  394.066267][ T7145] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  394.269439][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.628114][ T7027] veth0_macvtap: entered promiscuous mode
[  394.697964][ T7027] veth1_macvtap: entered promiscuous mode
[  394.852982][ T7068] veth0_vlan: entered promiscuous mode
[  395.042598][ T7068] veth1_vlan: entered promiscuous mode
[  395.102205][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.281479][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.327684][ T7149] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  395.414775][ T7149] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  395.467108][ T7149] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  395.507278][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.516394][ T7149] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  395.619989][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.665135][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.703612][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.930093][ T7068] veth0_macvtap: entered promiscuous mode
[  396.037764][ T7068] veth1_macvtap: entered promiscuous mode
[  396.185400][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.493849][ T7145] 8021q: adding VLAN 0 to HW filter on device team0
[  396.567026][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.659993][ T7068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.699192][ T7084] veth0_vlan: entered promiscuous mode
[  396.771227][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.778687][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.827224][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.834740][ T6104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.968762][ T6111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.022665][ T7084] veth1_vlan: entered promiscuous mode
[  397.049067][ T6111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.133487][ T6111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.177988][ T6111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.598242][ T7084] veth0_macvtap: entered promiscuous mode
[  397.674384][ T7084] veth1_macvtap: entered promiscuous mode
[  397.755506][ T7149] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.018301][ T7149] 8021q: adding VLAN 0 to HW filter on device team0
[  398.124493][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.210245][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.217765][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.317084][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.410463][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.417906][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.586421][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.729898][ T6128] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.810803][ T6128] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.858955][ T6128] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.410322][ T7145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.912357][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.920654][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.055727][ T7149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.215949][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.224276][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.174695][ T7312] netlink: 'syz.6.274': attribute type 1 has an invalid length.
[  402.182836][ T7312] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.274'.
[  402.386217][ T7145] veth0_vlan: entered promiscuous mode
[  402.509434][ T7145] veth1_vlan: entered promiscuous mode
[  402.932201][ T7145] veth0_macvtap: entered promiscuous mode
[  402.989569][ T7145] veth1_macvtap: entered promiscuous mode
[  403.305679][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.434771][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.499170][ T7331] loop6: detected capacity change from 0 to 256
[  403.631894][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.678962][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.770100][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.853226][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.225925][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.234367][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.333985][ T7149] veth0_vlan: entered promiscuous mode
[  404.529379][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.539017][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.560096][ T7149] veth1_vlan: entered promiscuous mode
[  405.047629][ T7149] veth0_macvtap: entered promiscuous mode
[  405.173354][ T7149] veth1_macvtap: entered promiscuous mode
[  405.477967][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.556719][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.745576][ T6111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.875872][ T6111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.991028][ T6111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.238750][ T6136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.317115][ T2119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.317204][ T2119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.677762][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.677851][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.901694][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  408.908524][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  408.968521][ T7397] loop7: detected capacity change from 0 to 2048
[  409.173763][ T7397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.187934][ T7397] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.266274][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.8.297'.
[  409.405844][ T7068] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.179875][ T7413] syzkaller0: entered promiscuous mode
[  410.185697][ T7413] syzkaller0: entered allmulticast mode
[  411.486934][ T2119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.486992][ T2119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.677322][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.685758][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.288223][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.296334][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.763596][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.773230][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.761498][ T7464] Bluetooth: MGMT ver 1.23
[  415.901545][ T7466] netlink: 28 bytes leftover after parsing attributes in process `syz.6.307'.
[  416.485200][ T7471] syzkaller0: entered promiscuous mode
[  416.491290][ T7471] syzkaller0: entered allmulticast mode
[  417.763805][ T7489] syzkaller0: entered promiscuous mode
[  417.769467][ T7489] syzkaller0: entered allmulticast mode
[  419.010998][ T7508] netlink: 76 bytes leftover after parsing attributes in process `syz.8.318'.
[  419.702039][ T7516] syzkaller0: entered promiscuous mode
[  419.707791][ T7516] syzkaller0: entered allmulticast mode
[  420.190999][ T5848] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  420.430753][ T5848] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  420.440208][ T5848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.504457][ T5848] usb 10-1: config 0 descriptor??
[  421.647003][ T5848] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  421.682863][ T5848] [drm:udl_init] *ERROR* Selecting channel failed
[  421.878545][ T5848] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2
[  421.886204][ T5848] [drm] Initialized udl on minor 2
[  421.953984][ T5848] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  421.999783][ T5848] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  422.041963][    T9] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  422.071788][    T9] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  422.078852][ T5848] usb 10-1: USB disconnect, device number 2
[  423.647604][ T7560] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  423.815924][ T7557] syzkaller0: entered promiscuous mode
[  423.821849][ T7557] syzkaller0: entered allmulticast mode
[  427.394675][    T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  427.631034][    T9] usb 10-1: Using ep0 maxpacket: 32
[  427.666385][    T9] usb 10-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[  427.676084][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.848288][    T9] usb 10-1: config 0 descriptor??
[  428.430839][    T9] lenovo 0003:17EF:60A4.0001: item fetching failed at offset 5/6
[  428.487558][    T9] lenovo 0003:17EF:60A4.0001: hid_parse failed
[  428.494388][    T9] lenovo 0003:17EF:60A4.0001: probe with driver lenovo failed with error -22
[  428.682559][    T9] usb 10-1: USB disconnect, device number 3
[  429.836999][ T7607] syzkaller0: entered promiscuous mode
[  429.842979][ T7607] syzkaller0: entered allmulticast mode
[  429.978441][ T7609] loop8: detected capacity change from 0 to 2048
[  430.138533][ T7609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.316263][   T30] audit: type=1800 audit(1770460557.429:5): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.354" name="file1" dev="loop8" ino=1346 res=0 errno=0
[  430.335719][ T7609] UDF-fs: warning (device loop8): udf_truncate_tail_extent: Too long extent after EOF in inode 1346: i_size: 10 lbcount: 1536 extent 6+1536
[  431.081071][  T832] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  431.329604][  T832] usb 7-1: config 0 has no interfaces?
[  431.405273][  T832] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  431.414995][  T832] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  431.427881][  T832] usb 7-1: Product: syz
[  431.433794][  T832] usb 7-1: Manufacturer: syz
[  431.526704][  T832] usb 7-1: config 0 descriptor??
[  431.914796][  T832] usb 7-1: USB disconnect, device number 2
[  431.922876][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  432.162639][    T9] usb 6-1: Using ep0 maxpacket: 16
[  432.215652][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.229576][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.242756][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  432.253302][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.388622][    T9] usb 6-1: config 0 descriptor??
[  432.521698][    T9] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[  432.529894][    T9] usbhid 6-1:0.0: can't add hid device: -22
[  432.539229][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  432.686272][    T9] usb 6-1: USB disconnect, device number 2
[  433.381757][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.7.368'.
[  433.604323][ T7663] syzkaller0: entered promiscuous mode
[  433.610241][ T7663] syzkaller0: entered allmulticast mode
[  435.580732][    T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  435.827345][    T9] usb 9-1: Using ep0 maxpacket: 32
[  435.877564][    T9] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  435.887744][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.896309][    T9] usb 9-1: Product: syz
[  435.900844][    T9] usb 9-1: Manufacturer: syz
[  435.905620][    T9] usb 9-1: SerialNumber: syz
[  436.046821][    T9] usb 9-1: config 0 descriptor??
[  436.319347][    T9] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 002
[  436.877874][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.9.381'.
[  437.045113][ T7683] i2c i2c-1: failure reading status
[  437.102383][    T9] usb 9-1: USB disconnect, device number 2
[  437.722683][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.382'.
[  437.736149][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.6.382'.
[  439.126727][ T7700] syzkaller0: entered promiscuous mode
[  439.132480][ T7700] syzkaller0: entered allmulticast mode
[  441.032096][ T7724] loop6: detected capacity change from 0 to 256
[  441.496429][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.8.394'.
[  441.509813][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.8.394'.
[  443.986740][ T7743] loop5: detected capacity change from 0 to 2048
[  444.288108][ T7743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  444.415205][   T30] audit: type=1800 audit(1770460571.529:6): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.396" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  444.530738][  T832] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  444.707824][ T7757] syzkaller0: entered promiscuous mode
[  444.715496][ T7757] syzkaller0: entered allmulticast mode
[  444.782065][  T832] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  444.792522][  T832] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  444.808277][  T832] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  444.817704][  T832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.219457][  T832] usb 9-1: usb_control_msg returned -32
[  445.230151][  T832] usbtmc 9-1:16.0: can't read capabilities
[  446.639533][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.9.405'.
[  446.657525][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.9.405'.
[  447.602823][    T9] usb 9-1: USB disconnect, device number 3
[  448.634884][ T7782] loop8: detected capacity change from 0 to 256
[  449.015514][ T7789] loop9: detected capacity change from 0 to 2048
[  449.219814][ T7789] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  450.128362][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.413'.
[  450.547298][ T7806] syzkaller0: entered promiscuous mode
[  450.553183][ T7806] syzkaller0: entered allmulticast mode
[  452.782330][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.422'.
[  452.795640][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.422'.
[  453.768931][ T7836] loop7: detected capacity change from 0 to 256
[  454.622296][ T7840] loop8: detected capacity change from 0 to 2048
[  454.730654][ T7840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  456.062889][ T7855] syzkaller0: entered promiscuous mode
[  456.068598][ T7855] syzkaller0: entered allmulticast mode
[  457.626538][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.433'.
[  457.643124][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.433'.
[  458.159423][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.7.432'.
[  458.169196][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.432'.
[  460.282671][ T7888] loop5: detected capacity change from 0 to 512
[  460.327131][ T7888] EXT4-fs: inline encryption not supported
[  460.626158][ T7888] EXT4-fs (loop5): 1 orphan inode deleted
[  460.654430][ T6136] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  460.664830][ T6136] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:21: Failed to release dquot type 1
[  460.695813][ T7888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.765129][ T7888] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.904026][   T30] audit: type=1800 audit(1770460588.019:7): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.438" name="bus" dev="loop5" ino=18 res=0 errno=0
[  461.352925][ T7149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.323871][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.9.444'.
[  462.336339][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.9.444'.
[  462.787816][ T7902] syzkaller0: entered promiscuous mode
[  462.794235][ T7902] syzkaller0: entered allmulticast mode
[  462.802539][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'.
[  463.016670][ T7907] ip6gre1: entered promiscuous mode
[  463.022420][ T7907] ip6gre1: entered allmulticast mode
[  463.851695][  T832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  463.860678][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  463.869256][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  464.163451][ T7925] usb usb1: usbfs: process 7925 (syz.6.449) did not claim interface 0 before use
[  464.771060][  T832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  464.851340][  T832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  464.921877][ T7933] loop8: detected capacity change from 0 to 512
[  464.982471][ T7933] EXT4-fs: inline encryption not supported
[  465.216997][ T7933] EXT4-fs (loop8): 1 orphan inode deleted
[  465.237781][ T6128] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  465.248280][ T6128] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1
[  465.315508][ T7933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.334855][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.9.455'.
[  465.349229][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.9.455'.
[  466.670705][ T7933] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  466.823388][   T30] audit: type=1800 audit(1770460593.929:8): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.452" name="bus" dev="loop8" ino=18 res=0 errno=0
[  467.353444][ T7084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.651089][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  468.137830][ T7959] syzkaller0: entered promiscuous mode
[  468.144911][ T7959] syzkaller0: entered allmulticast mode
[  468.196648][    T9] IPVS: starting estimator thread 0...
[  468.293114][ T7961] IPVS: using max 240 ests per chain, 12000 per kthread
[  468.332239][ T7958] loop5: detected capacity change from 0 to 7
[  468.429872][ T7958] Dev loop5: unable to read RDB block 7
[  468.436034][ T7958]  loop5: unable to read partition table
[  468.539089][ T7958] loop5: partition table beyond EOD, truncated
[  468.545767][ T7958] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  470.759455][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  470.766261][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  472.771717][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  473.203615][ T7992] loop8: detected capacity change from 0 to 512
[  473.269203][ T7992] EXT4-fs: inline encryption not supported
[  473.375093][ T7992] EXT4-fs (loop8): 1 orphan inode deleted
[  473.383186][ T7992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.411334][ T7992] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.460943][ T2119] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  473.471403][ T2119] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1
[  473.490653][   T30] audit: type=1800 audit(1770460600.589:9): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.469" name="bus" dev="loop8" ino=16 res=0 errno=0
[  473.662719][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  473.677121][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  473.686175][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  473.706151][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  473.725123][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  473.992644][ T7084] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.770964][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  474.873274][ T8010] syzkaller0: entered promiscuous mode
[  474.878846][ T8010] syzkaller0: entered allmulticast mode
[  475.249919][ T8017] binder: 8015:8017 ioctl 4018620d 0 returned -22
[  475.811105][ T5076] Bluetooth: hci1: command tx timeout
[  477.159272][ T7999] chnl_net:caif_netlink_parms(): no params data found
[  477.891224][ T5076] Bluetooth: hci1: command tx timeout
[  477.912224][ T6104] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.279359][ T6104] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.514025][ T6104] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.766735][ T6104] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.832338][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.839904][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.867555][ T7999] bridge_slave_0: entered allmulticast mode
[  479.933372][ T7999] bridge_slave_0: entered promiscuous mode
[  479.970684][ T5076] Bluetooth: hci1: command tx timeout
[  480.080933][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.088447][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.190103][ T7999] bridge_slave_1: entered allmulticast mode
[  480.269857][ T7999] bridge_slave_1: entered promiscuous mode
[  480.307350][ T8048] loop6: detected capacity change from 0 to 512
[  480.324471][ T6104] bridge_slave_1: left allmulticast mode
[  480.330475][ T6104] bridge_slave_1: left promiscuous mode
[  480.337112][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.407916][ T8048] EXT4-fs: inline encryption not supported
[  480.437104][ T6104] bridge_slave_0: left allmulticast mode
[  480.443042][ T6104] bridge_slave_0: left promiscuous mode
[  480.449624][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.728533][ T8048] EXT4-fs (loop6): 1 orphan inode deleted
[  480.769963][ T8048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.781941][ T6136] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  480.794778][ T6136] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:21: Failed to release dquot type 1
[  480.932351][ T8048] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  481.053569][   T30] audit: type=1800 audit(1770460608.169:10): pid=8048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.481" name="bus" dev="loop6" ino=18 res=0 errno=0
[  481.333088][ T7027] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.060855][ T5076] Bluetooth: hci1: command tx timeout
[  482.407523][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.489459][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  482.593562][ T6104] bond0 (unregistering): Released all slaves
[  483.075141][ T7999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.488567][ T7999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.877579][   T30] audit: type=1326 audit(1770460610.979:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb152d9aeb9 code=0x7ffc0000
[  483.901809][   T30] audit: type=1326 audit(1770460610.979:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb152d9aeb9 code=0x7ffc0000
[  483.924532][   T30] audit: type=1326 audit(1770460610.979:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb152d9aeb9 code=0x7ffc0000
[  483.949371][   T30] audit: type=1326 audit(1770460610.989:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb152d9aeb9 code=0x7ffc0000
[  483.972918][   T30] audit: type=1326 audit(1770460610.989:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb152d9c747 code=0x7ffc0000
[  483.995430][   T30] audit: type=1326 audit(1770460610.989:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb152d9aeb9 code=0x7ffc0000
[  484.018167][   T30] audit: type=1326 audit(1770460610.989:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb152d9aeb9 code=0x7ffc0000
[  484.040790][   T30] audit: type=1326 audit(1770460610.989:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb152d9aeb9 code=0x7ffc0000
[  484.337452][ T6104] hsr_slave_0: left promiscuous mode
[  484.398946][ T6104] hsr_slave_1: left promiscuous mode
[  484.418345][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.426749][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.482761][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.490655][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.860804][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  489.306757][ T6104] veth1_macvtap: left promiscuous mode
[  489.346124][ T6104] veth0_macvtap: left promiscuous mode
[  489.359389][ T6104] veth1_vlan: left promiscuous mode
[  489.370751][ T6104] veth0_vlan: left promiscuous mode
[  491.092597][ T6104] team0 (unregistering): Port device team_slave_1 removed
[  491.172165][   T51] Bluetooth: hci7: command 0x0406 tx timeout
[  491.221246][ T6104] team0 (unregistering): Port device team_slave_0 removed
[  491.983400][ T7999] team0: Port device team_slave_0 added
[  492.143403][ T7999] team0: Port device team_slave_1 added
[  492.465108][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.472568][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.499322][ T7999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.028830][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.036243][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.065924][ T7999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  495.043075][ T7999] hsr_slave_0: entered promiscuous mode
[  495.065430][ T7999] hsr_slave_1: entered promiscuous mode
[  497.164177][ T8110] syzkaller0: entered promiscuous mode
[  497.169848][ T8110] syzkaller0: entered allmulticast mode
[  497.322183][ T8112] loop6: detected capacity change from 0 to 512
[  497.347697][ T8112] EXT4-fs: inline encryption not supported
[  497.506469][ T8112] EXT4-fs (loop6): 1 orphan inode deleted
[  497.521689][ T8112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.522068][ T6141] __quota_error: 5 callbacks suppressed
[  497.522132][ T6141] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  497.550561][ T6141] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:22: Failed to release dquot type 1
[  497.574824][ T8112] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  497.670740][   T30] audit: type=1800 audit(1770460624.769:24): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.493" name="bus" dev="loop6" ino=16 res=0 errno=0
[  497.919644][ T7999] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  498.014887][ T7027] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.039763][ T7999] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  502.899951][ T7999] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  503.072252][ T7999] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  504.336465][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  504.346883][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  504.357183][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  504.374312][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  504.388941][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  504.641958][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.851192][ T5076] Bluetooth: hci0: command 0x0406 tx timeout
[  505.173234][ T7999] 8021q: adding VLAN 0 to HW filter on device team0
[  505.725981][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.733578][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.788006][ T8145] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  506.005036][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.012674][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.540897][ T5076] Bluetooth: hci3: command tx timeout
[  507.107774][ T8158] loop6: detected capacity change from 0 to 512
[  507.135882][ T8158] EXT4-fs: inline encryption not supported
[  507.355296][ T8134] chnl_net:caif_netlink_parms(): no params data found
[  507.546691][ T8158] EXT4-fs (loop6): 1 orphan inode deleted
[  507.591056][ T6128] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  507.593036][ T8158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.604963][ T6128] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1
[  507.721755][ T8158] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  507.929498][   T30] audit: type=1800 audit(1770460635.019:25): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.512" name="bus" dev="loop6" ino=18 res=0 errno=0
[  508.251655][ T5076] Bluetooth: hci2: command 0x0406 tx timeout
[  508.407524][ T6104] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.412859][ T7027] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.607923][ T6104] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.639048][   T51] Bluetooth: hci3: command tx timeout
[  511.880811][   T51] Bluetooth: hci3: command tx timeout
[  512.895833][ T6104] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.981548][ T5076] Bluetooth: hci3: command tx timeout
[  517.012334][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  517.238162][ T6104] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.615912][ T7999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.169793][ T8134] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.181085][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.243144][ T8134] bridge_slave_0: entered allmulticast mode
[  518.298121][ T8134] bridge_slave_0: entered promiscuous mode
[  518.466731][ T8134] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.474377][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.524542][ T8134] bridge_slave_1: entered allmulticast mode
[  518.550182][ T8134] bridge_slave_1: entered promiscuous mode
[  518.782335][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  518.801819][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  518.836579][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  518.861597][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  518.876898][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  519.171334][ T6104] bridge_slave_1: left allmulticast mode
[  519.179820][ T6104] bridge_slave_1: left promiscuous mode
[  519.188342][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.283338][ T6104] bridge_slave_0: left allmulticast mode
[  519.289178][ T6104] bridge_slave_0: left promiscuous mode
[  519.296201][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.246416][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  520.311626][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.357109][ T6104] bond0 (unregistering): Released all slaves
[  520.458426][ T8134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.667365][ T8134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.013142][ T5076] Bluetooth: hci4: command tx timeout
[  521.259325][ T8134] team0: Port device team_slave_0 added
[  521.525369][ T8134] team0: Port device team_slave_1 added
[  521.537771][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  521.572214][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  521.601369][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  521.661055][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  521.690039][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  522.034804][ T8134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.044423][ T8134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.071856][ T8134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.213450][ T8197] syzkaller0: entered promiscuous mode
[  522.219257][ T8197] syzkaller0: entered allmulticast mode
[  522.310619][ T6104] hsr_slave_0: left promiscuous mode
[  522.326681][ T6104] hsr_slave_1: left promiscuous mode
[  522.338268][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.350941][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.393109][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.400831][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.484659][ T6104] veth1_macvtap: left promiscuous mode
[  522.498320][ T6104] veth0_macvtap: left promiscuous mode
[  522.507456][ T6104] veth1_vlan: left promiscuous mode
[  522.514755][ T6104] veth0_vlan: left promiscuous mode
[  523.016853][ T6104] team0 (unregistering): Port device team_slave_1 removed
[  523.046693][ T6104] team0 (unregistering): Port device team_slave_0 removed
[  523.090807][ T5076] Bluetooth: hci4: command tx timeout
[  523.264851][ T8134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.274640][ T8134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.301851][ T8134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.756818][ T8134] hsr_slave_0: entered promiscuous mode
[  523.768153][ T8134] hsr_slave_1: entered promiscuous mode
[  523.790953][ T8134] debugfs: 'hsr0' already exists in 'hsr'
[  523.796853][ T8134] Cannot create hsr debugfs directory
[  523.822612][ T5076] Bluetooth: hci0: command tx timeout
[  524.647991][ T6104] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.746142][ T8182] chnl_net:caif_netlink_parms(): no params data found
[  524.883033][ T6104] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.132750][ T6104] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.170816][ T5076] Bluetooth: hci4: command tx timeout
[  525.196364][ T7999] veth0_vlan: entered promiscuous mode
[  525.428446][ T6104] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.663152][ T7999] veth1_vlan: entered promiscuous mode
[  525.890640][ T5076] Bluetooth: hci0: command tx timeout
[  526.533131][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.541256][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.554219][ T8182] bridge_slave_0: entered allmulticast mode
[  526.581867][ T8182] bridge_slave_0: entered promiscuous mode
[  526.609009][ T8193] chnl_net:caif_netlink_parms(): no params data found
[  526.733430][ T6104] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.782120][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.789622][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.833811][ T8182] bridge_slave_1: entered allmulticast mode
[  526.870990][ T8182] bridge_slave_1: entered promiscuous mode
[  527.260656][ T5076] Bluetooth: hci4: command tx timeout
[  527.297557][ T6104] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.354318][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.453614][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.477023][ T7999] veth0_macvtap: entered promiscuous mode
[  527.537199][ T6104] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.794707][ T6104] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.944754][ T8182] team0: Port device team_slave_0 added
[  527.956153][ T7999] veth1_macvtap: entered promiscuous mode
[  527.970604][ T5076] Bluetooth: hci0: command tx timeout
[  528.028123][ T8134] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  528.109509][ T8182] team0: Port device team_slave_1 added
[  528.122197][ T8134] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  528.393801][ T8134] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  528.479671][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.487956][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.516364][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.545840][ T8134] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  528.779775][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.787338][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.815443][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.940131][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.219047][ T7999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.264280][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.271734][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.282236][ T8193] bridge_slave_0: entered allmulticast mode
[  529.312925][ T8193] bridge_slave_0: entered promiscuous mode
[  529.354669][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.362268][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.381012][ T8193] bridge_slave_1: entered allmulticast mode
[  529.394023][ T8193] bridge_slave_1: entered promiscuous mode
[  529.598336][ T6104] bridge_slave_1: left allmulticast mode
[  529.604263][ T6104] bridge_slave_1: left promiscuous mode
[  529.610653][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.643434][ T6104] bridge_slave_0: left allmulticast mode
[  529.649269][ T6104] bridge_slave_0: left promiscuous mode
[  529.657082][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.705047][ T6104] bridge_slave_1: left allmulticast mode
[  529.711061][ T6104] bridge_slave_1: left promiscuous mode
[  529.717237][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.769489][ T6104] bridge_slave_0: left allmulticast mode
[  529.776069][ T6104] bridge_slave_0: left promiscuous mode
[  529.782758][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.060663][ T5076] Bluetooth: hci0: command tx timeout
[  530.349864][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.365937][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.379928][ T6104] bond0 (unregistering): Released all slaves
[  530.685121][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.704807][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.719824][ T6104] bond0 (unregistering): Released all slaves
[  530.785182][ T8182] hsr_slave_0: entered promiscuous mode
[  530.795437][ T8182] hsr_slave_1: entered promiscuous mode
[  530.805718][ T8182] debugfs: 'hsr0' already exists in 'hsr'
[  530.812569][ T8182] Cannot create hsr debugfs directory
[  530.932840][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.979164][ T6111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.995928][ T6111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.082356][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  531.117970][ T6111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.328006][ T6111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.650177][ T8193] team0: Port device team_slave_0 added
[  531.671505][ T8193] team0: Port device team_slave_1 added
[  531.713104][ T8235] syzkaller0: entered promiscuous mode
[  531.718762][ T8235] syzkaller0: entered allmulticast mode
[  531.754167][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  531.761062][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  531.919120][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.926432][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.953235][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.975959][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.986009][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  532.012541][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.834846][ T6104] hsr_slave_0: left promiscuous mode
[  532.880531][ T6104] hsr_slave_1: left promiscuous mode
[  532.888254][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  532.897298][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  532.966030][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  532.973916][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.045564][ T6104] hsr_slave_0: left promiscuous mode
[  533.069501][ T6104] hsr_slave_1: left promiscuous mode
[  533.079613][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.087537][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.133942][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.141780][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.168274][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  533.180211][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  533.189524][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  533.203426][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  533.244787][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  533.321476][ T6104] veth1_macvtap: left promiscuous mode
[  533.327192][ T6104] veth0_macvtap: left promiscuous mode
[  533.340958][ T6104] veth1_vlan: left promiscuous mode
[  533.348403][ T6104] veth0_vlan: left promiscuous mode
[  533.367457][ T6104] veth1_macvtap: left promiscuous mode
[  533.373823][ T6104] veth0_macvtap: left promiscuous mode
[  533.390680][ T6104] veth1_vlan: left promiscuous mode
[  533.396206][ T6104] veth0_vlan: left promiscuous mode
[  534.490976][ T6104] team0 (unregistering): Port device team_slave_1 removed
[  534.513748][ T6104] team0 (unregistering): Port device team_slave_0 removed
[  534.981290][ T6104] team0 (unregistering): Port device team_slave_1 removed
[  535.008347][ T6104] team0 (unregistering): Port device team_slave_0 removed
[  535.309356][ T8193] hsr_slave_0: entered promiscuous mode
[  535.319473][ T8193] hsr_slave_1: entered promiscuous mode
[  535.330603][   T51] Bluetooth: hci2: command tx timeout
[  535.338361][ T8193] debugfs: 'hsr0' already exists in 'hsr'
[  535.344903][ T8193] Cannot create hsr debugfs directory
[  535.913271][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.339788][ T8134] 8021q: adding VLAN 0 to HW filter on device team0
[  536.461133][ T6104] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.495029][ T8262] syzkaller0: entered promiscuous mode
[  536.500961][ T8262] syzkaller0: entered allmulticast mode
[  536.589912][ T6104] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.616078][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.623430][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.702677][ T6104] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.815650][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.823218][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.870163][ T6104] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.064973][ T8182] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  537.241034][ T8182] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  537.319069][ T8182] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  537.414159][   T51] Bluetooth: hci2: command tx timeout
[  537.522873][ T8182] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  537.596528][ T8249] chnl_net:caif_netlink_parms(): no params data found
[  538.296935][ T6104] bridge_slave_1: left allmulticast mode
[  538.306294][ T6104] bridge_slave_1: left promiscuous mode
[  538.313011][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.340246][ T6104] bridge_slave_0: left allmulticast mode
[  538.346578][ T6104] bridge_slave_0: left promiscuous mode
[  538.353380][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.806434][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.828883][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.894674][ T6104] bond0 (unregistering): Released all slaves
[  539.441562][ T6104] hsr_slave_0: left promiscuous mode
[  539.475837][ T6104] hsr_slave_1: left promiscuous mode
[  539.492697][   T51] Bluetooth: hci2: command tx timeout
[  539.502123][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.509722][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.553653][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.561586][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.594245][ T6104] veth1_macvtap: left promiscuous mode
[  539.613101][ T6104] veth0_macvtap: left promiscuous mode
[  539.618827][ T6104] veth1_vlan: left promiscuous mode
[  539.628810][ T6104] veth0_vlan: left promiscuous mode
[  540.521974][ T6104] team0 (unregistering): Port device team_slave_1 removed
[  540.603546][ T6104] team0 (unregistering): Port device team_slave_0 removed
[  541.546433][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.554275][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.577968][   T51] Bluetooth: hci2: command tx timeout
[  541.590913][ T8249] bridge_slave_0: entered allmulticast mode
[  541.602346][ T8249] bridge_slave_0: entered promiscuous mode
[  541.618467][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.626184][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.634293][ T8249] bridge_slave_1: entered allmulticast mode
[  541.643688][ T8249] bridge_slave_1: entered promiscuous mode
[  541.800903][ T8193] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  541.884687][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.902416][ T8193] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  541.975621][ T8193] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  542.061431][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.076115][ T8193] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  542.374981][ T8249] team0: Port device team_slave_0 added
[  542.517317][ T8249] team0: Port device team_slave_1 added
[  542.722393][ T8134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.745384][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.752614][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.778961][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.830094][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.838168][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.864756][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.044934][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.114600][ T8249] hsr_slave_0: entered promiscuous mode
[  543.124619][ T8249] hsr_slave_1: entered promiscuous mode
[  543.469142][ T8182] 8021q: adding VLAN 0 to HW filter on device team0
[  543.696897][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.704265][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.754610][ T8134] veth0_vlan: entered promiscuous mode
[  543.914362][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.921874][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.139180][ T8134] veth1_vlan: entered promiscuous mode
[  544.360751][ T7232] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  544.395818][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.551995][ T7232] usb 7-1: unable to get BOS descriptor or descriptor too short
[  544.576368][ T7232] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  544.628115][ T7232] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  544.637748][ T7232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.647242][ T7232] usb 7-1: Product: syz
[  544.651767][ T7232] usb 7-1: Manufacturer: syz
[  544.656542][ T7232] usb 7-1: SerialNumber: syz
[  544.674351][ T8134] veth0_macvtap: entered promiscuous mode
[  544.711423][ T8134] veth1_macvtap: entered promiscuous mode
[  544.829123][ T8193] 8021q: adding VLAN 0 to HW filter on device team0
[  544.997414][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.005013][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.198361][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.205942][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  545.257093][ T8249] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  545.327998][ T8134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.367501][ T8249] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  545.407131][ T8249] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  545.468645][ T8249] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  545.558763][ T8134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.660731][ T7232] usb 7-1: reset high-speed USB device number 3 using dummy_hcd
[  545.678204][ T6128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.768665][ T6128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.859481][ T7232] usb 7-1: unable to get BOS descriptor or descriptor too short
[  545.875304][ T7232] usb 7-1: device firmware changed
[  545.887392][ T6128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.906573][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.931855][ T6128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.948983][ T7232] usb 7-1: USB disconnect, device number 3
[  546.655855][ T8182] veth0_vlan: entered promiscuous mode
[  546.850137][ T8182] veth1_vlan: entered promiscuous mode
[  546.910989][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.189843][ T8249] 8021q: adding VLAN 0 to HW filter on device team0
[  547.348839][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.356380][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  547.463886][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.471486][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  547.562201][ T8182] veth0_macvtap: entered promiscuous mode
[  547.627667][ T8182] veth1_macvtap: entered promiscuous mode
[  548.014413][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  548.158798][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  548.210904][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  548.352489][ T6136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.471901][ T6136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.520807][ T6136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.533587][ T6136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.896577][ T8193] veth0_vlan: entered promiscuous mode
[  549.075351][ T8193] veth1_vlan: entered promiscuous mode
[  549.608800][ T8193] veth0_macvtap: entered promiscuous mode
[  549.718380][ T8193] veth1_macvtap: entered promiscuous mode
[  549.955394][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  550.079301][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  550.220718][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  550.266554][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.320595][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.352361][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.467330][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.595241][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.604184][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.890673][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.898689][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.159770][ T8249] veth0_vlan: entered promiscuous mode
[  553.310438][ T8249] veth1_vlan: entered promiscuous mode
[  553.766268][ T8249] veth0_macvtap: entered promiscuous mode
[  553.898156][ T8249] veth1_macvtap: entered promiscuous mode
[  554.127180][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  554.269005][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.437022][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.537498][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.586578][   T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.634697][   T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.364663][ T8443] loop6: detected capacity change from 0 to 256
[  555.868125][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.876463][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  556.205143][ T6144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  556.213868][ T6144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.115331][ T6144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.126325][ T6144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.785997][ T6128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.794157][ T6128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.736329][   T30] audit: type=1326 audit(1770460686.829:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8abd9aeb9 code=0x7ffc0000
[  559.875558][   T30] audit: type=1326 audit(1770460686.929:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fc8abd9aeb9 code=0x7ffc0000
[  559.899994][   T30] audit: type=1326 audit(1770460686.929:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8abd9aeb9 code=0x7ffc0000
[  559.923758][   T30] audit: type=1326 audit(1770460686.929:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.3.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8abd9aeb9 code=0x7ffc0000
[  560.976785][ T8503] loop6: detected capacity change from 0 to 2048
[  561.132836][ T8503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  561.261939][ T8503] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  561.371721][ T8503] overlay: Unknown parameter '/'
[  561.889480][ T7027] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.865789][ T6144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.876800][ T6144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.494337][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.502948][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.467662][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'.
[  565.482567][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'.
[  570.832814][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'.
[  570.848195][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'.
[  573.403403][ T8605] loop3: detected capacity change from 0 to 512
[  573.589496][ T8605] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  573.721423][ T8605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  573.729947][ T8605] System zones: 1-12
[  573.769171][ T8605] EXT4-fs (loop3): orphan cleanup on readonly fs
[  573.841823][ T8605] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.587: invalid indirect mapped block 2 (level 2)
[  573.952100][ T8605] EXT4-fs (loop3): Remounting filesystem read-only
[  574.050991][ T8605] EXT4-fs (loop3): 1 truncate cleaned up
[  574.125983][ T8605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  575.284463][ T8193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  575.590842][ T5076] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  575.604391][ T5076] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  575.614396][ T5076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  575.631251][ T5076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  575.642606][ T5076] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  577.730756][ T5076] Bluetooth: hci1: command tx timeout
[  578.042529][ T6104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.814804][ T6104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.906504][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'.
[  579.007510][ T8614] chnl_net:caif_netlink_parms(): no params data found
[  579.063812][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'.
[  579.344060][ T6104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.680806][ T5837] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  579.820672][ T5076] Bluetooth: hci1: command tx timeout
[  579.887999][ T6104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.932378][ T5837] usb 4-1: unable to get BOS descriptor or descriptor too short
[  579.976594][ T5837] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  580.053888][ T5837] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  580.063251][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.073125][ T5837] usb 4-1: Product: syz
[  580.077375][ T5837] usb 4-1: Manufacturer: syz
[  580.082502][ T5837] usb 4-1: SerialNumber: syz
[  580.732678][ T8655] fuse: Bad value for 'fd'
[  580.815922][ T8655] netlink: 88 bytes leftover after parsing attributes in process `syz.6.597'.
[  580.924359][ T6104] bridge_slave_1: left allmulticast mode
[  580.931645][ T6104] bridge_slave_1: left promiscuous mode
[  580.938173][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.117277][ T6104] bridge_slave_0: left allmulticast mode
[  581.123825][ T6104] bridge_slave_0: left promiscuous mode
[  581.137047][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.349439][ T5837] usb 4-1: USB disconnect, device number 2
[  581.910527][ T5076] Bluetooth: hci1: command tx timeout
[  582.172644][ T8668] loop4: detected capacity change from 0 to 512
[  582.217795][ T8668] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  582.275819][ T8668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  582.345159][ T8668] System zones: 1-12
[  582.349904][ T8668] EXT4-fs (loop4): orphan cleanup on readonly fs
[  582.486096][ T8668] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.600: invalid indirect mapped block 2 (level 2)
[  582.604540][ T8668] EXT4-fs (loop4): Remounting filesystem read-only
[  582.638323][ T8668] EXT4-fs (loop4): 1 truncate cleaned up
[  582.690680][ T8668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  582.980943][ T6104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  583.097769][ T6104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  583.244386][ T6104] bond0 (unregistering): Released all slaves
[  584.036418][ T5076] Bluetooth: hci1: command tx timeout
[  584.071415][ T8249] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  584.379478][ T8689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.605'.
[  584.981486][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.988977][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.050148][ T8614] bridge_slave_0: entered allmulticast mode
[  585.093550][ T8614] bridge_slave_0: entered promiscuous mode
[  585.140047][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.148078][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.239379][ T8614] bridge_slave_1: entered allmulticast mode
[  585.292829][ T8614] bridge_slave_1: entered promiscuous mode
[  585.555193][ T6104] hsr_slave_0: left promiscuous mode
[  585.572968][ T6104] hsr_slave_1: left promiscuous mode
[  585.593385][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  585.601595][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  585.688223][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  585.696010][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  585.775194][ T6104] veth1_macvtap: left promiscuous mode
[  585.811278][ T6104] veth0_macvtap: left promiscuous mode
[  585.898774][ T6104] veth1_vlan: left promiscuous mode
[  585.916012][ T6104] veth0_vlan: left promiscuous mode
[  586.251196][   T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  586.480603][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[  586.533928][   T31] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  586.616564][   T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  586.626051][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.634382][   T31] usb 5-1: Product: syz
[  586.638633][   T31] usb 5-1: Manufacturer: syz
[  586.643375][   T31] usb 5-1: SerialNumber: syz
[  587.970593][   T31] usb 5-1: reset high-speed USB device number 2 using dummy_hcd
[  589.871382][   T31] usb 5-1: device descriptor read/all, error -71
[  590.192274][ T6104] team0 (unregistering): Port device team_slave_1 removed
[  590.322256][ T6104] team0 (unregistering): Port device team_slave_0 removed
[  590.775163][   T31] usb 5-1: USB disconnect, device number 2
[  591.217343][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.355531][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.810853][ T8614] team0: Port device team_slave_0 added
[  591.859397][ T8614] team0: Port device team_slave_1 added
[  592.271047][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.278163][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.306261][ T8614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.460916][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.468255][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.496717][ T8614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.921206][ T8735] netlink: 'syz.2.619': attribute type 3 has an invalid length.
[  593.243287][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  593.249898][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  595.188052][ T8614] hsr_slave_0: entered promiscuous mode
[  595.243764][ T8614] hsr_slave_1: entered promiscuous mode
[  595.324812][ T8614] debugfs: 'hsr0' already exists in 'hsr'
[  595.330977][ T8614] Cannot create hsr debugfs directory
[  596.786038][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[  597.073224][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'.
[  597.313270][ T8766] loop3: detected capacity change from 0 to 256
[  598.522242][ T8774] netlink: 43 bytes leftover after parsing attributes in process `syz.4.627'.
[  599.280866][ T8782] netlink: 'syz.3.628': attribute type 5 has an invalid length.
[  599.321381][ T8614] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  599.447026][ T8614] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  599.680771][ T8614] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  599.841982][ T8614] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  603.319324][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.664770][ T8614] 8021q: adding VLAN 0 to HW filter on device team0
[  603.815617][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.823208][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.936243][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.943838][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.128651][ T8805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.633'.
[  604.137834][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'.
[  605.530923][ T1183] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  605.703784][ T1183] usb 7-1: device descriptor read/64, error -71
[  606.010575][ T1183] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  606.171076][ T1183] usb 7-1: device descriptor read/64, error -71
[  606.311586][ T1183] usb usb7-port1: attempt power cycle
[  606.711967][ T1183] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  606.761355][ T1183] usb 7-1: device descriptor read/8, error -71
[  606.772182][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.060573][ T1183] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  607.105260][ T1183] usb 7-1: device descriptor read/8, error -71
[  607.231945][ T1183] usb usb7-port1: unable to enumerate USB device
[  607.326871][ T8614] veth0_vlan: entered promiscuous mode
[  607.462617][ T8614] veth1_vlan: entered promiscuous mode
[  607.875172][ T8614] veth0_macvtap: entered promiscuous mode
[  607.974481][ T8614] veth1_macvtap: entered promiscuous mode
[  608.237126][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  608.334975][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  608.512536][ T6104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.614672][ T6104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.715971][ T6104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.778566][ T6104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.129526][ T8830] loop3: detected capacity change from 0 to 2048
[  609.293035][ T8830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  609.416032][ T8830] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  609.654000][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.641'.
[  610.075051][ T8193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.110552][ T1183] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  610.320842][ T1183] usb 5-1: Using ep0 maxpacket: 32
[  610.389111][ T1183] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  610.398706][ T1183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.407133][ T1183] usb 5-1: Product: syz
[  610.414268][ T1183] usb 5-1: Manufacturer: syz
[  610.419066][ T1183] usb 5-1: SerialNumber: syz
[  610.605102][ T1183] usb 5-1: config 0 descriptor??
[  610.935141][ T1183] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 003
[  611.376339][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[  611.792217][ T8866] PKCS8: Unsupported PKCS#8 version
[  611.860762][ T7232] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  612.010590][ T7232] usb 7-1: device descriptor read/64, error -71
[  612.630713][ T7232] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  612.656784][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'.
[  612.755549][ T8851] bridge_slave_1: left allmulticast mode
[  612.761725][ T8851] bridge_slave_1: left promiscuous mode
[  612.773082][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.821781][ T7232] usb 7-1: device descriptor read/64, error -71
[  612.877471][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'.
[  612.950136][ T7232] usb usb7-port1: attempt power cycle
[  612.957696][ T8851] bridge_slave_0: left allmulticast mode
[  612.964037][ T8851] bridge_slave_0: left promiscuous mode
[  612.974284][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.033180][ T1183] usb 5-1: USB disconnect, device number 3
[  613.338861][ T7232] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  613.400041][ T7232] usb 7-1: device descriptor read/8, error -71
[  613.641415][ T7232] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  613.762011][ T7232] usb 7-1: device descriptor read/8, error -71
[  613.874287][ T7232] usb usb7-port1: unable to enumerate USB device
[  614.070208][ T8879] loop4: detected capacity change from 0 to 2048
[  614.264657][ T8879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.324259][ T8879] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  614.978636][ T8249] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.216706][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.224869][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.543890][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.552063][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.420587][ T7232] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  620.670558][ T7232] usb 5-1: device descriptor read/64, error -71
[  620.930633][ T7232] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  621.145059][ T7232] usb 5-1: device descriptor read/64, error -71
[  621.276801][ T7232] usb usb5-port1: attempt power cycle
[  621.668371][ T7232] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  621.762835][ T7232] usb 5-1: device descriptor read/8, error -71
[  622.040776][ T7232] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  622.097118][ T7232] usb 5-1: device descriptor read/8, error -71
[  622.241302][ T7232] usb usb5-port1: unable to enumerate USB device
[  623.201201][ T7232] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  623.291323][ T5841] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  623.498351][ T7232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  623.509124][ T7232] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  623.527889][ T7232] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  623.539052][ T7232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.687353][ T5841] usb 4-1: unable to get BOS descriptor or descriptor too short
[  623.797972][ T5841] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  623.935378][ T5841] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  623.946055][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.954457][ T5841] usb 4-1: Product: syz
[  623.958859][ T5841] usb 4-1: Manufacturer: syz
[  623.963778][ T5841] usb 4-1: SerialNumber: syz
[  624.314302][ T7232] usb 7-1: usb_control_msg returned -32
[  624.320498][ T7232] usbtmc 7-1:16.0: can't read capabilities
[  624.712280][ T8972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.799294][ T8972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.765017][ T5841] usb 4-1: USB disconnect, device number 3
[  626.218472][ T5841] usb 7-1: USB disconnect, device number 12
[  628.043326][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'.
[  628.062468][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.685'.
[  630.170898][ T5841] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  630.183823][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'.
[  630.434256][ T5841] usb 5-1: no configurations
[  630.439158][ T5841] usb 5-1: can't read configurations, error -22
[  630.636608][ T5841] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  630.812536][ T5841] usb 5-1: no configurations
[  630.817464][ T5841] usb 5-1: can't read configurations, error -22
[  630.971718][ T5841] usb usb5-port1: attempt power cycle
[  631.173868][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  631.389485][   T31] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  631.411398][ T5841] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  631.473994][ T5841] usb 5-1: no configurations
[  631.479033][ T5841] usb 5-1: can't read configurations, error -22
[  631.598010][   T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  631.612622][   T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  631.627259][   T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  631.636502][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.645205][ T5841] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  631.693158][ T5841] usb 5-1: no configurations
[  631.697911][ T5841] usb 5-1: can't read configurations, error -22
[  631.734213][ T5841] usb usb5-port1: unable to enumerate USB device
[  632.012964][   T31] usb 7-1: usb_control_msg returned -32
[  632.024380][   T31] usbtmc 7-1:16.0: can't read capabilities
[  633.989805][    T9] usb 7-1: USB disconnect, device number 13
[  635.597147][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'.
[  635.623355][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.696'.
[  637.757593][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.6.701'.
[  638.451979][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  638.679344][    T9] usb 5-1: no configurations
[  638.684469][    T9] usb 5-1: can't read configurations, error -22
[  638.751140][ T1183] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  638.882947][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  638.920820][ T5837] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  638.966768][ T1183] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  638.976950][ T1183] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  638.992752][ T1183] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  639.003063][ T1183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.117648][    T9] usb 5-1: no configurations
[  639.122631][    T9] usb 5-1: can't read configurations, error -22
[  639.129576][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.140492][ T5837] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  639.181617][    T9] usb usb5-port1: attempt power cycle
[  639.221082][ T5837] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  639.230668][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.304420][ T5837] usb 7-1: config 0 descriptor??
[  639.318657][ T1183] usb 4-1: usb_control_msg returned -32
[  639.324733][ T1183] usbtmc 4-1:16.0: can't read capabilities
[  639.387014][ T5837] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  639.431903][ T5837] dvb-usb: bulk message failed: -22 (3/0)
[  639.484956][ T5837] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  639.527118][ T5837] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  639.548001][ T5837] usb 7-1: media controller created
[  639.585586][ T9093] dvb-usb: bulk message failed: -22 (2/0)
[  639.611148][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  639.624496][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  639.674485][    T9] usb 5-1: no configurations
[  639.679375][    T9] usb 5-1: can't read configurations, error -22
[  639.716446][ T5837] dvb-usb: bulk message failed: -22 (6/0)
[  639.722624][ T5837] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  639.803720][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6
[  639.876841][ T5837] dvb-usb: schedule remote query interval to 150 msecs.
[  639.887782][ T5837] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  639.896482][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  639.968797][    T9] usb 5-1: no configurations
[  639.973928][    T9] usb 5-1: can't read configurations, error -22
[  639.981762][ T5837] usb 7-1: USB disconnect, device number 14
[  639.993357][    T9] usb usb5-port1: unable to enumerate USB device
[  640.124786][ T5837] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  641.568704][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  641.587762][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'.
[  642.130716][ T7232] usb 4-1: USB disconnect, device number 4
[  642.777714][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'.
[  643.924615][ T9140] syzkaller0: entered promiscuous mode
[  643.930872][ T9140] syzkaller0: entered allmulticast mode
[  644.095157][ T9145] tipc: Started in network mode
[  644.103742][ T9145] tipc: Node identity 7eeb39d56cf9, cluster identity 4711
[  644.112480][ T9145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  644.167513][ T9140] fuse: Unknown parameter '€'
[  644.171424][ T9147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  644.271118][ T9139] tipc: Resetting bearer <eth:syzkaller0>
[  644.403327][ T9139] tipc: Disabling bearer <eth:syzkaller0>
[  644.797572][ T9153] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  645.840522][ T7232] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  646.074543][ T7232] usb 4-1: no configurations
[  646.079471][ T7232] usb 4-1: can't read configurations, error -22
[  646.131278][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  646.270775][ T7232] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  646.391902][ T5837] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  646.400537][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  646.411276][ T5837] usb 3-1: config 0 has no interface number 0
[  646.452338][    T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  646.465943][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  646.466489][ T7232] usb 4-1: no configurations
[  646.476948][ T7232] usb 4-1: can't read configurations, error -22
[  646.545115][ T5837] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  646.651145][ T7232] usb usb4-port1: attempt power cycle
[  646.823638][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  646.833867][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  646.847528][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  646.857056][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.898748][ T5837] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  646.908348][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.916704][ T5837] usb 3-1: Product: syz
[  646.921029][ T5837] usb 3-1: Manufacturer: syz
[  646.925702][ T5837] usb 3-1: SerialNumber: syz
[  647.033053][ T5837] usb 3-1: config 0 descriptor??
[  647.085111][ T7232] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  647.122790][ T5837] yurex 3-1:0.50: Could not find endpoints
[  647.199146][ T7232] usb 4-1: no configurations
[  647.204281][ T7232] usb 4-1: can't read configurations, error -22
[  647.223733][    T9] usb 2-1: usb_control_msg returned -32
[  647.229570][    T9] usbtmc 2-1:16.0: can't read capabilities
[  647.391303][    T9] usb 2-1: USB disconnect, device number 3
[  647.436139][ T7232] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  647.569512][ T7232] usb 4-1: no configurations
[  647.574386][ T7232] usb 4-1: can't read configurations, error -22
[  647.654269][ T7232] usb usb4-port1: unable to enumerate USB device
[  648.682468][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'.
[  648.928531][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'.
[  650.568835][ T9200] syzkaller0: entered promiscuous mode
[  650.574995][ T9200] syzkaller0: entered allmulticast mode
[  650.697102][ T9200] tipc: Started in network mode
[  650.702540][ T9200] tipc: Node identity be0da9626b84, cluster identity 4711
[  650.710810][ T9200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.824777][ T9200] fuse: Unknown parameter '€'
[  650.903984][ T9199] tipc: Resetting bearer <eth:syzkaller0>
[  651.029997][ T9199] tipc: Disabling bearer <eth:syzkaller0>
[  651.940886][ T9212] xt_hashlimit: size too large, truncated to 1048576
[  654.160642][    T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  654.396153][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  654.407512][    T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  654.417306][    T9] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  654.426664][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.636898][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  654.643626][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  654.697291][    T9] usb 7-1: config 0 descriptor??
[  654.976108][    T9] usb 7-1: USB disconnect, device number 15
[  655.851712][    T9] usb 3-1: USB disconnect, device number 2
[  656.481508][ T7232] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  656.705890][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  656.780926][ T7232] usb 7-1: Using ep0 maxpacket: 32
[  656.868740][ T7232] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  656.878586][ T7232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.886837][ T7232] usb 7-1: Product: syz
[  656.891146][ T7232] usb 7-1: Manufacturer: syz
[  656.895830][ T7232] usb 7-1: SerialNumber: syz
[  657.081690][ T7232] usb 7-1: config 0 descriptor??
[  657.361411][ T7232] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 016
[  658.076221][ T9247] i2c i2c-1: failure reading status
[  658.108748][ T7232] usb 7-1: USB disconnect, device number 16
[  668.344679][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  668.356806][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  668.401261][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  668.441387][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  668.496296][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  670.615418][   T51] Bluetooth: hci4: command tx timeout
[  671.673029][ T9280] chnl_net:caif_netlink_parms(): no params data found
[  671.676499][ T5076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  671.712335][ T5076] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  671.722361][ T5076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  671.735257][ T5076] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  671.791046][ T5076] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  672.701469][ T5076] Bluetooth: hci4: command tx timeout
[  672.711386][ T6134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.220937][ T6134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.445434][ T6134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.766941][ T6134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.940555][ T5076] Bluetooth: hci6: command tx timeout
[  674.057747][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  674.091385][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  674.112603][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  674.202019][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  674.281466][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  674.640179][ T5793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  674.682719][ T5793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  674.703873][ T5793] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  674.787143][ T5793] Bluetooth: hci4: command tx timeout
[  674.796889][ T5076] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  674.845351][ T5076] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  675.022480][ T6134] bridge_slave_1: left allmulticast mode
[  675.033596][ T6134] bridge_slave_1: left promiscuous mode
[  675.040170][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.131505][ T6134] bridge_slave_0: left allmulticast mode
[  675.137359][ T6134] bridge_slave_0: left promiscuous mode
[  675.144475][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.970668][ T5076] Bluetooth: hci6: command tx timeout
[  676.454475][ T5076] Bluetooth: hci2: command tx timeout
[  676.852272][ T5076] Bluetooth: hci4: command tx timeout
[  677.011423][ T5076] Bluetooth: hci7: command tx timeout
[  677.223469][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  677.293300][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  677.314189][ T6134] bond0 (unregistering): Released all slaves
[  677.781777][ T6134] tipc: Left network mode
[  677.842907][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.852906][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.867191][ T9280] bridge_slave_0: entered allmulticast mode
[  677.876924][ T9280] bridge_slave_0: entered promiscuous mode
[  678.045536][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.053240][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.060721][ T5076] Bluetooth: hci6: command tx timeout
[  678.063790][ T9280] bridge_slave_1: entered allmulticast mode
[  678.123196][ T9280] bridge_slave_1: entered promiscuous mode
[  678.530655][ T5076] Bluetooth: hci2: command tx timeout
[  678.663613][ T9280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.721199][ T7232] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  678.728912][ T9280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.867614][ T6134] hsr_slave_0: left promiscuous mode
[  678.876398][ T6134] hsr_slave_1: left promiscuous mode
[  678.889519][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  678.897767][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  678.913228][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  678.926920][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  678.941972][ T7232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  678.952760][ T7232] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  678.966738][ T7232] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  678.976111][ T7232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.006490][ T6134] veth1_macvtap: left promiscuous mode
[  679.013936][ T6134] veth0_macvtap: left promiscuous mode
[  679.025978][ T6134] veth1_vlan: left promiscuous mode
[  679.033269][ T6134] veth0_vlan: left promiscuous mode
[  679.093278][ T5076] Bluetooth: hci7: command tx timeout
[  679.219945][ T7232] usb 7-1: usb_control_msg returned -32
[  679.232470][ T7232] usbtmc 7-1:16.0: can't read capabilities
[  679.251524][ T7232] usb 7-1: USB disconnect, device number 17
[  680.073081][ T6134] team0 (unregistering): Port device team_slave_1 removed
[  680.115511][ T6134] team0 (unregistering): Port device team_slave_0 removed
[  680.141923][ T5076] Bluetooth: hci6: command tx timeout
[  680.313491][   T30] audit: type=1326 audit(1770460807.429:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  680.569378][   T30] audit: type=1326 audit(1770460807.459:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  680.592074][   T30] audit: type=1326 audit(1770460807.459:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  680.615076][   T30] audit: type=1326 audit(1770460807.469:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  680.616463][ T5076] Bluetooth: hci2: command tx timeout
[  680.638278][   T30] audit: type=1326 audit(1770460807.469:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  680.669511][   T30] audit: type=1326 audit(1770460807.479:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  680.694558][   T30] audit: type=1326 audit(1770460807.479:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f515f55b78e code=0x7ffc0000
[  680.718421][   T30] audit: type=1326 audit(1770460807.479:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  680.741542][   T30] audit: type=1326 audit(1770460807.479:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  680.768549][   T30] audit: type=1326 audit(1770460807.489:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.6.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515f59aeb9 code=0x7ffc0000
[  681.174063][ T5076] Bluetooth: hci7: command tx timeout
[  681.451335][ T9294] chnl_net:caif_netlink_parms(): no params data found
[  681.573895][ T9280] team0: Port device team_slave_0 added
[  681.749215][ T9280] team0: Port device team_slave_1 added
[  682.198519][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  682.205873][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  682.233902][ T9280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  682.451645][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  682.460069][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  682.489816][ T9280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  682.619821][ T6134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  682.691126][ T5076] Bluetooth: hci2: command tx timeout
[  682.896706][ T6134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.110087][ T6134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.256863][ T5076] Bluetooth: hci7: command tx timeout
[  683.262413][ T9312] chnl_net:caif_netlink_parms(): no params data found
[  683.545575][ T6134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.755388][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.764227][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.811236][ T9294] bridge_slave_0: entered allmulticast mode
[  683.819861][ T9294] bridge_slave_0: entered promiscuous mode
[  684.000120][ T9306] chnl_net:caif_netlink_parms(): no params data found
[  684.065870][ T9280] hsr_slave_0: entered promiscuous mode
[  684.114421][ T9280] hsr_slave_1: entered promiscuous mode
[  684.177508][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.185482][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.212074][ T9294] bridge_slave_1: entered allmulticast mode
[  684.248623][ T9294] bridge_slave_1: entered promiscuous mode
[  684.891424][ T9294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  685.155425][ T9294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  685.599387][ T9294] team0: Port device team_slave_0 added
[  685.775301][ T6134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.804668][ T9294] team0: Port device team_slave_1 added
[  685.904621][ T9312] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.912644][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.961350][ T9312] bridge_slave_0: entered allmulticast mode
[  685.994225][ T9312] bridge_slave_0: entered promiscuous mode
[  686.215606][ T6134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.314766][ T9312] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.323681][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.371795][ T9312] bridge_slave_1: entered allmulticast mode
[  686.398554][ T9312] bridge_slave_1: entered promiscuous mode
[  686.419899][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  686.427816][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  686.456887][ T9294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  686.561198][ T6134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.651845][ T7232] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  686.683578][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  686.691678][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  686.725288][ T9294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  686.820526][ T7232] usb 7-1: Using ep0 maxpacket: 32
[  686.840723][ T7232] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  686.850147][ T7232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.858650][ T7232] usb 7-1: Product: syz
[  686.863138][ T7232] usb 7-1: Manufacturer: syz
[  686.867941][ T7232] usb 7-1: SerialNumber: syz
[  686.900960][ T7232] usb 7-1: config 0 descriptor??
[  687.060123][ T6134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.079697][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.088851][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.100014][ T9306] bridge_slave_0: entered allmulticast mode
[  687.137841][ T7232] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 018
[  687.149287][ T9306] bridge_slave_0: entered promiscuous mode
[  687.275234][ T9312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.303602][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.311573][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.341737][ T9306] bridge_slave_1: entered allmulticast mode
[  687.352969][ T9306] bridge_slave_1: entered promiscuous mode
[  687.431784][ T9312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.728175][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.798089][ T9399] i2c i2c-1: failure reading status
[  687.800579][ T9294] hsr_slave_0: entered promiscuous mode
[  687.808202][    T9] usb 7-1: USB disconnect, device number 18
[  687.817507][ T9294] hsr_slave_1: entered promiscuous mode
[  687.832905][ T9294] debugfs: 'hsr0' already exists in 'hsr'
[  687.839293][ T9294] Cannot create hsr debugfs directory
[  687.945702][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.984233][ T9312] team0: Port device team_slave_0 added
[  688.099517][ T9312] team0: Port device team_slave_1 added
[  688.355942][ T9306] team0: Port device team_slave_0 added
[  688.380181][ T9306] team0: Port device team_slave_1 added
[  688.501128][ T9312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.508535][ T9312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  688.536655][ T9312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.224057][ T9312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.231479][ T9312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  694.259146][ T9312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.052796][ T6134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.276157][ T6134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.297611][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.311558][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.340613][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  695.366050][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.373269][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.400117][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.468714][ T6134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.692685][ T9312] hsr_slave_0: entered promiscuous mode
[  695.703815][ T9312] hsr_slave_1: entered promiscuous mode
[  695.715629][ T9312] debugfs: 'hsr0' already exists in 'hsr'
[  695.722395][ T9312] Cannot create hsr debugfs directory
[  695.793739][ T6134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  696.117376][ T9306] hsr_slave_0: entered promiscuous mode
[  696.145173][ T9306] hsr_slave_1: entered promiscuous mode
[  696.154390][ T9306] debugfs: 'hsr0' already exists in 'hsr'
[  696.164417][ T9306] Cannot create hsr debugfs directory
[  696.270624][   T31] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  696.458736][   T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  696.469160][   T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  696.483873][   T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  696.493503][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.775162][   T31] usb 7-1: usb_control_msg returned -32
[  696.783238][   T31] usbtmc 7-1:16.0: can't read capabilities
[  696.802624][   T31] usb 7-1: USB disconnect, device number 19
[  696.950975][ T9280] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  697.092198][ T6134] bridge_slave_1: left allmulticast mode
[  697.098396][ T6134] bridge_slave_1: left promiscuous mode
[  697.105251][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.121168][ T6134] bridge_slave_0: left allmulticast mode
[  697.127328][ T6134] bridge_slave_0: left promiscuous mode
[  697.134189][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.158695][ T6134] bridge_slave_1: left allmulticast mode
[  697.165473][ T6134] bridge_slave_1: left promiscuous mode
[  697.172441][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.187192][ T6134] bridge_slave_0: left allmulticast mode
[  697.193982][ T6134] bridge_slave_0: left promiscuous mode
[  697.200985][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.142879][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  698.179767][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  698.198736][ T6134] bond0 (unregistering): Released all slaves
[  698.434109][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  698.449561][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  698.465849][ T6134] bond0 (unregistering): Released all slaves
[  698.656319][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  698.672872][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  698.695587][ T6134] bond0 (unregistering): Released all slaves
[  698.710713][ T9280] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  698.855629][ T9452] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  698.871265][ T9280] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  699.051348][ T9280] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  699.136082][ T6134] tipc: Left network mode
[  699.172177][ T9457] netlink: 7 bytes leftover after parsing attributes in process `syz.6.764'.
[  699.810568][ T5837] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  699.943795][ T9294] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  699.967495][ T9294] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  699.980794][ T5837] usb 7-1: Using ep0 maxpacket: 32
[  700.005581][ T5837] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  700.015781][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.024550][ T5837] usb 7-1: Product: syz
[  700.028874][ T5837] usb 7-1: Manufacturer: syz
[  700.034273][ T5837] usb 7-1: SerialNumber: syz
[  700.045512][ T5837] usb 7-1: config 0 descriptor??
[  700.166455][ T9294] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  700.232920][ T9294] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  700.273116][ T5837] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 020
[  700.738797][ T6134] hsr_slave_0: left promiscuous mode
[  700.755586][ T6134] hsr_slave_1: left promiscuous mode
[  700.763665][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.773079][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.785475][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.793504][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.815894][ T6134] hsr_slave_0: left promiscuous mode
[  700.824919][ T6134] hsr_slave_1: left promiscuous mode
[  700.835395][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.845450][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.859236][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.867547][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.906659][ T6134] hsr_slave_0: left promiscuous mode
[  700.915095][ T6134] hsr_slave_1: left promiscuous mode
[  700.925171][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.934176][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.945807][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.947281][ T9459] i2c i2c-1: failure reading status
[  700.953857][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.980610][   T31] usb 7-1: USB disconnect, device number 20
[  701.024717][ T6134] veth1_macvtap: left promiscuous mode
[  701.031239][ T6134] veth0_macvtap: left promiscuous mode
[  701.039068][ T6134] veth1_vlan: left promiscuous mode
[  701.047327][ T6134] veth0_vlan: left promiscuous mode
[  701.055189][ T6134] veth1_macvtap: left promiscuous mode
[  701.061754][ T6134] veth0_macvtap: left promiscuous mode
[  701.067668][ T6134] veth1_vlan: left promiscuous mode
[  701.073376][ T6134] veth0_vlan: left promiscuous mode
[  701.080102][ T6134] veth1_macvtap: left promiscuous mode
[  701.085919][ T6134] veth0_macvtap: left promiscuous mode
[  701.093054][ T6134] veth1_vlan: left promiscuous mode
[  701.099196][ T6134] veth0_vlan: left promiscuous mode
[  701.960822][ T5837] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  702.071266][ T6134] team0 (unregistering): Port device team_slave_1 removed
[  702.097174][ T6134] team0 (unregistering): Port device team_slave_0 removed
[  702.125161][ T5837] usb 7-1: Using ep0 maxpacket: 16
[  702.136830][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  702.148987][ T5837] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.164453][ T5837] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  702.175250][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.221494][ T5837] usb 7-1: config 0 descriptor??
[  702.249227][ T5837] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  702.447549][ T5837] usb 7-1: USB disconnect, device number 21
[  702.662750][ T6134] team0 (unregistering): Port device team_slave_1 removed
[  702.687852][ T6134] team0 (unregistering): Port device team_slave_0 removed
[  703.215919][ T6134] team0 (unregistering): Port device team_slave_1 removed
[  703.238473][ T6134] team0 (unregistering): Port device team_slave_0 removed
[  703.692584][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.128471][ T9280] 8021q: adding VLAN 0 to HW filter on device team0
[  704.317565][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.325105][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  704.460927][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.468410][ T6104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.100110][ T9306] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  705.224982][ T9306] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  705.330155][ T9294] 8021q: adding VLAN 0 to HW filter on device bond0
[  705.387396][ T9306] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  705.434217][ T9306] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  705.723109][ T9312] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  705.872665][ T9294] 8021q: adding VLAN 0 to HW filter on device team0
[  705.897648][ T9312] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  706.028103][ T9312] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  706.124998][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.132589][ T6134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  706.225469][ T9312] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  706.304356][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.312027][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  707.426247][ T9280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  707.639127][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.875121][ T9306] 8021q: adding VLAN 0 to HW filter on device team0
[  708.005976][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.013575][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  708.170325][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.177789][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  708.314229][ T9312] 8021q: adding VLAN 0 to HW filter on device bond0
[  708.683516][ T9312] 8021q: adding VLAN 0 to HW filter on device team0
[  708.781041][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.788496][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.017920][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.025472][ T6104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.153691][ T9306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  709.316437][ T9294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  710.119262][ T9280] veth0_vlan: entered promiscuous mode
[  710.228214][ T9280] veth1_vlan: entered promiscuous mode
[  710.263772][ T5837] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  710.441468][ T5837] usb 7-1: Using ep0 maxpacket: 32
[  710.484746][ T5837] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  710.494902][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.503482][ T5837] usb 7-1: Product: syz
[  710.507904][ T5837] usb 7-1: Manufacturer: syz
[  710.512890][ T5837] usb 7-1: SerialNumber: syz
[  710.611849][ T5837] usb 7-1: config 0 descriptor??
[  710.640128][ T9280] veth0_macvtap: entered promiscuous mode
[  710.726670][ T9280] veth1_macvtap: entered promiscuous mode
[  710.871088][ T5837] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 022
[  711.059238][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  711.127849][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_0
[  711.258670][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_1
[  711.464628][ T6111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  711.508069][ T9538] i2c i2c-1: failure reading status
[  711.517967][ T6111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  711.524335][ T1183] usb 7-1: USB disconnect, device number 22
[  711.670165][ T6111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  711.746471][ T6111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  711.788254][ T9312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  712.053721][ T9294] veth0_vlan: entered promiscuous mode
[  712.181189][ T9294] veth1_vlan: entered promiscuous mode
[  712.735056][ T9294] veth0_macvtap: entered promiscuous mode
[  712.816955][ T9294] veth1_macvtap: entered promiscuous mode
[  712.880720][ T9493] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  713.033941][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  713.090593][ T9493] usb 7-1: Using ep0 maxpacket: 16
[  713.132616][ T9493] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  713.149305][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.180684][ T9493] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  713.197296][ T9493] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  713.207038][ T9493] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.293038][ T6104] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  713.329840][ T9493] usb 7-1: config 0 descriptor??
[  713.368960][ T6104] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  713.430896][ T6104] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  713.443636][ T9493] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  713.492422][   T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  713.626958][ T9493] usb 7-1: USB disconnect, device number 23
[  713.877408][ T9306] veth0_vlan: entered promiscuous mode
[  713.998791][ T9306] veth1_vlan: entered promiscuous mode
[  714.444749][ T9306] veth0_macvtap: entered promiscuous mode
[  714.596616][ T9306] veth1_macvtap: entered promiscuous mode
[  714.779341][ T9312] veth0_vlan: entered promiscuous mode
[  714.917910][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  714.970030][ T9312] veth1_vlan: entered promiscuous mode
[  715.030742][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.205867][ T6144] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.242843][ T6144] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  715.324265][ T6144] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  715.412649][ T6144] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  715.577492][ T9312] veth0_macvtap: entered promiscuous mode
[  715.658523][ T9312] veth1_macvtap: entered promiscuous mode
[  715.913261][ T9614] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  715.989139][ T9312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  716.077669][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  716.087666][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  716.185509][ T9312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  716.327130][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  716.424684][ T6104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  716.469462][ T6104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  716.517701][ T6104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  718.039781][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.048362][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.264966][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.273684][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  718.864331][ T9658] syz.7.749 uses obsolete (PF_INET,SOCK_PACKET)
[  719.252481][ T9663] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  719.888527][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.898875][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.197188][ T6128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.205702][ T6128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.750934][ T1183] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  721.983312][ T1183] usb 7-1: Using ep0 maxpacket: 32
[  722.057715][ T1183] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  722.067133][ T1183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.075616][ T1183] usb 7-1: Product: syz
[  722.079962][ T1183] usb 7-1: Manufacturer: syz
[  722.086175][ T1183] usb 7-1: SerialNumber: syz
[  722.213377][ T1183] usb 7-1: config 0 descriptor??
[  722.258675][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.266819][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.466600][ T1183] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 024
[  722.491124][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  722.628164][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  722.636524][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.702420][    T9] usb 9-1: Using ep0 maxpacket: 16
[  722.724654][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  722.791223][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  722.804911][    T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  722.814961][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.970729][    T9] usb 9-1: config 0 descriptor??
[  723.063806][    T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  723.128021][ T9693] i2c i2c-1: failure reading status
[  723.142347][ T1183] usb 7-1: USB disconnect, device number 24
[  723.332251][ T5837] usb 9-1: USB disconnect, device number 4
[  724.220744][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.228840][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.525234][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.533646][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.983716][ T9727] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  724.992905][ T9727] =====================================================
[  725.006004][ T9727] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290
[  725.020511][ T9727]  dvbdmx_release_ts_feed+0x198/0x290
[  725.026092][ T9727]  dvb_dmxdev_add_pid+0xacc/0xb50
[  725.034929][ T9727]  dvb_demux_do_ioctl+0x78b/0xc80
[  725.040312][ T9727]  dvb_usercopy+0x263/0x500
[  725.044962][ T9727]  dvb_demux_ioctl+0x46/0x70
[  725.049708][ T9727]  __se_sys_ioctl+0x23c/0x400
[  725.054802][ T9727]  __x64_sys_ioctl+0x97/0xe0
[  725.059539][ T9727]  x64_sys_call+0x18a7/0x3e70
[  725.064497][ T9727]  do_syscall_64+0xc9/0xf80
[  725.069251][ T9727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.075499][ T9727] 
[  725.077884][ T9727] Uninit was created at:
[  725.082485][ T9727]  __alloc_frozen_pages_noprof+0x6df/0xf50
[  725.088387][ T9727]  alloc_pages_mpol+0x328/0x860
[  725.093509][ T9727]  alloc_pages_noprof+0x101/0x280
[  725.103389][ T9727]  __vmalloc_node_range_noprof+0xa97/0x2d80
[  725.109463][ T9727]  __vmalloc_noprof+0x128/0x1f0
[  725.115579][ T9727]  vmalloc_array_noprof+0x48/0x80
[  725.120968][ T9727]  dvb_dmx_init+0x121/0x930
[  725.125564][ T9727]  vidtv_bridge_probe+0x1b1f/0x2690
[  725.130905][ T9727]  platform_probe+0x213/0x370
[  725.135754][ T9727]  really_probe+0x4d5/0xe40
[  725.140545][ T9727]  __driver_probe_device+0x25e/0x370
[  725.146054][ T9727]  driver_probe_device+0x70/0x8f0
[  725.151337][ T9727]  __driver_attach+0x53e/0xaa0
[  725.156199][ T9727]  bus_for_each_dev+0x33b/0x580
[  725.161555][ T9727]  driver_attach+0x51/0x70
[  725.166065][ T9727]  bus_add_driver+0x54f/0xdb0
[  725.170892][ T9727]  driver_register+0x42e/0x6a0
[  725.175878][ T9727]  __platform_driver_register+0x65/0x80
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  725.181610][ T9727]  vidtv_bridge_init+0x73/0x100
[  725.186722][ T9727]  do_one_initcall+0x22b/0xad0
[  725.191700][ T9727]  do_initcall_level+0x157/0x2e0
[  725.196825][ T9727]  do_initcalls+0x176/0x310
[  725.206174][ T9727]  do_basic_setup+0x1d/0x30
[  725.211953][ T9727]  kernel_init_freeable+0x213/0x430
[  725.217262][ T9727]  kernel_init+0x2f/0x5e0
[  725.221876][ T9727]  ret_from_fork+0x207/0x6f0
[  725.230730][ T9727]  ret_from_fork_asm+0x1a/0x30
[  725.235787][ T9727] 
[  725.238237][ T9727] CPU: 1 UID: 0 PID: 9727 Comm: syz.9.784 Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[  725.250304][ T9727] Tainted: [L]=SOFTLOCKUP
[  725.254718][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  725.265095][ T9727] =====================================================
[  725.272596][ T9727] Disabling lock debugging due to kernel taint
[  725.278853][ T9727] Kernel panic - not syncing: kmsan.panic set ...
[  725.285401][ T9727] CPU: 1 UID: 0 PID: 9727 Comm: syz.9.784 Tainted: G    B        L      syzkaller #0 PREEMPT(voluntary) 
[  725.296791][ T9727] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  725.302423][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  725.312607][ T9727] Call Trace:
[  725.315972][ T9727]  <TASK>
[  725.318988][ T9727]  __dump_stack+0x26/0x30
[  725.323515][ T9727]  dump_stack_lvl+0x50/0x1c0
[  725.328263][ T9727]  ? dump_stack+0x12/0x25
[  725.332836][ T9727]  dump_stack+0x1e/0x25
[  725.337138][ T9727]  vpanic+0x435/0xd40
[  725.341291][ T9727]  panic+0x15d/0x160
[  725.345383][ T9727]  kmsan_report+0x31a/0x320
[  725.350091][ T9727]  ? vprintk_emit+0xb60/0xba0
[  725.355007][ T9727]  ? __msan_warning+0x1b/0x30
[  725.359846][ T9727]  ? dvbdmx_release_ts_feed+0x198/0x290
[  725.365557][ T9727]  ? dvb_dmxdev_add_pid+0xacc/0xb50
[  725.370908][ T9727]  ? dvb_demux_do_ioctl+0x78b/0xc80
[  725.376251][ T9727]  ? dvb_usercopy+0x263/0x500
[  725.381248][ T9727]  ? dvb_demux_ioctl+0x46/0x70
[  725.386177][ T9727]  ? __se_sys_ioctl+0x23c/0x400
[  725.391183][ T9727]  ? __x64_sys_ioctl+0x97/0xe0
[  725.396090][ T9727]  ? x64_sys_call+0x18a7/0x3e70
[  725.401108][ T9727]  ? do_syscall_64+0xc9/0xf80
[  725.405951][ T9727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.412275][ T9727]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  725.418802][ T9727]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  725.425141][ T9727]  ? sysvec_apic_timer_interrupt+0x52/0x90
[  725.431107][ T9727]  ? kmsan_get_metadata+0xf1/0x160
[  725.436488][ T9727]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  725.442995][ T9727]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  725.449264][ T9727]  ? _raw_spin_unlock_irq+0x25/0x50
[  725.454714][ T9727]  ? _raw_spin_unlock_irq+0x31/0x50
[  725.460069][ T9727]  ? kmsan_get_metadata+0x146/0x160
[  725.465508][ T9727]  __msan_warning+0x1b/0x30
[  725.470279][ T9727]  dvbdmx_release_ts_feed+0x198/0x290
[  725.476554][ T9727]  dvb_dmxdev_add_pid+0xacc/0xb50
[  725.481859][ T9727]  ? __pfx_dvbdmx_release_ts_feed+0x10/0x10
[  725.487943][ T9727]  dvb_demux_do_ioctl+0x78b/0xc80
[  725.493125][ T9727]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  725.498822][ T9727]  dvb_usercopy+0x263/0x500
[  725.503487][ T9727]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  725.509213][ T9727]  ? kmsan_get_metadata+0xf1/0x160
[  725.514622][ T9727]  dvb_demux_ioctl+0x46/0x70
[  725.519356][ T9727]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  725.524790][ T9727]  __se_sys_ioctl+0x23c/0x400
[  725.529644][ T9727]  __x64_sys_ioctl+0x97/0xe0
[  725.534383][ T9727]  x64_sys_call+0x18a7/0x3e70
[  725.539263][ T9727]  do_syscall_64+0xc9/0xf80
[  725.543919][ T9727]  ? clear_bhb_loop+0x40/0x90
[  725.548756][ T9727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.554842][ T9727] RIP: 0033:0x7fe1e779aeb9
[  725.559459][ T9727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.579206][ T9727] RSP: 002b:00007fe1e86fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  725.587777][ T9727] RAX: ffffffffffffffda RBX: 00007fe1e7a15fa0 RCX: 00007fe1e779aeb9
[  725.595866][ T9727] RDX: 0000200000000040 RSI: 0000000040026f33 RDI: 0000000000000003
[  725.604375][ T9727] RBP: 00007fe1e7808c1f R08: 0000000000000000 R09: 0000000000000000
[  725.612537][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.620598][ T9727] R13: 00007fe1e7a16038 R14: 00007fe1e7a15fa0 R15: 00007ffeaa49e938
[  725.628718][ T9727]  </TASK>
[  725.632306][ T9727] Kernel Offset: disabled
[  725.636687][ T9727] Rebooting in 86400 seconds..