last executing test programs:

9m51.974239228s ago: executing program 1 (id=2):
mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x2, 0x300)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4})

9m51.736978919s ago: executing program 2 (id=3):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='ext4\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)

9m48.838943812s ago: executing program 1 (id=5):
socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$session_to_parent(0x12)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x400000, 0x0, 0x1}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
dup3(r2, r3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x10)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x7})
flock(0xffffffffffffffff, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0x0, 0xfeffffff, 0x1a0, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc2, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key=0xd}}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr=0x20, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

9m44.684691903s ago: executing program 2 (id=7):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4)
bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600), &(0x7f0000001700)=@udp=r0}, 0x20)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x25, &(0x7f0000000180)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x2, &(0x7f0000000000)=0x80000000000003)
r7 = socket$kcm(0xa, 0x1, 0x106)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000080), 0x12)
sendmsg$kcm(r7, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010)
close_range(r2, 0xffffffffffffffff, 0x0)

9m33.663278268s ago: executing program 32 (id=5):
socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$session_to_parent(0x12)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x400000, 0x0, 0x1}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
dup3(r2, r3, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x10)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x7})
flock(0xffffffffffffffff, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0x0, 0xfeffffff, 0x1a0, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc2, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key=0xd}}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr=0x20, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430)

9m33.103834264s ago: executing program 2 (id=17):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, 0x0, 0x0)
accept(r0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'wg0\x00', {0x2, 0x4e03, @rand_addr=0x64010101}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0xfffffffffffffffe)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
listen(r4, 0x5)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20)
write(r5, &(0x7f0000000280)='1', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, @hci={0x1f, 0x2, 0x7}, @tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x1}}, @phonet={0x23, 0x6, 0xff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x40, &(0x7f00000002c0)='macvlan0\x00', 0x3, 0x7, 0x81})
close_range(r1, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x7, 0x4)

9m28.664616458s ago: executing program 2 (id=21):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r1, 0x400caed0, &(0x7f0000000080))

9m26.784094745s ago: executing program 2 (id=24):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000fe"], 0xc8)
dup3(r8, r7, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r6)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd700000100000010000000c0002000900000000000000100007800c0001800800", @ANYRES32=r5], 0x3c}}, 0x400400c)
write$binfmt_register(r0, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'M', 0x3a, '\\', 0x3a, './proc_mnt'}, 0x2c)

9m21.565976844s ago: executing program 2 (id=25):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"})
syz_open_dev$tty1(0xc, 0x4, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1})
statx(0xffffffffffffffff, &(0x7f0000000340)='./dev_mnt/ttyUSB0\x00', 0x4000, 0x10, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, 0x0, r6)
setreuid(0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7})
shmctl$IPC_RMID(0x0, 0x0)
unshare(0x62040200)

9m5.386632447s ago: executing program 33 (id=25):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"})
syz_open_dev$tty1(0xc, 0x4, 0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1})
statx(0xffffffffffffffff, &(0x7f0000000340)='./dev_mnt/ttyUSB0\x00', 0x4000, 0x10, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, 0x0, r6)
setreuid(0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f0000000080)={@my=0x0, 0x7})
shmctl$IPC_RMID(0x0, 0x0)
unshare(0x62040200)

7m50.867044249s ago: executing program 3 (id=198):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

7m50.163986841s ago: executing program 3 (id=200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
r3 = socket(0x28, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='1', 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r5, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

7m49.063522672s ago: executing program 3 (id=205):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x894a, &(0x7f0000000880)={'sit0\x00', @link_local})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x5, 0x7, 0x388, 0x0, 0x0, "81de852dab1f00"})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
readv(r6, &(0x7f0000000040)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1)

7m46.996009046s ago: executing program 3 (id=209):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="abc7153306", 0x75f32760, 0x4000805, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)=""/212, 0xd4}, {0x0}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x3}, 0x4}], 0x1, 0x22, 0x0)

7m40.570167491s ago: executing program 3 (id=223):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
close(r0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

7m40.355589541s ago: executing program 3 (id=225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x57, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x13, r3, 0x0)

7m24.404256174s ago: executing program 34 (id=225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x57, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x13, r3, 0x0)

14.064218311s ago: executing program 0 (id=1290):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800)

11.329330509s ago: executing program 0 (id=1296):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
r3 = socket(0x28, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r4, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r4, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r4, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

9.026902537s ago: executing program 6 (id=1301):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x113, 0x2}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, r1, 0x7}}, 0x48)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000970000001801000020646c25000000001b2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, <r5=>0x0})
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
landlock_restrict_self(r8, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/cpu_byteorder', 0x8440, 0xea)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r10, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r10, 0x0, &(0x7f0000000000)='P', 0x1, 0x9})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xa, r5, 0x0, r10})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

8.703877752s ago: executing program 5 (id=1302):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
r3 = socket(0x28, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r4, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r4, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r4, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

7.319809427s ago: executing program 4 (id=1303):
msgrcv(0x0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}}, 0x4004020)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x20180, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0x713, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000011, 0x6, 0xa, 0x4, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00')
mmap$snddsp_control(&(0x7f0000002000/0x4000)=nil, 0x1000, 0x9, 0x5a012, r4, 0x83000000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
open(0x0, 0x44000, 0x195)

7.05149601s ago: executing program 6 (id=1304):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800)

6.959128014s ago: executing program 4 (id=1305):
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x800006dc, 0x0, 0x6, 0x9e93, 0x17, "1012a2c2030800001fe550bf0d08000000e956"})
unshare(0x22020400)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shmctl$SHM_LOCK(0x0, 0xb)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001780)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2c, 0x0, 0x4, 0x0, 0x1, 0x8, 0x10}]}}}}}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0)
mlockall(0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xf46bd000)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

6.740406184s ago: executing program 6 (id=1306):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x3, 0x4010, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0xff)
socket$vsock_stream(0x28, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r2 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

6.561653523s ago: executing program 4 (id=1307):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00005b2000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000540)="c4e1fa2c5adc6664f0420fc1bdfb000000400f009cf682000000c744240012820000c744240241a00000c7442406000000000f011c2466b87f000f00d845d8d266b879000f00d8b991040000b8fcd30000ba000000000f3066b87d000f00d00f2131", 0x62}], 0x1, 0x12, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_ublk_setup_io_uring(0x1b1d, 0x0, &(0x7f0000000040), &(0x7f0000000200), 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a03000000000000000000070000200800024000000002b4000000090a010400000000000000000700000008000a40fffffffe0900020073797a31000000000900010073797a30000000005c0009805c000280040001802400018008000140000000090800014000000009080001400000e40108000140000000032c000180080001400001000108000140000000070800014000000007080001408000000108000140000000ff240011800b0001006578746864720000140002800800064000000004080007400000001214000000100001000000000000000000"], 0xf8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.442097158s ago: executing program 0 (id=1308):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
fsopen(&(0x7f0000000800)='hfs\x00', 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32, @ANYBLOB="000000000000000000c300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4010, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
openat$ppp(0xffffffffffffff9c, 0x0, 0x10000, 0x0)

4.590590455s ago: executing program 4 (id=1309):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000380)})
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)

3.776670213s ago: executing program 0 (id=1310):
r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
read$dsp(r0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

3.494842656s ago: executing program 6 (id=1311):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x74)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

3.451439129s ago: executing program 5 (id=1312):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r4=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef)

3.067948276s ago: executing program 5 (id=1313):
msgrcv(0x0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}}, 0x4004020)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x20180, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0x713, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000011, 0x6, 0xa, 0x4, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00')
mmap$snddsp_control(&(0x7f0000002000/0x4000)=nil, 0x1000, 0x9, 0x5a012, r4, 0x83000000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
open(0x0, 0x44000, 0x195)

3.057596557s ago: executing program 6 (id=1314):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800)

2.911136684s ago: executing program 5 (id=1315):
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x800006dc, 0x0, 0x6, 0x9e93, 0x17, "1012a2c2030800001fe550bf0d08000000e956"})
unshare(0x22020400)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shmctl$SHM_LOCK(0x0, 0xb)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001780)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2c, 0x0, 0x4, 0x0, 0x1, 0x8, 0x10}]}}}}}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0)
mlockall(0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xf46bd000)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

2.910808464s ago: executing program 4 (id=1316):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
r3 = socket(0x28, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r4, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r4, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r4, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

2.836656687s ago: executing program 0 (id=1317):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00005b2000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000540)="c4e1fa2c5adc6664f0420fc1bdfb000000400f009cf682000000c744240012820000c744240241a00000c7442406000000000f011c2466b87f000f00d845d8d266b879000f00d8b991040000b8fcd30000ba000000000f3066b87d000f00d00f2131", 0x62}], 0x1, 0x12, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_ublk_setup_io_uring(0x1b1d, 0x0, &(0x7f0000000040), &(0x7f0000000200), 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a03000000000000000000070000200800024000000002b4000000090a010400000000000000000700000008000a40fffffffe0900020073797a31000000000900010073797a30000000005c0009805c000280040001802400018008000140000000090800014000000009080001400000e40108000140000000032c000180080001400001000108000140000000070800014000000007080001408000000108000140000000ff240011800b0001006578746864720000140002800800064000000004080007400000001214000000100001000000000000000000"], 0xf8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.833316058s ago: executing program 6 (id=1318):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4})

1.122998198s ago: executing program 0 (id=1319):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf}])
dup3(r2, r0, 0x80000)

1.057654241s ago: executing program 5 (id=1320):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
epoll_create1(0x0)
keyctl$invalidate(0x15, 0x0)
r1 = socket(0x28, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4)
setsockopt(r2, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8)
bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80)
connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10)
sendto(r2, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

2.13421ms ago: executing program 4 (id=1321):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000001540)=0x2)
ppoll(&(0x7f0000000040)=[{r0, 0x18}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)

0s ago: executing program 5 (id=1322):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x74)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

[  119.898787][    T9] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts.
[  127.534978][ T5763] cgroup: Unknown subsys name 'net'
[  127.677816][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  129.656893][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  131.473925][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.487207][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.496841][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.508391][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.516195][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  131.523745][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.546304][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.564302][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.574114][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.583726][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.597120][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  131.605307][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.662019][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.682052][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.690858][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.699710][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.709548][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.709684][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.719867][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  131.729892][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.733459][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.748126][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.757615][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  131.766758][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  132.187950][ T5775] chnl_net:caif_netlink_parms(): no params data found
[  132.373865][ T5778] chnl_net:caif_netlink_parms(): no params data found
[  132.426740][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.434898][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.442692][ T5775] bridge_slave_0: entered allmulticast mode
[  132.450385][ T5775] bridge_slave_0: entered promiscuous mode
[  132.512271][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.520747][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.529024][ T5775] bridge_slave_1: entered allmulticast mode
[  132.539678][ T5775] bridge_slave_1: entered promiscuous mode
[  132.588503][ T5784] chnl_net:caif_netlink_parms(): no params data found
[  132.605221][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.618512][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.673892][ T5782] chnl_net:caif_netlink_parms(): no params data found
[  132.703523][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.711556][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.721758][ T5778] bridge_slave_0: entered allmulticast mode
[  132.730603][ T5778] bridge_slave_0: entered promiscuous mode
[  132.774157][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.781738][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.789652][ T5778] bridge_slave_1: entered allmulticast mode
[  132.798069][ T5778] bridge_slave_1: entered promiscuous mode
[  132.810453][ T5775] team0: Port device team_slave_0 added
[  132.821318][ T5775] team0: Port device team_slave_1 added
[  132.970731][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.981445][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.992545][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.024120][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.043215][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.052432][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.083373][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.113999][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.122490][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.130895][ T5784] bridge_slave_0: entered allmulticast mode
[  133.141467][ T5784] bridge_slave_0: entered promiscuous mode
[  133.154303][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.214196][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.224424][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.233285][ T5784] bridge_slave_1: entered allmulticast mode
[  133.242888][ T5784] bridge_slave_1: entered promiscuous mode
[  133.270411][ T5778] team0: Port device team_slave_0 added
[  133.282382][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.290824][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.300287][ T5782] bridge_slave_0: entered allmulticast mode
[  133.308996][ T5782] bridge_slave_0: entered promiscuous mode
[  133.318604][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.327681][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.335389][ T5782] bridge_slave_1: entered allmulticast mode
[  133.343442][ T5782] bridge_slave_1: entered promiscuous mode
[  133.391438][ T5778] team0: Port device team_slave_1 added
[  133.413713][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.489100][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.503454][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.510909][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.537802][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.553061][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.567960][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.587259][ T5779] Bluetooth: hci0: command tx timeout
[  133.588003][ T5775] hsr_slave_0: entered promiscuous mode
[  133.601731][ T5775] hsr_slave_1: entered promiscuous mode
[  133.622578][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.630131][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.658850][ T5779] Bluetooth: hci1: command tx timeout
[  133.665148][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.704178][ T5782] team0: Port device team_slave_0 added
[  133.732794][ T5784] team0: Port device team_slave_0 added
[  133.760994][ T5782] team0: Port device team_slave_1 added
[  133.803164][ T5784] team0: Port device team_slave_1 added
[  133.817066][ T5779] Bluetooth: hci2: command tx timeout
[  133.823543][ T5779] Bluetooth: hci3: command tx timeout
[  133.881752][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.889362][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.919328][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.940469][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.947654][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.975953][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.003694][ T5778] hsr_slave_0: entered promiscuous mode
[  134.015109][ T5778] hsr_slave_1: entered promiscuous mode
[  134.022780][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.032475][ T5778] Cannot create hsr debugfs directory
[  134.101680][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.110114][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.139396][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.154959][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.163398][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.193413][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.261410][ T5784] hsr_slave_0: entered promiscuous mode
[  134.269280][ T5784] hsr_slave_1: entered promiscuous mode
[  134.277170][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.285165][ T5784] Cannot create hsr debugfs directory
[  134.427280][ T5782] hsr_slave_0: entered promiscuous mode
[  134.435113][ T5782] hsr_slave_1: entered promiscuous mode
[  134.444180][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.454635][ T5782] Cannot create hsr debugfs directory
[  134.776083][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  134.818407][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  134.861751][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  134.873298][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  134.983409][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  135.014061][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  135.030184][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  135.062074][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  135.189383][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  135.203128][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  135.216327][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  135.240665][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  135.393498][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  135.416191][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  135.435170][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  135.456041][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  135.514182][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.653074][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[  135.661214][ T5779] Bluetooth: hci0: command tx timeout
[  135.702382][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.733433][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.739999][ T5779] Bluetooth: hci1: command tx timeout
[  135.744114][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.795867][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.823265][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.832497][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.848666][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[  135.896121][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.909128][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.935640][ T5779] Bluetooth: hci3: command tx timeout
[  135.935676][   T51] Bluetooth: hci2: command tx timeout
[  135.972663][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.011246][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.020340][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.061965][ T5784] 8021q: adding VLAN 0 to HW filter on device team0
[  136.081126][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[  136.120375][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.128909][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.173982][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.182397][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.195317][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.204828][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.278110][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.286398][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.019974][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.092367][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.138554][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.272220][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.300085][ T5775] veth0_vlan: entered promiscuous mode
[  137.369659][ T5778] veth0_vlan: entered promiscuous mode
[  137.389673][ T5775] veth1_vlan: entered promiscuous mode
[  137.414496][ T5784] veth0_vlan: entered promiscuous mode
[  137.454167][ T5778] veth1_vlan: entered promiscuous mode
[  137.487451][ T5784] veth1_vlan: entered promiscuous mode
[  137.584417][ T5775] veth0_macvtap: entered promiscuous mode
[  137.616205][ T5782] veth0_vlan: entered promiscuous mode
[  137.634616][ T5778] veth0_macvtap: entered promiscuous mode
[  137.645956][ T5775] veth1_macvtap: entered promiscuous mode
[  137.667331][ T5784] veth0_macvtap: entered promiscuous mode
[  137.714600][ T5778] veth1_macvtap: entered promiscuous mode
[  137.732632][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.742111][   T51] Bluetooth: hci0: command tx timeout
[  137.792877][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.803879][ T5784] veth1_macvtap: entered promiscuous mode
[  137.817598][   T51] Bluetooth: hci1: command tx timeout
[  137.825355][ T5782] veth1_vlan: entered promiscuous mode
[  137.854598][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.870798][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.886470][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.912332][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.923910][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.934722][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.947593][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.971585][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.990721][   T51] Bluetooth: hci2: command tx timeout
[  137.997212][ T5779] Bluetooth: hci3: command tx timeout
[  138.004534][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.018371][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.054462][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.069919][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.081280][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.092591][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.112708][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.132003][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.147001][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.159941][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.172685][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.213933][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.228551][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.240837][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.251816][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.266216][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.295736][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.317376][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.330064][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.341401][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.398049][ T5782] veth0_macvtap: entered promiscuous mode
[  138.471223][ T5782] veth1_macvtap: entered promiscuous mode
[  138.569200][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.583717][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.613547][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.626895][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.642547][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.658647][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.673455][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.685309][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.700411][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.716765][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.731291][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.744002][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.756441][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.767643][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  138.781712][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.794184][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.841982][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.850930][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.875371][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.888084][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.902382][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.914674][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.968473][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.979238][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.154138][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.188895][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.231121][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.252864][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.325765][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.382613][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.506025][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.226149][ T5840] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  141.717018][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  141.921820][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  141.946770][ T5779] Bluetooth: hci0: command tx timeout
[  141.952934][ T5779] Bluetooth: hci1: command tx timeout
[  141.961625][   T51] Bluetooth: hci2: command tx timeout
[  141.961995][ T5777] Bluetooth: hci3: command tx timeout
[  141.976170][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  142.007988][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.507049][    C1] sched: RT throttling activated
[  143.607005][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  143.860128][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.924578][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.426909][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  145.757228][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  147.567997][ T5859] netlink: 'syz.3.8': attribute type 39 has an invalid length.
[  149.072329][ T5866] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  149.961347][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'.
[  150.876843][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  151.286641][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  153.756380][ T5887] binder: 5884:5887 ioctl c0306201 200000000080 returned -14
[  159.108232][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  159.132653][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  159.147401][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  159.166794][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  159.180774][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  159.196073][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  161.997427][ T5777] Bluetooth: hci4: command tx timeout
[  162.325885][ T5775] syz-executor (5775) used greatest stack depth: 20680 bytes left
[  162.549472][ T5937] Zero length message leads to an empty skb
[  163.052510][ T5945] =======================================================
[  163.052510][ T5945] WARNING: The mand mount option has been deprecated and
[  163.052510][ T5945]          and is ignored by this kernel. Remove the mand
[  163.052510][ T5945]          option from the mount to silence this warning.
[  163.052510][ T5945] =======================================================
[  163.093646][ T5945] 9pnet_virtio: no channels available for device 127.0.0.1
[  163.540056][ T5947] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  164.038703][   T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.126800][ T5777] Bluetooth: hci4: command tx timeout
[  164.550452][   T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.679397][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'.
[  167.056812][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  167.776019][ T5777] Bluetooth: hci4: command tx timeout
[  169.327229][  T790] libceph: connect (1)[c::]:6789 error -101
[  169.403158][  T790] libceph: mon0 (1)[c::]:6789 connect error
[  169.759669][ T5835] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  169.896421][ T5777] Bluetooth: hci4: command tx timeout
[  170.118415][ T5837] libceph: connect (1)[c::]:6789 error -101
[  170.186989][ T5837] libceph: mon0 (1)[c::]:6789 connect error
[  170.201550][ T5835] usb 4-1: Using ep0 maxpacket: 16
[  170.244956][ T5964] ceph: No mds server is up or the cluster is laggy
[  170.267146][   T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.370394][ T5835] usb 4-1: device descriptor read/all, error -71
[  171.431816][   T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.975134][ T5990] xt_CONNSECMARK: invalid mode: 0
[  172.412768][ T5989] warning: `syz.3.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  173.287117][ T5919] chnl_net:caif_netlink_parms(): no params data found
[  173.783169][ T5997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.179941][ T5993] ucma_write: process 41 (syz.0.29) changed security contexts after opening file descriptor, this is not allowed.
[  177.428764][ T6013] 
: renamed from bond_slave_0 (while UP)
[  177.494482][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.508706][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.527037][ T5919] bridge_slave_0: entered allmulticast mode
[  177.534833][ T5919] bridge_slave_0: entered promiscuous mode
[  177.565878][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.574197][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.609810][ T5919] bridge_slave_1: entered allmulticast mode
[  177.621059][ T5919] bridge_slave_1: entered promiscuous mode
[  177.903218][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.940210][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.159702][ T5919] team0: Port device team_slave_0 added
[  178.821472][ T5919] team0: Port device team_slave_1 added
[  180.741864][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.767119][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.017168][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.073414][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.105623][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.254605][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.213441][ T5919] hsr_slave_0: entered promiscuous mode
[  184.253877][ T5919] hsr_slave_1: entered promiscuous mode
[  184.274468][ T5919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.286905][ T5919] Cannot create hsr debugfs directory
[  184.321683][   T60] hsr_slave_0: left promiscuous mode
[  184.336364][   T60] hsr_slave_1: left promiscuous mode
[  184.353041][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.373554][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.406892][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.414458][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.437010][   T60] bridge_slave_1: left allmulticast mode
[  184.443673][   T60] bridge_slave_1: left promiscuous mode
[  184.453026][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.479056][   T60] bridge_slave_0: left allmulticast mode
[  184.485170][   T60] bridge_slave_0: left promiscuous mode
[  184.507638][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.575094][   T60] veth1_macvtap: left promiscuous mode
[  184.583534][   T60] veth0_macvtap: left promiscuous mode
[  184.590488][   T60] veth1_vlan: left promiscuous mode
[  185.866929][   T60] veth0_vlan: left promiscuous mode
[  188.593146][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.615320][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.630210][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.643624][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.653439][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  188.667879][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.175282][   T60] team0 (unregistering): Port device team_slave_1 removed
[  190.093557][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'.
[  191.105286][ T5777] Bluetooth: hci0: command tx timeout
[  191.129497][   T60] team0 (unregistering): Port device team_slave_0 removed
[  191.237226][ T5084] block nbd0: Receive control failed (result -32)
[  191.330544][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.399675][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.868177][   T60] bond0 (unregistering): Released all slaves
[  193.178882][ T5084] Bluetooth: hci0: command tx timeout
[  195.223454][ T5919] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  195.237375][ T5919] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  195.250773][ T5919] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  195.257125][ T5084] Bluetooth: hci0: command tx timeout
[  195.306799][ T5919] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  196.166317][   T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.619910][ T6071] chnl_net:caif_netlink_parms(): no params data found
[  196.717907][ T6113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.059602][ T6115] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  197.073851][ T6115] fuse: Bad value for 'fd'
[  197.084593][ T6115] ptp ptp0: only physical clock in use now
[  197.547553][ T6115] failed to create ptp aux_worker -4
[  198.165057][ T5084] Bluetooth: hci0: command tx timeout
[  198.260906][   T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.417455][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.488320][   T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.576015][ T5919] 8021q: adding VLAN 0 to HW filter on device team0
[  198.760530][   T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.901441][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.908737][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.973660][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.981259][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.039212][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.066933][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.074448][ T6071] bridge_slave_0: entered allmulticast mode
[  199.168545][ T6071] bridge_slave_0: entered promiscuous mode
[  199.224671][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.249524][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.320924][ T6071] bridge_slave_1: entered allmulticast mode
[  199.366764][ T6071] bridge_slave_1: entered promiscuous mode
[  199.491478][ T6071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.533535][ T6071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.715071][ T6071] team0: Port device team_slave_0 added
[  199.818799][ T6071] team0: Port device team_slave_1 added
[  200.048097][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.056022][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.091979][ T6071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.174490][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.184626][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.238716][ T6071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.993033][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  202.006704][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  202.413730][ T6071] hsr_slave_0: entered promiscuous mode
[  202.433837][ T6071] hsr_slave_1: entered promiscuous mode
[  202.942047][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.368337][   T60] hsr_slave_0: left promiscuous mode
[  204.382155][   T60] hsr_slave_1: left promiscuous mode
[  204.409371][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.427564][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.465589][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.475306][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.493455][   T60] bridge_slave_1: left allmulticast mode
[  204.506923][   T60] bridge_slave_1: left promiscuous mode
[  204.513749][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.541740][   T60] bridge_slave_0: left allmulticast mode
[  204.547780][   T60] bridge_slave_0: left promiscuous mode
[  204.554592][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.613448][   T60] veth1_macvtap: left promiscuous mode
[  204.624296][   T60] veth0_macvtap: left promiscuous mode
[  204.637773][   T60] veth1_vlan: left promiscuous mode
[  204.643331][   T60] veth0_vlan: left promiscuous mode
[  208.290229][   T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  208.305107][   T60] team0 (unregistering): Port device team_slave_1 removed
[  208.352432][   T60] team0 (unregistering): Port device team_slave_0 removed
[  208.401817][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.448889][   T60] bond0 (unregistering): (slave 
3
0
): Releasing backup interface
[  208.496734][   T23] usb 4-1: Using ep0 maxpacket: 32
[  208.535066][   T23] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  208.556604][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  208.574226][   T23] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  208.590238][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.604081][   T23] usb 4-1: Product: syz
[  208.611990][   T23] usb 4-1: Manufacturer: syz
[  208.620158][   T23] usb 4-1: SerialNumber: syz
[  208.674569][   T23] usb 4-1: config 0 descriptor??
[  208.931805][   T60] bond0 (unregistering): Released all slaves
[  209.163220][ T6071] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  209.181446][ T6071] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  209.207482][ T6071] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  209.234076][ T6071] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  209.688351][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.775856][ T5919] veth0_vlan: entered promiscuous mode
[  209.793803][ T6071] 8021q: adding VLAN 0 to HW filter on device team0
[  209.830958][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.838245][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.872364][ T5919] veth1_vlan: entered promiscuous mode
[  209.901593][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.908833][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.977031][ T5919] veth0_macvtap: entered promiscuous mode
[  210.014867][ T5919] veth1_macvtap: entered promiscuous mode
[  210.054179][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.072081][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.083395][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.095200][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.111486][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.145773][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.157848][ T5835] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  210.184268][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.194951][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  210.207039][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.219284][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.233164][ T5919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.243114][ T5919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.252528][ T5919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.261405][ T5919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.353009][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  210.381328][ T5835] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  210.416623][ T5835] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  210.453449][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.460022][ T5835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.482984][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.493130][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  210.502316][ T5835] usb 1-1: SerialNumber: syz
[  210.526695][ T5835] hub 1-1:1.0: bad descriptor, ignoring hub
[  210.533034][ T5835] hub: probe of 1-1:1.0 failed with error -5
[  210.569876][ T5835] cdc_ether: probe of 1-1:1.0 failed with error -22
[  210.588199][ T3419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.596242][ T3419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.801622][ T6071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.152886][ T5835] usb 4-1: USB disconnect, device number 4
[  211.757594][ T6238] syz.0.73[6238]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  211.861368][ T6238] process 'syz.0.73' launched '/dev/fd/6' with NULL argv: empty string added
[  212.331593][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.73'.
[  213.325980][ T6071] veth0_vlan: entered promiscuous mode
[  213.423816][ T6071] veth1_vlan: entered promiscuous mode
[  213.504450][ T6071] veth0_macvtap: entered promiscuous mode
[  213.548351][ T6071] veth1_macvtap: entered promiscuous mode
[  213.625177][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.640958][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.653441][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.664828][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.687870][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.709682][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.723323][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.758326][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.786629][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.806649][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.831903][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.853950][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.876605][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.899417][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.930550][ T6071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.948678][ T6071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.980427][ T6071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.989502][ T6071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.211110][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.253675][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.326353][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.352222][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.399812][   T23] usb 1-1: USB disconnect, device number 2
[  214.647448][ T5818] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  214.839644][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  214.856996][ T5818] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  214.880204][ T5818] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  214.887487][ T5154] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  214.908193][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.916288][ T5818] usb 5-1: Product: syz
[  214.940746][ T5818] usb 5-1: Manufacturer: syz
[  214.951384][ T5818] usb 5-1: SerialNumber: syz
[  214.987839][ T5818] etas_es58x 5-1:1.0: Starting syz syz (Serial Number syz)
[  215.086748][ T5154] usb 6-1: Using ep0 maxpacket: 32
[  215.117008][ T5154] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  215.125288][ T5154] usb 6-1: config 0 has no interface number 0
[  215.150879][ T5154] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  215.179068][ T5154] usb 6-1: config 0 interface 85 has no altsetting 0
[  215.203380][ T5154] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  215.513246][ T6305] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  216.166529][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  216.306520][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  217.190586][ T5154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.326512][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  218.121758][ T5154] usb 6-1: Product: syz
[  218.126046][ T5154] usb 6-1: Manufacturer: syz
[  218.130889][ T5154] usb 6-1: SerialNumber: syz
[  218.138646][ T5154] usb 6-1: config 0 descriptor??
[  218.335242][ T5818] etas_es58x 5-1:1.0: could not retrieve the product info string
[  218.376841][ T5154] usb 6-1: can't set config #0, error -71
[  218.436652][ T5154] usb 6-1: USB disconnect, device number 2
[  218.536758][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.615249][ T5818] usb 5-1: USB disconnect, device number 2
[  218.650394][ T5818] etas_es58x 5-1:1.0: Disconnecting syz syz
[  227.327659][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.120'.
[  234.857488][ T5837] kernel write not supported for file /dsp1 (pid: 5837 comm: kworker/0:6)
[  238.374375][ T6494] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  238.382814][ T6494] fuse: Bad value for 'fd'
[  238.390655][ T6494] ptp ptp0: only physical clock in use now
[  238.964344][ T6494] failed to create ptp aux_worker -4
[  239.769070][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  245.949051][ T5835] kernel write not supported for file /dsp1 (pid: 5835 comm: kworker/0:4)
[  246.675994][ T6529] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  246.824261][ T6529] fuse: Bad value for 'fd'
[  247.031689][ T6529] ptp ptp0: only physical clock in use now
[  247.406750][ T6529] failed to create ptp aux_worker -4
[  254.028646][ T6566] 9pnet_fd: Insufficient options for proto=fd
[  255.233064][ T6590] xt_CONNSECMARK: invalid mode: 0
[  255.893488][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  255.900180][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  256.079233][ T6596] 9pnet_fd: Insufficient options for proto=fd
[  256.457731][ T5837] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  256.588398][ T6613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.690248][ T5837] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  256.698957][ T5837] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  256.730097][ T5837] usb 5-1: config 220 has no interface number 2
[  256.738817][ T5837] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  256.780916][ T5837] usb 5-1: config 220 interface 0 has no altsetting 0
[  256.802042][ T5837] usb 5-1: config 220 interface 76 has no altsetting 0
[  256.825313][ T5837] usb 5-1: config 220 interface 1 has no altsetting 0
[  256.853525][ T5837] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  256.879103][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.894054][ T5837] usb 5-1: Product: syz
[  256.898892][ T5837] usb 5-1: Manufacturer: syz
[  256.903557][ T5837] usb 5-1: SerialNumber: syz
[  256.999509][ T6618] xt_CONNSECMARK: invalid mode: 0
[  257.738575][ T5837] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  257.749186][ T5837] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  257.755621][ T5837] usb 5-1: No valid video chain found.
[  257.763444][ T5837] usb 5-1: selecting invalid altsetting 0
[  257.779342][ T5837] usb 5-1: selecting invalid altsetting 0
[  257.786684][ T5837] usbtest: probe of 5-1:220.1 failed with error -22
[  257.796692][ T5837] usb 5-1: USB disconnect, device number 3
[  257.875558][ T6626] 9pnet_fd: Insufficient options for proto=fd
[  260.438359][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'.
[  260.527563][ T6661] xt_CONNSECMARK: invalid mode: 0
[  264.265375][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  264.271844][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  264.992189][ T6700] xt_CONNSECMARK: invalid mode: 0
[  267.776757][ T6724] xt_CONNSECMARK: invalid mode: 0
[  267.785903][   T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  268.002284][   T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.059722][   T27] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  268.143651][   T27] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  268.198307][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.332342][   T27] usb 6-1: Product: syz
[  268.346552][   T27] usb 6-1: Manufacturer: syz
[  268.371850][   T27] usb 6-1: SerialNumber: syz
[  270.633974][   T27] usb 6-1: USB disconnect, device number 3
[  275.719906][ T6776] loop5: detected capacity change from 0 to 512
[  275.767942][ T6776] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  277.541009][ T6776] EXT4-fs (loop5): 1 truncate cleaned up
[  277.559694][ T6776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.666288][ T6776] netlink: 'syz.5.234': attribute type 4 has an invalid length.
[  277.778391][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.234'.
[  277.929857][ T6071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.716895][ T5835] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  279.013698][ T5835] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  279.106849][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.259149][ T5835] usb 5-1: config 0 descriptor??
[  282.362002][ T5835] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  282.369742][ T5835] [drm] Initialized udl on minor 2
[  282.379389][ T5835] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  282.394863][ T5835] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  282.407799][ T5837] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  282.421103][ T5835] usb 5-1: USB disconnect, device number 4
[  282.427529][ T5837] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  283.576663][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'.
[  284.907641][ T6814] netlink: 'syz.0.245': attribute type 4 has an invalid length.
[  285.019326][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'.
[  286.545176][ T5084] Bluetooth: hci4: command 0x0406 tx timeout
[  288.824100][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'.
[  291.742496][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  291.752088][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  291.761027][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  291.769560][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  291.851167][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  291.868168][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  294.291783][ T6844] chnl_net:caif_netlink_parms(): no params data found
[  294.531059][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.596771][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.604148][ T6844] bridge_slave_0: entered allmulticast mode
[  294.648459][ T6844] bridge_slave_0: entered promiscuous mode
[  294.673075][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.696756][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.704505][ T6844] bridge_slave_1: entered allmulticast mode
[  294.755500][ T6844] bridge_slave_1: entered promiscuous mode
[  294.845049][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.919728][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.000979][ T6858] loop4: detected capacity change from 0 to 512
[  295.041679][ T6858] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  295.070138][ T6844] team0: Port device team_slave_0 added
[  295.076667][ T6859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.118963][ T6858] EXT4-fs (loop4): 1 truncate cleaned up
[  295.126258][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.146379][ T6844] team0: Port device team_slave_1 added
[  295.153546][ T6858] netlink: 'syz.4.254': attribute type 4 has an invalid length.
[  295.308247][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'.
[  295.360540][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.386257][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.419874][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.434015][ T5919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.439352][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.452124][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.496142][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.575919][ T6844] hsr_slave_0: entered promiscuous mode
[  295.579174][ T5084] Bluetooth: hci1: command tx timeout
[  295.599592][ T6844] hsr_slave_1: entered promiscuous mode
[  295.606318][ T6844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.617672][ T6844] Cannot create hsr debugfs directory
[  295.849768][ T5837] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  296.183537][ T6872] xt_CONNSECMARK: invalid mode: 0
[  297.138991][ T5837] usb 6-1: config index 0 descriptor too short (expected 1572, got 36)
[  297.147657][ T5837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  297.179452][ T5837] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  297.211823][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.243485][ T5837] usb 6-1: Product: syz
[  297.525951][ T6844] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  297.656657][ T5084] Bluetooth: hci1: command tx timeout
[  297.705812][ T6844] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  297.868978][ T6844] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  298.021858][ T6844] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  298.264982][ T5837] usb 6-1: Manufacturer: syz
[  298.874066][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'.
[  299.796503][ T5084] Bluetooth: hci1: command tx timeout
[  299.836978][ T5837] usb 6-1: SerialNumber: syz
[  299.989269][ T5837] usb 6-1: can't set config #1, error -71
[  300.011277][ T5837] usb 6-1: USB disconnect, device number 4
[  300.230350][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.879118][ T5084] Bluetooth: hci1: command tx timeout
[  301.918397][ T6844] 8021q: adding VLAN 0 to HW filter on device team0
[  301.954130][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.961385][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.018570][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.025832][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.104313][ T6897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.571467][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.879921][ T6916] loop5: detected capacity change from 0 to 512
[  303.910649][ T6916] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  304.003256][ T6844] veth0_vlan: entered promiscuous mode
[  304.114596][ T6844] veth1_vlan: entered promiscuous mode
[  304.158415][ T6916] EXT4-fs (loop5): 1 truncate cleaned up
[  304.165569][ T6916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.182573][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'.
[  304.382690][ T6926] xt_CONNSECMARK: invalid mode: 0
[  305.002077][ T6844] veth0_macvtap: entered promiscuous mode
[  305.016254][ T6844] veth1_macvtap: entered promiscuous mode
[  305.047448][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.064737][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.103873][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.155793][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.177447][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.195409][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.215872][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.234499][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.250038][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.260888][ T6916] netlink: 'syz.5.264': attribute type 4 has an invalid length.
[  305.273687][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.264'.
[  305.534907][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.633653][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.728832][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.795905][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.882645][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.981523][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.031461][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.096131][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.124743][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.149591][ T6071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.171016][ T6844] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.179925][ T6844] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.204586][ T6844] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.213712][ T6844] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.315688][ T6940] dyndbg: bad flag-op n, at start of net/
[  306.326016][ T6940] dyndbg: flags parse failed
[  309.369387][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.386069][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.452808][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.486660][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.955293][ T6958] loop4: detected capacity change from 0 to 512
[  309.979807][ T6958] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  310.051558][ T6958] EXT4-fs (loop4): 1 truncate cleaned up
[  310.081747][ T6958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.177374][ T6958] netlink: 'syz.4.278': attribute type 4 has an invalid length.
[  310.207772][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'.
[  310.873523][ T6970] xt_CONNSECMARK: invalid mode: 0
[  311.426591][ T5084] Bluetooth: hci0: command 0x0406 tx timeout
[  311.492243][ T5919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.224621][ T6977] dyndbg: bad flag-op n, at start of net/sctp/
[  313.236955][ T6979] syz.5.284 uses obsolete (PF_INET,SOCK_PACKET)
[  313.244469][ T6977] dyndbg: flags parse failed
[  315.313257][ T7000] netlink: 'syz.0.290': attribute type 4 has an invalid length.
[  315.323951][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[  316.172814][ T7009] xt_CONNSECMARK: invalid mode: 0
[  316.733240][ T7011] dyndbg: bad flag-op n, at start of net/sctp/
[  316.751199][ T7011] dyndbg: flags parse failed
[  319.390851][ T7039] netlink: 'syz.0.302': attribute type 4 has an invalid length.
[  319.462186][ T7042] xt_CONNSECMARK: invalid mode: 0
[  319.874627][ T7041] dyndbg: bad flag-op n, at start of net/sctp/
[  319.881702][ T7041] dyndbg: flags parse failed
[  321.536037][ T7052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.702852][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  324.711496][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  325.010921][ T7066] loop6: detected capacity change from 0 to 512
[  325.095206][ T7066] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  325.205171][ T7066] EXT4-fs (loop6): 1 truncate cleaned up
[  325.231861][ T7066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.269171][ T7072] xt_CONNSECMARK: invalid mode: 0
[  325.889119][ T7066] netlink: 'syz.6.315': attribute type 4 has an invalid length.
[  326.206059][ T6844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.985813][ T7105] xt_CONNSECMARK: invalid mode: 0
[  332.232495][ T7108] loop6: detected capacity change from 0 to 512
[  332.276187][ T7108] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  332.336617][ T7111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.346989][ T7108] EXT4-fs (loop6): 1 truncate cleaned up
[  332.354062][ T7108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.421954][ T7108] netlink: 'syz.6.328': attribute type 4 has an invalid length.
[  332.946623][ T6208] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  333.316163][ T6208] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  333.444328][ T6208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.595163][ T6208] usb 6-1: config 0 descriptor??
[  333.670145][ T6844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.526671][ T5837] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  334.964040][ T5837] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  335.002005][ T5837] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  335.424713][ T5837] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  335.435093][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.452963][ T5837] usb 7-1: config 0 descriptor??
[  335.502900][ T5837] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  335.654459][ T6208] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  335.697289][ T6208] [drm] Initialized udl on minor 2
[  335.775083][ T6208] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  335.791212][ T6208] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  335.800779][ T5785] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  335.837294][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.859273][ T6208] usb 6-1: USB disconnect, device number 5
[  335.865890][ T5785] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  335.880351][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.889400][ T5785] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  335.914612][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.937984][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  339.080507][ T6208] usb 7-1: USB disconnect, device number 2
[  340.029520][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.347'.
[  352.779314][ T7239] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  352.788418][ T7239] fuse: Bad value for 'fd'
[  354.190036][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'.
[  357.558741][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.379'.
[  362.289595][ T7297] syzkaller0: entered promiscuous mode
[  362.295179][ T7297] syzkaller0: entered allmulticast mode
[  362.331988][ T7297] tipc: Started in network mode
[  362.339435][ T7297] tipc: Node identity ca7bf05c720d, cluster identity 4711
[  362.348268][ T7297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.372392][ T7297] tipc: Resetting bearer <eth:syzkaller0>
[  362.426982][ T7296] tipc: Resetting bearer <eth:syzkaller0>
[  362.532333][ T7296] tipc: Disabling bearer <eth:syzkaller0>
[  362.738523][ T7307] fuse: Bad value for 'fd'
[  362.870648][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[  364.766495][ T7318] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  364.916464][ T7318] fuse: Bad value for 'fd'
[  374.070948][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.414'.
[  374.857333][ T5777] block nbd1: Receive control failed (result -32)
[  375.875735][ T7403] netlink: 'syz.0.423': attribute type 10 has an invalid length.
[  375.895322][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.905343][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.949511][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.956862][ T7403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.965592][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.972953][ T7403] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.017266][ T7403] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  381.006554][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.431'.
[  382.549125][ T7434] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  382.567944][ T7434] fuse: Bad value for 'fd'
[  384.412807][ T7443] capability: warning: `syz.6.430' uses 32-bit capabilities (legacy support in use)
[  384.468698][ T7443] program syz.6.430 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  384.585824][ T7444] batadv1: entered allmulticast mode
[  386.142748][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  386.157005][ T7456] xt_CONNSECMARK: invalid mode: 0
[  386.162540][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  388.286919][ T7481] tipc: Cannot configure node identity twice
[  388.628890][ T7491] xt_CONNSECMARK: invalid mode: 0
[  389.773919][ T7506] unsupported nla_type 40
[  389.946904][ T7506] kernel profiling enabled (shift: 5)
[  390.490056][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.464'.
[  391.877014][ T7536] syzkaller0: entered promiscuous mode
[  391.886933][ T7536] syzkaller0: entered allmulticast mode
[  391.974389][ T7536] tipc: Started in network mode
[  392.006529][ T7536] tipc: Node identity eeb5de571073, cluster identity 4711
[  392.015516][ T7536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.047583][ T7542] tipc: Resetting bearer <eth:syzkaller0>
[  392.086138][ T7535] tipc: Resetting bearer <eth:syzkaller0>
[  392.179944][ T7535] tipc: Disabling bearer <eth:syzkaller0>
[  393.335274][ T7566] loop4: detected capacity change from 0 to 512
[  393.354711][ T7566] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  393.444745][ T7566] EXT4-fs (loop4): 1 truncate cleaned up
[  393.456450][ T7566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.569414][ T7566] netlink: 'syz.4.481': attribute type 4 has an invalid length.
[  393.586263][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'.
[  393.680488][ T7573] syzkaller0: entered promiscuous mode
[  393.718639][ T7573] syzkaller0: entered allmulticast mode
[  393.751122][ T7573] tipc: Started in network mode
[  393.756119][ T7573] tipc: Node identity fec4d164274c, cluster identity 4711
[  393.781976][ T7573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.823770][ T7573] tipc: Resetting bearer <eth:syzkaller0>
[  393.847596][ T7571] tipc: Resetting bearer <eth:syzkaller0>
[  393.908288][ T7571] tipc: Disabling bearer <eth:syzkaller0>
[  394.110777][ T5919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.523609][ T7590] 9pnet_fd: Insufficient options for proto=fd
[  395.464495][ T7598] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  395.605901][ T7598] fuse: Bad value for 'fd'
[  397.411496][ T7606] syzkaller0: entered promiscuous mode
[  397.436820][ T7606] syzkaller0: entered allmulticast mode
[  397.470102][ T7606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.518428][ T7606] tipc: Resetting bearer <eth:syzkaller0>
[  397.549954][ T7603] tipc: Resetting bearer <eth:syzkaller0>
[  397.635996][ T7603] tipc: Disabling bearer <eth:syzkaller0>
[  398.864998][ T7625] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  398.976814][ T7625] fuse: Bad value for 'fd'
[  399.195129][ T7625] ptp ptp0: only physical clock in use now
[  400.202136][ T7625] ptp ptp0: new virtual clock ptp1
[  400.207434][ T7625] ptp ptp0: guarantee physical clock free running
[  401.279053][ T7635] loop6: detected capacity change from 0 to 512
[  401.329531][ T7635] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  401.402393][ T7635] EXT4-fs (loop6): 1 truncate cleaned up
[  401.418567][ T7635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  401.530685][ T7635] netlink: 'syz.6.495': attribute type 4 has an invalid length.
[  401.566063][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.495'.
[  401.849556][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  402.023319][ T6844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.086575][    T9] usb 5-1: Using ep0 maxpacket: 8
[  402.105025][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.125817][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  402.143229][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  402.169461][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  402.194530][    T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  402.214605][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.243635][    T9] hub 5-1:1.0: bad descriptor, ignoring hub
[  402.253277][    T9] hub: probe of 5-1:1.0 failed with error -5
[  402.267347][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  402.281263][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  402.310818][ T7654] syzkaller0: entered promiscuous mode
[  402.321596][ T7654] syzkaller0: entered allmulticast mode
[  402.343278][ T7654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.344523][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  402.372630][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  402.397677][ T7654] tipc: Resetting bearer <eth:syzkaller0>
[  402.436120][ T7653] tipc: Resetting bearer <eth:syzkaller0>
[  402.448903][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.482410][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.511163][ T7653] tipc: Disabling bearer <eth:syzkaller0>
[  402.949813][ T5785] usb 5-1: USB disconnect, device number 5
[  403.197114][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'.
[  403.688114][ T7677] loop6: detected capacity change from 0 to 512
[  403.710388][ T7677] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  403.750490][ T7677] EXT4-fs (loop6): 1 truncate cleaned up
[  403.763779][ T7677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.807258][ T7677] netlink: 'syz.6.519': attribute type 4 has an invalid length.
[  403.827891][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.519'.
[  405.248963][ T6844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.357043][ T7718] loop5: detected capacity change from 0 to 512
[  408.405947][ T7718] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  409.024665][ T7718] EXT4-fs (loop5): 1 truncate cleaned up
[  409.131987][ T7718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.442795][ T7718] netlink: 'syz.5.532': attribute type 4 has an invalid length.
[  409.451873][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.532'.
[  409.692145][ T6071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.120214][ T7731] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  410.261054][ T7731] fuse: Bad value for 'fd'
[  410.441151][ T7729] ptp ptp0: delete virtual clock ptp1
[  411.339038][ T7729] ptp ptp0: only physical clock in use now
[  411.345997][ T7731] failed to create ptp aux_worker -4
[  413.117200][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'.
[  416.615050][ T7763] loop5: detected capacity change from 0 to 512
[  416.740946][ T7763] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  416.998779][ T7766] syzkaller0: entered promiscuous mode
[  417.004373][ T7766] syzkaller0: entered allmulticast mode
[  417.007494][ T7763] EXT4-fs (loop5): 1 truncate cleaned up
[  417.040851][ T7766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.094683][ T7765] tipc: Resetting bearer <eth:syzkaller0>
[  417.188341][ T7763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.348319][ T7765] tipc: Disabling bearer <eth:syzkaller0>
[  417.446713][ T7763] netlink: 'syz.5.546': attribute type 4 has an invalid length.
[  417.527456][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.546'.
[  418.829254][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.550'.
[  418.964539][ T5777] Bluetooth: hci1: command 0x0406 tx timeout
[  419.308478][ T6071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.761188][ T7810] loop4: detected capacity change from 0 to 512
[  426.799216][ T7810] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  428.477596][ T7810] EXT4-fs (loop4): 1 truncate cleaned up
[  428.553938][ T7810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.628199][ T7810] netlink: 'syz.4.560': attribute type 4 has an invalid length.
[  428.669473][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'.
[  428.968743][ T5919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.046702][ T7833] netlink: 276 bytes leftover after parsing attributes in process `syz.5.567'.
[  437.687463][    T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  437.957546][    T8] usb 5-1: Using ep0 maxpacket: 32
[  438.166548][    T8] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  438.175763][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.212260][    T8] usb 5-1: config 0 descriptor??
[  438.454344][    T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  438.514772][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  438.551520][    T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  438.576673][    T8] usb 5-1: media controller created
[  438.704268][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  439.071984][    T8] az6027: usb out operation failed. (-71)
[  439.174599][    T8] az6027: usb out operation failed. (-71)
[  439.254666][    T8] stb0899_attach: Driver disabled by Kconfig
[  439.272580][    T8] az6027: no front-end attached
[  439.272580][    T8] 
[  439.302228][    T8] az6027: usb out operation failed. (-71)
[  439.325054][    T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  439.376897][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  439.467853][    T8] dvb-usb: schedule remote query interval to 400 msecs.
[  439.518341][    T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  439.570339][    T8] usb 5-1: USB disconnect, device number 6
[  441.537490][    T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  442.044119][ T7894] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  442.196275][ T7894] fuse: Bad value for 'fd'
[  442.423142][ T7894] ptp ptp0: only physical clock in use now
[  442.602996][ T7894] failed to create ptp aux_worker -4
[  447.582905][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  447.589553][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  447.804487][ T7928] netlink: 'syz.0.594': attribute type 4 has an invalid length.
[  447.854737][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'.
[  448.312720][ T7931] syzkaller0: entered promiscuous mode
[  448.327787][ T7931] syzkaller0: entered allmulticast mode
[  448.346328][ T7931] tipc: Started in network mode
[  448.366009][ T7931] tipc: Node identity 36e16cbf5fdf, cluster identity 4711
[  448.394717][ T7931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.454891][ T7930] tipc: Resetting bearer <eth:syzkaller0>
[  448.709695][ T7930] tipc: Disabling bearer <eth:syzkaller0>
[  451.330929][ T7970] loop6: detected capacity change from 0 to 512
[  451.361451][ T7970] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  451.414451][ T7970] EXT4-fs (loop6): 1 truncate cleaned up
[  451.454835][ T7970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.580669][ T7970] netlink: 'syz.6.607': attribute type 4 has an invalid length.
[  451.647489][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.607'.
[  451.862534][ T7976] syzkaller0: entered promiscuous mode
[  451.883238][ T7976] syzkaller0: entered allmulticast mode
[  452.155392][ T6844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.345679][ T7978] tipc: Cannot configure node identity twice
[  455.100956][ T8012] netlink: 'syz.0.620': attribute type 4 has an invalid length.
[  455.126810][ T6208] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  455.150513][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'.
[  455.331609][ T6208] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  455.357330][ T6208] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  455.382726][ T6208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.461006][ T6208] as10x_usb: device has been detected
[  455.480702][ T6208] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  455.551951][ T6208] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  455.597756][ T8016] syzkaller0: entered promiscuous mode
[  455.603374][ T8016] syzkaller0: entered allmulticast mode
[  455.673922][ T6208] as10x_usb: error during firmware upload part1
[  455.698721][ T6208] Registered device Abilis Systems DVB-Titan
[  458.629705][ T5785] usb 5-1: USB disconnect, device number 7
[  458.741124][ T5785] Unregistered device Abilis Systems DVB-Titan
[  458.754351][ T5785] as10x_usb: device has been disconnected
[  460.906790][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'.
[  461.397133][ T5084] block nbd2: Receive control failed (result -32)
[  464.143213][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.641'.
[  464.531435][ T8075] fuse: Bad value for 'fd'
[  468.877308][ T8112] fuse: Bad value for 'fd'
[  472.150041][ T8131] 9pnet_fd: Insufficient options for proto=fd
[  475.087117][ T8151] fuse: Bad value for 'fd'
[  475.584854][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'.
[  475.970068][ T8165] 9pnet_fd: Insufficient options for proto=fd
[  478.225835][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.674'.
[  478.432411][ T5084] block nbd3: Receive control failed (result -32)
[  480.424808][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.681'.
[  482.318034][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.6.683'.
[  482.918483][ T5084] block nbd4: Receive control failed (result -32)
[  483.072639][ T8220] fuse: Bad value for 'fd'
[  483.896641][ T5154] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  485.441337][ T5154] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  485.476472][ T5154] usb 5-1: config 0 has no interface number 0
[  485.493048][ T5154] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  485.537290][ T5154] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  485.566506][ T5154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.590407][ T5154] usb 5-1: Product: syz
[  485.594660][ T5154] usb 5-1: Manufacturer: syz
[  485.608473][ T5154] usb 5-1: SerialNumber: syz
[  485.635221][ T5154] usb 5-1: config 0 descriptor??
[  485.702098][ T5154] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  486.193100][ T5154] usb 5-1: USB disconnect, device number 8
[  486.351498][ T5154] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  487.930150][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'.
[  488.534089][ T5084] block nbd5: Receive control failed (result -32)
[  490.177394][ T5785] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  490.425974][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  490.466749][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  490.489535][ T5785] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  490.534654][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.738075][ T5785] usb 5-1: config 0 descriptor??
[  492.092541][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.693'.
[  492.204553][ T5785] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  492.280012][ T5785] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  492.339463][ T5785] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0001/input/input6
[  493.349254][ T5785] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[  493.645777][ T5785] usb 5-1: USB disconnect, device number 9
[  494.636813][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'.
[  495.107148][ T5084] block nbd6: Receive control failed (result -32)
[  495.270751][ T8290] fido_id[8290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  499.089407][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.712'.
[  499.885517][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'.
[  500.363832][ T8326] nvme nvme0: rdma_resolve_addr failed (-19).
[  501.857895][ T8337] fuse: Bad value for 'fd'
[  501.866544][ T8337] ptp ptp0: only physical clock in use now
[  502.024930][ T8337] failed to create ptp aux_worker -4
[  504.302662][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.715'.
[  504.773003][ T5084] block nbd7: Receive control failed (result -32)
[  508.483101][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.723'.
[  509.024158][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  509.036729][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  509.387524][ T8381] netlink: 260 bytes leftover after parsing attributes in process `syz.4.729'.
[  509.811484][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.732'.
[  510.933389][ T8398] fuse: Bad value for 'fd'
[  514.999081][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.738'.
[  516.478210][ T8432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.534645][ T8432] tipc: Resetting bearer <eth:syzkaller0>
[  517.658228][ T8431] tipc: Disabling bearer <eth:syzkaller0>
[  518.156760][   T23] tipc: Node number set to 1765698751
[  519.865383][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'.
[  520.247816][ T8441] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  525.790894][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.760'.
[  530.554319][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'.
[  535.254126][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'.
[  537.821109][ T8562] netlink: 76 bytes leftover after parsing attributes in process `syz.0.787'.
[  539.268415][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.791'.
[  542.207198][ T8597] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  542.215749][ T8597] fuse: Bad value for 'fd'
[  542.222691][ T8597] ptp ptp0: only physical clock in use now
[  542.797529][ T8597] failed to create ptp aux_worker -4
[  548.057813][ T8661] xt_CONNSECMARK: invalid mode: 0
[  552.715445][ T8708] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  552.743290][ T8708] fuse: Bad value for 'fd'
[  552.780535][ T8708] ptp ptp0: only physical clock in use now
[  553.290731][ T8708] failed to create ptp aux_worker -4
[  554.727436][ T8717] xt_CONNSECMARK: invalid mode: 0
[  557.320596][ T8742] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  557.347401][ T8742] fuse: Bad value for 'fd'
[  557.378877][ T8742] ptp ptp0: only physical clock in use now
[  557.895672][ T8742] failed to create ptp aux_worker -4
[  563.573971][ T8792] tipc: Cannot configure node identity twice
[  564.096120][ T8801] mmap: syz.5.861 (8801) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  570.461260][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  570.469945][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  575.578121][ T8919] xt_CONNSECMARK: invalid mode: 0
[  575.914349][ T8924] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  575.934255][ T8924] fuse: Bad value for 'fd'
[  575.952388][ T8924] ptp ptp0: only physical clock in use now
[  576.027131][ T8924] ptp ptp0: new virtual clock ptp1
[  576.032421][ T8924] ptp ptp0: guarantee physical clock free running
[  576.946696][   T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  577.106530][   T23] usb 1-1: device descriptor read/64, error -71
[  578.286538][   T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  578.466776][   T23] usb 1-1: device descriptor read/64, error -71
[  578.587039][   T23] usb usb1-port1: attempt power cycle
[  579.026756][   T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  579.120382][   T23] usb 1-1: device descriptor read/8, error -71
[  579.436706][   T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  579.487247][   T23] usb 1-1: device descriptor read/8, error -71
[  579.626097][   T23] usb usb1-port1: unable to enumerate USB device
[  581.246746][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  581.462852][   T23] usb 1-1: Using ep0 maxpacket: 8
[  581.479974][   T23] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  581.529117][   T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  581.591801][   T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  581.963018][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'.
[  583.185989][   T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  583.197612][   T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  583.207840][   T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  583.226521][   T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  583.236602][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.417326][ T5084] block nbd8: Receive control failed (result -32)
[  583.526910][   T23] usb 1-1: GET_CAPABILITIES returned 0
[  583.532650][   T23] usbtmc 1-1:16.0: can't read capabilities
[  583.820146][ T8970] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71
[  584.065241][    T9] usb 1-1: USB disconnect, device number 8
[  586.484693][ T9004] tipc: Cannot configure node identity twice
[  588.776684][ T5785] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  588.979232][ T5785] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  589.021662][ T5785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.096233][ T5785] usb 7-1: config 0 descriptor??
[  589.600076][ T5785] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2
[  589.628353][ T5785] [drm] Initialized udl on minor 2
[  589.884676][ T5785] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  589.907975][ T5785] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  590.111453][ T5817] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  590.297237][ T5817] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  590.307374][ T5785] usb 7-1: USB disconnect, device number 3
[  590.405522][ T5817] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  595.834765][ T9071] tipc: Cannot configure node identity twice
[  599.151509][ T9097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.177772][ T9097] tipc: Resetting bearer <eth:syzkaller0>
[  599.201150][ T9094] tipc: Disabling bearer <eth:syzkaller0>
[  599.307620][ T9104] fuse: Bad value for 'fd'
[  601.229451][ T9134] tipc: Cannot configure node identity twice
[  602.788257][ T9163] xt_CONNSECMARK: invalid mode: 0
[  603.589780][ T9171] tipc: Cannot configure node identity twice
[  604.550468][ T9191] fuse: Unknown parameter 'grou00000000000000000000'
[  605.047022][ T9197] xt_CONNSECMARK: invalid mode: 0
[  605.904979][ T9203] tipc: Cannot configure node identity twice
[  606.403154][ T9215] fuse: Unknown parameter 'grou00000000000000000000'
[  609.453198][ T9253] fuse: Unknown parameter 'grou00000000000000000000'
[  611.231628][ T9283] fuse: Unknown parameter 'group_i00000000000000000000'
[  612.664867][ T9310] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  614.768653][ T9349] fuse: Bad value for 'user_id'
[  615.079499][ T9357] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  617.797039][ T9414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  620.160448][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'.
[  620.291518][ T9465] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  621.368749][ T9493] fuse: Unknown parameter 'group_id00000000000000000000'
[  621.529028][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1074'.
[  622.017116][ T9512] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  623.220469][ T9532] fuse: Unknown parameter 'group_id00000000000000000000'
[  623.485353][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'.
[  623.858162][ T9539] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  623.867785][ T9539] fuse: Bad value for 'fd'
[  623.874605][ T9539] ptp ptp0: delete virtual clock ptp1
[  624.804239][ T9539] ptp ptp0: only physical clock in use now
[  624.810560][ T9542] failed to create ptp aux_worker -4
[  625.063163][ T9554] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  627.067410][ T9571] fuse: Unknown parameter 'group_id00000000000000000000'
[  627.410879][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'.
[  629.312556][ T9599] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  631.914637][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  631.922174][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  632.406187][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1106'.
[  634.468019][ T9644] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  635.442177][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1115'.
[  640.709158][ T9685] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  641.484080][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1124'.
[  656.145709][ T9790] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1148'.
[  669.361932][ T9929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  669.383980][ T9929] tipc: Resetting bearer <eth:syzkaller0>
[  669.465522][ T9928] tipc: Disabling bearer <eth:syzkaller0>
[  684.034258][T10023] syzkaller0: entered promiscuous mode
[  684.045655][T10023] syzkaller0: entered allmulticast mode
[  684.068755][T10023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  684.107385][T10023] tipc: Resetting bearer <eth:syzkaller0>
[  684.141824][T10022] tipc: Resetting bearer <eth:syzkaller0>
[  684.225403][T10022] tipc: Disabling bearer <eth:syzkaller0>
[  688.471096][T10062] syzkaller0: entered promiscuous mode
[  688.495805][T10062] syzkaller0: entered allmulticast mode
[  688.523459][T10062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  688.603534][T10062] tipc: Resetting bearer <eth:syzkaller0>
[  688.645983][T10060] tipc: Resetting bearer <eth:syzkaller0>
[  688.715283][T10060] tipc: Disabling bearer <eth:syzkaller0>
[  693.947573][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  693.954413][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  730.656370][ T5837] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  730.836624][ T5837] usb 7-1: Using ep0 maxpacket: 32
[  730.858349][ T5837] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  730.883035][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.919974][ T5837] usb 7-1: config 0 descriptor??
[  730.954693][ T5837] as10x_usb: device has been detected
[  730.990388][ T5837] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  731.092313][ T5837] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  731.255835][T10369] ------------[ cut here ]------------
[  731.261722][T10369] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  731.286140][T10369] WARNING: CPU: 0 PID: 10369 at kernel/locking/mutex.c:582 __mutex_lock+0xb48/0xc80
[  731.301804][T10369] Modules linked in:
[  731.305782][T10369] CPU: 0 PID: 10369 Comm: syz.6.1318 Not tainted syzkaller #0
[  731.313669][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  731.323854][T10369] RIP: 0010:__mutex_lock+0xb48/0xc80
[  731.329378][T10369] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d a1 63 f2 03 00 0f 85 d1 f5 ff ff 48 c7 c7 80 b7 ca 8a 48 c7 c6 20 b8 ca 8a e8 a8 4c b7 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48
[  731.349489][T10369] RSP: 0018:ffffc90005367ac0 EFLAGS: 00010246
[  731.355647][T10369] RAX: 18ba440a09983200 RBX: ffff88802e2aece0 RCX: 0000000000080000
[  731.363762][T10369] RDX: ffffc9000e929000 RSI: 00000000000090f4 RDI: 00000000000090f5
[  731.371902][T10369] RBP: ffffc90005367c20 R08: ffff8880b8f28c53 R09: 1ffff110171e518a
[  731.379988][T10369] R10: dffffc0000000000 R11: ffffed10171e518b R12: 1ffff92000a6cf68
[  731.389361][T10369] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  731.397584][T10369] FS:  00007fdae4ea56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  731.406624][T10369] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  731.413280][T10369] CR2: 000055c91c0e0d30 CR3: 0000000063ac2000 CR4: 00000000003506f0
[  731.421391][T10369] Call Trace:
[  731.424822][T10369]  <TASK>
[  731.427935][T10369]  ? __mutex_lock+0x30d/0xc80
[  731.432778][T10369]  ? as102_dvb_dmx_start_feed+0x70/0x280
[  731.438723][T10369]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  731.444428][T10369]  ? mutex_lock_nested+0x20/0x20
[  731.449494][T10369]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  731.455615][T10369]  ? dmx_ts_feed_start_filtering+0x52/0x220
[  731.461760][T10369]  ? mutex_unlock+0x10/0x10
[  731.466435][T10369]  ? mutex_lock_nested+0x20/0x20
[  731.471466][T10369]  ? _raw_spin_lock_irq+0xbb/0xf0
[  731.476760][T10369]  ? _raw_spin_unlock_irq+0x23/0x50
[  731.482064][T10369]  as102_dvb_dmx_start_feed+0x70/0x280
[  731.488725][T10369]  dmx_ts_feed_start_filtering+0x120/0x220
[  731.494738][T10369]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[  731.500797][T10369]  dvb_dmxdev_filter_start+0x422/0x10a0
[  731.506515][T10369]  dvb_demux_do_ioctl+0x482/0x530
[  731.511632][T10369]  dvb_usercopy+0x195/0x2b0
[  731.516221][T10369]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  731.521917][T10369]  ? dvb_generic_ioctl+0xb0/0xb0
[  731.526988][T10369]  ? dvb_demux_poll+0x210/0x210
[  731.531915][T10369]  dvb_demux_ioctl+0x29/0x30
[  731.536624][T10369]  __se_sys_ioctl+0xfd/0x170
[  731.541358][T10369]  do_syscall_64+0x55/0xb0
[  731.545907][T10369]  ? clear_bhb_loop+0x40/0x90
[  731.550830][T10369]  ? clear_bhb_loop+0x40/0x90
[  731.555583][T10369]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  731.561634][T10369] RIP: 0033:0x7fdae3f9e159
[  731.566142][T10369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  731.585889][T10369] RSP: 002b:00007fdae4ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  731.595611][T10369] RAX: ffffffffffffffda RBX: 00007fdae4225fa0 RCX: 00007fdae3f9e159
[  731.603881][T10369] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004
[  731.611979][T10369] RBP: 00007fdae403506b R08: 0000000000000000 R09: 0000000000000000
[  731.620060][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  731.628112][T10369] R13: 00007fdae4226038 R14: 00007fdae4225fa0 R15: 00007ffd75e448a8
[  731.636158][T10369]  </TASK>
[  731.639347][T10369] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  731.646691][T10369] CPU: 0 PID: 10369 Comm: syz.6.1318 Not tainted syzkaller #0
[  731.654208][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  731.664320][T10369] Call Trace:
[  731.667644][T10369]  <TASK>
[  731.670623][T10369]  dump_stack_lvl+0x18c/0x250
[  731.675388][T10369]  ? show_regs_print_info+0x20/0x20
[  731.680660][T10369]  ? load_image+0x420/0x420
[  731.685296][T10369]  panic+0x2ca/0x720
[  731.689256][T10369]  ? bpf_jit_dump+0xd0/0xd0
[  731.693830][T10369]  __warn+0x2e0/0x470
[  731.697883][T10369]  ? __mutex_lock+0xb48/0xc80
[  731.702626][T10369]  ? __mutex_lock+0xb48/0xc80
[  731.707388][T10369]  report_bug+0x2be/0x4f0
[  731.711908][T10369]  ? __mutex_lock+0xb48/0xc80
[  731.716648][T10369]  ? __mutex_lock+0xb48/0xc80
[  731.721397][T10369]  ? __mutex_lock+0xb4a/0xc80
[  731.726127][T10369]  handle_bug+0xcf/0x120
[  731.730414][T10369]  exc_invalid_op+0x1a/0x50
[  731.734959][T10369]  asm_exc_invalid_op+0x1a/0x20
[  731.739858][T10369] RIP: 0010:__mutex_lock+0xb48/0xc80
[  731.745186][T10369] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d a1 63 f2 03 00 0f 85 d1 f5 ff ff 48 c7 c7 80 b7 ca 8a 48 c7 c6 20 b8 ca 8a e8 a8 4c b7 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48
[  731.764835][T10369] RSP: 0018:ffffc90005367ac0 EFLAGS: 00010246
[  731.770937][T10369] RAX: 18ba440a09983200 RBX: ffff88802e2aece0 RCX: 0000000000080000
[  731.778947][T10369] RDX: ffffc9000e929000 RSI: 00000000000090f4 RDI: 00000000000090f5
[  731.786954][T10369] RBP: ffffc90005367c20 R08: ffff8880b8f28c53 R09: 1ffff110171e518a
[  731.794990][T10369] R10: dffffc0000000000 R11: ffffed10171e518b R12: 1ffff92000a6cf68
[  731.803008][T10369] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  731.811037][T10369]  ? __mutex_lock+0x30d/0xc80
[  731.815754][T10369]  ? as102_dvb_dmx_start_feed+0x70/0x280
[  731.821422][T10369]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  731.827093][T10369]  ? mutex_lock_nested+0x20/0x20
[  731.832071][T10369]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  731.838137][T10369]  ? dmx_ts_feed_start_filtering+0x52/0x220
[  731.844087][T10369]  ? mutex_unlock+0x10/0x10
[  731.848664][T10369]  ? mutex_lock_nested+0x20/0x20
[  731.853640][T10369]  ? _raw_spin_lock_irq+0xbb/0xf0
[  731.858705][T10369]  ? _raw_spin_unlock_irq+0x23/0x50
[  731.863946][T10369]  as102_dvb_dmx_start_feed+0x70/0x280
[  731.869452][T10369]  dmx_ts_feed_start_filtering+0x120/0x220
[  731.875302][T10369]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[  731.881239][T10369]  dvb_dmxdev_filter_start+0x422/0x10a0
[  731.886839][T10369]  dvb_demux_do_ioctl+0x482/0x530
[  731.891907][T10369]  dvb_usercopy+0x195/0x2b0
[  731.896473][T10369]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  731.902074][T10369]  ? dvb_generic_ioctl+0xb0/0xb0
[  731.907065][T10369]  ? dvb_demux_poll+0x210/0x210
[  731.911963][T10369]  dvb_demux_ioctl+0x29/0x30
[  731.916602][T10369]  __se_sys_ioctl+0xfd/0x170
[  731.921245][T10369]  do_syscall_64+0x55/0xb0
[  731.925713][T10369]  ? clear_bhb_loop+0x40/0x90
[  731.930430][T10369]  ? clear_bhb_loop+0x40/0x90
[  731.935159][T10369]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  731.941284][T10369] RIP: 0033:0x7fdae3f9e159
[  731.945769][T10369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  731.965412][T10369] RSP: 002b:00007fdae4ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  731.973862][T10369] RAX: ffffffffffffffda RBX: 00007fdae4225fa0 RCX: 00007fdae3f9e159
[  731.981893][T10369] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004
[  731.989897][T10369] RBP: 00007fdae403506b R08: 0000000000000000 R09: 0000000000000000
[  731.998001][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  732.006020][T10369] R13: 00007fdae4226038 R14: 00007fdae4225fa0 R15: 00007ffd75e448a8
[  732.014034][T10369]  </TASK>
[  732.017681][T10369] Kernel Offset: disabled
[  732.022031][T10369] Rebooting in 86400 seconds..