last executing test programs:

10m17.0982536s ago: executing program 4 (id=43):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
socket(0x2b, 0x80801, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@private=0xa010102, @multicast1, 0x1, "0cfe5c072286734c6d0f526aa475fad9b6127af92c23230a880c3a2d3c1e78b8", 0x3, 0x200, 0xff, 0x4}, 0x3c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4)
write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6)

10m14.65700194s ago: executing program 4 (id=49):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012cbd7008000000001400000008000300", @ANYRES32, @ANYBLOB="06003600feff0000050029000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x440)

10m13.479843865s ago: executing program 4 (id=52):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}}, 0x40040d4)
timer_create(0x7, 0x0, &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

10m11.664976499s ago: executing program 4 (id=60):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

10m10.61954696s ago: executing program 4 (id=64):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x6005}, @void, @eth={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x65, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "cba781986558a750"}}}}}, 0x2e)

10m9.887928872s ago: executing program 4 (id=67):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a060e04"], 0xd)

10m6.339760704s ago: executing program 32 (id=67):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a060e04"], 0xd)

7m11.884451414s ago: executing program 5 (id=599):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090)

7m10.919713348s ago: executing program 5 (id=603):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$IPVS_CMD_NEW_DEST(r0, 0x0, 0x4001)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd700000000000000000", @ANYRES32=r2, @ANYBLOB='\x00A\x00\x00\x00\x00\x00\x00', @ANYRES32=r4], 0x34}}, 0x4008000)

7m9.459881906s ago: executing program 5 (id=609):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, <r2=>r0, 0x1})
ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
ppoll(&(0x7f0000000140)=[{r2, 0x400}, {r2, 0x311}], 0x2, 0x0, 0x0, 0x0)

7m8.050338675s ago: executing program 5 (id=615):
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$packet(0x11, 0x3, 0x300)
read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_LSEEK(r1, &(0x7f0000002540)={0x18, 0xfffffffffffffff5, r2}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)

7m4.987356842s ago: executing program 0 (id=625):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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")
r0 = fanotify_init(0x8, 0x40000)
readv(r0, &(0x7f0000002940)=[{&(0x7f0000000300)=""/227, 0xe3}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
fanotify_mark(r0, 0x1, 0x8100011, r1, 0x0)
close_range(r0, r1, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

7m2.982518367s ago: executing program 0 (id=630):
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x18c, 0x0, 0x0, 0x0, 0x42}, 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

7m2.49001797s ago: executing program 5 (id=631):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xd4, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@init_itable}]}, 0xfc, 0x576, &(0x7f0000002180)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclih4WxiJiAA6jR4WbWffubK8+XpQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIP/AgAA//980y/d")
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'})

7m1.480691917s ago: executing program 0 (id=635):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000006c0)={[{@grpquota}, {@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000001200)="$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")
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r0, 0x6, 0x4)

7m1.105282656s ago: executing program 5 (id=637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blo'])
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0xbf1}], 0x1, 0x540f, 0x0, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x0, 0x1, 0x7}, 0x148}}, 0x18)

6m59.716758282s ago: executing program 0 (id=643):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x2090)

6m58.57049929s ago: executing program 0 (id=647):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xd4, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@init_itable}]}, 0xfc, 0x576, &(0x7f0000002180)="$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")
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'})

6m57.7929022s ago: executing program 1 (id=651):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r1, 0xee00, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de)

6m57.338295427s ago: executing program 1 (id=653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3200000000f8000000060a010400000000000000000100000008000b4000000000d0000480cc0001800a0001006d61746368000000bc0002800800024000000002a00003008549cda9799b74798c9d391c84f7"], 0x16c}}, 0x0)

6m57.158698254s ago: executing program 0 (id=654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894)

6m56.50848328s ago: executing program 1 (id=657):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x2090)

6m55.728697916s ago: executing program 1 (id=661):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r1, r1, 0xffffffffffffffff, r1, r1], 0x0, 0x10, 0x3}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xd0, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_LOSS={0x74}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x5}}]}}}]}, 0xd0}}, 0x4000010)

6m54.873395834s ago: executing program 1 (id=664):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xd4, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@init_itable}]}, 0xfc, 0x576, &(0x7f0000002180)="$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")
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'})

6m53.967548379s ago: executing program 1 (id=668):
socket$kcm(0x2, 0xa, 0x73)
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6m45.555872248s ago: executing program 33 (id=637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blo'])
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000001440)=[{&(0x7f0000000440)="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", 0xbf1}], 0x1, 0x540f, 0x0, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x0, 0x1, 0x7}, 0x148}}, 0x18)

6m41.473980263s ago: executing program 34 (id=654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894)

6m38.260233837s ago: executing program 35 (id=668):
socket$kcm(0x2, 0xa, 0x73)
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6m24.092867899s ago: executing program 3 (id=735):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04031220"], 0x7)

6m22.951094556s ago: executing program 3 (id=737):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

6m21.782814619s ago: executing program 3 (id=738):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

6m20.884441556s ago: executing program 3 (id=741):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000d00), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)

6m18.940078231s ago: executing program 3 (id=744):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = eventfd2(0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002200)=[&(0x7f0000000040)={0x40000000, 0x0, 0x30, 0x1, 0x4ddc, r0, 0x0, 0x0, 0x4, 0x0, 0x2, r0}])

6m17.895241743s ago: executing program 3 (id=745):
syz_clone(0x6314e100, 0x0, 0x0, 0x0, 0x0, 0x0)

6m2.202499008s ago: executing program 36 (id=745):
syz_clone(0x6314e100, 0x0, 0x0, 0x0, 0x0, 0x0)

2m45.812114707s ago: executing program 2 (id=1003):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0x2000, 0x7ff, r1, r2, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1)

2m40.244572923s ago: executing program 2 (id=1010):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

2m35.394941666s ago: executing program 2 (id=1013):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5b}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m31.599520489s ago: executing program 2 (id=1017):
socket(0xa, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x25, 0xc, @void}, 0x10)
sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8041)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

2m30.249763526s ago: executing program 6 (id=1019):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e26, 0x0, 0x2, 0x0, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000"], 0x104}}, 0x0)

2m26.735222786s ago: executing program 2 (id=1023):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)={0x174, 0x0, 0x403, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0xf}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x9d, 0xf, [@random={0x0, 0x97, "1d2fd1891aeed435dfd3ba842a9656a186d1085bc695a653f7624ce5a95c94e5cb7a29a530b1e3f133f6756ce1d446a7f57234a035d8b69b1fbb1c7da4474574c782b26546beea6253865125866f673592d06a662a91790de0f54e8861bf99525438b4ee7f58321ac219d010cc4fb8bdc659eab9f07b2750332fc47500c360ac073c9420ec22bac87678e02e51d8bd751353a213289e3f"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x65, 0x80, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x9, 0x40}}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x3, 0x0, {0x10000, 0x1da0, 0x0, 0x8}, 0x1, 0x6c2d, 0xb}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x6, 0x2e, "c658cc217a175b4ef1a5f56e4cafad101e1fd647e89fe584b22f6c1023091b10aab6dff8e5a73f522de8335c604a"}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x9, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1b, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x9}, 0x8a, 0xcf, @device_a, 0x8, 0x4, 0x23b4}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x8b, 0x9b17}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}]}], @NL80211_ATTR_HE_OBSS_PD={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x280c0}, 0x8800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m26.334667947s ago: executing program 6 (id=1024):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m23.235620321s ago: executing program 6 (id=1027):
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/161, 0xa1}, {0x0}], 0x2)

2m22.648649931s ago: executing program 2 (id=1028):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040044)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x800)
r4 = socket(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsopen(0x0, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000000c0)=""/25)

2m17.104381214s ago: executing program 6 (id=1032):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

2m14.58868636s ago: executing program 6 (id=1033):
socket(0xa, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x25, 0xc, @void}, 0x10)
sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8041)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

2m11.201209415s ago: executing program 6 (id=1037):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x62040200)
r1 = socket$netlink(0x10, 0x3, 0xc)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00')
writev(r3, &(0x7f0000000200)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
pselect6(0x40, &(0x7f0000000280)={0x7f, 0x9, 0x400, 0x2, 0x7ff, 0x9, 0xfaa4, 0x6}, &(0x7f00000002c0)={0x8, 0x5, 0x2000, 0x3, 0x7, 0x1, 0x6, 0x1000}, &(0x7f00000003c0)={0x7, 0x2, 0x3ff, 0x4, 0x9, 0xffffffff, 0x80000000, 0x7}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0x40fc]}, 0x8})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd0c, 0x25dfdbfd, {0x2, 0xf, 0x51, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}})

2m6.700438451s ago: executing program 37 (id=1028):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040044)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x800)
r4 = socket(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsopen(0x0, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000000c0)=""/25)

1m55.59277432s ago: executing program 38 (id=1037):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x62040200)
r1 = socket$netlink(0x10, 0x3, 0xc)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00')
writev(r3, &(0x7f0000000200)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
pselect6(0x40, &(0x7f0000000280)={0x7f, 0x9, 0x400, 0x2, 0x7ff, 0x9, 0xfaa4, 0x6}, &(0x7f00000002c0)={0x8, 0x5, 0x2000, 0x3, 0x7, 0x1, 0x6, 0x1000}, &(0x7f00000003c0)={0x7, 0x2, 0x3ff, 0x4, 0x9, 0xffffffff, 0x80000000, 0x7}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0x40fc]}, 0x8})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
syz_usb_connect(0x2, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd0c, 0x25dfdbfd, {0x2, 0xf, 0x51, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}})

17.635016909s ago: executing program 7 (id=1145):
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x513240, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x80000006)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r4 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x20000402, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000340), &(0x7f0000001140)=""/29}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x3e, 0x6, "06abf4e701c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x48068, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x3, 0x9fd, 0x84, 0x105}, 0x50)
read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8)
readv(r3, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
r9 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r9, 0xc0086442, &(0x7f0000000980))
sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d28f75d96a2566e506bce1e8", 0x14}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f6164000d000280050004400000005608000340000000b9080001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0)

13.29483668s ago: executing program 7 (id=1152):
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/161, 0xa1}, {0x0}], 0x2)

9.936389093s ago: executing program 8 (id=1157):
syz_usb_connect(0x0, 0x363, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x26, 0x4f, 0x39, 0x10, 0x19d2, 0x1277, 0xf369, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x351, 0x1, 0x8, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0xd5, 0x7, 0x8, 0xff, 0xff, 0xff, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xf1}, {0xd, 0x24, 0xf, 0x1, 0x101, 0xf927, 0xf04, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0xcf, 0xa, 0xc, 0x7, 0x0, 0x2}]}, @generic={0x9c, 0x9, "892c7dd9a38a8ff6573258445badfa761e102cc4b6af03b69af602d75aa913b1a10139fb2b68b7562198da318d8283cd5ceea7955d3b429e6e095573bb7b9da887d74b40c3c34bd7147ab326dd533f9dd98afa18152b1b869d8357c8b265247cdf5cb4c6a2078d31b8cd227424fec32c3b6266a0cfe4ea82c7740f88c1de08a7434eae54fb1e21a909a2622555c3c248db770d39b37b79876741"}], [{{0x9, 0x5, 0xd, 0xc, 0x400, 0x4, 0x80, 0xfc, [@generic={0x46, 0x6, "9c7a36881d1f0db48d517644457137e614e85d6f4d8d2c6a0f7d388ab23f4fb7c75f5352d96c1bf3ca70684426dc75d12e249662a84de2bcd45a53b522508bb14d281d2c"}, @generic={0x3a, 0x7, "3709cfc346ecb6924922e7a0867f3a3d2b18159696a29ffddd153c2aa5f3862897a0eb13e9bfd9b14f92787925186350e9f5f2f43f354b8b"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x7, 0x61, 0x9c}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x5}]}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0xa, 0xa9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x6}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0xd9, 0x9, 0x1b, [@generic={0xee, 0x0, "5485bb1b47557fa45738226203fac7d8fb7594497a985e59dac2991024045e4500d72d58ace081087f806287b398b312410a7727e60c865d3def8decf235994187b9356993d06bb82f7dd08a60980987949a1b85d3e28981f3154d6ccb302000fd64a314ad41c909b9e8726916e1a00186b22f6d8114fc63937ff6236ad46f14d3ff03c95716bd04f8237dacc6374e57010a1336cbf08800743518517e9476b92694c11aa6f23f9751d71cffaf8bdc1bc494a4f7ae7ae45cd3f829befaa9a66bae070283d6d61df9d3cbe8b7a1db4ede1ebdfcbef533b0b059a8a2245160011423183cba415e9cdaba0bd922"}, @generic={0x57, 0x2, "24513d21689b06734e9222817f81b9e30dd70be0f5f36b82addeb442ecf95991b36e043974779b0c54ba26d9dce7602164898264e8adfc8c82167dfb3f079d8195672605898550e95fcd216ebaad3c1a195d45167a"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xd, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x7f}]}}, {{0x9, 0x5, 0x1, 0xcba9d44f97f5ac6, 0x200, 0xb7, 0x6, 0x1a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x800}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x28, 0x8, [@generic={0x57, 0xa, "85a402c32f34d640e9482df3c739e880429f0d50d00d11d164f7a2b602376e3d2f3cd67ac0c2c3fc08c1d5549bbc8428e694fbd382eb10f5bcf3451ffda8b161e797284f94628c0eaad35a7edda6f61cd2b584ca9e"}]}}]}}]}}]}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

9.174916084s ago: executing program 7 (id=1159):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f00000000c0))

8.641830603s ago: executing program 9 (id=1160):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0)

8.075234768s ago: executing program 7 (id=1161):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80)
fsopen(&(0x7f0000000000)='smb3\x00', 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
close(0x3)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r4 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB="07cfc2e1c60de0"], 0x0)

7.503116854s ago: executing program 8 (id=1162):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x78, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2002, 0x1, {0x3}})
syz_clone(0x80040380, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="ec279dad239e8f5ae1984a36c7ca059590ccd40d50160daa9dbd0b130d14cb1cab4bd005565ae6a85894d347924650cc595d292e39558789a06ab23b73b1415b5ad79d5895")
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r3, 0x40304580, 0x0)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
r4 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x5b, 0x5, 0x7, 0x3, "9c2b45e4f5d79691f27b531f369941f2a0f2705a4bf9f627ddcd18809190aa8c"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
kexec_load(0x9, 0x1, &(0x7f0000001cc0)=[{0x0, 0x0, 0x9, 0x80000001}], 0x80000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc)
setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108)
syz_ublk_add_dev(r0, r1, r2, 0x0, 0x0, 0x0)

7.289449472s ago: executing program 9 (id=1163):
socket(0xa, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x25, 0xc, @void}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

6.053385044s ago: executing program 9 (id=1164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80084}, 0x340488c0)

5.668158672s ago: executing program 8 (id=1165):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4)
unshare(0x2c020400)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8)

4.523702763s ago: executing program 9 (id=1166):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a126efb44003e5cdee7b125dd55296a251fb2", 0x2e}], 0x1}, 0x40004)

4.458485737s ago: executing program 7 (id=1167):
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/161, 0xa1}, {0x0}], 0x2)

4.03684198s ago: executing program 8 (id=1168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.004269318s ago: executing program 9 (id=1169):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5c}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001780)="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", 0x35b}, {&(0x7f0000000d80)="e0e99ce86197666ec528ba68c0defd06062fba4b3c06992749fa10311cfb4326d701289490b6d9e2402cb2e38f51a4c9b11351c03d4764844edd60cce0c6b66ccdc22b44365e9091e2be3f62db0e06f5436130f3c5034bdb98af372086a09e6658eb634eb6cb7802d0f7a5083fae12b69f1a36a8a8a02f09fa7c27281f3e168b1c845d88b897576641d4f94cd0", 0x8d}, {&(0x7f0000000540)="16f0552ef6a84aebe40f9dcb437a8bc22f8c5fe9398b9f5d2b65218cf898f05e89ae02ab4f16de08671f04db60d8189bdefdc3189b8f1ecece7b1bc5d8fece2e7cc168fdffb56ac79f67a0da40e8a501fc0a8503", 0x54}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a80)="af4fcbc69fc8236193a5db61cdc0290ad092e969dff4bc0b0fa752cf3ed6e756c7f331f97aed1b89911d0cec759d81b076677b50f213e6a9196fcdcefd4c562141ef3cefe4b0f75f8586d98ff9f18edc0113a54b4d2983bd7ef97f6478d2dd4921d5438d9517c2452ae54dc4d3e07310769420b1565fab3f29d44d7a667689cbbd2a077c3a8eabd3d6d1fbaf5bb1c7d35ebf2c32f2cef0d0d63b45b8441da5d3754ceae1c80779ffae1f6085bdcd9f2554a00a86cd2d03ffba1fbdacd09527f06ab8fac7145c0f6d9cdf7a736ffd50f0a86cfdc1602a5cfdc5c551d286", 0xdd}], 0x1}}], 0x3, 0x24008844)
sendto$inet(r1, 0x0, 0x0, 0x32000800, 0x0, 0x0)

2.548897155s ago: executing program 8 (id=1170):
syz_usb_connect(0x0, 0x363, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x26, 0x4f, 0x39, 0x10, 0x19d2, 0x1277, 0xf369, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x351, 0x1, 0x8, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0xd5, 0x7, 0x8, 0xff, 0xff, 0xff, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xf1}, {0xd, 0x24, 0xf, 0x1, 0x101, 0xf927, 0xf04, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0xcf, 0xa, 0xc, 0x7, 0x0, 0x2}]}, @generic={0x9c, 0x9, "892c7dd9a38a8ff6573258445badfa761e102cc4b6af03b69af602d75aa913b1a10139fb2b68b7562198da318d8283cd5ceea7955d3b429e6e095573bb7b9da887d74b40c3c34bd7147ab326dd533f9dd98afa18152b1b869d8357c8b265247cdf5cb4c6a2078d31b8cd227424fec32c3b6266a0cfe4ea82c7740f88c1de08a7434eae54fb1e21a909a2622555c3c248db770d39b37b79876741"}], [{{0x9, 0x5, 0xd, 0xc, 0x400, 0x4, 0x80, 0xfc, [@generic={0x46, 0x6, "9c7a36881d1f0db48d517644457137e614e85d6f4d8d2c6a0f7d388ab23f4fb7c75f5352d96c1bf3ca70684426dc75d12e249662a84de2bcd45a53b522508bb14d281d2c"}, @generic={0x3a, 0x7, "3709cfc346ecb6924922e7a0867f3a3d2b18159696a29ffddd153c2aa5f3862897a0eb13e9bfd9b14f92787925186350e9f5f2f43f354b8b"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x7, 0x61, 0x9c}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x5}]}}, {{0x9, 0x5, 0x3, 0x2, 0x28, 0xa, 0xa9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x6}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0xd9, 0x9, 0x1b, [@generic={0xee, 0x0, "5485bb1b47557fa45738226203fac7d8fb7594497a985e59dac2991024045e4500d72d58ace081087f806287b398b312410a7727e60c865d3def8decf235994187b9356993d06bb82f7dd08a60980987949a1b85d3e28981f3154d6ccb302000fd64a314ad41c909b9e8726916e1a00186b22f6d8114fc63937ff6236ad46f14d3ff03c95716bd04f8237dacc6374e57010a1336cbf08800743518517e9476b92694c11aa6f23f9751d71cffaf8bdc1bc494a4f7ae7ae45cd3f829befaa9a66bae070283d6d61df9d3cbe8b7a1db4ede1ebdfcbef533b0b059a8a2245160011423183cba415e9cdaba0bd922"}, @generic={0x57, 0x2, "24513d21689b06734e9222817f81b9e30dd70be0f5f36b82addeb442ecf95991b36e043974779b0c54ba26d9dce7602164898264e8adfc8c82167dfb3f079d8195672605898550e95fcd216ebaad3c1a195d45167a"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xd, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x7f}]}}, {{0x9, 0x5, 0x1, 0xcba9d44f97f5ac6, 0x200, 0xb7, 0x6, 0x1a, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x800}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x9, 0x28, 0x8, [@generic={0x57, 0xa, "85a402c32f34d640e9482df3c739e880429f0d50d00d11d164f7a2b602376e3d2f3cd67ac0c2c3fc08c1d5549bbc8428e694fbd382eb10f5bcf3451ffda8b161e797284f94628c0eaad35a7edda6f61cd2b584ca9e"}]}}]}}]}}]}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.732966954s ago: executing program 9 (id=1171):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0)
socket(0xa, 0x1, 0x84)
socket(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket(0xa, 0x1, 0x84)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="060001"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

383.62508ms ago: executing program 7 (id=1172):
socket(0xa, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x25, 0xc, @void}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

0s ago: executing program 8 (id=1173):
io_submit(0x0, 0x0, &(0x7f0000000500))
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000100)=0x808c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000001000000080001002d00000008000300", @ANYBLOB="01"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x9, 0x0, 0x1, 0x3})
listen(r1, 0xfffffffc)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto(r8, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

adv0: Removing interface: batadv_slave_0
[  480.878478][ T7800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.917017][  T771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.991059][  T771] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.012246][ T7800] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  481.130637][  T771] veth1_macvtap: left promiscuous mode
[  481.168788][  T771] veth0_macvtap: left promiscuous mode
[  481.218547][  T771] veth1_vlan: left promiscuous mode
[  481.255840][  T771] veth0_vlan: left promiscuous mode
[  481.549297][ T5588] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.864077][ T5589] Bluetooth: hci6: command tx timeout
[  482.218495][ T7811] loop2: detected capacity change from 0 to 256
[  482.423966][ T5589] Bluetooth: hci4: command tx timeout
[  482.449465][ T7811] FAT-fs (loop2): Directory bread(block 64) failed
[  482.461706][ T7811] FAT-fs (loop2): Directory bread(block 65) failed
[  482.470989][ T7811] FAT-fs (loop2): Directory bread(block 66) failed
[  482.482569][ T7811] FAT-fs (loop2): Directory bread(block 67) failed
[  482.489619][ T7811] FAT-fs (loop2): Directory bread(block 68) failed
[  482.498393][ T7811] FAT-fs (loop2): Directory bread(block 69) failed
[  482.510163][ T7811] FAT-fs (loop2): Directory bread(block 70) failed
[  482.518663][ T7811] FAT-fs (loop2): Directory bread(block 71) failed
[  482.527399][ T7811] FAT-fs (loop2): Directory bread(block 72) failed
[  482.548785][ T7811] FAT-fs (loop2): Directory bread(block 73) failed
[  482.603434][ T7811] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  483.279166][ T7814] loop3: detected capacity change from 0 to 1024
[  483.318694][ T7814] EXT4-fs: Ignoring removed bh option
[  483.346039][  T771] team0 (unregistering): Port device team_slave_1 removed
[  483.398065][ T7814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.505011][  T771] team0 (unregistering): Port device team_slave_0 removed
[  483.741233][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.951199][ T5589] Bluetooth: hci6: command tx timeout
[  484.548796][ T5589] Bluetooth: hci3: unexpected event for opcode 0x2012
[  485.262701][ T7828] netlink: 'syz.2.728': attribute type 29 has an invalid length.
[  485.599086][ T7829] netlink: 'syz.2.728': attribute type 29 has an invalid length.
[  486.028784][ T5589] Bluetooth: hci6: command tx timeout
[  487.623428][ T7849] loop2: detected capacity change from 0 to 256
[  487.904481][ T7849] FAT-fs (loop2): Directory bread(block 64) failed
[  487.962406][ T7849] FAT-fs (loop2): Directory bread(block 65) failed
[  487.996779][ T7849] FAT-fs (loop2): Directory bread(block 66) failed
[  488.029335][ T7849] FAT-fs (loop2): Directory bread(block 67) failed
[  488.077433][ T7849] FAT-fs (loop2): Directory bread(block 68) failed
[  488.102348][ T7849] FAT-fs (loop2): Directory bread(block 69) failed
[  488.117874][ T7849] FAT-fs (loop2): Directory bread(block 70) failed
[  488.142270][ T7849] FAT-fs (loop2): Directory bread(block 71) failed
[  488.149446][ T7849] FAT-fs (loop2): Directory bread(block 72) failed
[  488.196040][ T7849] FAT-fs (loop2): Directory bread(block 73) failed
[  488.327172][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.328005][ T7849] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  488.359198][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.401716][ T7724] bridge_slave_0: entered allmulticast mode
[  488.459730][ T7724] bridge_slave_0: entered promiscuous mode
[  488.638055][  T771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.857269][ T7857] loop3: detected capacity change from 0 to 1024
[  488.888090][ T7857] EXT4-fs: Ignoring removed bh option
[  488.998550][ T7857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  489.076584][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.169460][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.218948][ T7724] bridge_slave_1: entered allmulticast mode
[  489.266551][ T7724] bridge_slave_1: entered promiscuous mode
[  489.477520][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.815809][  T771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.277727][ T5589] Bluetooth: hci1: unexpected event for opcode 0x2012
[  490.464906][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.491464][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.736'.
[  490.813951][  T771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.966640][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  491.152575][ T7872] netlink: 60 bytes leftover after parsing attributes in process `syz.2.736'.
[  491.351720][  T771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.456097][ T7877] netlink: 'syz.3.737': attribute type 29 has an invalid length.
[  491.495832][ T7878] netlink: 'syz.3.737': attribute type 29 has an invalid length.
[  491.646116][ T5231] 8021q: adding VLAN 0 to HW filter on device eth5
[  491.898357][ T7724] team0: Port device team_slave_0 added
[  492.314532][ T7724] team0: Port device team_slave_1 added
[  492.773755][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.804393][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.883920][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.198122][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.260434][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.384550][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.372824][  T771] bridge_slave_1: left allmulticast mode
[  494.397341][  T771] bridge_slave_1: left promiscuous mode
[  494.429432][  T771] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.508563][  T771] bridge_slave_0: left allmulticast mode
[  494.591917][  T771] bridge_slave_0: left promiscuous mode
[  494.614874][  T771] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.703866][  T771] bridge_slave_1: left allmulticast mode
[  494.712332][  T771] bridge_slave_1: left promiscuous mode
[  494.739156][  T771] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.809634][  T771] bridge_slave_0: left allmulticast mode
[  494.823202][  T771] bridge_slave_0: left promiscuous mode
[  494.838243][  T771] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.365449][  T771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  496.416975][  T771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  496.444747][  T771] bond0 (unregistering): Released all slaves
[  496.915402][  T771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  496.947960][  T771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  496.986052][  T771] bond0 (unregistering): Released all slaves
[  497.250305][ T7900] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  497.678509][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.713911][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.754869][ T7760] bridge_slave_0: entered allmulticast mode
[  497.799878][ T7760] bridge_slave_0: entered promiscuous mode
[  497.903274][ T7724] hsr_slave_0: entered promiscuous mode
[  497.937314][ T7724] hsr_slave_1: entered promiscuous mode
[  497.981531][ T7724] debugfs: 'hsr0' already exists in 'hsr'
[  497.993923][ T7724] Cannot create hsr debugfs directory
[  498.365967][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.388548][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.413917][ T7760] bridge_slave_1: entered allmulticast mode
[  498.444378][ T7760] bridge_slave_1: entered promiscuous mode
[  499.347487][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.820996][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.564668][ T7760] team0: Port device team_slave_0 added
[  502.076286][ T7760] team0: Port device team_slave_1 added
[  502.239626][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.276296][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.289173][ T7778] bridge_slave_0: entered allmulticast mode
[  502.309314][ T7778] bridge_slave_0: entered promiscuous mode
[  502.366339][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.374035][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.420748][ T7778] bridge_slave_1: entered allmulticast mode
[  502.466094][ T7778] bridge_slave_1: entered promiscuous mode
[  503.174640][  T771] hsr_slave_0: left promiscuous mode
[  503.219083][  T771] hsr_slave_1: left promiscuous mode
[  503.250191][  T771] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.279886][  T771] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.322979][  T771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.366599][  T771] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.506992][  T771] hsr_slave_0: left promiscuous mode
[  503.545839][  T771] hsr_slave_1: left promiscuous mode
[  503.597259][  T771] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.650120][  T771] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.698417][  T771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.742692][  T771] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.866250][  T771] veth1_macvtap: left promiscuous mode
[  503.904792][  T771] veth0_macvtap: left promiscuous mode
[  503.920884][  T771] veth1_vlan: left promiscuous mode
[  503.933380][  T771] veth0_vlan: left promiscuous mode
[  504.028576][  T771] veth1_macvtap: left promiscuous mode
[  504.037659][  T771] veth0_macvtap: left promiscuous mode
[  504.060446][  T771] veth1_vlan: left promiscuous mode
[  504.090270][  T771] veth0_vlan: left promiscuous mode
[  507.504461][  T771] team0 (unregistering): Port device team_slave_1 removed
[  507.610112][  T771] team0 (unregistering): Port device team_slave_0 removed
[  509.337535][  T771] team0 (unregistering): Port device team_slave_1 removed
[  509.414456][  T771] team0 (unregistering): Port device team_slave_0 removed
[  510.446814][ T7778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.526009][ T5231] 8021q: adding VLAN 0 to HW filter on device eth6
[  510.556396][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.563723][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.710377][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.766508][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.792028][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.869454][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.935034][ T7778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.488506][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  511.495413][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  511.715445][ T7778] team0: Port device team_slave_0 added
[  512.046278][ T7778] team0: Port device team_slave_1 added
[  512.271189][ T7760] hsr_slave_0: entered promiscuous mode
[  512.341681][ T7760] hsr_slave_1: entered promiscuous mode
[  512.941520][ T4875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  512.965304][ T4875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  512.979385][ T4875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  513.010431][ T4875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  513.039509][ T4875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  513.283028][ T7724] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  513.373306][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  513.445722][ T7778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.507725][ T7778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.626422][ T7778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.819517][ T7724] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  513.947859][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  513.987810][ T7778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.040390][ T7778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.155538][ T7778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.335432][ T7724] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  514.452087][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  514.492808][ T7724] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  514.568309][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  515.145387][ T4875] Bluetooth: hci0: command tx timeout
[  516.226579][ T7778] hsr_slave_0: entered promiscuous mode
[  516.274180][ T7778] hsr_slave_1: entered promiscuous mode
[  516.316329][ T7778] debugfs: 'hsr0' already exists in 'hsr'
[  516.328731][ T7778] Cannot create hsr debugfs directory
[  517.222425][ T4875] Bluetooth: hci0: command tx timeout
[  517.671241][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.078800][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.617698][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.131546][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.255107][ T7760] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  519.304460][ T4875] Bluetooth: hci0: command tx timeout
[  519.377325][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  519.618507][ T5231] 8021q: adding VLAN 0 to HW filter on device eth7
[  519.744067][ T7760] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  519.817790][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  519.846993][ T7760] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  519.905910][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  520.120591][ T7760] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  520.207144][ T7760] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  521.384042][ T4875] Bluetooth: hci0: command tx timeout
[  521.769816][ T7778] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  521.859503][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  521.891650][   T12] bridge_slave_1: left allmulticast mode
[  521.900115][   T12] bridge_slave_1: left promiscuous mode
[  521.919460][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.950726][   T12] bridge_slave_0: left allmulticast mode
[  521.961685][   T12] bridge_slave_0: left promiscuous mode
[  521.979392][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.594162][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.629954][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  522.655794][   T12] bond0 (unregistering): Released all slaves
[  522.824091][ T7778] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  522.856133][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  523.030537][ T7778] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  523.073829][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  523.087679][ T7778] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  523.121901][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  523.769143][   T12] hsr_slave_0: left promiscuous mode
[  523.782147][   T12] hsr_slave_1: left promiscuous mode
[  523.790560][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.806365][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.817520][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.829814][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.859722][   T12] veth1_macvtap: left promiscuous mode
[  523.871094][   T12] veth0_macvtap: left promiscuous mode
[  523.877732][   T12] veth1_vlan: left promiscuous mode
[  523.886676][   T12] veth0_vlan: left promiscuous mode
[  525.013965][   T12] team0 (unregistering): Port device team_slave_1 removed
[  525.044380][   T12] team0 (unregistering): Port device team_slave_0 removed
[  525.886543][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.791551][ T7724] 8021q: adding VLAN 0 to HW filter on device team0
[  526.977823][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.985504][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.090387][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.287296][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.295063][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.583154][ T7760] 8021q: adding VLAN 0 to HW filter on device team0
[  527.907935][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.922322][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.930450][ T7947] bridge_slave_0: entered allmulticast mode
[  527.949076][ T7947] bridge_slave_0: entered promiscuous mode
[  527.982344][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.993625][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.001435][ T7947] bridge_slave_1: entered allmulticast mode
[  528.036298][ T7947] bridge_slave_1: entered promiscuous mode
[  528.115401][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.123113][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.453990][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.461625][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.532910][ T7947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.565417][ T7947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  529.007374][ T7778] 8021q: adding VLAN 0 to HW filter on device bond0
[  529.080678][ T7947] team0: Port device team_slave_0 added
[  529.209711][ T7947] team0: Port device team_slave_1 added
[  529.921701][ T5231] 8021q: adding VLAN 0 to HW filter on device eth8
[  529.961484][ T7947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.007381][ T7947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.095393][ T7947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.115877][ T7947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.142020][ T7947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.212208][ T7947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.294266][ T7778] 8021q: adding VLAN 0 to HW filter on device team0
[  530.575238][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  530.592016][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  530.606756][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  530.621363][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  530.647596][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  530.823859][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.831495][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.128164][ T7947] hsr_slave_0: entered promiscuous mode
[  531.174479][ T7947] hsr_slave_1: entered promiscuous mode
[  531.200521][ T7947] debugfs: 'hsr0' already exists in 'hsr'
[  531.229030][ T7947] Cannot create hsr debugfs directory
[  531.268511][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.276208][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.745543][ T4875] Bluetooth: hci1: command tx timeout
[  534.393480][ T5589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  534.406052][ T5589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  534.424475][ T5589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  534.439611][ T5589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  534.452512][ T5589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  534.822473][ T5589] Bluetooth: hci1: command tx timeout
[  535.423470][ T7947] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  535.512751][ T7947] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  535.716404][ T7947] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  535.785581][ T7947] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  535.866833][ T7947] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  535.993504][ T7947] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  536.184824][ T7947] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  536.290724][ T7947] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  536.361963][ T5691] bridge_slave_1: left allmulticast mode
[  536.387460][ T5691] bridge_slave_1: left promiscuous mode
[  536.428104][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.504636][ T5589] Bluetooth: hci2: command tx timeout
[  536.535790][ T5691] bridge_slave_0: left allmulticast mode
[  536.596026][ T5691] bridge_slave_0: left promiscuous mode
[  536.628061][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.905763][ T5589] Bluetooth: hci1: command tx timeout
[  537.805864][ T4875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  537.817942][ T4875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  537.831254][ T4875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  537.868017][ T4875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  537.888408][ T4875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  537.911387][ T5691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.063672][ T5691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.114885][ T5691] bond0 (unregistering): Released all slaves
[  538.320675][ T5231] 8021q: adding VLAN 0 to HW filter on device eth9
[  538.502417][ T5691] hsr_slave_0: left promiscuous mode
[  538.556598][ T5691] hsr_slave_1: left promiscuous mode
[  538.585576][ T4875] Bluetooth: hci2: command tx timeout
[  538.593566][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.650990][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.986974][ T4875] Bluetooth: hci1: command tx timeout
[  539.488881][ T5691] team0 (unregistering): Port device team_slave_1 removed
[  539.551669][ T5691] team0 (unregistering): Port device team_slave_0 removed
[  540.025402][ T4875] Bluetooth: hci4: command tx timeout
[  540.665648][ T4875] Bluetooth: hci2: command tx timeout
[  542.112728][ T4875] Bluetooth: hci4: command tx timeout
[  542.746331][ T4875] Bluetooth: hci2: command tx timeout
[  543.105084][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.118279][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.131174][ T8002] bridge_slave_0: entered allmulticast mode
[  543.143879][ T8002] bridge_slave_0: entered promiscuous mode
[  543.277269][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.290320][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.310471][ T8002] bridge_slave_1: entered allmulticast mode
[  543.341280][ T8002] bridge_slave_1: entered promiscuous mode
[  543.821329][ T5231] 8021q: adding VLAN 0 to HW filter on device eth10
[  543.856594][ T8002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.985785][ T8002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.025233][ T7947] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.184419][ T4875] Bluetooth: hci4: command tx timeout
[  544.283317][ T8002] team0: Port device team_slave_0 added
[  544.370930][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.379266][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.387565][ T8028] bridge_slave_0: entered allmulticast mode
[  544.398619][ T8028] bridge_slave_0: entered promiscuous mode
[  544.434073][ T8002] team0: Port device team_slave_1 added
[  544.466834][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.486775][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.494821][ T8028] bridge_slave_1: entered allmulticast mode
[  544.509090][ T8028] bridge_slave_1: entered promiscuous mode
[  544.769623][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.817435][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.855327][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_0
[  544.863646][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  544.895012][ T8002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.106887][ T8002] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.114588][ T8002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.146595][ T8002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.230317][ T8028] team0: Port device team_slave_0 added
[  545.249046][ T8028] team0: Port device team_slave_1 added
[  545.413925][ T7947] 8021q: adding VLAN 0 to HW filter on device team0
[  545.771673][ T8002] hsr_slave_0: entered promiscuous mode
[  545.797042][ T8002] hsr_slave_1: entered promiscuous mode
[  545.829925][ T8002] debugfs: 'hsr0' already exists in 'hsr'
[  545.840254][ T8002] Cannot create hsr debugfs directory
[  545.883706][ T5691] bridge_slave_1: left allmulticast mode
[  545.890077][ T5691] bridge_slave_1: left promiscuous mode
[  545.901552][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.919394][ T5691] bridge_slave_0: left allmulticast mode
[  545.934248][ T5691] bridge_slave_0: left promiscuous mode
[  545.941316][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.979811][ T5691] bridge_slave_1: left allmulticast mode
[  545.989241][ T5691] bridge_slave_1: left promiscuous mode
[  545.999809][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.020862][ T5691] bridge_slave_0: left allmulticast mode
[  546.034784][ T5691] bridge_slave_0: left promiscuous mode
[  546.041471][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.272257][ T4875] Bluetooth: hci4: command tx timeout
[  546.812839][ T5691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  546.850111][ T5691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  546.871131][ T5691] bond0 (unregistering): Released all slaves
[  547.205938][ T5691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  547.241014][ T5691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.261109][ T5691] bond0 (unregistering): Released all slaves
[  547.281193][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  547.298412][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.344473][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  547.389149][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  547.397583][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.524295][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  547.639532][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.647024][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  547.736445][ T5231] 8021q: adding VLAN 0 to HW filter on device eth11
[  547.937533][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.954467][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.968777][ T8048] bridge_slave_0: entered allmulticast mode
[  547.984299][ T8048] bridge_slave_0: entered promiscuous mode
[  548.027593][ T5691] hsr_slave_0: left promiscuous mode
[  548.036494][ T5691] hsr_slave_1: left promiscuous mode
[  548.045150][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.057683][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.087506][ T5691] hsr_slave_0: left promiscuous mode
[  548.096620][ T5691] hsr_slave_1: left promiscuous mode
[  548.107973][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.117726][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.766461][ T5691] team0 (unregistering): Port device team_slave_1 removed
[  548.829583][ T5691] team0 (unregistering): Port device team_slave_0 removed
[  549.365674][ T5691] team0 (unregistering): Port device team_slave_1 removed
[  549.393742][ T5691] team0 (unregistering): Port device team_slave_0 removed
[  549.800361][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.808635][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.837990][ T8048] bridge_slave_1: entered allmulticast mode
[  549.849805][ T8048] bridge_slave_1: entered promiscuous mode
[  549.875446][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.883114][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  550.033058][ T8028] hsr_slave_0: entered promiscuous mode
[  550.043874][ T8028] hsr_slave_1: entered promiscuous mode
[  550.158813][ T8048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.295215][ T8048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.543769][ T8048] team0: Port device team_slave_0 added
[  550.679492][ T8048] team0: Port device team_slave_1 added
[  550.911318][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.919076][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.947482][ T8048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.974975][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.985482][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.018996][ T8048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.457302][ T8048] hsr_slave_0: entered promiscuous mode
[  551.467532][ T8048] hsr_slave_1: entered promiscuous mode
[  551.480714][ T8048] debugfs: 'hsr0' already exists in 'hsr'
[  551.490594][ T8048] Cannot create hsr debugfs directory
[  552.836064][ T8002] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  552.919312][ T8002] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  552.960305][ T8002] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  553.024209][ T8002] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  553.087706][ T8002] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  553.158057][ T8002] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  553.248960][ T8002] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  553.341436][ T8002] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  554.070634][ T8028] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  554.132823][ T8028] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  554.219008][ T8028] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  554.266437][ T8028] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  554.280937][ T8028] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  554.314834][ T8028] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  554.327595][ T8028] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  554.387870][ T8028] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  554.574454][ T7947] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.017514][ T8048] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  555.095261][ T8048] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  555.110166][ T8048] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  555.151673][ T8048] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  555.181047][ T8048] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  555.248359][ T8048] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  555.296138][ T8048] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  555.325237][ T8048] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  555.739299][ T5231] 8021q: adding VLAN 0 to HW filter on device eth12
[  556.147288][ T8002] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.574689][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.619996][ T8002] 8021q: adding VLAN 0 to HW filter on device team0
[  556.770305][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.778075][ T5695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.871943][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.879584][ T5695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.012105][ T8028] 8021q: adding VLAN 0 to HW filter on device team0
[  557.211963][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.219608][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.338687][ T7947] veth0_vlan: entered promiscuous mode
[  557.380959][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.388666][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.482288][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.700610][ T7947] veth1_vlan: entered promiscuous mode
[  557.867719][ T8048] 8021q: adding VLAN 0 to HW filter on device team0
[  558.178773][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.186484][ T5695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.359713][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.367450][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.920649][ T7947] veth0_macvtap: entered promiscuous mode
[  559.117710][ T7947] veth1_macvtap: entered promiscuous mode
[  559.511204][ T5231] 8021q: adding VLAN 0 to HW filter on device eth13
[  559.767332][ T7947] batman_adv: batadv0: Interface activated: batadv_slave_0
[  559.963543][ T7947] batman_adv: batadv0: Interface activated: batadv_slave_1
[  560.161072][ T5695] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.204406][   T34] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.258756][   T34] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.297033][   T34] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.331413][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.518079][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.261219][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  566.062302][ T5231] 8021q: adding VLAN 0 to HW filter on device eth14
[  566.711360][ T8002] veth0_vlan: entered promiscuous mode
[  566.864027][ T8028] veth0_vlan: entered promiscuous mode
[  566.988752][ T8002] veth1_vlan: entered promiscuous mode
[  567.248322][ T8028] veth1_vlan: entered promiscuous mode
[  567.641927][ T8048] veth0_vlan: entered promiscuous mode
[  567.932057][ T8048] veth1_vlan: entered promiscuous mode
[  567.987149][ T8002] veth0_macvtap: entered promiscuous mode
[  568.084324][  T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.113974][  T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.212788][ T8002] veth1_macvtap: entered promiscuous mode
[  568.380106][ T8028] veth0_macvtap: entered promiscuous mode
[  568.499207][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_0
[  568.535876][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.559016][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.614169][ T8028] veth1_macvtap: entered promiscuous mode
[  568.714270][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_1
[  568.950715][ T8048] veth0_macvtap: entered promiscuous mode
[  569.011418][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  569.027431][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  569.154533][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  569.202990][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  569.247015][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  569.315583][ T8048] veth1_macvtap: entered promiscuous mode
[  569.593664][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  569.885087][  T771] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  569.950140][  T771] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.048132][  T771] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.147537][ T8184] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.420728][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.670891][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.956485][ T8184] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.001486][ T8184] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.087702][ T8184] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.113148][ T8184] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.218376][ T5231] 8021q: adding VLAN 0 to HW filter on device eth15
[  572.924260][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  572.930965][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  576.775711][ T8341] loop2: detected capacity change from 0 to 512
[  576.859843][ T8341] EXT4-fs (loop2): Test dummy encryption mode enabled
[  576.917036][ T8341] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  576.965585][ T8341] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  576.976968][ T8341] EXT4-fs (loop2): orphan cleanup on readonly fs
[  577.093353][ T8341] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.769: corrupted xattr entries
[  577.216424][ T8341] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  577.219205][ T8341] EXT4-fs (loop2): 1 orphan inode deleted
[  577.232070][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  577.232179][    C1] EXT4-fs (loop2): initial error at time 1781307227: xattr_find_entry:337: inode 15
[  577.232367][    C1] EXT4-fs (loop2): last error at time 1781307227: xattr_find_entry:337: inode 15
[  577.403213][ T8341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  577.960995][ T5588] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.605567][ T5231] 8021q: adding VLAN 0 to HW filter on device eth16
[  580.511005][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.560713][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.969846][  T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.004132][  T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.434048][ T8386] netlink: 'syz.9.776': attribute type 10 has an invalid length.
[  581.499950][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.560946][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.630128][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.669499][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.207443][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.263968][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.822441][ T3275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.849215][ T3275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.255617][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.280314][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.456011][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.514662][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.157897][ T8402] loop2: detected capacity change from 0 to 512
[  584.265503][ T8402] EXT4-fs (loop2): Test dummy encryption mode enabled
[  584.310869][ T8402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  584.407831][ T8402] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  584.516015][ T8402] EXT4-fs (loop2): orphan cleanup on readonly fs
[  584.530181][ T8402] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.779: corrupted xattr entries
[  584.545444][ T8402] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  584.552155][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  584.568179][    C0] EXT4-fs (loop2): initial error at time 1781307234: xattr_find_entry:337: inode 15
[  584.578016][    C0] EXT4-fs (loop2): last error at time 1781307234: xattr_find_entry:337: inode 15
[  584.600438][ T8402] EXT4-fs (loop2): 1 orphan inode deleted
[  584.654670][ T8402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  585.260282][ T5588] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.381291][ T8410] netlink: 14 bytes leftover after parsing attributes in process `syz.6.781'.
[  585.737843][ T8416] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.708'.
[  587.906154][ T5231] 8021q: adding VLAN 0 to HW filter on device eth17
[  588.476001][ T8436] autofs: Unknown parameter 'fd0x0000000000000000'
[  588.833958][ T8443] loop2: detected capacity change from 0 to 512
[  588.933519][ T8443] EXT4-fs (loop2): Test dummy encryption mode enabled
[  588.998305][ T8443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  589.124485][ T8443] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  589.180076][ T8443] EXT4-fs (loop2): orphan cleanup on readonly fs
[  589.346367][ T8443] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.793: corrupted xattr entries
[  589.456780][ T8443] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  589.468724][ T8443] EXT4-fs (loop2): 1 orphan inode deleted
[  589.478387][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  589.478502][    C0] EXT4-fs (loop2): initial error at time 1781307239: xattr_find_entry:337: inode 15
[  589.478692][    C0] EXT4-fs (loop2): last error at time 1781307239: xattr_find_entry:337: inode 15
[  589.638202][ T8443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  590.446169][ T8455] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.796'.
[  590.478525][ T5588] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.950360][ T8487] loop2: detected capacity change from 0 to 512
[  594.027545][ T8487] EXT4-fs (loop2): Test dummy encryption mode enabled
[  594.105462][ T8487] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  594.227248][ T8487] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  594.253693][ T8487] EXT4-fs (loop2): orphan cleanup on readonly fs
[  594.404532][ T8487] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.808: corrupted xattr entries
[  594.441579][ T8487] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  594.451817][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  594.467865][    C0] EXT4-fs (loop2): initial error at time 1781307244: xattr_find_entry:337: inode 15
[  594.471347][ T8494] autofs: Bad value for 'fd'
[  594.477753][    C0] EXT4-fs (loop2): last error at time 1781307244: xattr_find_entry:337: inode 15
[  594.498688][ T8487] EXT4-fs (loop2): 1 orphan inode deleted
[  594.538849][ T8487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  594.606679][  T807] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  594.795965][  T807] usb 10-1: Using ep0 maxpacket: 16
[  594.886886][ T8494] loop6: detected capacity change from 0 to 1024
[  595.009808][ T8494] EXT4-fs: Ignoring removed bh option
[  595.182108][  T807] usb 10-1: unable to get BOS descriptor or descriptor too short
[  595.215343][  T807] usb 10-1: unable to read config index 0 descriptor/start: -71
[  595.236956][  T807] usb 10-1: can't read configurations, error -71
[  595.312299][ T8494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.516138][ T5588] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.164591][ T8002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.841184][ T8532] Set syz1 is full, maxelem 1029 reached
[  600.448317][ T8542] autofs: Unknown parameter '0x0000000000000000'
[  600.458886][ T8541] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  600.686589][ T8541] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  600.844261][ T8542] loop6: detected capacity change from 0 to 1024
[  600.922581][ T8542] EXT4-fs: Ignoring removed bh option
[  601.269410][ T8542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.524284][   T40] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  601.864874][   T40] usb 3-1: Using ep0 maxpacket: 16
[  602.001126][ T8002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.303412][   T40] usb 3-1: unable to get BOS descriptor or descriptor too short
[  602.375425][   T40] usb 3-1: unable to read config index 0 descriptor/start: -71
[  602.419797][   T40] usb 3-1: can't read configurations, error -71
[  606.136502][   T40] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  606.159493][ T8590] autofs: Unknown parameter '0x0000000000000000'
[  606.239057][ T5231] 8021q: adding VLAN 0 to HW filter on device eth18
[  606.375214][   T40] usb 10-1: config index 0 descriptor too short (expected 35577, got 27)
[  606.440072][   T40] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  606.506161][   T40] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  606.506651][ T8590] loop6: detected capacity change from 0 to 1024
[  606.595631][   T40] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92
[  606.684499][   T40] usb 10-1: config 1 has no interface number 0
[  606.727915][   T40] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  606.728392][ T8590] EXT4-fs: Ignoring removed bh option
[  606.833685][   T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.130051][ T8590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.215760][   T40] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found
[  607.305875][   T40] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values
[  607.411047][   T40] snd_usb_pod 10-1:1.1: invalid control EP
[  607.460297][   T40] snd_usb_pod 10-1:1.1: cannot start listening: -22
[  607.509142][   T40] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected
[  607.613931][   T40] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22
[  608.021684][ T8002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.583821][   T40] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  609.765349][   T40] usb 8-1: Using ep0 maxpacket: 16
[  610.115186][   T40] usb 8-1: unable to get BOS descriptor or descriptor too short
[  610.192464][   T40] usb 8-1: unable to read config index 0 descriptor/start: -71
[  610.229989][   T40] usb 8-1: can't read configurations, error -71
[  612.370064][    T9] usb 10-1: USB disconnect, device number 4
[  613.455532][ T8648] autofs: Unknown parameter '0x0000000000000000'
[  613.804095][ T8648] loop9: detected capacity change from 0 to 1024
[  613.907584][ T8648] EXT4-fs: Ignoring removed bh option
[  614.152595][ T8648] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.987540][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.095737][ T5231] 8021q: adding VLAN 0 to HW filter on device eth19
[  616.472937][   T40] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  616.696424][   T40] usb 8-1: Using ep0 maxpacket: 16
[  617.383717][   T40] usb 8-1: unable to get BOS descriptor or descriptor too short
[  617.455721][   T40] usb 8-1: unable to read config index 0 descriptor/start: -71
[  617.508106][   T40] usb 8-1: can't read configurations, error -71
[  618.699144][ T8681] Set syz1 is full, maxelem 1029 reached
[  620.320188][ T8693] autofs: Unknown parameter '0x0000000000000000'
[  620.569690][ T8687] Set syz1 is full, maxelem 1029 reached
[  620.589331][ T8693] loop6: detected capacity change from 0 to 1024
[  620.686240][ T8693] EXT4-fs: Ignoring removed bh option
[  620.859369][ T8693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  621.089192][ T8002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.545358][ T8707] netlink: 72 bytes leftover after parsing attributes in process `syz.9.871'.
[  624.812918][ T8156] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  624.994619][ T8156] usb 7-1: Using ep0 maxpacket: 16
[  625.331402][ T8156] usb 7-1: unable to get BOS descriptor or descriptor too short
[  625.420956][ T8156] usb 7-1: unable to read config index 0 descriptor/start: -71
[  625.467572][ T8156] usb 7-1: can't read configurations, error -71
[  625.797810][ T5231] 8021q: adding VLAN 0 to HW filter on device eth20
[  627.084805][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.881'.
[  627.882030][ T8742] Set syz1 is full, maxelem 1029 reached
[  628.159106][ T8746] autofs: Unknown parameter '0x0000000000000000'
[  628.770855][ T8746] loop7: detected capacity change from 0 to 1024
[  628.935288][ T8746] EXT4-fs: Ignoring removed bh option
[  629.407695][ T8746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  630.869974][ T8028] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.337530][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.9.890'.
[  631.462271][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.9.890'.
[  631.540018][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.9.890'.
[  633.505289][ T5674] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  633.733864][ T5674] usb 8-1: Using ep0 maxpacket: 16
[  634.359870][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  634.366960][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  634.389451][ T5674] usb 8-1: unable to get BOS descriptor or descriptor too short
[  634.409245][ T5674] usb 8-1: unable to read config index 0 descriptor/start: -71
[  634.462420][ T5674] usb 8-1: can't read configurations, error -71
[  636.423886][ T5589] Bluetooth: hci0: command 0x0406 tx timeout
[  636.564650][ T8799] autofs: Unknown parameter '0x0000000000000000'
[  636.915887][ T8799] loop9: detected capacity change from 0 to 1024
[  637.008142][ T8799] EXT4-fs: Ignoring removed bh option
[  637.147873][ T8799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.346768][ T8801] Set syz1 is full, maxelem 1029 reached
[  637.932689][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.329174][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.9.904'.
[  640.216263][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.905'.
[  640.397789][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.905'.
[  640.528362][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.905'.
[  642.962342][ T8847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  643.323365][ T8123] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  643.570630][ T8123] usb 8-1: Using ep0 maxpacket: 16
[  643.593571][ T5674] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  643.846805][ T5674] usb 7-1: Using ep0 maxpacket: 16
[  643.907844][ T5674] usb 7-1: config index 0 descriptor too short (expected 37359, got 202)
[  644.006058][ T5674] usb 7-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  644.100577][ T8123] usb 8-1: unable to get BOS descriptor or descriptor too short
[  644.105102][ T5674] usb 7-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  644.197514][ T8123] usb 8-1: unable to read config index 0 descriptor/start: -71
[  644.215287][ T5674] usb 7-1: config 33 has 1 interface, different from the descriptor's value: 95
[  644.222296][ T8123] usb 8-1: can't read configurations, error -71
[  644.346748][ T5674] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  644.409170][ T5674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.438705][ T5674] usb 7-1: Product: syz
[  644.499190][ T5674] usb 7-1: Manufacturer: syz
[  644.521168][ T5674] usb 7-1: SerialNumber: syz
[  644.740275][ T5674] usb 7-1: 0:2 : does not exist
[  645.090652][ T5674] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  645.184893][ T8858] autofs: Unknown parameter 'fd0x0000000000000000'
[  646.213878][ T5674] usb 7-1: USB disconnect, device number 4
[  646.443537][ T8858] loop2: detected capacity change from 0 to 1024
[  646.812195][ T8858] EXT4-fs: Ignoring removed bh option
[  647.310628][ T8858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  647.368861][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  647.544352][ T8877] Set syz1 is full, maxelem 1029 reached
[  647.688244][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.9.920'.
[  649.827421][ T5588] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.216156][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.8.922'.
[  651.591838][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.922'.
[  651.968186][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.922'.
[  653.042591][ T8125] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  653.303162][ T8125] usb 8-1: Using ep0 maxpacket: 16
[  654.167212][ T8125] usb 8-1: unable to get BOS descriptor or descriptor too short
[  654.267480][ T8125] usb 8-1: unable to read config index 0 descriptor/start: -71
[  654.360460][ T8125] usb 8-1: can't read configurations, error -71
[  654.940704][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.933'.
[  656.903802][ T8922] Bluetooth: hci1: command 0x0406 tx timeout
[  656.910574][ T8922] Bluetooth: hci2: command 0x0406 tx timeout
[  657.572951][ T8941] loop7: detected capacity change from 0 to 1024
[  657.742914][ T8941] EXT4-fs: Ignoring removed bh option
[  658.201375][ T8941] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  659.423340][ T8028] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.683997][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.941'.
[  659.856497][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.941'.
[  659.910449][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.941'.
[  661.893611][ T8122] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  662.024467][ T5589] Bluetooth: hci4: command 0x0406 tx timeout
[  662.162107][ T8122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.267424][ T8122] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  662.389932][ T8122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.543346][ T8122] usb 7-1: config 0 descriptor??
[  662.905253][ T8122] usbhid 7-1:0.0: can't add hid device: -71
[  662.961145][ T8122] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  663.120413][ T8122] usb 7-1: USB disconnect, device number 5
[  663.685195][ T8122] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  663.900242][ T8122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  663.972477][ T8529] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  664.000825][ T8122] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  664.078540][ T8122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.173664][ T8122] usb 7-1: config 0 descriptor??
[  664.262320][ T8529] usb 9-1: Using ep0 maxpacket: 16
[  665.236186][ T8122] aiptek 7-1:0.0: Aiptek using 400 ms programming speed
[  665.309381][ T8529] usb 9-1: unable to get BOS descriptor or descriptor too short
[  665.371612][ T8122] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input5
[  665.382479][ T8529] usb 9-1: unable to read config index 0 descriptor/start: -71
[  665.483489][ T8529] usb 9-1: can't read configurations, error -71
[  665.732548][ T8122] usb 7-1: USB disconnect, device number 6
[  665.732814][    C0] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  668.338977][ T9005] autofs: Unknown parameter 'fd0x0000000000000000'
[  668.731576][ T9005] loop6: detected capacity change from 0 to 1024
[  668.807018][ T9005] EXT4-fs: Ignoring removed bh option
[  669.000766][ T9005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  669.826144][ T8002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  670.954360][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.954'.
[  671.130771][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.8.954'.
[  671.343016][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.954'.
[  675.493075][ T8122] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  675.739264][ T8122] usb 7-1: Using ep0 maxpacket: 16
[  676.150482][ T8122] usb 7-1: unable to get BOS descriptor or descriptor too short
[  676.241028][ T8122] usb 7-1: unable to read config index 0 descriptor/start: -71
[  676.289168][ T8122] usb 7-1: can't read configurations, error -71
[  677.038892][ T8124] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  677.302065][ T8124] usb 10-1: Using ep0 maxpacket: 16
[  677.435433][ T8124] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  677.516561][ T8124] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  677.657614][ T8124] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.829165][ T8124] usb 10-1: config 0 descriptor??
[  678.731480][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.6.967'.
[  679.400505][ T9078] syzkaller0: entered promiscuous mode
[  679.636368][ T9078] syzkaller0: entered allmulticast mode
[  681.501571][ T9081] loop8: detected capacity change from 0 to 1024
[  681.883531][ T9081] EXT4-fs: Ignoring removed bh option
[  682.745189][ T9081] EXT4-fs: error -4 creating inode table initialization thread
[  682.870959][ T9081] EXT4-fs (loop8): mount failed
[  683.645248][ T8124] usbhid 10-1:0.0: can't add hid device: -32
[  683.699743][ T8124] usbhid 10-1:0.0: probe with driver usbhid failed with error -32
[  684.370770][ T8124] usb 10-1: USB disconnect, device number 5
[  686.254311][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.9.972'.
[  686.563064][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.9.972'.
[  686.662708][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.9.972'.
[  688.112774][ T8124] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  688.289655][ T4875] Bluetooth: hci2: unexpected event for opcode 0x0000
[  688.323907][ T8124] usb 7-1: Using ep0 maxpacket: 16
[  688.635712][ T8124] usb 7-1: unable to get BOS descriptor or descriptor too short
[  688.704846][ T8124] usb 7-1: unable to read config index 0 descriptor/start: -71
[  688.739732][ T8124] usb 7-1: can't read configurations, error -71
[  690.966606][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.979'.
[  692.343380][ T4875] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  692.352633][ T4875] Bluetooth: hci2: Injecting HCI hardware error event
[  692.360294][ T4875] Bluetooth: hci2: hardware error 0x00
[  694.502695][ T4875] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  694.897579][ T9157] loop9: detected capacity change from 0 to 1024
[  695.123922][ T9157] EXT4-fs: Ignoring removed bh option
[  695.821299][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  695.828228][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  695.838769][ T9157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  696.457627][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.988'.
[  696.707064][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.988'.
[  696.821019][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.988'.
[  697.340062][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  698.957298][ T4875] Bluetooth: hci3: unexpected event for opcode 0x0000
[  699.336098][ T8124] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  699.555932][ T8124] usb 7-1: Using ep0 maxpacket: 16
[  700.105152][ T8124] usb 7-1: unable to get BOS descriptor or descriptor too short
[  700.176166][ T8124] usb 7-1: unable to read config index 0 descriptor/start: -71
[  700.239911][ T8124] usb 7-1: can't read configurations, error -71
[  703.009946][ T4875] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  703.020660][ T4875] Bluetooth: hci3: Injecting HCI hardware error event
[  703.040423][ T4875] Bluetooth: hci3: hardware error 0x00
[  705.222765][ T4875] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  706.727926][ T9224] loop6: detected capacity change from 0 to 1024
[  706.848668][ T9224] EXT4-fs: Ignoring removed bh option
[  707.376344][ T9224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  708.930816][ T8002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.086172][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1001'.
[  711.293530][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1001'.
[  711.370631][ T9247] Set syz1 is full, maxelem 1029 reached
[  711.514059][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1001'.
[  714.385438][ T8124] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  714.655311][ T8124] usb 7-1: Using ep0 maxpacket: 16
[  715.119262][ T8124] usb 7-1: unable to get BOS descriptor or descriptor too short
[  715.154936][ T8124] usb 7-1: unable to read config index 0 descriptor/start: -71
[  715.261461][ T8124] usb 7-1: can't read configurations, error -71
[  719.700320][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1011'.
[  721.327728][ T9307] loop6: detected capacity change from 0 to 1024
[  721.510978][ T9307] EXT4-fs: Ignoring removed bh option
[  721.926938][ T9307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  723.544037][ T8002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  725.100694][ T9323] Set syz1 is full, maxelem 1029 reached
[  725.737593][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1019'.
[  725.903474][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1019'.
[  726.017421][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1019'.
[  730.068716][ T8125] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  730.316176][ T8125] usb 9-1: Using ep0 maxpacket: 16
[  730.896541][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1025'.
[  731.307423][ T8125] usb 9-1: unable to get BOS descriptor or descriptor too short
[  731.355455][ T8125] usb 9-1: unable to read config index 0 descriptor/start: -71
[  731.421048][ T8125] usb 9-1: can't read configurations, error -71
[  732.052269][ T8156] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  732.157518][ T9359] geneve2: entered promiscuous mode
[  732.163115][ T9359] geneve2: entered allmulticast mode
[  732.293438][ T8156] usb 7-1: Using ep0 maxpacket: 8
[  732.361994][ T8156] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  732.410634][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  732.512321][ T8156] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  732.594261][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  732.671055][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  732.774637][ T8156] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  732.816021][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  732.908834][ T8156] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  732.990587][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  733.099121][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  733.167308][ T8156] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  733.218874][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  733.302512][ T8156] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  733.390506][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  733.474945][ T8156] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  733.634798][ T8156] usb 7-1: string descriptor 0 read error: -22
[  733.711990][ T8156] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  733.791089][ T8156] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.914953][ T9375] Device name cannot be null; rc = [-22]
[  734.078418][ T8156] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  734.721424][ T8125] usb 7-1: USB disconnect, device number 15
[  737.115088][ T9386] loop8: detected capacity change from 0 to 1024
[  737.569964][ T9386] EXT4-fs: Ignoring removed bh option
[  738.128182][ T9386] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  740.600614][ T8048] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.626489][ T9405] Set syz1 is full, maxelem 1029 reached
[  741.230063][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1034'.
[  741.411560][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1034'.
[  741.611115][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1034'.
[  744.867375][ T9431] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1036'.
[  745.303616][ T8125] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  745.360975][    C0] raw-gadget.0 gadget.6: ignoring, device is not running
[  745.526640][ T8125] usb 7-1: device descriptor read/64, error -32
[  745.845389][ T8125] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  746.117351][ T8125] usb 7-1: config 0 has no interfaces?
[  746.185291][ T8125] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  746.220322][ T8125] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  746.281063][ T8125] usb 7-1: Manufacturer: syz
[  746.375496][ T8125] usb 7-1: config 0 descriptor??
[  747.802221][  T807] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  748.016136][  T807] usb 9-1: Using ep0 maxpacket: 16
[  748.161822][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  748.625262][  T807] usb 9-1: unable to get BOS descriptor or descriptor too short
[  748.690759][  T807] usb 9-1: unable to read config index 0 descriptor/start: -71
[  748.786542][  T807] usb 9-1: can't read configurations, error -71
[  749.695030][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  749.716038][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  749.731628][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  749.770168][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  749.801257][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  751.002339][  T807] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  751.313493][  T807] usb 10-1: Using ep0 maxpacket: 8
[  751.944886][ T5589] Bluetooth: hci5: command tx timeout
[  754.035163][ T5589] Bluetooth: hci5: command tx timeout
[  754.357075][ T9464] netlink: 'syz.8.1043': attribute type 4 has an invalid length.
[  756.090353][  T807] usb 10-1: unable to get BOS descriptor or descriptor too short
[  756.108341][ T5589] Bluetooth: hci5: command tx timeout
[  756.212615][  T807] usb 10-1: unable to read config index 0 descriptor/start: -71
[  756.302044][  T807] usb 10-1: can't read configurations, error -71
[  757.265421][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  757.272406][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  758.196395][ T5589] Bluetooth: hci5: command tx timeout
[  758.416694][  T807] usb 7-1: USB disconnect, device number 17
[  760.289560][ T9489] loop9: detected capacity change from 0 to 1024
[  760.515919][ T9489] EXT4-fs: Ignoring removed bh option
[  761.309829][ T4875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  761.320313][ T4875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  761.324898][ T9489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.330041][ T4875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  761.374135][ T4875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  761.424831][ T4875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  763.550429][ T4875] Bluetooth: hci6: command tx timeout
[  763.799841][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1048'.
[  764.063583][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1048'.
[  764.130087][ T7947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  764.218424][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1048'.
[  765.644606][ T4875] Bluetooth: hci6: command tx timeout
[  767.702312][ T4875] Bluetooth: hci6: command tx timeout
[  769.062825][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.109268][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.158232][ T9451] bridge_slave_0: entered allmulticast mode
[  769.257799][ T9451] bridge_slave_0: entered promiscuous mode
[  769.545903][ T8121] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  769.701251][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state
[  769.753157][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.785911][ T4875] Bluetooth: hci6: command tx timeout
[  769.788281][ T8121] usb 9-1: Using ep0 maxpacket: 16
[  769.829166][ T9451] bridge_slave_1: entered allmulticast mode
[  770.006231][ T9451] bridge_slave_1: entered promiscuous mode
[  771.441994][ T8121] usb 9-1: unable to get BOS descriptor or descriptor too short
[  771.505585][ T8121] usb 9-1: unable to read config index 0 descriptor/start: -71
[  771.579596][ T8121] usb 9-1: can't read configurations, error -71
[  771.823196][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  772.239742][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  773.280758][ T9451] team0: Port device team_slave_0 added
[  773.427750][ T9451] team0: Port device team_slave_1 added
[  773.772452][  T807] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  774.415015][  T807] usb 10-1: Using ep0 maxpacket: 8
[  775.071799][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  775.248678][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0
[  775.312853][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  775.420053][ T9557] kernel profiling enabled (shift: 63)
[  775.538958][ T9557] profiling shift: 63 too large
[  775.641145][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  776.126129][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1
[  776.207676][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  776.353408][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  776.695489][  T807] usb 10-1: unable to get BOS descriptor or descriptor too short
[  776.766057][  T807] usb 10-1: unable to read config index 0 descriptor/start: -71
[  776.825999][  T807] usb 10-1: can't read configurations, error -71
[  778.042949][ T9451] hsr_slave_0: entered promiscuous mode
[  778.143790][ T9451] hsr_slave_1: entered promiscuous mode
[  778.183848][ T9451] debugfs: 'hsr0' already exists in 'hsr'
[  778.250286][ T9451] Cannot create hsr debugfs directory
[  778.524674][  T807] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  778.783492][  T807] usb 8-1: Using ep0 maxpacket: 8
[  778.887482][  T807] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  778.959763][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  779.051581][  T807] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  779.154976][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  779.269370][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  779.369117][  T807] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  779.389562][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  779.463277][  T807] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  779.573565][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  779.662164][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  779.847638][  T807] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  779.878831][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  779.961251][  T807] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  780.053494][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  780.152438][  T807] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  780.259553][ T9575] Set syz1 is full, maxelem 1029 reached
[  780.428774][  T807] usb 8-1: string descriptor 0 read error: -22
[  780.464740][  T807] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  780.509166][  T807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.816168][  T807] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  782.372731][  T807] usb 8-1: USB disconnect, device number 12
[  783.676020][ T9588] netlink: 'syz.8.1061': attribute type 1 has an invalid length.
[  784.263377][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1061'.
[  785.076741][ T9588] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  785.383017][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.527688][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.611305][ T9495] bridge_slave_0: entered allmulticast mode
[  785.698357][ T9495] bridge_slave_0: entered promiscuous mode
[  786.910586][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.961483][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.015947][ T9495] bridge_slave_1: entered allmulticast mode
[  787.055454][ T9495] bridge_slave_1: entered promiscuous mode
[  788.352800][ T8125] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  788.491510][ T9082] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  788.653247][ T8125] usb 10-1: Using ep0 maxpacket: 16
[  789.173770][ T9495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  789.306536][ T9495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  789.359183][ T8125] usb 10-1: unable to get BOS descriptor or descriptor too short
[  789.394587][ T8125] usb 10-1: unable to read config index 0 descriptor/start: -71
[  789.437594][ T8125] usb 10-1: can't read configurations, error -71
[  789.853891][ T9082] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.535122][ T9082] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.722927][ T9495] team0: Port device team_slave_0 added
[  790.967020][ T9495] team0: Port device team_slave_1 added
[  791.341593][ T9082] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.830080][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  791.837477][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.008302][ T9495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  792.285659][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  792.304967][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  792.482116][ T9495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  792.498957][ T9451] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  792.699235][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  793.016553][ T9451] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  793.196313][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  793.276434][ T9451] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  793.476703][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  793.528157][ T9451] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  793.774691][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  794.994439][ T9495] hsr_slave_0: entered promiscuous mode
[  795.116830][ T9495] hsr_slave_1: entered promiscuous mode
[  795.171576][ T9495] debugfs: 'hsr0' already exists in 'hsr'
[  795.220091][ T9495] Cannot create hsr debugfs directory
[  796.021021][ T9082] bridge_slave_1: left allmulticast mode
[  796.027888][ T9082] bridge_slave_1: left promiscuous mode
[  796.053144][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.164754][ T9082] bridge_slave_0: left allmulticast mode
[  796.184626][ T9082] bridge_slave_0: left promiscuous mode
[  796.229728][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.835283][ T8125] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  798.066889][ T8125] usb 10-1: Using ep0 maxpacket: 16
[  798.248419][ T8125] usb 10-1: config index 0 descriptor too short (expected 37359, got 202)
[  798.308444][ T8125] usb 10-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  798.371775][ T8125] usb 10-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  798.441018][ T8125] usb 10-1: config 33 has 1 interface, different from the descriptor's value: 95
[  798.447853][ T9082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  798.586337][ T8125] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  798.631008][ T9082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  798.634998][ T8125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.724220][ T8125] usb 10-1: Product: syz
[  798.753513][ T8125] usb 10-1: Manufacturer: syz
[  798.760093][ T9082] bond0 (unregistering): Released all slaves
[  798.805146][ T8125] usb 10-1: SerialNumber: syz
[  799.157357][ T8125] usb 10-1: 0:2 : does not exist
[  799.687685][ T8125] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[  800.596892][ T8121] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  800.767801][ T8125] usb 10-1: USB disconnect, device number 12
[  800.843746][ T8121] usb 9-1: Using ep0 maxpacket: 16
[  800.972001][ T8121] usb 9-1: config index 0 descriptor too short (expected 37359, got 202)
[  801.020271][ T8121] usb 9-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  801.087063][ T8121] usb 9-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  801.194291][ T8121] usb 9-1: config 33 has 1 interface, different from the descriptor's value: 95
[  801.335392][ T8121] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  801.353783][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  801.404121][ T8121] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.454608][ T8121] usb 9-1: Product: syz
[  801.481108][ T8121] usb 9-1: Manufacturer: syz
[  801.516014][ T8121] usb 9-1: SerialNumber: syz
[  801.716156][ T8121] usb 9-1: 0:2 : does not exist
[  802.637274][ T9082] hsr_slave_0: left promiscuous mode
[  802.713826][ T9082] hsr_slave_1: left promiscuous mode
[  802.754267][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  802.773072][ T8125] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  802.827805][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  802.916732][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  803.003746][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  803.117347][ T8125] usb 8-1: Using ep0 maxpacket: 16
[  803.251988][ T9082] veth1_macvtap: left promiscuous mode
[  803.287130][ T9082] veth0_macvtap: left promiscuous mode
[  803.330649][ T9082] veth1_vlan: left promiscuous mode
[  803.370581][ T9082] veth0_vlan: left promiscuous mode
[  803.733162][ T8121] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  805.045082][ T9679] netlink: 'syz.9.1078': attribute type 4 has an invalid length.
[  805.079491][ T9678] Set syz1 is full, maxelem 1029 reached
[  805.202855][ T8121] usb 9-1: USB disconnect, device number 10
[  805.880425][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  808.130106][ T9082] team0 (unregistering): Port device team_slave_1 removed
[  808.187989][ T8125] usb 8-1: unable to get BOS descriptor or descriptor too short
[  808.273627][ T8125] usb 8-1: unable to read config index 0 descriptor/start: -32
[  808.281477][ T8125] usb 8-1: chopping to 0 config(s)
[  808.339986][ T8125] usb 8-1: can't read configurations, error -32
[  808.437372][ T9082] team0 (unregistering): Port device team_slave_0 removed
[  808.551242][ T8125] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  808.770731][ T8125] usb 8-1: device descriptor read/64, error -32
[  808.901304][ T9691] Set syz1 is full, maxelem 1029 reached
[  808.949639][ T8125] usb usb8-port1: attempt power cycle
[  809.392493][ T8125] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  809.457681][ T8125] usb 8-1: device descriptor read/8, error -32
[  809.803791][ T8125] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  809.893906][ T8125] usb 8-1: device descriptor read/8, error -32
[  810.046411][ T8125] usb usb8-port1: unable to enumerate USB device
[  810.745217][ T8125] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  810.975721][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  811.001145][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  811.013231][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  811.041175][ T8125] usb 9-1: config 0 has an invalid interface number: 133 but max is 0
[  811.063235][ T8125] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  811.080655][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  811.097963][ T8125] usb 9-1: config 0 has no interface number 0
[  811.105715][ T8125] usb 9-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  811.121857][ T8125] usb 9-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  811.133365][ T8125] usb 9-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  811.151465][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  811.235942][ T8125] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  811.245448][ T8125] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.260292][ T8125] usb 9-1: Product: syz
[  811.272697][ T8125] usb 9-1: Manufacturer: syz
[  811.277525][ T8125] usb 9-1: SerialNumber: syz
[  811.339805][ T8125] usb 9-1: config 0 descriptor??
[  811.387290][ T9699] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  812.272646][ T8125] usb 9-1: probing VID:PID(0424:012C)   
[  812.369946][ T8125] usb 9-1: vub300 testing BULK OUT EndPoint(0) 0B
[  812.499430][ T8125] usb 9-1: vub300 testing BULK OUT EndPoint(1) 0F
[  812.530455][ T8125] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs
[  812.627830][ T8125] vub300 9-1:0.133: probe with driver vub300 failed with error -22
[  812.730559][ T8125] usb 9-1: USB disconnect, device number 11
[  813.078758][ T9082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.223125][ T5589] Bluetooth: hci1: command tx timeout
[  813.906234][ T9082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.382343][ T9082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  814.964014][ T9082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.147562][ T5679] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  815.312839][ T5589] Bluetooth: hci1: command tx timeout
[  815.472498][ T5679] usb 10-1: Using ep0 maxpacket: 16
[  815.706361][ T5679] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  815.747898][ T5679] usb 10-1: config 0 has no interface number 0
[  815.935355][ T5679] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  816.018464][ T5679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.093426][ T5679] usb 10-1: Product: syz
[  816.137796][ T5679] usb 10-1: Manufacturer: syz
[  816.208847][ T5679] usb 10-1: SerialNumber: syz
[  816.299436][ T5679] usb 10-1: config 0 descriptor??
[  816.341551][ T9495] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  816.526238][ T5679] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  816.637952][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  816.955160][ T9495] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  817.048604][ T5679] gspca_spca1528: reg_w err -110
[  817.114698][ T5679] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110
[  817.222889][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  817.334894][ T9495] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  817.395570][ T5589] Bluetooth: hci1: command tx timeout
[  817.561248][ T8125] usb 10-1: USB disconnect, device number 13
[  817.646373][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  817.707856][ T9495] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  817.753038][    T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  817.888089][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  818.012580][    T9] usb 9-1: Using ep0 maxpacket: 16
[  818.087232][    T9] usb 9-1: config index 0 descriptor too short (expected 37359, got 202)
[  818.166750][    T9] usb 9-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  818.216907][    T9] usb 9-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  818.313970][    T9] usb 9-1: config 33 has 1 interface, different from the descriptor's value: 95
[  818.357589][ T9082] bridge_slave_1: left allmulticast mode
[  818.371107][ T9082] bridge_slave_1: left promiscuous mode
[  818.477745][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.492685][    T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  818.528770][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.577429][    T9] usb 9-1: Product: syz
[  818.596753][    T9] usb 9-1: Manufacturer: syz
[  818.639597][    T9] usb 9-1: SerialNumber: syz
[  818.679612][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  818.702962][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  818.711785][ T9082] bridge_slave_0: left allmulticast mode
[  818.756480][ T9082] bridge_slave_0: left promiscuous mode
[  818.776635][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.835016][    T9] usb 9-1: 0:2 : does not exist
[  819.462358][ T5589] Bluetooth: hci1: command tx timeout
[  820.837556][    T9] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  821.638338][ T4875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  821.656129][ T4875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  821.667869][ T4875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  821.693016][ T4875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  821.733072][ T4875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  822.068991][    T9] usb 9-1: USB disconnect, device number 12
[  822.102438][ T9082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  822.258191][ T9082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  822.461507][ T9082] bond0 (unregistering): Released all slaves
[  822.583162][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  823.874402][ T4875] Bluetooth: hci3: command tx timeout
[  825.009139][ T9082] hsr_slave_0: left promiscuous mode
[  825.116331][ T9082] hsr_slave_1: left promiscuous mode
[  825.179509][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  825.252468][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  825.381213][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  825.445435][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  825.637770][ T9082] veth1_macvtap: left promiscuous mode
[  825.659677][ T9082] veth0_macvtap: left promiscuous mode
[  825.682966][ T9082] veth1_vlan: left promiscuous mode
[  825.718454][ T9082] veth0_vlan: left promiscuous mode
[  825.943219][ T4875] Bluetooth: hci3: command tx timeout
[  828.022537][ T4875] Bluetooth: hci3: command tx timeout
[  828.919728][ T9082] team0 (unregistering): Port device team_slave_1 removed
[  829.067854][ T9082] team0 (unregistering): Port device team_slave_0 removed
[  829.612018][ T8125] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  829.825170][ T8125] usb 8-1: Using ep0 maxpacket: 16
[  829.886041][ T8125] usb 8-1: config index 0 descriptor too short (expected 37359, got 202)
[  829.930545][ T8125] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  829.965528][ T8125] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  830.013849][ T8125] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95
[  830.102931][ T4875] Bluetooth: hci3: command tx timeout
[  830.140212][ T8125] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  830.211880][ T8125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.266764][ T8125] usb 8-1: Product: syz
[  830.301387][ T8125] usb 8-1: Manufacturer: syz
[  830.331489][ T8125] usb 8-1: SerialNumber: syz
[  830.510675][ T8125] usb 8-1: 0:2 : does not exist
[  830.766656][ T8125] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  831.811088][ T8125] usb 8-1: USB disconnect, device number 17
[  832.195466][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  833.283522][ T8125] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  833.513971][ T8125] usb 10-1: Using ep0 maxpacket: 8
[  833.559539][ T8125] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  833.596948][ T8125] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  833.657459][ T8125] usb 10-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  833.726223][ T8125] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  833.752009][ T8125] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  833.809907][ T8125] usb 10-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  833.882511][ T8125] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[  833.925522][ T8125] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  834.004488][ T8125] usb 10-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  834.176200][ T8125] usb 10-1: string descriptor 0 read error: -22
[  834.216542][ T8125] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  834.269710][ T8125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.445016][ T8125] adutux 10-1:168.0: interrupt endpoints not found
[  834.597635][   T29] audit: type=1326 audit(1781307484.450:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  834.747300][   T29] audit: type=1326 audit(1781307484.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  834.861479][ T5679] usb 10-1: USB disconnect, device number 14
[  834.922762][   T29] audit: type=1326 audit(1781307484.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf703f01c code=0x7ffc0000
[  835.057215][   T29] audit: type=1326 audit(1781307484.500:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  835.237874][   T29] audit: type=1326 audit(1781307484.500:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  835.346464][   T29] audit: type=1326 audit(1781307484.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf703f01c code=0x7ffc0000
[  835.373487][   T29] audit: type=1326 audit(1781307484.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  835.400479][   T29] audit: type=1326 audit(1781307484.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  835.463415][   T29] audit: type=1326 audit(1781307484.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703f01c code=0x7ffc0000
[  835.570136][   T29] audit: type=1326 audit(1781307484.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.8.1104" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  836.615679][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.650785][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state
[  836.694400][ T9700] bridge_slave_0: entered allmulticast mode
[  836.735158][ T9700] bridge_slave_0: entered promiscuous mode
[  837.146393][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.192288][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state
[  837.238671][ T9700] bridge_slave_1: entered allmulticast mode
[  837.287430][ T9700] bridge_slave_1: entered promiscuous mode
[  838.348736][ T9700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  838.463899][ T9700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  839.242939][ T8125] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  839.384343][ T9700] team0: Port device team_slave_0 added
[  839.462586][ T8125] usb 10-1: Using ep0 maxpacket: 16
[  839.542635][ T8125] usb 10-1: config index 0 descriptor too short (expected 37359, got 202)
[  839.585002][ T8125] usb 10-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  839.616063][ T8125] usb 10-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  839.685980][ T8125] usb 10-1: config 33 has 1 interface, different from the descriptor's value: 95
[  839.700540][ T9700] team0: Port device team_slave_1 added
[  839.744119][ T8125] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  839.773160][ T8125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.808352][ T8125] usb 10-1: Product: syz
[  839.820043][ T8125] usb 10-1: Manufacturer: syz
[  839.854929][ T8125] usb 10-1: SerialNumber: syz
[  840.044657][ T8125] usb 10-1: 0:2 : does not exist
[  840.202824][ T8125] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[  840.480180][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_0
[  840.559698][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  840.657231][ T9700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  840.770882][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_1
[  840.811584][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  840.903455][ T5679] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  840.934170][ T9700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  841.079688][ T8125] usb 10-1: USB disconnect, device number 15
[  841.082273][ T5679] usb 9-1: Using ep0 maxpacket: 8
[  841.144881][ T5679] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  841.180157][ T5679] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  841.239445][ T5679] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  841.293589][ T5679] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  841.337460][ T5679] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  841.401815][ T5679] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  841.408480][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  841.421903][ T9082] bridge_slave_1: left allmulticast mode
[  841.498210][ T9082] bridge_slave_1: left promiscuous mode
[  841.504752][ T5679] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  841.525811][ T5679] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  841.538980][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.584208][ T5679] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  841.631398][ T9082] bridge_slave_0: left allmulticast mode
[  841.672734][ T5679] usb 9-1: string descriptor 0 read error: -22
[  841.695275][ T9082] bridge_slave_0: left promiscuous mode
[  841.704935][ T5679] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  841.727492][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.742813][ T5679] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.793595][ T9082] bridge_slave_1: left allmulticast mode
[  841.831343][ T9082] bridge_slave_1: left promiscuous mode
[  841.854539][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.865201][ T5679] adutux 9-1:168.0: interrupt endpoints not found
[  841.937275][ T9082] bridge_slave_0: left allmulticast mode
[  841.959294][ T9082] bridge_slave_0: left promiscuous mode
[  841.980200][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.115732][ T9462] usb 9-1: USB disconnect, device number 13
[  843.088391][ T9082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  843.157265][ T9082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  843.241995][ T9082] bond0 (unregistering): Released all slaves
[  844.139354][ T9082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  844.250469][ T9082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  844.381008][ T9082] bond0 (unregistering): Released all slaves
[  845.468806][ T9082] hsr_slave_0: left promiscuous mode
[  845.545614][ T9082] hsr_slave_1: left promiscuous mode
[  845.572416][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  845.616123][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  845.780452][ T9082] hsr_slave_0: left promiscuous mode
[  845.816006][ T9082] hsr_slave_1: left promiscuous mode
[  845.860211][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  845.927109][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  846.383532][ T8125] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  846.616182][ T8125] usb 8-1: Using ep0 maxpacket: 16
[  846.659910][ T8125] usb 8-1: config index 0 descriptor too short (expected 37359, got 202)
[  846.689513][ T8125] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  846.721058][ T8125] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  846.768238][ T8125] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95
[  846.830758][ T8125] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  846.869679][ T8125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.913912][ T8125] usb 8-1: Product: syz
[  846.930692][ T8125] usb 8-1: Manufacturer: syz
[  846.950263][ T8125] usb 8-1: SerialNumber: syz
[  846.994988][ T8121] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  847.098108][ T8125] usb 8-1: 0:2 : does not exist
[  847.200526][ T9082] team0 (unregistering): Port device team_slave_1 removed
[  847.228287][ T8121] usb 9-1: Using ep0 maxpacket: 8
[  847.283874][ T8121] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  847.286494][ T9082] team0 (unregistering): Port device team_slave_0 removed
[  847.331126][ T8121] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  847.366232][ T8125] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  847.399312][ T8121] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  847.473432][ T8121] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  847.502555][ T8121] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  847.533327][ T8121] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  847.595471][ T8121] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  847.606557][ T8121] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  847.651916][ T8121] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  847.727946][ T8121] usb 9-1: string descriptor 0 read error: -22
[  847.746217][ T8121] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  847.779706][ T8121] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.905299][ T8121] adutux 9-1:168.0: interrupt endpoints not found
[  848.085011][ T8125] usb 8-1: USB disconnect, device number 18
[  848.136511][ T5679] usb 9-1: USB disconnect, device number 14
[  848.773338][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  849.742688][ T9082] team0 (unregistering): Port device team_slave_1 removed
[  849.797885][ T9082] team0 (unregistering): Port device team_slave_0 removed
[  850.651497][ T9746] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.678215][ T9746] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.775914][ T9746] bridge_slave_0: entered allmulticast mode
[  850.855559][ T9746] bridge_slave_0: entered promiscuous mode
[  851.055222][ T9700] hsr_slave_0: entered promiscuous mode
[  851.103717][ T9700] hsr_slave_1: entered promiscuous mode
[  851.146021][ T9700] debugfs: 'hsr0' already exists in 'hsr'
[  851.192086][ T9700] Cannot create hsr debugfs directory
[  851.267221][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state
[  851.319989][ T9746] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.325401][ T9941] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  851.371301][ T9746] bridge_slave_1: entered allmulticast mode
[  851.455891][ T9746] bridge_slave_1: entered promiscuous mode
[  851.693476][ T9944] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1134'.
[  852.145756][ T9746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  852.219861][ T9746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  852.851949][ T5679] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  853.023186][  T807] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  853.045049][ T5679] usb 9-1: device descriptor read/64, error -71
[  853.102438][ T9746] team0: Port device team_slave_0 added
[  853.233333][  T807] usb 10-1: Using ep0 maxpacket: 16
[  853.281351][  T807] usb 10-1: config index 0 descriptor too short (expected 37359, got 202)
[  853.315164][ T5679] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  853.323585][  T807] usb 10-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  853.354431][  T807] usb 10-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  853.359974][ T9746] team0: Port device team_slave_1 added
[  853.384175][  T807] usb 10-1: config 33 has 1 interface, different from the descriptor's value: 95
[  853.446261][  T807] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  853.483323][  T807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.495453][ T5679] usb 9-1: device descriptor read/64, error -71
[  853.508631][  T807] usb 10-1: Product: syz
[  853.515594][  T807] usb 10-1: Manufacturer: syz
[  853.520625][  T807] usb 10-1: SerialNumber: syz
[  853.602653][  T807] usb 10-1: 0:2 : does not exist
[  853.613979][ T5679] usb usb9-port1: attempt power cycle
[  853.850226][  T807] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[  853.989777][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  854.013119][ T5679] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  854.017448][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  854.079423][ T5679] usb 9-1: device descriptor read/8, error -71
[  854.131191][ T9746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  854.313906][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  854.352131][ T5679] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  854.360451][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  854.396207][ T5679] usb 9-1: device descriptor read/8, error -71
[  854.429651][ T9746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  854.472891][  T807] usb 10-1: USB disconnect, device number 16
[  854.522920][ T5679] usb usb9-port1: unable to enumerate USB device
[  854.635322][ T8278] udevd[8278]: setting owner of /dev/bus/usb/010/016 to uid=0, gid=0 failed: No such file or directory
[  854.877419][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  855.475715][ T9746] hsr_slave_0: entered promiscuous mode
[  855.487422][ T9746] hsr_slave_1: entered promiscuous mode
[  855.524646][ T9746] debugfs: 'hsr0' already exists in 'hsr'
[  855.561499][ T9746] Cannot create hsr debugfs directory
[  856.826331][ T4960] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  856.839851][ T9987] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1146'.
[  857.055509][ T4960] usb 8-1: Using ep0 maxpacket: 8
[  857.104650][ T4960] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7
[  857.157373][ T4960] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  857.178789][ T4960] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  857.218581][ T4960] usb 8-1: Product: syz
[  857.233708][ T4960] usb 8-1: Manufacturer: syz
[  857.270769][ T4960] usb 8-1: SerialNumber: syz
[  857.574223][ T4960] usb 8-1: Handspring Visor / Palm OS: No valid connect info available
[  857.627140][ T4960] usb 8-1: Handspring Visor / Palm OS: port 231, is for unknown use
[  857.664696][ T4960] usb 8-1: Handspring Visor / Palm OS: port 193, is for Debugger use
[  857.709750][ T4960] usb 8-1: Handspring Visor / Palm OS: Number of ports: 2
[  857.897011][ T9985] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1145'.
[  857.973706][ T9985] netlink: 'syz.7.1145': attribute type 4 has an invalid length.
[  858.050699][ T4960] usb 8-1: palm_os_3_probe - error -110 getting bytes available request
[  858.096259][ T4960] visor 8-1:1.0: Handspring Visor / Palm OS converter detected
[  858.195841][ T4960] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  858.291308][ T4960] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  858.832356][ T4960] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  859.064480][ T4960] usb 9-1: Using ep0 maxpacket: 16
[  859.128079][ T4960] usb 9-1: config index 0 descriptor too short (expected 37359, got 202)
[  859.171544][ T9700] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  859.197501][ T4960] usb 9-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  859.226449][  T807] usb 8-1: USB disconnect, device number 19
[  859.250283][ T4960] usb 9-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  859.332198][  T807] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  859.338026][ T4960] usb 9-1: config 33 has 1 interface, different from the descriptor's value: 95
[  859.356258][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  859.453995][ T4960] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  859.474083][  T807] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  859.485761][ T4960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.525503][ T4960] usb 9-1: Product: syz
[  859.554991][ T4960] usb 9-1: Manufacturer: syz
[  859.556572][  T807] visor 8-1:1.0: device disconnected
[  859.571412][ T9700] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  859.586264][ T4960] usb 9-1: SerialNumber: syz
[  859.744990][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  859.765131][ T4960] usb 9-1: 0:2 : does not exist
[  859.844827][ T9700] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  860.010307][ T4960] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  860.071482][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  860.198761][ T9700] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  860.370030][ T9700] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  861.115935][ T4960] usb 9-1: USB disconnect, device number 19
[  861.248158][  T807] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  861.455695][  T807] usb 8-1: device descriptor read/64, error -71
[  861.674523][ T9746] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  861.759158][  T807] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  861.789276][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  861.812502][ T9746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  861.828815][ T9746] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  861.970335][ T9746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  861.995400][  T807] usb 8-1: device descriptor read/64, error -71
[  862.078570][ T9746] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  862.128689][  T807] usb usb8-port1: attempt power cycle
[  862.157685][ T9746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  862.225831][ T9746] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  862.301821][ T9746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  862.552939][  T807] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  862.623061][  T807] usb 8-1: device descriptor read/8, error -71
[  862.925208][  T807] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  863.017588][  T807] usb 8-1: device descriptor read/8, error -71
[  863.157089][T10025] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1156'.
[  863.164068][  T807] usb usb8-port1: unable to enumerate USB device
[  863.786372][ T9700] 8021q: adding VLAN 0 to HW filter on device bond0
[  864.293427][ T9700] 8021q: adding VLAN 0 to HW filter on device team0
[  864.495171][ T8124] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  864.580279][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.588027][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  864.725399][ T8124] usb 9-1: Using ep0 maxpacket: 16
[  864.890367][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.898113][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[  865.038867][ T8124] usb 9-1: unable to get BOS descriptor or descriptor too short
[  865.094929][ T8124] usb 9-1: unable to read config index 0 descriptor/start: -71
[  865.125952][ T8124] usb 9-1: can't read configurations, error -71
[  865.677355][ T9746] 8021q: adding VLAN 0 to HW filter on device bond0
[  866.283957][ T9746] 8021q: adding VLAN 0 to HW filter on device team0
[  866.562255][ T9976] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  866.587642][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.595433][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  866.773931][ T9976] usb 8-1: Using ep0 maxpacket: 16
[  866.798906][ T9976] usb 8-1: config index 0 descriptor too short (expected 37359, got 202)
[  866.856473][ T9976] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  866.926707][ T9976] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  866.980894][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.988647][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.005120][ T9976] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95
[  867.067501][ T9976] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  867.118628][ T9976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.159646][ T9976] usb 8-1: Product: syz
[  867.204337][ T9976] usb 8-1: Manufacturer: syz
[  867.246829][ T9976] usb 8-1: SerialNumber: syz
[  867.390494][ T9976] usb 8-1: 0:2 : does not exist
[  867.648007][ T9976] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  868.721396][ T9976] usb 8-1: USB disconnect, device number 24
[  869.859538][T10069] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1166'.
[  870.088058][ T4960] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  870.136948][ T8278] udevd[8278]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  870.355868][ T4960] usb 8-1: device descriptor read/64, error -71
[  870.633108][ T4960] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  870.843818][ T4960] usb 8-1: device descriptor read/64, error -71
[  871.014111][ T4960] usb usb8-port1: attempt power cycle
[  871.436294][ T4960] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  871.536054][ T4960] usb 8-1: device descriptor read/8, error -71
[  871.588391][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  871.600976][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  871.620029][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  871.649938][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  871.667361][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  871.812794][ T4960] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  871.844141][  T807] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  871.890316][ T4960] usb 8-1: device descriptor read/8, error -71
[  872.033614][ T4960] usb usb8-port1: unable to enumerate USB device
[  872.072636][  T807] usb 9-1: Using ep0 maxpacket: 16
[  872.422137][  T807] usb 9-1: unable to get BOS descriptor or descriptor too short
[  872.481084][  T807] usb 9-1: unable to read config index 0 descriptor/start: -71
[  872.546557][  T807] usb 9-1: can't read configurations, error -71
[  872.813093][ T5679] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  873.012186][ T5679] usb 10-1: Using ep0 maxpacket: 32
[  873.050600][ T5679] usb 10-1: config 0 has an invalid interface number: 132 but max is 0
[  873.114913][ T5679] usb 10-1: config 0 has no interface number 0
[  873.164111][ T5679] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  873.264915][ T5679] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  873.325410][ T5679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.375795][ T5679] usb 10-1: Product: syz
[  873.407980][ T5679] usb 10-1: Manufacturer: syz
[  873.438873][ T5679] usb 10-1: SerialNumber: syz
[  873.533437][ T5679] usb 10-1: config 0 descriptor??
[  873.757385][ T5679] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  873.794718][ T4875] Bluetooth: hci5: command tx timeout
[  873.860753][ T5679] em28xx 10-1:0.132: Video interface 132 found:
[  874.169526][ T5679] em28xx 10-1:0.132: unknown em28xx chip ID (0)
[  874.201929][T10104] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  874.244638][T10105] Set syz1 is full, maxelem 1029 reached
[  874.281941][T10104] =====================================================
[  874.289526][T10104] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290
[  874.297967][T10104]  dvbdmx_release_ts_feed+0x198/0x290
[  874.303817][T10104]  dvb_dmxdev_add_pid+0xacc/0xb50
[  874.309050][T10104]  dvb_demux_do_ioctl+0x78b/0xc80
[  874.314690][T10104]  dvb_usercopy+0x263/0x500
[  874.319367][T10104]  dvb_demux_ioctl+0x46/0x70
[  874.324251][T10104]  __ia32_compat_sys_ioctl+0x7f9/0x1270
[  874.330211][T10104]  ia32_sys_call+0x2854/0x4360
[  874.335472][T10104]  __do_fast_syscall_32+0x195/0x470
[  874.344362][T10104]  do_fast_syscall_32+0x37/0x80
[  874.350467][T10104]  do_SYSENTER_32+0x1f/0x30
[  874.355569][T10104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  874.362317][T10104] 
[  874.364740][T10104] Uninit was created at:
[  874.369302][T10104]  __alloc_frozen_pages_noprof+0x6fa/0x1000
[  874.376605][T10104]  alloc_pages_mpol+0x328/0x860
[  874.381863][T10104]  alloc_pages_noprof+0x101/0x290
[  874.387139][T10104]  __vmalloc_node_range_noprof+0xab0/0x2cd0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  874.393416][T10104]  __vmalloc_noprof+0x128/0x1f0
[  874.398458][T10104]  vmalloc_array_noprof+0x48/0x80
[  874.404009][T10104]  dvb_dmx_init+0x121/0x930
[  874.408714][T10104]  vidtv_bridge_probe+0x1b1f/0x2690
[  874.414392][T10104]  platform_probe+0x213/0x370
[  874.419399][T10104]  really_probe+0x4d5/0xe40
[  874.424199][T10104]  __driver_probe_device+0x2fb/0x410
[  874.429743][T10104]  driver_probe_device+0x70/0x8f0
[  874.435071][T10104]  __driver_attach+0x541/0xaa0
[  874.440081][T10104]  bus_for_each_dev+0x33b/0x580
[  874.448480][T10104]  driver_attach+0x51/0x70
[  874.454290][T10104]  bus_add_driver+0x54f/0xdb0
[  874.459182][T10104]  driver_register+0x42e/0x6a0
[  874.470133][T10104]  __platform_driver_register+0x65/0x80
[  874.476083][T10104]  vidtv_bridge_init+0x73/0x100
[  874.481276][T10104]  do_one_initcall+0x237/0xb30
[  874.486407][T10104]  do_initcall_level+0x157/0x330
[  874.491878][T10104]  do_initcalls+0x176/0x310
[  874.496621][T10104]  do_basic_setup+0x22/0x30
[  874.501422][T10104]  kernel_init_freeable+0x213/0x460
[  874.507086][T10104]  kernel_init+0x2f/0x5e0
[  874.511848][T10104]  ret_from_fork+0x20f/0x8d0
[  874.516685][T10104]  ret_from_fork_asm+0x1a/0x30
[  874.521911][T10104] 
[  874.524354][T10104] CPU: 0 UID: 0 PID: 10104 Comm: syz.8.1173 Not tainted syzkaller #0 PREEMPT(lazy) 
[  874.534056][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  874.546745][T10104] =====================================================
[  874.554974][T10104] Disabling lock debugging due to kernel taint
[  874.840848][T10104] Kernel panic - not syncing: kmsan.panic set ...
[  874.847499][T10104] CPU: 1 UID: 0 PID: 10104 Comm: syz.8.1173 Tainted: G    B               syzkaller #0 PREEMPT(lazy) 
[  874.858706][T10104] Tainted: [B]=BAD_PAGE
[  874.862992][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  874.873379][T10104] Call Trace:
[  874.876790][T10104]  <TASK>
[  874.879838][T10104]  __dump_stack+0x26/0x30
[  874.884390][T10104]  dump_stack_lvl+0x50/0x1c0
[  874.889174][T10104]  ? dump_stack+0x12/0x25
[  874.893736][T10104]  dump_stack+0x1e/0x25
[  874.898105][T10104]  vpanic+0x7b4/0x1430
[  874.902444][T10104]  panic+0x15d/0x160
[  874.906626][T10104]  kmsan_report+0x31a/0x320
[  874.911391][T10104]  ? raw_irqentry_exit_cond_resched+0xe/0x80
[  874.917630][T10104]  ? __msan_warning+0x1b/0x30
[  874.922530][T10104]  ? dvbdmx_release_ts_feed+0x198/0x290
[  874.928408][T10104]  ? dvb_dmxdev_add_pid+0xacc/0xb50
[  874.933817][T10104]  ? dvb_demux_do_ioctl+0x78b/0xc80
[  874.939224][T10104]  ? dvb_usercopy+0x263/0x500
[  874.944083][T10104]  ? dvb_demux_ioctl+0x46/0x70
[  874.949038][T10104]  ? __ia32_compat_sys_ioctl+0x7f9/0x1270
[  874.955020][T10104]  ? ia32_sys_call+0x2854/0x4360
[  874.960213][T10104]  ? __do_fast_syscall_32+0x195/0x470
[  874.965793][T10104]  ? do_fast_syscall_32+0x37/0x80
[  874.971024][T10104]  ? do_SYSENTER_32+0x1f/0x30
[  874.975893][T10104]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  874.982655][T10104]  ? kmsan_get_metadata+0xf1/0x160
[  874.988025][T10104]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  874.994608][T10104]  ? kmsan_get_metadata+0xf1/0x160
[  874.999991][T10104]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  875.006084][T10104]  ? preempt_schedule_common+0x5b/0x80
[  875.011844][T10104]  ? preempt_schedule+0x30/0x40
[  875.016939][T10104]  ? preempt_schedule_thunk+0x16/0x30
[  875.022603][T10104]  ? _raw_spin_unlock_irq+0x47/0x50
[  875.028033][T10104]  ? kmsan_get_metadata+0x146/0x160
[  875.033520][T10104]  __msan_warning+0x1b/0x30
[  875.038271][T10104]  dvbdmx_release_ts_feed+0x198/0x290
[  875.044087][T10104]  dvb_dmxdev_add_pid+0xacc/0xb50
[  875.049346][T10104]  ? __pfx_dvbdmx_release_ts_feed+0x10/0x10
[  875.055509][T10104]  dvb_demux_do_ioctl+0x78b/0xc80
[  875.060767][T10104]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  875.066529][T10104]  dvb_usercopy+0x263/0x500
[  875.071236][T10104]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  875.077034][T10104]  ? kmsan_get_metadata+0xf1/0x160
[  875.082430][T10104]  dvb_demux_ioctl+0x46/0x70
[  875.087231][T10104]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  875.092746][T10104]  __ia32_compat_sys_ioctl+0x7f9/0x1270
[  875.098577][T10104]  ? fpregs_restore_userregs+0x211/0x3b0
[  875.104504][T10104]  ? kmsan_get_metadata+0xf1/0x160
[  875.109891][T10104]  ? kmsan_get_metadata+0xf1/0x160
[  875.115286][T10104]  ia32_sys_call+0x2854/0x4360
[  875.120320][T10104]  __do_fast_syscall_32+0x195/0x470
[  875.125759][T10104]  do_fast_syscall_32+0x37/0x80
[  875.130826][T10104]  do_SYSENTER_32+0x1f/0x30
[  875.135547][T10104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  875.142112][T10104] RIP: 0023:0xf703f01c
[  875.146349][T10104] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  875.166192][T10104] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  875.174834][T10104] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040026f33
[  875.182980][T10104] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  875.191090][T10104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  875.199194][T10104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  875.207299][T10104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  875.215458][T10104]  </TASK>
[  875.219011][T10104] Kernel Offset: disabled
[  875.223406][T10104] Rebooting in 86400 seconds..