last executing test programs:

20m27.377341929s ago: executing program 32 (id=1):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)

20m6.101546847s ago: executing program 33 (id=27):
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socket$kcm(0x21, 0x2, 0x2)
landlock_create_ruleset(&(0x7f0000000040)={0xf489, 0x3}, 0x18, 0x0)
syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
fsopen(&(0x7f0000000140)='autofs\x00', 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff6, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

20m0.009845942s ago: executing program 1 (id=39):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/29, 0x1d}, 0x2}], 0x400000000000194, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x0, 0x2, 0x4, 0x800, 0x81, {0x0, 0xea60}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5, 0x1, {}, 0x1})

19m55.86703966s ago: executing program 1 (id=42):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000240000085000000530000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff030000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

19m54.792377665s ago: executing program 1 (id=43):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe)

19m44.516677132s ago: executing program 1 (id=46):
socket$kcm(0x23, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

19m40.106659808s ago: executing program 1 (id=48):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

19m35.7304186s ago: executing program 1 (id=50):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/29, 0x1d}, 0x2}], 0x400000000000194, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x0, 0x2, 0x4, 0x800, 0x81, {0x0, 0xea60}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5, 0x1, {}, 0x1})

19m17.619858919s ago: executing program 34 (id=50):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/29, 0x1d}, 0x2}], 0x400000000000194, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x0, 0x2, 0x4, 0x800, 0x81, {0x0, 0xea60}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5, 0x1, {}, 0x1})

19m15.941012042s ago: executing program 35 (id=51):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x129203, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)

9m27.385912064s ago: executing program 4 (id=384):

9m27.009359771s ago: executing program 4 (id=385):
symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
userfaultfd(0x80001)
syz_io_uring_submit(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x80000001, 0xbfe00000}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300)

9m25.643548837s ago: executing program 4 (id=386):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r7, 0x29, 0x5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000400)="360f01c5baf80c66b83075978766efbafc0c66b80000000066ef0f01dff30fbc817b89baf80c66b860aa408a66efbafc0c66ed26660f388100670f3565650f7f97cc5cb83c018ec0360f06", 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x10)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f00000002c0)={0x1, 0x2, @start={0xa72}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r8 = semget(0x1, 0x2, 0xa4)
semop(r8, &(0x7f0000000240)=[{0x0, 0x9, 0x1800}, {0x2, 0x8}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r9, &(0x7f0000000000)="dbe104b35716e6", 0x7, 0x20008894, &(0x7f0000000100)={0x11, 0x7, r10, 0x1, 0x5, 0x6, @local}, 0x14)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x34, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0xd}, {0x2, 0x6}, {0xb}}, [{0x8, 0xb, 0x22f}, {0x8, 0xb, 0x8}]}, 0x34}}, 0x20040000)

9m16.070233423s ago: executing program 4 (id=387):
unshare(0x22020600)
r0 = socket(0x18, 0x800, 0x10000000000002)
connect$rxrpc(r0, 0x0, 0x0)

9m15.436470103s ago: executing program 4 (id=388):
syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2)
timer_create(0x0, 0x0, &(0x7f0000000300))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffed, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4c010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

9m14.277707678s ago: executing program 4 (id=389):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x80, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800)
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0))
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r6 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c)

8m51.100498748s ago: executing program 36 (id=389):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x80, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800)
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0))
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r6 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c)

8m0.219341037s ago: executing program 7 (id=53):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001f80)=""/4097, 0x1001)

7m58.538380142s ago: executing program 7 (id=437):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})

7m57.444595774s ago: executing program 7 (id=439):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f1d4c1723ff22329273708b7da72ec25bc38c7f", 0x2c}], 0x2)

7m54.95328198s ago: executing program 7 (id=442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x9c}}, 0x4)
prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xffffffec, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}]}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}}, 0x1c}}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'})
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x5c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x10c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_VFINFO_LIST={0xec, 0x16, 0x0, 0x1, [{0xe8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x59, 0x3d, 0x3, 0x88a8}}, {0x14, 0x1, {0xb, 0x9ba, 0xffffff01, 0x88a8}}, {0x14, 0x1, {0x60, 0x5ed, 0x3, 0x8100}}, {0x14, 0x1, {0xcf, 0xfbc, 0x2, 0x88a8}}, {0x14, 0x1, {0x6, 0xf1d, 0x0, 0x8100}}, {0x14, 0x1, {0xa, 0x4eb, 0x4, 0x8100}}, {0x14, 0x1, {0xf, 0xee0, 0xf774, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5b, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffff94a}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x877a, 0x4}}]}]}]}, 0x10c}}, 0x0)

7m50.776873382s ago: executing program 7 (id=444):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000019080)=0x4, 0x4)
sendmmsg$inet6(r6, &(0x7f0000003cc0), 0x0, 0x4000000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000019100)='net/vlan/config\x00')
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0xfa, 0x65, 0x18, 0x3f0, 0x2101, 0xa540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x7, 0x6, 0xd8, 0x2}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0xd, 0x9, 0x5, 0x87, 0x4}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x407}}, {0x2, &(0x7f0000000540)=@string={0x2}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x144f}}]})

7m35.480094193s ago: executing program 37 (id=444):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000019080)=0x4, 0x4)
sendmmsg$inet6(r6, &(0x7f0000003cc0), 0x0, 0x4000000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000019100)='net/vlan/config\x00')
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0xfa, 0x65, 0x18, 0x3f0, 0x2101, 0xa540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x7, 0x6, 0xd8, 0x2}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0xd, 0x9, 0x5, 0x87, 0x4}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x407}}, {0x2, &(0x7f0000000540)=@string={0x2}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x144f}}]})

6m5.617915539s ago: executing program 5 (id=491):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00')
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205af1809"], 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00')
ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0)

5m56.790934762s ago: executing program 5 (id=492):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a3100000000090003007379"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000a0000050900020073797a32000000003800048034000180090001007866726d000000002400028008000140000000100800024000000003050003000000000008000440000000030900010073797a31"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

5m55.972349733s ago: executing program 5 (id=493):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x805)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)

5m51.920519205s ago: executing program 5 (id=495):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001b80)={0xed3, 0x5, 0x100, 0x0, 0x1b, 0x1ff, 0xffff, 0x4000}, 0x20)

5m51.146646568s ago: executing program 5 (id=497):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x8, @private2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000000000029000000360000003a00000000000000140000000001"], 0x48}}], 0x2, 0x0)

5m50.342941938s ago: executing program 5 (id=498):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00')
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205af1809"], 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00')
ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0)

5m35.022324102s ago: executing program 38 (id=498):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00')
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f00000004c0)=""/205)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002205af1809"], 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00')
ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0)

4m25.82866883s ago: executing program 9 (id=635):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x198, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

4m24.544849268s ago: executing program 9 (id=638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x10, 0x70, 0xa}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000815}, 0x850)
socket$nl_generic(0x10, 0x3, 0x10)

4m23.263681879s ago: executing program 9 (id=641):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
syz_usb_disconnect(r0)

4m22.911856262s ago: executing program 0 (id=642):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000000000000000000000000000e88c913313b4caad298d5d062fd1305f1a1f0c9c0e1ffa38b656e85f8e88f573554eec517ea388c5fb60a6cf2f5a4d82d44a036fd99276d1a46c5b1ae86cd50b60ba8a98cd57a8c49a6b7465950028faf39b12bf8c3b9006cce88750ea9903a155ef159e2874df01308aa937b32e44f76a157774372a52ce37cb9e9397b29ab41a9f2d73548501b648f65d1be2"], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000009c0)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0)

4m21.605340387s ago: executing program 0 (id=646):
syz_usb_connect(0x3, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x31, 0xcf, 0xdf, 0x10, 0xdf6, 0x72, 0xe61c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x40, 0x64, "", [{{0x9, 0x4, 0x24, 0x4, 0x0, 0xff, 0xff, 0x0, 0x1}}]}}]}}, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x900, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040)

4m20.623513744s ago: executing program 9 (id=649):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x0)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000180))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd)
r8 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0x3, 0x10})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140))
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x0, 0x108, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xfffffffffffffed3, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x10}, @local, 0xffffff00, 0xffffff00, 0x1, 0xe, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x90, 0x9, 0x0, 0x6, 0x9, 0x7, 'veth0_to_bridge\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x33}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random, @mac=@broadcast, @broadcast, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x47b)
sendmsg$nl_route_sched(r0, 0x0, 0x4000)

4m18.468417975s ago: executing program 0 (id=655):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
writev(r0, &(0x7f00000009c0)=[{&(0x7f00000004c0)="ade46eeeff6df891e9d9c0b9350061c073fcaf5b4d316872ad47ae43f9114738b38e82a27e753a1de8632665a20645725e057b928a95959d9412f0ff66cc01b7b650af9952b22bf6685507e9f7b550b49154c5c6e7f0d288ac755bcda6c0c573700726750a74e3ecdf0894e2469f3772d3023aaf4e01d0c9ed185ea54f16cd99683205b4a6f8ae706a880ebd716f2b4b78aea964d122afa120481c8fb399175c7649565fb08670ffc1a0468467432fd47105d71b391a8cc1dec2065f5b", 0xbd}, {&(0x7f0000000580)="ea2836541ee3a3b208743f29fee9e3989b79a15c1d0225621ec5b606eb7c5d6f70aa4e4f3ff3db7544e40e3b75ec9460a9e70474bcc512d26c922f185b523a9bd9ece790f7092ab1ab5b9048f87eae7cb50e933fe0ddbd24c828cdcc", 0x5c}, {&(0x7f0000000a80)="d787a3ba950fee72af733a931768af9b115a7c50cf763acfcbc09b86f46bdcc6dc4d3c99d9cdc0aafc219a410be57f42c804d689a3bc10c96e7690ffd23273c9fa1b7494c7b062f25373e967410bfb219c2286e3e6f06bd955c44c1da2da1b7792fc01de9faff122ffa74554df4e20519d0992bf68ef76cb7ad7a8171dcd421a4c6ffa8e94b8fc1d25af2e3dd13ee433212db5d0222b90d7a4c280e501a5df12c708acd935946fa80f1ef872a5d2490273264e543291926699521524f9", 0xbd}, {&(0x7f0000001340)="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", 0x62a}], 0x4)

4m17.183884408s ago: executing program 0 (id=658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4251}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

4m15.923521973s ago: executing program 0 (id=661):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7780)
syz_usb_disconnect(r0)

4m11.935911538s ago: executing program 0 (id=666):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
accept$inet(r0, 0x0, &(0x7f0000000040))
open(0x0, 0x141b42, 0x86)
timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80))
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x9, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = socket$tipc(0x1e, 0x5, 0x0)
getpeername$tipc(r3, 0x0, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x80105013, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000d00)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="095551614f99335df5ab648668d4672858c6ed07c4138f4ae4ab1b1060b777f9d813a395b3c6de4235119622342168a2e2164f68db7a44133b0fe08a8c9b48194a37bd8cc2d4f02cc510abee65f5ff845de53daed250433fddeb398adb5c788f150ce4f1a5c2db9960aba43b1f7367f7257fabd6e8b2ce702d6cd6ec78a3b0d1ea97bfb586e4eef1ee71647cfcab198214584f36e95b5cc1461481c0d27da6e6a5cd8aae82cab95b5cd9cf09dc0766", @ANYRES16=r4, @ANYRESOCT=0x0], 0x80}}, {{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000d40)="bed93f59d32d72a2c02a26e20a572591f2dc0adc3d2bce470c8493e5289b95eaca0b981399d7a779ee5c01833b3796337ec4624b46a4bcf2d57c97905880766393cc98eb99f66f979574614b2420c9a0f8fedaa666ef9394f58e9ec7fd30cd5df1b0ff98e93db6c894acc1d0af4391827fc79784c1e147304d9bea0be68e3ed450a083b408b6d9ff5d60f91df3911137cd776f123c916dd70792917a992d7aa46478def54c5bd6244f8db1fe1e9740bdd11088378a455c1dbc98a55eaf4f24c1f05738a905906e28315fbde541a00b4f6848eded1920b3d13de62410444a3028044064a77e3831f983", 0xe9}, {&(0x7f00000000c0)}, {&(0x7f0000000500)="03ddcb15434476c96a5ccd00c56a8a03063c639f4559b3d23b2a7625e5039affe938f813ae2404aa4ee96756a8fa2015ae7283794ecc95908aecd91a81db24afeeddfc97008db2a214e4341b28b963614d0d3a9ca0cc3919238607de309008323ea1f53422c414d02b3e8ebc5c2f50f1b488e6a2aaf353cc14960e6f3d4cce5e2e94a8e59d63b80a3cebafed3d0996d607c6670c737df6a9e7034c7748bcbe6639", 0xa1}, {&(0x7f0000000a00)="2e2df1305aa0f8d4101cc56c7f38c87705d350c586168cdb38894faa658cca4720ba69b118624655354944f86eda1606fe628347cb6082058e98093109ffcd5c9f5ff9ff21e12e551f834626cf5eba7f801dae98936fb018db297a69fd57c8447ee7829bd85a42990c382be136643f5e13d9bce57057a52270582e1f71363446faca3a2c51aafd64fd0db7628149113627102a2a93823d438e9d61c14caaeac5a7999cfb3f9523fe9fd27e2f94d66793a06093da4f72ca0ea978a05ceee26b76ebf437ac", 0xc4}, {&(0x7f0000000340)="1e11354f8e6d8988423794", 0xb}, {&(0x7f0000000380)="ac6808b0850a2d65895a593e62fb0e938a3dea2569156de98894428df2d75529cea678b8bef9b0a53670985289e4752d38bc8c", 0x33}, {&(0x7f0000000700)="4bede7196ece647539190167258cd30721e4b007062ad59dd1191b3ffd8cb8594f66ae41b57b6b716a4ab92c436cd26248eb2d77ba644e4c9df7856be91cd17227831391e49534d492634d16292b08b6f8d953bbe6496885e0e3dd4cc0cc974e279cef1256192bdcaa7501ec96e3b86a9f3b8af1f118e04f084f37b690556570c7b454e1e39193c2dfd5c19ad9992af398d8e2b9283a2dbc7f750b32f898ed332975a0c954cc28b253173ae87f649addd0c83221f906cf1aaa259d89c6ce02b1d7e0963a47e3a51236e76c4101acaf", 0xcf}, {&(0x7f0000000800)="3ae77af2372d890eea74fcb57255ba70f60bd921d5e7bcefdaba8b851075fbfb275ce4e310a7e00c03cd03d8b1dbed42b66e3e10c19b21069b10c31f94486879678c7de7ad59c295ef26b6b23dd226b8256ed817b30c28177639fb963117099f8a6f320db41576fab8e15da22ab8a4e9f77ddf02523c66bdab57a8d041e2b672b33c9524f9db53ca94479a854ac4f6f27a5798b25fabc957ad48a98ecc5db9b19ff64eb9b870365e473c170c099e6e3a3b7429e92b8f730df9859ff7ab0e6b", 0xbf}, {&(0x7f00000005c0)='Tg', 0x2}], 0x9, &(0x7f0000000600)}}], 0x2, 0x24000004)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xffd, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r5, &(0x7f0000000640)=""/187, 0xbb)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0})

4m10.184881664s ago: executing program 8 (id=668):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=0x0)

4m9.058686267s ago: executing program 8 (id=669):
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00')
fchdir(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)

4m7.969680752s ago: executing program 8 (id=671):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4251}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

4m6.977461306s ago: executing program 8 (id=673):
syz_open_procfs(0x0, &(0x7f0000002280)='net/ip_mr_cache\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0})
fcntl$setstatus(r0, 0x4, 0x40800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0xb99, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r2=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

4m6.402778607s ago: executing program 9 (id=675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ee36b9450000000000000000fffffff800"/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m5.102309373s ago: executing program 9 (id=677):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r3, 0x402, 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r4, 0x6000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fsopen(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

4m5.051444389s ago: executing program 8 (id=678):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r2, r3, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="9b0000002c0015002bbd70defe"], 0x10}], 0x1, 0x0, 0x0, 0x810}, 0x44800)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20)

4m3.994611363s ago: executing program 8 (id=679):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x3, 0x0, 0x0)
timerfd_gettime(r3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0)
getdents64(r6, 0x0, 0x0)
getdents64(r6, 0xfffffffffffffffe, 0x29)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a00000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a3200000000140000001100010000000000"], 0x94}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0x3}, 0x80, 0x0}, 0x40)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6)

3m56.058038236s ago: executing program 39 (id=666):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
accept$inet(r0, 0x0, &(0x7f0000000040))
open(0x0, 0x141b42, 0x86)
timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80))
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x9, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = socket$tipc(0x1e, 0x5, 0x0)
getpeername$tipc(r3, 0x0, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x80105013, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000d00)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="095551614f99335df5ab648668d4672858c6ed07c4138f4ae4ab1b1060b777f9d813a395b3c6de4235119622342168a2e2164f68db7a44133b0fe08a8c9b48194a37bd8cc2d4f02cc510abee65f5ff845de53daed250433fddeb398adb5c788f150ce4f1a5c2db9960aba43b1f7367f7257fabd6e8b2ce702d6cd6ec78a3b0d1ea97bfb586e4eef1ee71647cfcab198214584f36e95b5cc1461481c0d27da6e6a5cd8aae82cab95b5cd9cf09dc0766", @ANYRES16=r4, @ANYRESOCT=0x0], 0x80}}, {{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000d40)="bed93f59d32d72a2c02a26e20a572591f2dc0adc3d2bce470c8493e5289b95eaca0b981399d7a779ee5c01833b3796337ec4624b46a4bcf2d57c97905880766393cc98eb99f66f979574614b2420c9a0f8fedaa666ef9394f58e9ec7fd30cd5df1b0ff98e93db6c894acc1d0af4391827fc79784c1e147304d9bea0be68e3ed450a083b408b6d9ff5d60f91df3911137cd776f123c916dd70792917a992d7aa46478def54c5bd6244f8db1fe1e9740bdd11088378a455c1dbc98a55eaf4f24c1f05738a905906e28315fbde541a00b4f6848eded1920b3d13de62410444a3028044064a77e3831f983", 0xe9}, {&(0x7f00000000c0)}, {&(0x7f0000000500)="03ddcb15434476c96a5ccd00c56a8a03063c639f4559b3d23b2a7625e5039affe938f813ae2404aa4ee96756a8fa2015ae7283794ecc95908aecd91a81db24afeeddfc97008db2a214e4341b28b963614d0d3a9ca0cc3919238607de309008323ea1f53422c414d02b3e8ebc5c2f50f1b488e6a2aaf353cc14960e6f3d4cce5e2e94a8e59d63b80a3cebafed3d0996d607c6670c737df6a9e7034c7748bcbe6639", 0xa1}, {&(0x7f0000000a00)="2e2df1305aa0f8d4101cc56c7f38c87705d350c586168cdb38894faa658cca4720ba69b118624655354944f86eda1606fe628347cb6082058e98093109ffcd5c9f5ff9ff21e12e551f834626cf5eba7f801dae98936fb018db297a69fd57c8447ee7829bd85a42990c382be136643f5e13d9bce57057a52270582e1f71363446faca3a2c51aafd64fd0db7628149113627102a2a93823d438e9d61c14caaeac5a7999cfb3f9523fe9fd27e2f94d66793a06093da4f72ca0ea978a05ceee26b76ebf437ac", 0xc4}, {&(0x7f0000000340)="1e11354f8e6d8988423794", 0xb}, {&(0x7f0000000380)="ac6808b0850a2d65895a593e62fb0e938a3dea2569156de98894428df2d75529cea678b8bef9b0a53670985289e4752d38bc8c", 0x33}, {&(0x7f0000000700)="4bede7196ece647539190167258cd30721e4b007062ad59dd1191b3ffd8cb8594f66ae41b57b6b716a4ab92c436cd26248eb2d77ba644e4c9df7856be91cd17227831391e49534d492634d16292b08b6f8d953bbe6496885e0e3dd4cc0cc974e279cef1256192bdcaa7501ec96e3b86a9f3b8af1f118e04f084f37b690556570c7b454e1e39193c2dfd5c19ad9992af398d8e2b9283a2dbc7f750b32f898ed332975a0c954cc28b253173ae87f649addd0c83221f906cf1aaa259d89c6ce02b1d7e0963a47e3a51236e76c4101acaf", 0xcf}, {&(0x7f0000000800)="3ae77af2372d890eea74fcb57255ba70f60bd921d5e7bcefdaba8b851075fbfb275ce4e310a7e00c03cd03d8b1dbed42b66e3e10c19b21069b10c31f94486879678c7de7ad59c295ef26b6b23dd226b8256ed817b30c28177639fb963117099f8a6f320db41576fab8e15da22ab8a4e9f77ddf02523c66bdab57a8d041e2b672b33c9524f9db53ca94479a854ac4f6f27a5798b25fabc957ad48a98ecc5db9b19ff64eb9b870365e473c170c099e6e3a3b7429e92b8f730df9859ff7ab0e6b", 0xbf}, {&(0x7f00000005c0)='Tg', 0x2}], 0x9, &(0x7f0000000600)}}], 0x2, 0x24000004)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xffd, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r5, &(0x7f0000000640)=""/187, 0xbb)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0})

3m49.05841565s ago: executing program 40 (id=677):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc})
r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r3, 0x402, 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r4, 0x6000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fsopen(0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416008903bc0000000000089078"], 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

3m48.34081091s ago: executing program 41 (id=679):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x3, 0x0, 0x0)
timerfd_gettime(r3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0)
getdents64(r6, 0x0, 0x0)
getdents64(r6, 0xfffffffffffffffe, 0x29)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a00000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a3200000000140000001100010000000000"], 0x94}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0x3}, 0x80, 0x0}, 0x40)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6)

19.493969544s ago: executing program 6 (id=948):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
fcntl$addseals(0xffffffffffffffff, 0x409, 0xe)
socket$inet6(0xa, 0x800000000000002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

18.254519362s ago: executing program 6 (id=950):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="64340888cae83bec1019ebc910d8dc7eba3da70f7b00000000", 0x19}], 0x1, 0x0, 0x0, 0x4000000}, 0x10)
recvmmsg(r1, 0x0, 0x0, 0x40002121, 0x0)

17.875010943s ago: executing program 3 (id=951):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

17.696387026s ago: executing program 6 (id=952):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800)
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0))
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c)

16.312388303s ago: executing program 3 (id=953):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(0xffffffffffffffff, 0x567, 0x6040000, 0x0, 0x0, 0x0)

15.443345141s ago: executing program 3 (id=955):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

14.948267737s ago: executing program 2 (id=956):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0)
socket(0x840000000002, 0x3, 0xff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

10.10986774s ago: executing program 3 (id=957):
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e001073"], 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

8.513290596s ago: executing program 3 (id=958):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x8c}}, 0x0)

7.713794524s ago: executing program 3 (id=959):
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001140), 0x4000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000015c0), 0x0, 0xf2, 0x207fff)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4})
ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000001340)={'binder0\x00'})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0)

7.274618013s ago: executing program 6 (id=960):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="64340888cae83bec1019ebc910d8dc7eba3da70f7b00000000", 0x19}], 0x1, 0x0, 0x0, 0x4000000}, 0x10)
recvmmsg(r1, 0x0, 0x0, 0x40002121, 0x0)

6.561683041s ago: executing program 6 (id=961):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

4.378882495s ago: executing program 6 (id=962):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)

3.758383784s ago: executing program 2 (id=963):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(0xffffffffffffffff, 0x567, 0x6040000, 0x0, 0x0, 0x0)

2.559239067s ago: executing program 2 (id=964):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0xcc}}, 0x0)

2.008074012s ago: executing program 2 (id=965):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3fd, 0x0)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0xb700)

1.374309915s ago: executing program 2 (id=966):
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e001073"], 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

0s ago: executing program 2 (id=967):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x3, &(0x7f00000000c0)={0x11, "cc9efc7ddb01702fa900"}})

kernel console output (not intermixed with test programs):

n device batadv0
[ 1111.290033][ T9618] veth0_vlan: entered promiscuous mode
[ 1111.520159][ T9618] veth1_vlan: entered promiscuous mode
[ 1112.102631][ T9618] veth0_macvtap: entered promiscuous mode
[ 1112.239626][ T9618] veth1_macvtap: entered promiscuous mode
[ 1112.749555][ T9683] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1112.899373][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1113.003157][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1113.245321][   T34] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.343259][   T34] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.365180][   T34] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.434210][   T34] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.548128][ T9633] veth0_vlan: entered promiscuous mode
[ 1113.910601][ T9633] veth1_vlan: entered promiscuous mode
[ 1114.239152][ T9683] veth0_vlan: entered promiscuous mode
[ 1114.633603][ T9683] veth1_vlan: entered promiscuous mode
[ 1115.029454][ T9633] veth0_macvtap: entered promiscuous mode
[ 1115.102089][ T9633] veth1_macvtap: entered promiscuous mode
[ 1115.176699][ T9631] veth0_vlan: entered promiscuous mode
[ 1115.516019][ T9631] veth1_vlan: entered promiscuous mode
[ 1115.623559][ T9633] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1115.699578][ T9683] veth0_macvtap: entered promiscuous mode
[ 1115.905633][ T9683] veth1_macvtap: entered promiscuous mode
[ 1115.974535][ T9633] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1116.166468][ T6217] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.332345][ T6217] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.371566][ T6217] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.526969][ T6217] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.567252][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1116.745597][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1116.922514][   T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.955017][   T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.016876][ T9631] veth0_macvtap: entered promiscuous mode
[ 1117.116830][ T5991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.159535][ T5991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.268813][ T9631] veth1_macvtap: entered promiscuous mode
[ 1117.649901][ T9631] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1117.894099][ T9631] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1118.105267][  T564] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.138757][  T564] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.266725][  T564] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.339092][  T564] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.704284][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1122.730476][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1123.074148][ T6217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1123.100176][ T6217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1124.088310][ T9874] Cannot find add_set index 65532 as target
[ 1125.527859][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1125.545547][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1128.315051][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1128.401080][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1128.854621][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1128.908287][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1129.172061][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.228495][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1129.742101][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.826809][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.107750][  T564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1130.115817][  T564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1131.124971][ T9934] vcan0: tx address claim with different name
[ 1131.151192][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1131.244715][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1132.886084][ T5831] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1133.165258][ T5831] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1133.215457][ T5831] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1133.275363][ T5831] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1133.315332][ T5831] usb 7-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00
[ 1133.374219][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.480955][ T5831] usb 7-1: config 0 descriptor??
[ 1133.505334][ T7064] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1133.705570][ T7064] usb 9-1: Using ep0 maxpacket: 8
[ 1133.794955][ T7064] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1133.803451][ T7064] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1134.026156][ T7064] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1134.132784][ T7064] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1134.205002][ T7064] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1134.285465][ T5831] hid-generic 0003:0463:1215.0001: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.6-1/input0
[ 1134.309450][ T7064] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1134.451843][ T7064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1134.563505][ T5831] usb 7-1: USB disconnect, device number 2
[ 1134.923209][ T7064] usb 9-1: usb_control_msg returned -32
[ 1134.965060][ T7064] usbtmc 9-1:16.0: can't read capabilities
[ 1135.955519][ T9971] syz_tun: entered allmulticast mode
[ 1136.071538][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.9.509'.
[ 1136.256056][ T9971] syz_tun (unregistering): left allmulticast mode
[ 1136.709157][ T9965] fido_id[9965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1136.886190][ T5831] usb 9-1: USB disconnect, device number 2
[ 1137.323317][ T9979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.512'.
[ 1140.301888][ T5831] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[ 1140.499304][ T5831] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1140.499455][ T5831] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1140.500089][ T5831] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1140.500267][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1140.530625][ T5831] usb 10-1: config 0 descriptor??
[ 1140.576146][ T5831] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1140.576307][ T5831] dvb-usb: bulk message failed: -22 (3/0)
[ 1140.664791][ T5831] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1140.683811][ T5831] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1140.684023][ T5831] usb 10-1: media controller created
[ 1140.723716][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1140.751471][ T5829] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1140.802243][T10006] dibusb: i2c wr: len=69 is too big!
[ 1140.802243][T10006] 
[ 1140.882068][ T5831] dvb-usb: bulk message failed: -22 (6/0)
[ 1140.882469][ T5831] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1140.942566][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input7
[ 1140.987144][ T5829] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1140.987367][ T5829] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00
[ 1140.987647][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.008730][ T5831] dvb-usb: schedule remote query interval to 150 msecs.
[ 1141.008798][ T5831] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1141.033604][ T5829] usb 7-1: config 0 descriptor??
[ 1141.036191][ T5831] usb 10-1: USB disconnect, device number 2
[ 1141.276884][ T5829] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1141.455471][ T5831] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1144.246455][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.528'.
[ 1145.965862][ T7445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1145.987302][ T7445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1146.012024][ T7445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1146.019779][ T7445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1146.024712][ T7445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1146.942285][T10057] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1147.598198][ T7064] usb 7-1: USB disconnect, device number 3
[ 1148.057757][   T49] Bluetooth: hci0: command tx timeout
[ 1149.645374][T10080] syz.6.540 uses obsolete (PF_INET,SOCK_PACKET)
[ 1150.137273][   T49] Bluetooth: hci0: command tx timeout
[ 1151.180198][ T9875] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1151.286692][ T9875] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.407706][T10045] chnl_net:caif_netlink_parms(): no params data found
[ 1151.867972][ T9875] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1151.995754][ T9875] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.225574][   T49] Bluetooth: hci0: command tx timeout
[ 1152.546355][ T9875] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1152.655624][ T9875] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1153.450648][ T9875] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1153.570786][ T9875] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.305017][   T49] Bluetooth: hci0: command tx timeout
[ 1155.334052][ T5829] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1155.598845][ T5829] usb 1-1: Using ep0 maxpacket: 32
[ 1155.628522][ T5829] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[ 1155.673888][ T5829] usb 1-1: config 0 has no interface number 0
[ 1155.724071][ T5829] usb 1-1: config 0 interface 184 has no altsetting 0
[ 1155.788048][ T5829] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1155.831538][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.904016][ T5829] usb 1-1: Product: syz
[ 1155.908591][ T5829] usb 1-1: Manufacturer: syz
[ 1156.013976][ T5829] usb 1-1: SerialNumber: syz
[ 1156.095071][ T5829] usb 1-1: config 0 descriptor??
[ 1156.801263][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1156.858442][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1158.005196][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1158.106041][ T9875] bond_slave_0: left allmulticast mode
[ 1158.206842][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1158.209336][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1158.376491][ T9875] bond_slave_1: left allmulticast mode
[ 1158.394116][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1158.437685][ T9875] bond0 (unregistering): Released all slaves
[ 1158.470084][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1158.623471][ T5829] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61
[ 1158.982276][T10045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1159.065706][T10045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1159.133292][T10045] bridge_slave_0: entered allmulticast mode
[ 1159.251419][T10045] bridge_slave_0: entered promiscuous mode
[ 1159.495332][ T9741] usb 1-1: USB disconnect, device number 2
[ 1159.781121][T10045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1159.838710][T10045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1159.904214][T10045] bridge_slave_1: entered allmulticast mode
[ 1160.023632][T10045] bridge_slave_1: entered promiscuous mode
[ 1160.984811][T10045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1161.296562][T10045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1161.761791][ T9875] hsr_slave_0: left promiscuous mode
[ 1161.779490][T10142] loop8: detected capacity change from 0 to 1024
[ 1161.806158][ T9875] hsr_slave_1: left promiscuous mode
[ 1161.823563][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1161.878819][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1161.981433][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1162.024578][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1162.036904][T10142] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1162.145329][ T9875] veth1_macvtap: left promiscuous mode
[ 1162.172041][ T9875] veth0_macvtap: left promiscuous mode
[ 1162.190807][ T9875] veth1_vlan: left promiscuous mode
[ 1162.196423][ T9875] veth0_vlan: left promiscuous mode
[ 1162.252561][T10140] loop5: detected capacity change from 0 to 7
[ 1162.387199][T10140] Dev loop5: unable to read RDB block 7
[ 1162.561935][T10140]  loop5: AHDI p1 p2 p3
[ 1162.566255][T10140] loop5: partition table partially beyond EOD, truncated
[ 1162.739696][T10140] loop5: p1 start 1818582900 is beyond EOD, truncated
[ 1162.803050][T10140] loop5: p3 start 335544320 is beyond EOD, truncated
[ 1162.945347][ T9618] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1165.209350][ T7064] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[ 1165.426411][ T7064] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1165.499245][ T7064] usb 9-1: config 0 has no interfaces?
[ 1165.505050][ T7064] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1165.529506][ T9875] team0 (unregistering): Port device team_slave_1 removed
[ 1165.599068][ T7064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1165.661009][ T7064] usb 9-1: config 0 descriptor??
[ 1165.732350][ T9875] team0 (unregistering): Port device team_slave_0 removed
[ 1165.905370][ T7064] usb 9-1: USB disconnect, device number 3
[ 1167.549417][T10045] team0: Port device team_slave_0 added
[ 1167.681749][T10045] team0: Port device team_slave_1 added
[ 1168.206883][T10045] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1168.255216][T10045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1168.378282][T10045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1168.487108][T10045] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1168.544423][T10045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1168.697954][T10045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1169.047332][ T5829] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1169.297657][ T5829] usb 1-1: Using ep0 maxpacket: 32
[ 1169.377426][ T5829] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[ 1169.397010][ T5829] usb 1-1: config 0 has no interface number 0
[ 1169.403386][ T5829] usb 1-1: config 0 interface 184 has no altsetting 0
[ 1169.571140][ T5829] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1169.630161][T10045] hsr_slave_0: entered promiscuous mode
[ 1169.660252][T10045] hsr_slave_1: entered promiscuous mode
[ 1169.676811][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.730480][T10045] debugfs: 'hsr0' already exists in 'hsr'
[ 1169.761257][ T5829] usb 1-1: Product: syz
[ 1169.776758][T10045] Cannot create hsr debugfs directory
[ 1169.796786][ T5829] usb 1-1: Manufacturer: syz
[ 1169.825883][ T5829] usb 1-1: SerialNumber: syz
[ 1169.949596][ T5829] usb 1-1: config 0 descriptor??
[ 1170.148811][ T5831] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1170.443281][ T5831] usb 9-1: Using ep0 maxpacket: 16
[ 1170.539822][ T5831] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[ 1170.596514][ T5831] usb 9-1: config 0 has no interface number 0
[ 1170.657213][ T5831] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1170.730956][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1170.746790][ T5831] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1170.775214][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1170.853494][ T5831] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1170.869209][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1170.913331][ T5831] usb 9-1: Product: syz
[ 1170.963473][ T5831] usb 9-1: SerialNumber: syz
[ 1170.975131][T10185] program syz.6.563 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1171.021774][ T5831] usb 9-1: config 0 descriptor??
[ 1171.193716][ T5831] cm109 9-1:0.8: invalid payload size 0, expected 4
[ 1171.268286][ T5831] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input8
[ 1171.393604][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.403452][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.411200][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.425963][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.435570][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.443441][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.456005][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.465977][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.473550][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.487760][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1171.845439][    C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1171.855067][ T5831] usb 9-1: USB disconnect, device number 4
[ 1171.983144][ T5831] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1172.177837][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1172.265091][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1172.325690][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1172.382815][ T5829] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61
[ 1172.736355][ T7064] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[ 1172.974175][ T7064] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 1173.012148][ T7064] usb 7-1: config 0 has no interface number 0
[ 1173.035193][ T7064] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1173.102849][ T7064] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1173.172488][ T7064] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1173.247761][ T7064] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1173.301531][ T7064] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1173.386122][ T7064] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1173.440929][ T7064] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1173.478458][ T7064] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.549354][ T7064] usb 7-1: config 0 descriptor??
[ 1173.598643][T10192] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1173.685434][T10192] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1173.826790][ T7064] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1173.933937][ T7064] usb 1-1: USB disconnect, device number 3
[ 1174.074776][  T795] usb 7-1: USB disconnect, device number 4
[ 1174.119429][  T795] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 1174.347879][ T9741] usb 10-1: new low-speed USB device number 3 using dummy_hcd
[ 1174.611255][ T9741] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1174.631460][T10045] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1174.664567][ T9741] usb 10-1: config 0 has no interfaces?
[ 1174.715078][ T9741] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1174.762564][ T9741] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1174.881320][ T9741] usb 10-1: config 0 descriptor??
[ 1174.905749][T10045] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1175.092766][T10045] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1175.198148][T10045] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1175.251484][ T5829] usb 10-1: USB disconnect, device number 3
[ 1175.848304][T10214] netlink: 'syz.6.569': attribute type 10 has an invalid length.
[ 1176.112222][T10214] team0: Port device macvlan0 added
[ 1177.705409][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.575'.
[ 1178.720724][T10045] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1179.179874][T10045] 8021q: adding VLAN 0 to HW filter on device team0
[ 1179.350859][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1179.358497][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1179.539459][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1179.547387][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1181.281695][  T795] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[ 1181.535677][  T795] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1181.642642][  T795] usb 1-1: config 0 has no interfaces?
[ 1181.648419][  T795] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1181.741264][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1181.899262][T10270] syz.9.583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1182.090761][  T795] usb 1-1: config 0 descriptor??
[ 1182.334057][ T5829] usb 1-1: USB disconnect, device number 4
[ 1185.217684][T10045] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1186.277905][T10045] veth0_vlan: entered promiscuous mode
[ 1186.576837][T10045] veth1_vlan: entered promiscuous mode
[ 1186.889434][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1186.905261][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1187.599686][T10045] veth0_macvtap: entered promiscuous mode
[ 1187.822049][T10045] veth1_macvtap: entered promiscuous mode
[ 1188.142384][T10045] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1188.313503][T10045] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1188.668186][  T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.745551][  T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.948302][  T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1189.036486][  T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1190.706274][  T795] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[ 1190.958801][  T795] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1191.014523][  T795] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1191.083644][  T795] usb 1-1: config 0 has no interface number 0
[ 1191.123193][  T795] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1191.173485][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1191.248739][  T795] usb 1-1: config 0 descriptor??
[ 1191.295953][ T9741] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1191.311980][  T795] iowarrior 1-1:0.1: no interrupt-in endpoint found
[ 1191.515904][ T9741] usb 9-1: Using ep0 maxpacket: 32
[ 1191.582179][ T9741] usb 9-1: config 0 has an invalid interface number: 119 but max is 0
[ 1191.612583][ T9741] usb 9-1: config 0 has no interface number 0
[ 1191.631164][  T795] usb 1-1: USB disconnect, device number 5
[ 1191.696149][ T9741] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1191.782932][ T9741] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1191.820701][ T9741] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[ 1191.879451][ T9741] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1192.017538][ T9741] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1192.066123][ T9741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1192.105818][ T9741] usb 9-1: Product: syz
[ 1192.110248][ T9741] usb 9-1: Manufacturer: syz
[ 1192.143861][ T9741] usb 9-1: SerialNumber: syz
[ 1192.198998][ T9741] usb 9-1: config 0 descriptor??
[ 1192.270336][T10329] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1192.436150][ T9741] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input9
[ 1192.503412][ T5115] usb 9-1: BOGUS urb xfer, pipe 1 != type 3
[ 1192.825416][ T9741] usb 9-1: USB disconnect, device number 5
[ 1196.173980][ T5829] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1196.406948][ T5829] usb 9-1: device descriptor read/64, error -71
[ 1196.693817][ T5829] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1196.916314][ T5829] usb 9-1: device descriptor read/64, error -71
[ 1196.994237][ T8022] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1197.082216][ T5829] usb usb9-port1: attempt power cycle
[ 1197.263311][ T8022] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.347991][ T8022] usb 10-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1197.393064][ T8022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1197.460587][ T8022] usb 10-1: config 0 descriptor??
[ 1197.533091][ T5829] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1197.559881][ T8022] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1197.590839][ T5829] usb 9-1: device descriptor read/8, error -71
[ 1197.880884][ T5829] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1197.950015][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.9.604'.
[ 1197.980298][ T5829] usb 9-1: device descriptor read/8, error -71
[ 1198.100485][T10367] netdevsim netdevsim9 netdevsim2: entered promiscuous mode
[ 1198.125236][ T5829] usb usb9-port1: unable to enumerate USB device
[ 1198.251958][T10367] netdevsim netdevsim9 netdevsim2: entered allmulticast mode
[ 1198.406125][ T5829] usb 10-1: USB disconnect, device number 4
[ 1199.153411][T10372] Bluetooth: hci1: command 0x0406 tx timeout
[ 1199.162481][T10372] Bluetooth: hci6: command 0x0406 tx timeout
[ 1199.168720][T10372] Bluetooth: hci7: command 0x0406 tx timeout
[ 1200.092036][ T5829] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[ 1200.226632][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1200.273344][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1200.321625][ T5829] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1200.354751][ T5829] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1200.441559][ T5829] usb 10-1: config 0 has no interface number 0
[ 1200.448062][ T5829] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1200.542006][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.622453][ T5829] usb 10-1: config 0 descriptor??
[ 1200.709237][ T5829] iowarrior 10-1:0.1: no interrupt-in endpoint found
[ 1200.876251][  T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1200.927042][ T5829] usb 10-1: USB disconnect, device number 5
[ 1200.948769][  T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1203.030306][ T9741] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1203.244412][ T9741] usb 9-1: Using ep0 maxpacket: 32
[ 1203.286901][ T9741] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[ 1203.330080][ T9741] usb 9-1: config 0 has no interface number 0
[ 1203.467187][  T795] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1203.520204][ T9741] usb 9-1: config 0 interface 184 has no altsetting 0
[ 1203.596108][ T9741] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1203.651843][ T9741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.664224][  T795] usb 7-1: Using ep0 maxpacket: 16
[ 1203.709125][  T795] usb 7-1: config 1 has an invalid interface number: 36 but max is 0
[ 1203.739428][ T9741] usb 9-1: Product: syz
[ 1203.780101][ T9741] usb 9-1: Manufacturer: syz
[ 1203.785563][  T795] usb 7-1: config 1 has no interface number 0
[ 1203.808737][ T9741] usb 9-1: SerialNumber: syz
[ 1203.884880][  T795] usb 7-1: config 1 interface 36 has no altsetting 0
[ 1203.896555][ T9741] usb 9-1: config 0 descriptor??
[ 1203.947652][  T795] usb 7-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=e6.1c
[ 1204.018639][  T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1204.120209][  T795] usb 7-1: Product: syz
[ 1204.150138][  T795] usb 7-1: Manufacturer: syz
[ 1204.155135][  T795] usb 7-1: SerialNumber: syz
[ 1204.702018][ T9741] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1204.765192][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1204.832169][ T9741] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1204.894365][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1205.260979][  T795] ax88179_178a 7-1:1.36: probe with driver ax88179_178a failed with error -22
[ 1205.360537][  T795] usb 7-1: USB disconnect, device number 5
[ 1206.105440][ T9741] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1206.167768][ T9741] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1206.206920][ T9741] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1206.290396][ T9741] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61
[ 1207.865105][ T9741] usb 9-1: USB disconnect, device number 10
[ 1208.817386][ T5829] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[ 1209.038664][ T5829] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1209.080235][ T5829] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1209.157122][ T5829] usb 9-1: config 0 has no interface number 0
[ 1209.163527][ T5829] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1209.229589][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.321296][ T5829] usb 9-1: config 0 descriptor??
[ 1209.387717][   T49] Bluetooth: hci2: command 0x0406 tx timeout
[ 1209.401992][ T5829] iowarrior 9-1:0.1: no interrupt-in endpoint found
[ 1209.607097][ T5829] usb 9-1: USB disconnect, device number 11
[ 1210.140774][T10461] loop9: detected capacity change from 0 to 1024
[ 1210.373009][T10461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1210.536486][ T9741] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1210.796749][ T9741] usb 1-1: Using ep0 maxpacket: 16
[ 1210.844923][ T9741] usb 1-1: config 1 has an invalid interface number: 36 but max is 0
[ 1210.872408][ T9741] usb 1-1: config 1 has no interface number 0
[ 1210.903159][ T9741] usb 1-1: config 1 interface 36 has no altsetting 0
[ 1210.987541][ T9741] usb 1-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=e6.1c
[ 1211.016259][ T9741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.098989][ T9633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1211.116738][ T9741] usb 1-1: Product: syz
[ 1211.143063][ T9741] usb 1-1: Manufacturer: syz
[ 1211.207469][ T9741] usb 1-1: SerialNumber: syz
[ 1211.629901][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1211.674724][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1211.834938][ T9741] ax88179_178a 1-1:1.36: probe with driver ax88179_178a failed with error -22
[ 1212.002260][ T9741] usb 1-1: USB disconnect, device number 6
[ 1214.902062][ T9741] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[ 1215.186564][ T9741] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1215.249188][ T9741] usb 7-1: config 0 has no interfaces?
[ 1215.274097][ T9741] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1215.283433][ T9741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.415523][ T9741] usb 7-1: config 0 descriptor??
[ 1215.778633][ T9741] usb 7-1: USB disconnect, device number 6
[ 1216.046335][  T795] usb 10-1: new low-speed USB device number 6 using dummy_hcd
[ 1216.289361][  T795] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1216.319046][T10516] loop0: detected capacity change from 0 to 1024
[ 1216.336694][  T795] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1216.387555][  T795] usb 10-1: config 0 has no interface number 0
[ 1216.404242][  T795] usb 10-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1216.438972][  T795] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1216.489842][T10516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1216.490190][  T795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1216.521960][  T795] usb 10-1: config 0 descriptor??
[ 1216.612723][  T795] iowarrior 10-1:0.1: no interrupt-in endpoint found
[ 1216.818849][ T8022] usb 10-1: USB disconnect, device number 6
[ 1217.032809][ T9683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1217.843114][ T5831] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1218.063047][ T5831] usb 1-1: Using ep0 maxpacket: 16
[ 1218.170417][ T5831] usb 1-1: config 1 has an invalid interface number: 36 but max is 0
[ 1218.188984][ T5831] usb 1-1: config 1 has no interface number 0
[ 1218.247963][ T5831] usb 1-1: config 1 interface 36 has no altsetting 0
[ 1218.289471][ T5831] usb 1-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=e6.1c
[ 1218.403470][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.411744][ T5831] usb 1-1: Product: syz
[ 1218.447691][ T5831] usb 1-1: Manufacturer: syz
[ 1218.472372][ T5831] usb 1-1: SerialNumber: syz
[ 1218.837224][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1218.930490][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1219.222405][ T5831] ax88179_178a 1-1:1.36: probe with driver ax88179_178a failed with error -22
[ 1219.322341][ T5831] usb 1-1: USB disconnect, device number 7
[ 1219.469689][T10551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.652'.
[ 1221.617635][T10568] loop3: detected capacity change from 0 to 1024
[ 1221.922750][T10568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1222.769372][T10045] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1223.312882][ T7064] usb 9-1: new low-speed USB device number 12 using dummy_hcd
[ 1223.390438][ T5828] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[ 1223.614160][ T7064] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1223.637438][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1223.680190][ T7064] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1223.690869][ T5828] usb 1-1: config 0 has no interfaces?
[ 1223.703455][ T5828] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1223.744680][ T7064] usb 9-1: config 0 has no interface number 0
[ 1223.753613][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.796983][ T7064] usb 9-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1223.853524][ T5828] usb 1-1: config 0 descriptor??
[ 1223.918066][ T7064] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1223.969351][ T7064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1224.080145][ T7064] usb 9-1: config 0 descriptor??
[ 1224.142520][ T7064] iowarrior 9-1:0.1: no interrupt-in endpoint found
[ 1224.244513][ T5828] usb 1-1: USB disconnect, device number 8
[ 1224.428364][ T5831] usb 9-1: USB disconnect, device number 12
[ 1227.158569][ T5829] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1227.458258][ T5829] usb 4-1: Using ep0 maxpacket: 16
[ 1227.568451][ T5829] usb 4-1: config 1 has an invalid interface number: 36 but max is 0
[ 1227.576822][ T5829] usb 4-1: config 1 has no interface number 0
[ 1227.708133][ T5829] usb 4-1: config 1 interface 36 has no altsetting 0
[ 1227.855100][ T5829] usb 4-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=e6.1c
[ 1227.962565][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.002863][ T5829] usb 4-1: Product: syz
[ 1228.075284][ T5829] usb 4-1: Manufacturer: syz
[ 1228.127817][ T5829] usb 4-1: SerialNumber: syz
[ 1228.521218][T10604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1228.559155][T10604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1228.828197][ T5829] ax88179_178a 4-1:1.36: probe with driver ax88179_178a failed with error -22
[ 1229.078335][ T5829] usb 4-1: USB disconnect, device number 2
[ 1234.176043][ T5828] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[ 1234.381414][ T5828] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1234.458700][ T5828] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.634821][ T5828] usb 7-1: config 0 has no interface number 0
[ 1234.720610][ T5828] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1234.822132][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1234.880995][ T5828] usb 7-1: config 0 descriptor??
[ 1234.949962][ T5828] iowarrior 7-1:0.1: no interrupt-in endpoint found
[ 1235.355647][ T5828] usb 7-1: USB disconnect, device number 7
[ 1236.475145][ T5829] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1236.746327][ T5829] usb 4-1: Using ep0 maxpacket: 16
[ 1236.771930][ T5829] usb 4-1: config 1 has an invalid interface number: 36 but max is 0
[ 1236.900856][ T5829] usb 4-1: config 1 has no interface number 0
[ 1236.920467][ T5829] usb 4-1: config 1 interface 36 has no altsetting 0
[ 1237.044930][ T5829] usb 4-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=e6.1c
[ 1237.088971][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.163882][ T5829] usb 4-1: Product: syz
[ 1237.187607][ T5829] usb 4-1: Manufacturer: syz
[ 1237.233803][ T5829] usb 4-1: SerialNumber: syz
[ 1237.627310][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1237.784071][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1237.965844][ T5829] ax88179_178a 4-1:1.36: probe with driver ax88179_178a failed with error -22
[ 1238.131321][ T5829] usb 4-1: USB disconnect, device number 3
[ 1245.320994][   T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1245.412044][   T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1245.429011][   T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1245.453901][   T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1245.466561][   T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1247.612552][T10370] Bluetooth: hci3: command tx timeout
[ 1247.910709][T10718] loop6: detected capacity change from 0 to 512
[ 1248.239380][T10718] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1248.279576][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1248.279874][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1248.868826][T10724] syzkaller0: entered promiscuous mode
[ 1248.874445][T10724] syzkaller0: entered allmulticast mode
[ 1249.643981][T10706] chnl_net:caif_netlink_parms(): no params data found
[ 1249.687362][T10370] Bluetooth: hci3: command tx timeout
[ 1251.199707][ T9631] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1251.768470][T10370] Bluetooth: hci3: command tx timeout
[ 1251.802820][ T5991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.473898][   T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1252.491346][   T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1252.501232][   T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1252.516141][   T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1252.541295][ T5991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.556328][   T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1253.148507][T10370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1253.187947][T10370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1253.201448][T10370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1253.225986][T10370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1253.257523][ T5991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1253.280432][T10370] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1253.591749][ T5991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1253.850516][T10370] Bluetooth: hci3: command tx timeout
[ 1254.289659][T10749] kvm: pic: non byte read
[ 1254.444979][T10749] kvm: pic: non byte read
[ 1254.450638][T10749] kvm: pic: non byte read
[ 1254.456208][T10749] kvm: pic: non byte read
[ 1254.514968][T10749] kvm: pic: non byte read
[ 1254.540931][T10749] kvm: pic: non byte read
[ 1254.580528][T10749] kvm: pic: non byte read
[ 1254.814730][T10370] Bluetooth: hci2: command tx timeout
[ 1255.091294][T10706] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1255.126719][T10706] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1255.147116][T10706] bridge_slave_0: entered allmulticast mode
[ 1255.190803][T10706] bridge_slave_0: entered promiscuous mode
[ 1255.363953][T10370] Bluetooth: hci4: command tx timeout
[ 1255.611606][T10706] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1255.665341][T10706] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1255.673236][T10706] bridge_slave_1: entered allmulticast mode
[ 1255.795111][T10706] bridge_slave_1: entered promiscuous mode
[ 1256.824055][T10763] syzkaller0: entered promiscuous mode
[ 1256.835485][T10763] syzkaller0: entered allmulticast mode
[ 1256.893249][T10370] Bluetooth: hci2: command tx timeout
[ 1257.119036][T10706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1257.199103][T10706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1257.445792][T10370] Bluetooth: hci4: command tx timeout
[ 1257.981951][T10780] loop3: detected capacity change from 0 to 512
[ 1258.066866][T10780] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1258.154230][T10706] team0: Port device team_slave_0 added
[ 1258.507773][T10706] team0: Port device team_slave_1 added
[ 1258.524474][T10786] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1258.962342][T10370] Bluetooth: hci2: command tx timeout
[ 1259.071609][ T5991] bridge_slave_1: left allmulticast mode
[ 1259.078858][ T5991] bridge_slave_1: left promiscuous mode
[ 1259.112902][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1259.210902][ T5991] bridge_slave_0: left allmulticast mode
[ 1259.257067][ T5991] bridge_slave_0: left promiscuous mode
[ 1259.264230][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1259.531889][T10370] Bluetooth: hci4: command tx timeout
[ 1259.991913][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1260.030927][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1260.122631][ T5991] bond0 (unregistering): Released all slaves
[ 1260.345980][T10706] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1260.353721][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1260.597692][T10706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1260.699025][T10742] chnl_net:caif_netlink_parms(): no params data found
[ 1260.743867][T10045] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1260.784285][T10804] tipc: Started in network mode
[ 1260.823707][T10804] tipc: Node identity ac14140f, cluster identity 4711
[ 1260.837592][T10804] tipc: New replicast peer: 255.255.255.255
[ 1260.880119][T10804] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1261.042115][T10370] Bluetooth: hci2: command tx timeout
[ 1261.116525][T10706] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1261.148694][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1261.226839][T10706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1261.314336][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'.
[ 1261.641713][T10370] Bluetooth: hci4: command tx timeout
[ 1261.992775][ T5829] tipc: Node number set to 2886997007
[ 1262.241006][ T5991] hsr_slave_0: left promiscuous mode
[ 1262.281362][ T5991] hsr_slave_1: left promiscuous mode
[ 1262.326404][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1262.338985][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1262.377665][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1262.400945][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1262.531235][ T5991] veth1_macvtap: left promiscuous mode
[ 1262.536998][ T5991] veth0_macvtap: left promiscuous mode
[ 1262.570791][ T5991] veth1_vlan: left promiscuous mode
[ 1262.590539][ T5991] veth0_vlan: left promiscuous mode
[ 1264.355313][ T5991] team0 (unregistering): Port device team_slave_1 removed
[ 1264.431616][ T5991] team0 (unregistering): Port device team_slave_0 removed
[ 1266.096965][T10706] hsr_slave_0: entered promiscuous mode
[ 1266.119987][T10706] hsr_slave_1: entered promiscuous mode
[ 1266.159032][T10706] debugfs: 'hsr0' already exists in 'hsr'
[ 1266.164989][T10706] Cannot create hsr debugfs directory
[ 1266.892531][T10742] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1266.938742][T10742] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1266.950764][T10742] bridge_slave_0: entered allmulticast mode
[ 1266.962058][T10742] bridge_slave_0: entered promiscuous mode
[ 1267.127657][T10746] chnl_net:caif_netlink_parms(): no params data found
[ 1267.231121][T10742] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1267.278612][T10742] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1267.286197][T10742] bridge_slave_1: entered allmulticast mode
[ 1267.306378][T10742] bridge_slave_1: entered promiscuous mode
[ 1267.874009][ T9875] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1268.515177][ T9875] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1268.628966][T10742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1268.729813][ T5829] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1268.822194][ T9875] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1268.863958][T10742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1268.952484][ T5829] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1268.994581][ T5829] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1269.026657][ T5829] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1269.036087][ T5829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1269.077106][ T5829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1269.123739][ T5829] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1269.137010][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1269.166542][ T5829] usb 7-1: Product: syz
[ 1269.181347][ T5829] usb 7-1: Manufacturer: syz
[ 1269.230932][ T5829] cdc_wdm 7-1:1.0: skipping garbage
[ 1269.248313][ T5829] cdc_wdm 7-1:1.0: skipping garbage
[ 1269.261230][ T5829] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1269.297020][ T5829] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1269.322981][ T9875] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1269.488319][ T5829] usb 7-1: USB disconnect, device number 8
[ 1269.594489][T10742] team0: Port device team_slave_0 added
[ 1269.669440][T10827] syzkaller0: entered promiscuous mode
[ 1269.689109][T10827] syzkaller0: entered allmulticast mode
[ 1269.814558][T10742] team0: Port device team_slave_1 added
[ 1270.153242][T10742] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1270.162529][T10742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1270.226896][T10742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1270.291524][T10742] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1270.298994][T10742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1270.329722][T10742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1270.796524][   T49] Bluetooth: hci0: command 0x0406 tx timeout
[ 1270.821329][T10746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1270.844380][T10746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1270.867673][T10746] bridge_slave_0: entered allmulticast mode
[ 1270.898261][T10746] bridge_slave_0: entered promiscuous mode
[ 1270.959789][T10746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1271.026453][T10746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1271.034394][T10746] bridge_slave_1: entered allmulticast mode
[ 1271.073573][T10746] bridge_slave_1: entered promiscuous mode
[ 1271.177222][T10845] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1271.608312][ T9875] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1271.743565][T10746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1272.003873][ T9875] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.015926][ T7064] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1272.080399][T10746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1272.182745][T10742] hsr_slave_0: entered promiscuous mode
[ 1272.196192][T10742] hsr_slave_1: entered promiscuous mode
[ 1272.202585][ T7064] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1272.205548][T10742] debugfs: 'hsr0' already exists in 'hsr'
[ 1272.226437][T10742] Cannot create hsr debugfs directory
[ 1272.256522][ T7064] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1272.295032][ T7064] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1272.316478][ T7064] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1272.360993][ T7064] usb 7-1: config 0 descriptor??
[ 1272.383509][ T9875] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.426417][ T7064] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1272.576115][T10746] team0: Port device team_slave_0 added
[ 1272.664247][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'.
[ 1272.783924][ T9875] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.829336][T10746] team0: Port device team_slave_1 added
[ 1273.301540][T10746] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1273.316152][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1273.370082][ T7064] usb 7-1: USB disconnect, device number 9
[ 1273.428647][T10746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1273.602400][   T29] audit: type=1326 audit(1772793006.927:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1273.692933][   T29] audit: type=1326 audit(1772793006.927:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1273.727195][T10746] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1273.735385][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1273.745435][   T29] audit: type=1326 audit(1772793006.967:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1273.865214][T10746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1273.910604][   T29] audit: type=1326 audit(1772793007.007:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1273.975984][   T29] audit: type=1326 audit(1772793007.007:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1274.085051][   T29] audit: type=1326 audit(1772793007.007:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1274.254524][   T29] audit: type=1326 audit(1772793007.017:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1274.304684][   T29] audit: type=1326 audit(1772793007.017:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1274.367017][   T29] audit: type=1326 audit(1772793007.017:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10861 comm="syz.6.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f75cc39c799 code=0x7ffc0000
[ 1274.575870][T10864] bridge0: port 3(bond0) entered blocking state
[ 1274.582517][T10864] bridge0: port 3(bond0) entered disabled state
[ 1274.631297][T10864] bond0: entered allmulticast mode
[ 1274.658154][T10864] bond_slave_0: entered allmulticast mode
[ 1274.679928][T10864] bond_slave_1: entered allmulticast mode
[ 1274.725030][T10864] bond0: entered promiscuous mode
[ 1274.731114][T10864] bond_slave_0: entered promiscuous mode
[ 1274.739680][T10864] bond_slave_1: entered promiscuous mode
[ 1274.760871][T10864] bridge0: port 3(bond0) entered blocking state
[ 1274.768011][T10864] bridge0: port 3(bond0) entered forwarding state
[ 1275.576075][T10746] hsr_slave_0: entered promiscuous mode
[ 1275.627499][T10746] hsr_slave_1: entered promiscuous mode
[ 1275.638039][T10746] debugfs: 'hsr0' already exists in 'hsr'
[ 1275.684080][T10746] Cannot create hsr debugfs directory
[ 1276.399807][ T9875] bridge_slave_1: left allmulticast mode
[ 1276.431725][ T9875] bridge_slave_1: left promiscuous mode
[ 1276.464839][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1276.564198][ T9875] bridge_slave_0: left allmulticast mode
[ 1276.579818][ T9875] bridge_slave_0: left promiscuous mode
[ 1276.600457][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1276.641951][ T9875] bridge_slave_1: left allmulticast mode
[ 1276.658618][ T9875] bridge_slave_1: left promiscuous mode
[ 1276.674320][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1276.705510][ T9875] bridge_slave_0: left allmulticast mode
[ 1276.711360][ T9875] bridge_slave_0: left promiscuous mode
[ 1276.722473][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1278.499536][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1278.539378][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1278.567024][ T9875] bond0 (unregistering): Released all slaves
[ 1278.950686][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1278.984371][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1279.015768][ T9875] bond0 (unregistering): Released all slaves
[ 1279.303064][T10706] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1279.368421][T10871] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 1279.861549][T10706] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1279.926810][T10706] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1279.951881][  T795] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1280.089036][T10706] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1280.146439][  T795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1280.191994][  T795] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1280.237627][  T795] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1280.281808][  T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1280.334043][  T795] usb 7-1: config 0 descriptor??
[ 1280.425611][  T795] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1280.721718][  T795] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1280.901390][  T795] usb 4-1: Using ep0 maxpacket: 32
[ 1280.924664][  T795] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1280.978198][  T795] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1280.987826][  T795] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1281.008793][  T795] usb 4-1: Product: syz
[ 1281.013565][  T795] usb 4-1: Manufacturer: syz
[ 1281.018375][  T795] usb 4-1: SerialNumber: syz
[ 1281.029237][  T795] usb 4-1: config 0 descriptor??
[ 1281.083816][T10882] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1281.162513][  T795] usb 7-1: USB disconnect, device number 10
[ 1281.464897][  T795] usb 4-1: USB disconnect, device number 4
[ 1281.625376][ T9875] hsr_slave_0: left promiscuous mode
[ 1281.659074][ T9875] hsr_slave_1: left promiscuous mode
[ 1281.688490][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1281.698069][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1281.712479][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1281.723700][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1281.758348][ T9875] hsr_slave_0: left promiscuous mode
[ 1281.773956][ T9875] hsr_slave_1: left promiscuous mode
[ 1281.782974][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1281.791013][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1281.802042][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1281.809636][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1281.850503][ T9875] veth1_macvtap: left promiscuous mode
[ 1281.858407][ T9875] veth0_macvtap: left promiscuous mode
[ 1281.864532][ T9875] veth1_vlan: left promiscuous mode
[ 1281.870086][ T9875] veth0_vlan: left promiscuous mode
[ 1281.877526][ T9875] veth1_macvtap: left promiscuous mode
[ 1281.886095][ T9875] veth0_macvtap: left promiscuous mode
[ 1281.892187][ T9875] veth1_vlan: left promiscuous mode
[ 1281.897675][ T9875] veth0_vlan: left promiscuous mode
[ 1283.398793][ T9875] team0 (unregistering): Port device team_slave_1 removed
[ 1283.424853][ T9875] team0 (unregistering): Port device team_slave_0 removed
[ 1284.019130][ T9875] team0 (unregistering): Port device team_slave_1 removed
[ 1284.064968][ T9875] team0 (unregistering): Port device team_slave_0 removed
[ 1284.391359][T10885] netlink: 56 bytes leftover after parsing attributes in process `syz.6.723'.
[ 1284.474286][T10742] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1284.587586][T10742] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1284.814090][T10742] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1284.962739][T10742] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1286.196979][  T795] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1286.304623][T10706] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1286.384682][  T795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1286.415996][  T795] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1286.469123][  T795] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1286.508279][  T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1286.532822][  T795] usb 7-1: config 0 descriptor??
[ 1286.604549][  T795] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1286.756726][T10706] 8021q: adding VLAN 0 to HW filter on device team0
[ 1286.784969][T10746] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1286.839963][T10746] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1286.927717][T10746] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1286.997139][T10746] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1287.129331][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1287.136889][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1287.260412][  T564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.268229][  T564] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1287.333471][ T7064] usb 7-1: USB disconnect, device number 11
[ 1288.238081][T10508] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1288.442962][T10508] usb 7-1: Using ep0 maxpacket: 32
[ 1288.482847][T10508] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1288.536651][T10508] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1288.565217][T10742] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1288.577526][T10508] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1288.585960][T10508] usb 7-1: Product: syz
[ 1288.617657][T10508] usb 7-1: Manufacturer: syz
[ 1288.622510][T10508] usb 7-1: SerialNumber: syz
[ 1288.672980][T10508] usb 7-1: config 0 descriptor??
[ 1288.690835][T10919] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1288.993805][ T7064] usb 7-1: USB disconnect, device number 12
[ 1289.291958][T10742] 8021q: adding VLAN 0 to HW filter on device team0
[ 1289.582289][ T9875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1289.590038][ T9875] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1289.743202][ T9875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1289.750851][ T9875] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1290.178536][T10746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1290.187642][T10940] netlink: 56 bytes leftover after parsing attributes in process `syz.6.734'.
[ 1290.843742][T10746] 8021q: adding VLAN 0 to HW filter on device team0
[ 1290.953224][T10946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1291.008648][T10948] syzkaller0: entered promiscuous mode
[ 1291.015275][T10948] syzkaller0: entered allmulticast mode
[ 1291.055951][ T9875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1291.063525][ T9875] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1291.141491][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1291.149188][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1291.184380][T10946] tipc: Resetting bearer <eth:syzkaller0>
[ 1291.212742][T10944] tipc: Resetting bearer <eth:syzkaller0>
[ 1291.231058][T10944] tipc: Disabling bearer <eth:syzkaller0>
[ 1291.294745][T10706] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1292.444557][T10706] veth0_vlan: entered promiscuous mode
[ 1292.643112][T10742] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1292.752895][T10706] veth1_vlan: entered promiscuous mode
[ 1293.661847][T10706] veth0_macvtap: entered promiscuous mode
[ 1293.802698][T10742] veth0_vlan: entered promiscuous mode
[ 1293.834357][T10706] veth1_macvtap: entered promiscuous mode
[ 1294.159991][T10742] veth1_vlan: entered promiscuous mode
[ 1294.304060][T10973] netlink: 56 bytes leftover after parsing attributes in process `syz.6.743'.
[ 1294.375859][T10706] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1294.468849][T10746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1294.508871][T10706] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1294.708686][T10975] tipc: Started in network mode
[ 1294.713870][T10975] tipc: Node identity 0e742c47e4f7, cluster identity 4711
[ 1294.735053][T10975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1294.775481][T10977] syzkaller0: entered promiscuous mode
[ 1294.799433][T10977] syzkaller0: entered allmulticast mode
[ 1294.917458][T10975] tipc: Resetting bearer <eth:syzkaller0>
[ 1294.936659][ T5978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1294.958231][ T9875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1295.025615][T10974] tipc: Resetting bearer <eth:syzkaller0>
[ 1295.051100][T10974] tipc: Disabling bearer <eth:syzkaller0>
[ 1295.080254][ T9875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1295.169107][ T9875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1295.217452][T10742] veth0_macvtap: entered promiscuous mode
[ 1295.342170][T10742] veth1_macvtap: entered promiscuous mode
[ 1295.771110][T10742] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1295.912507][T10742] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1296.167224][  T142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1296.215498][  T142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1296.454375][  T142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1296.493398][  T142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1297.827992][T10746] veth0_vlan: entered promiscuous mode
[ 1298.068828][T10746] veth1_vlan: entered promiscuous mode
[ 1298.957602][T10746] veth0_macvtap: entered promiscuous mode
[ 1299.127738][T10746] veth1_macvtap: entered promiscuous mode
[ 1299.687519][T10746] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1299.998084][T10746] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1300.218537][ T9875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.279081][ T9875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.355329][ T9875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.422640][ T9875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1301.359654][T11033] netlink: 56 bytes leftover after parsing attributes in process `syz.6.752'.
[ 1305.400465][   T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1305.446924][   T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1305.460383][   T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1305.476091][   T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1305.491457][   T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1307.058051][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1307.066104][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1307.578063][   T49] Bluetooth: hci1: command tx timeout
[ 1308.176719][ T9875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1308.176782][T11095] netlink: 48 bytes leftover after parsing attributes in process `syz.3.760'.
[ 1308.225720][ T9875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1308.433460][  T564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1308.676905][  T564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1308.927665][T11061] chnl_net:caif_netlink_parms(): no params data found
[ 1309.548367][  T795] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[ 1309.711675][   T49] Bluetooth: hci1: command tx timeout
[ 1309.719444][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1309.727287][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1309.777073][  T564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1309.815710][  T795] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1309.825155][  T795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1309.839182][  T795] usb 3-1: config 0 has no interface number 0
[ 1309.858715][  T795] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1309.877789][  T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1310.068665][  T795] usb 3-1: config 0 descriptor??
[ 1310.132611][  T795] iowarrior 3-1:0.1: no interrupt-in endpoint found
[ 1310.384273][  T564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1310.496784][ T5829] usb 3-1: USB disconnect, device number 2
[ 1311.746195][   T49] Bluetooth: hci1: command tx timeout
[ 1311.940932][  T564] bridge_slave_1: left allmulticast mode
[ 1312.021457][  T564] bridge_slave_1: left promiscuous mode
[ 1312.050720][  T564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.203259][  T564] bridge_slave_0: left allmulticast mode
[ 1312.255402][  T564] bridge_slave_0: left promiscuous mode
[ 1312.261786][  T564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1313.538469][T10370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1313.562226][T10370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1313.577209][T10370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1313.668014][T10370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1313.693277][T10370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1313.817214][T10370] Bluetooth: hci1: command tx timeout
[ 1314.846857][  T564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1314.976256][  T564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1315.067052][  T564] bond0 (unregistering): Released all slaves
[ 1315.897062][   T49] Bluetooth: hci3: command tx timeout
[ 1315.946337][  T564] hsr_slave_0: left promiscuous mode
[ 1315.966360][  T564] hsr_slave_1: left promiscuous mode
[ 1315.990445][  T564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1316.013754][  T564] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1316.042831][  T564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1316.051188][  T564] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1316.166419][  T564] veth1_macvtap: left promiscuous mode
[ 1316.172074][  T564] veth0_macvtap: left promiscuous mode
[ 1316.254115][  T564] veth1_vlan: left promiscuous mode
[ 1316.259735][  T564] veth0_vlan: left promiscuous mode
[ 1317.972876][   T49] Bluetooth: hci3: command tx timeout
[ 1319.814340][  T564] team0 (unregistering): Port device team_slave_1 removed
[ 1319.944943][  T564] team0 (unregistering): Port device team_slave_0 removed
[ 1320.054033][   T49] Bluetooth: hci3: command tx timeout
[ 1320.932743][T11061] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1320.940330][T11061] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1320.972122][T11061] bridge_slave_0: entered allmulticast mode
[ 1321.002376][T11061] bridge_slave_0: entered promiscuous mode
[ 1321.353918][T11181] fuse: Bad value for 'fd'
[ 1321.459339][T11166] netlink: 48 bytes leftover after parsing attributes in process `syz.6.769'.
[ 1321.491459][T11061] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1321.511614][T11061] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1321.567579][T11061] bridge_slave_1: entered allmulticast mode
[ 1321.585995][T11061] bridge_slave_1: entered promiscuous mode
[ 1322.130677][   T49] Bluetooth: hci3: command tx timeout
[ 1322.576113][T11061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1322.632556][T11061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1323.285049][T11061] team0: Port device team_slave_0 added
[ 1323.619135][  T564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1323.797612][T11061] team0: Port device team_slave_1 added
[ 1324.661305][  T564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1325.057535][T11061] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1325.090640][T11061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1325.191816][T11061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1325.380985][  T564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1325.478430][T11061] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1325.497800][T11061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1325.618743][T11061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1325.784172][  T564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1326.055855][T11133] chnl_net:caif_netlink_parms(): no params data found
[ 1327.411846][T11061] hsr_slave_0: entered promiscuous mode
[ 1327.451486][T11061] hsr_slave_1: entered promiscuous mode
[ 1328.555506][T11224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1328.643387][T11227] syzkaller0: entered promiscuous mode
[ 1328.697702][T11227] syzkaller0: entered allmulticast mode
[ 1328.755416][  T564] bridge_slave_1: left allmulticast mode
[ 1328.773921][  T564] bridge_slave_1: left promiscuous mode
[ 1328.808313][  T564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1328.875605][  T564] bridge_slave_0: left allmulticast mode
[ 1328.907162][  T564] bridge_slave_0: left promiscuous mode
[ 1328.930105][  T564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1330.352767][  T564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1330.402706][  T564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1330.442011][  T564] bond0 (unregistering): Released all slaves
[ 1330.698016][T11228] tipc: Resetting bearer <eth:syzkaller0>
[ 1330.722209][T11222] tipc: Resetting bearer <eth:syzkaller0>
[ 1330.797502][T11222] tipc: Disabling bearer <eth:syzkaller0>
[ 1330.865217][ T7064] tipc: Node number set to 3934465095
[ 1330.889949][T11236] netlink: 48 bytes leftover after parsing attributes in process `syz.2.782'.
[ 1331.399779][  T564] hsr_slave_0: left promiscuous mode
[ 1331.448646][  T564] hsr_slave_1: left promiscuous mode
[ 1331.487076][  T564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1331.536041][  T564] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1331.575157][  T564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1331.619091][  T564] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1331.777252][T11245] netlink: 'syz.2.784': attribute type 10 has an invalid length.
[ 1331.818421][  T564] veth1_macvtap: left promiscuous mode
[ 1331.843492][  T564] veth0_macvtap: left promiscuous mode
[ 1331.861505][  T564] veth1_vlan: left promiscuous mode
[ 1331.877064][  T564] veth0_vlan: left promiscuous mode
[ 1333.982993][  T564] team0 (unregistering): Port device team_slave_1 removed
[ 1334.177107][  T564] team0 (unregistering): Port device team_slave_0 removed
[ 1335.036415][T11133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1335.064832][T11133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1335.099485][T11133] bridge_slave_0: entered allmulticast mode
[ 1335.133257][T11273] CUSE: info not properly terminated
[ 1335.293030][T11133] bridge_slave_0: entered promiscuous mode
[ 1335.510301][T11245] team0: Port device dummy0 added
[ 1335.664442][T11133] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1335.692329][T11133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1335.714587][T11133] bridge_slave_1: entered allmulticast mode
[ 1335.796771][T11133] bridge_slave_1: entered promiscuous mode
[ 1336.623733][T11133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1336.716252][T11133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1336.804403][T11281] tipc: Started in network mode
[ 1336.819088][T11281] tipc: Node identity ca80f9b972e1, cluster identity 4711
[ 1336.841938][T11281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1337.404594][T11280] tipc: Resetting bearer <eth:syzkaller0>
[ 1337.557027][T11278] tipc: Disabling bearer <eth:syzkaller0>
[ 1337.656438][T11133] team0: Port device team_slave_0 added
[ 1337.745085][T11133] team0: Port device team_slave_1 added
[ 1338.412771][T11133] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1338.457292][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1338.581535][T11133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1338.755871][T11133] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1338.768191][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1338.922199][T11133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1339.894397][T11133] hsr_slave_0: entered promiscuous mode
[ 1339.960701][T11133] hsr_slave_1: entered promiscuous mode
[ 1340.042047][T11133] debugfs: 'hsr0' already exists in 'hsr'
[ 1340.047918][T11133] Cannot create hsr debugfs directory
[ 1341.034280][T11061] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1341.153627][T11061] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1341.285713][T11061] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1341.388158][T11061] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1343.797569][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'.
[ 1343.810629][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.799'.
[ 1344.319568][ T5829] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1344.504898][ T5829] usb 4-1: Using ep0 maxpacket: 16
[ 1344.556566][ T5829] usb 4-1: config index 0 descriptor too short (expected 17170, got 18)
[ 1344.619366][ T5829] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32
[ 1344.632448][T11061] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1344.634134][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63
[ 1344.771422][ T5829] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90
[ 1344.812714][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1344.843698][ T5829] usb 4-1: Product: syz
[ 1344.848114][ T5829] usb 4-1: Manufacturer: syz
[ 1344.874698][ T5829] usb 4-1: SerialNumber: syz
[ 1344.927283][ T5829] usb 4-1: config 0 descriptor??
[ 1345.098726][ T5829] ums-freecom 4-1:0.0: USB Mass Storage device detected
[ 1345.442404][T11133] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1345.661915][T11335] netlink: 48 bytes leftover after parsing attributes in process `syz.2.801'.
[ 1345.664200][T11133] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1345.848202][T11061] 8021q: adding VLAN 0 to HW filter on device team0
[ 1345.967924][T11133] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1346.014986][ T5829] usb 4-1: USB disconnect, device number 5
[ 1346.092794][T11133] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1346.372876][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1346.380547][ T6217] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1346.613395][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1346.620903][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1347.874383][T11350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1348.266979][T11348] tipc: Resetting bearer <eth:syzkaller0>
[ 1348.310603][T11346] tipc: Disabling bearer <eth:syzkaller0>
[ 1349.831221][T11133] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1349.961010][T11374] loop6: detected capacity change from 0 to 512
[ 1350.051162][T11374] EXT4-fs: Ignoring removed orlov option
[ 1350.132708][T11374] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1350.204954][T11374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[ 1350.205368][T11133] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.272250][T11374] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.809: corrupted in-inode xattr: e_value size too large
[ 1350.306673][T11374] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1350.316505][    C1] EXT4-fs (loop6): error count since last fsck: 1
[ 1350.332764][    C1] EXT4-fs (loop6): initial error at time 1772793083: ext4_iget_extra_inode:5025: inode 15
[ 1350.343164][    C1] EXT4-fs (loop6): last error at time 1772793083: ext4_iget_extra_inode:5025: inode 15
[ 1350.396726][T11374] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.809: couldn't read orphan inode 15 (err -117)
[ 1350.465884][  T564] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.473849][  T564] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1350.476472][T11374] loop6: lost filesystem error report for type 5 error -117
[ 1350.508538][T11374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1350.614188][  T564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.621892][  T564] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1350.771045][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.809'.
[ 1350.864522][T11382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.810'.
[ 1352.383682][T11061] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1352.429438][ T9631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1353.952095][T11061] veth0_vlan: entered promiscuous mode
[ 1354.171092][T11061] veth1_vlan: entered promiscuous mode
[ 1355.122624][T11061] veth0_macvtap: entered promiscuous mode
[ 1355.421939][T11061] veth1_macvtap: entered promiscuous mode
[ 1356.136385][T11061] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1356.300976][T11133] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1356.416641][T11061] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1356.693357][ T9875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.739092][ T3417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.883352][ T3417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.910607][ T3417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1361.022804][T11133] veth0_vlan: entered promiscuous mode
[ 1361.190477][T11133] veth1_vlan: entered promiscuous mode
[ 1361.782071][T11133] veth0_macvtap: entered promiscuous mode
[ 1361.926676][T11133] veth1_macvtap: entered promiscuous mode
[ 1362.325901][T11133] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1362.638059][T11133] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1362.969503][T11470] loop2: detected capacity change from 0 to 512
[ 1362.979089][ T3417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.030427][ T3417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.039578][ T3417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.138112][ T3417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1363.159627][T11470] EXT4-fs: Ignoring removed orlov option
[ 1363.224889][T11470] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[ 1363.357292][T11470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[ 1363.482462][T11470] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.822: corrupted in-inode xattr: e_value size too large
[ 1363.558615][T11470] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1363.559719][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1363.575679][    C0] EXT4-fs (loop2): initial error at time 1772793096: ext4_iget_extra_inode:5025: inode 15
[ 1363.586038][    C0] EXT4-fs (loop2): last error at time 1772793096: ext4_iget_extra_inode:5025: inode 15
[ 1363.601707][T11470] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.822: couldn't read orphan inode 15 (err -117)
[ 1363.690530][T11470] loop2: lost filesystem error report for type 5 error -117
[ 1363.740822][T11470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1364.102324][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'.
[ 1365.613205][T10370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1365.627320][T10370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1365.637603][T10370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1365.652304][T10370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1365.660456][T10742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1365.689811][T10370] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1367.799366][   T49] Bluetooth: hci4: command tx timeout
[ 1368.733893][T11531] fuse: Bad value for 'fd'
[ 1369.000275][T11501] chnl_net:caif_netlink_parms(): no params data found
[ 1369.866887][   T49] Bluetooth: hci4: command tx timeout
[ 1370.364245][ T9875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1370.655333][ T9875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1370.941469][ T5828] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1370.964890][ T9875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1371.106221][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1371.112895][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1371.234654][ T9875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1371.258157][ T5828] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1371.356153][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1371.395871][ T5828] usb 4-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00
[ 1371.466139][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.551392][ T5828] usb 4-1: config 0 descriptor??
[ 1371.623864][ T5828] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1371.951031][   T49] Bluetooth: hci4: command tx timeout
[ 1372.628794][ T9875] bridge_slave_1: left allmulticast mode
[ 1372.662104][ T9875] bridge_slave_1: left promiscuous mode
[ 1372.699131][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1372.813554][ T9875] bridge_slave_0: left allmulticast mode
[ 1372.878453][ T9875] bridge_slave_0: left promiscuous mode
[ 1372.959776][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1374.024748][   T49] Bluetooth: hci4: command tx timeout
[ 1374.181863][ T5831] usb 4-1: USB disconnect, device number 6
[ 1374.812349][T10370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1374.849113][T10370] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1374.878698][T10370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1374.910917][T10370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1374.949206][T10370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1375.346210][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1375.415556][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1375.486496][ T9875] bond0 (unregistering): Released all slaves
[ 1375.844342][T11501] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1375.875041][T11501] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1375.882870][T11501] bridge_slave_0: entered allmulticast mode
[ 1375.920573][T11501] bridge_slave_0: entered promiscuous mode
[ 1376.026044][T11501] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1376.074097][T11501] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1376.081916][T11501] bridge_slave_1: entered allmulticast mode
[ 1376.130205][T11501] bridge_slave_1: entered promiscuous mode
[ 1376.407277][ T9875] hsr_slave_0: left promiscuous mode
[ 1376.433023][ T9875] hsr_slave_1: left promiscuous mode
[ 1376.475355][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1376.514013][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1376.586401][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1376.622667][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1376.881270][ T9875] veth1_macvtap: left promiscuous mode
[ 1376.933404][ T9875] veth0_macvtap: left promiscuous mode
[ 1376.981091][ T9875] veth1_vlan: left promiscuous mode
[ 1376.994410][   T49] Bluetooth: hci1: command tx timeout
[ 1377.018592][ T9875] veth0_vlan: left promiscuous mode
[ 1378.276877][   T49] Bluetooth: hci2: command 0x0406 tx timeout
[ 1379.171011][T10370] Bluetooth: hci1: command tx timeout
[ 1380.314873][ T5828] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1380.489205][ T5828] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1380.551352][ T5828] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1380.568996][ T5828] usb 3-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00
[ 1380.591416][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1380.650949][ T9875] team0 (unregistering): Port device team_slave_1 removed
[ 1380.660526][ T5828] usb 3-1: config 0 descriptor??
[ 1380.763122][ T9875] team0 (unregistering): Port device team_slave_0 removed
[ 1380.793096][ T5828] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1381.223812][T10370] Bluetooth: hci1: command tx timeout
[ 1382.157054][T11501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1382.316984][T11501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1382.947818][T11501] team0: Port device team_slave_0 added
[ 1383.183043][ T5831] usb 3-1: USB disconnect, device number 3
[ 1383.216530][T11501] team0: Port device team_slave_1 added
[ 1383.302743][T10370] Bluetooth: hci1: command tx timeout
[ 1383.768198][T11501] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1383.777892][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1384.087748][T11501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1384.337183][T11501] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1384.389544][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1384.511679][T11501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1384.657870][ T9875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.960737][ T9875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1385.230970][ T9875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1386.006362][ T9875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1386.302806][T11501] hsr_slave_0: entered promiscuous mode
[ 1386.323473][T11501] hsr_slave_1: entered promiscuous mode
[ 1388.005320][T11578] chnl_net:caif_netlink_parms(): no params data found
[ 1388.150201][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'.
[ 1389.358384][T11673] binder: BINDER_SET_CONTEXT_MGR already set
[ 1389.365119][T11673] binder: 11669:11673 ioctl 4018620d 200000000040 returned -16
[ 1389.379881][T11673] binder: 11669:11673 ioctl ae41 0 returned -22
[ 1389.398979][ T9875] bridge_slave_1: left allmulticast mode
[ 1389.404821][ T9875] bridge_slave_1: left promiscuous mode
[ 1389.486500][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1389.529822][ T9875] bridge_slave_0: left allmulticast mode
[ 1389.535660][ T9875] bridge_slave_0: left promiscuous mode
[ 1389.585632][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1391.747349][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1391.818150][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1391.881648][ T9875] bond0 (unregistering): Released all slaves
[ 1392.608352][ T9875] hsr_slave_0: left promiscuous mode
[ 1392.682800][ T9875] hsr_slave_1: left promiscuous mode
[ 1392.727302][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1392.766470][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1392.794106][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1392.854160][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1392.957367][ T9875] veth1_macvtap: left promiscuous mode
[ 1393.006675][ T9875] veth0_macvtap: left promiscuous mode
[ 1393.012664][ T9875] veth1_vlan: left promiscuous mode
[ 1393.057693][ T9875] veth0_vlan: left promiscuous mode
[ 1396.029814][ T9875] team0 (unregistering): Port device team_slave_1 removed
[ 1396.164329][ T9875] team0 (unregistering): Port device team_slave_0 removed
[ 1398.440127][T11706] binder: 11705:11706 ioctl 4018620d 0 returned -22
[ 1398.792594][T11578] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1398.803679][T11578] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1398.868924][T11578] bridge_slave_0: entered allmulticast mode
[ 1398.905741][T11578] bridge_slave_0: entered promiscuous mode
[ 1399.083007][T11578] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1399.090591][T11578] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1399.142755][T11578] bridge_slave_1: entered allmulticast mode
[ 1399.195660][T11578] bridge_slave_1: entered promiscuous mode
[ 1399.935103][T11578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1400.111516][T11578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1400.690892][T11578] team0: Port device team_slave_0 added
[ 1400.756636][T11578] team0: Port device team_slave_1 added
[ 1401.411478][T11501] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1401.527618][T11501] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1401.571552][T11578] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1401.618045][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1401.727818][T11578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1401.844958][T11501] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1401.955361][T11578] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1402.000949][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1402.139871][T11578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1402.297663][T11501] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1402.999100][T11578] hsr_slave_0: entered promiscuous mode
[ 1403.062209][T11578] hsr_slave_1: entered promiscuous mode
[ 1403.094170][T11578] debugfs: 'hsr0' already exists in 'hsr'
[ 1403.110474][T11578] Cannot create hsr debugfs directory
[ 1404.070502][T11753] binder: 11751:11753 ioctl 4018620d 0 returned -22
[ 1404.872557][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.875'.
[ 1405.225009][T11758] bond0: Unable to set down delay as MII monitoring is disabled
[ 1406.259456][T11501] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1406.886660][T11501] 8021q: adding VLAN 0 to HW filter on device team0
[ 1407.064697][  T564] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1407.072369][  T564] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1407.345352][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1407.353176][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1407.398189][ T5829] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1407.598234][ T5829] usb 7-1: Using ep0 maxpacket: 16
[ 1407.626088][T11578] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1407.633066][ T5829] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1407.671662][ T5829] usb 7-1: can't read configurations, error -61
[ 1407.781551][T11578] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1407.858154][ T5829] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1407.977840][T11578] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1408.072185][ T5829] usb 7-1: Using ep0 maxpacket: 16
[ 1408.107698][ T5829] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1408.157937][ T5829] usb 7-1: can't read configurations, error -61
[ 1408.166735][T11578] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1408.203137][ T5829] usb usb7-port1: attempt power cycle
[ 1408.597613][ T5829] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1408.639821][ T5829] usb 7-1: Using ep0 maxpacket: 16
[ 1408.703426][ T5829] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1408.768649][ T5829] usb 7-1: can't read configurations, error -61
[ 1408.977749][ T5829] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1409.055128][ T5829] usb 7-1: Using ep0 maxpacket: 16
[ 1409.138146][ T5829] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1409.146095][ T5829] usb 7-1: can't read configurations, error -61
[ 1409.219149][ T5829] usb usb7-port1: unable to enumerate USB device
[ 1410.177982][T11578] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1410.552615][T11578] 8021q: adding VLAN 0 to HW filter on device team0
[ 1410.732898][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1410.740455][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1410.931092][T11803] binder: 11801:11803 ioctl 4018620d 0 returned -22
[ 1411.083162][  T564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1411.090641][  T564] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1411.106857][ T5828] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1411.316036][ T5828] usb 3-1: Using ep0 maxpacket: 8
[ 1411.395324][ T5828] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1411.419254][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1411.431728][T11501] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1411.481023][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1411.550023][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1411.606782][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1411.648420][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1411.713892][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1411.776253][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.891170][ T5828] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[ 1413.047750][T11501] veth0_vlan: entered promiscuous mode
[ 1413.242576][T11501] veth1_vlan: entered promiscuous mode
[ 1413.873908][T11501] veth0_macvtap: entered promiscuous mode
[ 1414.008209][T11501] veth1_macvtap: entered promiscuous mode
[ 1414.226662][ T5828] usb 3-1: USB disconnect, device number 4
[ 1414.266951][T11501] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1414.506030][T11501] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1414.856941][   T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.903734][   T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.965452][   T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.033741][ T1014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.677455][T11578] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1416.494738][T11840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.888'.
[ 1416.567266][T11840] bridge_slave_1: left allmulticast mode
[ 1416.574114][T11840] bridge_slave_1: left promiscuous mode
[ 1416.582558][T11840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1416.757579][T11840] bridge_slave_0: left allmulticast mode
[ 1416.779893][T11840] bridge_slave_0: left promiscuous mode
[ 1416.817657][T11840] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1418.502894][T10508] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1418.682547][T10508] usb 3-1: Using ep0 maxpacket: 16
[ 1418.733703][T10508] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1418.754618][T10508] usb 3-1: can't read configurations, error -61
[ 1418.909351][T10508] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1419.117486][T10508] usb 3-1: Using ep0 maxpacket: 16
[ 1419.146137][T11578] veth0_vlan: entered promiscuous mode
[ 1419.185697][T10508] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1419.212039][T10508] usb 3-1: can't read configurations, error -61
[ 1419.246926][T10508] usb usb3-port1: attempt power cycle
[ 1419.300450][T11578] veth1_vlan: entered promiscuous mode
[ 1419.670270][T10508] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1419.745247][T10508] usb 3-1: Using ep0 maxpacket: 16
[ 1419.785790][T10508] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1419.801892][T10508] usb 3-1: can't read configurations, error -61
[ 1419.862952][T11871] binder: 11869:11871 ioctl c0306201 0 returned -14
[ 1419.969795][T11578] veth0_macvtap: entered promiscuous mode
[ 1419.992185][T10508] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1420.078183][T10508] usb 3-1: Using ep0 maxpacket: 16
[ 1420.131630][T10508] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1420.139569][T10508] usb 3-1: can't read configurations, error -61
[ 1420.162287][T11578] veth1_macvtap: entered promiscuous mode
[ 1420.214982][T10508] usb usb3-port1: unable to enumerate USB device
[ 1420.517992][T11578] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1420.660723][T11578] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1420.963193][ T5978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.007148][ T5978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.065439][ T5978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1421.162989][ T5978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1422.540432][T10508] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1422.754012][T10508] usb 4-1: Using ep0 maxpacket: 8
[ 1422.793783][T10508] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1422.849547][T10508] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1422.937597][T10508] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1423.003851][T10508] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1423.050061][T10508] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1423.123762][T10508] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1423.210366][T10508] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1423.250365][T10508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.346305][T10508] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[ 1425.859611][T10508] usb 4-1: USB disconnect, device number 7
[ 1426.035141][T11921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.898'.
[ 1426.129939][T11921] bridge_slave_1: left allmulticast mode
[ 1426.135908][T11921] bridge_slave_1: left promiscuous mode
[ 1426.234019][T11921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1426.413830][T11921] bridge_slave_0: left allmulticast mode
[ 1426.429312][T11921] bridge_slave_0: left promiscuous mode
[ 1426.493786][T11921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1426.905020][   T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1426.922665][   T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1426.933512][   T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1426.949426][   T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1426.966524][   T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1427.371994][T11933] binder: 11931:11933 ioctl c0306201 0 returned -14
[ 1428.388606][  T795] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1428.577446][  T795] usb 4-1: Using ep0 maxpacket: 16
[ 1428.634334][  T795] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[ 1428.717146][  T795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1428.777593][  T795] usb 4-1: config 0 has no interface number 0
[ 1428.783968][  T795] usb 4-1: config 0 interface 143 has no altsetting 0
[ 1428.889259][  T795] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1428.937221][  T795] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1428.945580][  T795] usb 4-1: Product: syz
[ 1429.009561][  T795] usb 4-1: SerialNumber: syz
[ 1429.037752][T10370] Bluetooth: hci3: command tx timeout
[ 1429.069149][  T795] usb 4-1: config 0 descriptor??
[ 1429.387997][T10508] usb 4-1: USB disconnect, device number 8
[ 1430.013961][T11926] chnl_net:caif_netlink_parms(): no params data found
[ 1430.234661][ T9875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1430.945339][ T9875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.116107][T10370] Bluetooth: hci3: command tx timeout
[ 1431.317188][T11968] netlink: 830 bytes leftover after parsing attributes in process `syz.2.908'.
[ 1431.508506][ T9875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.587587][T11970] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.908'.
[ 1431.646720][T11970] veth1_to_bond: default FDB implementation only supports local addresses
[ 1431.860717][ T9875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1432.245419][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1432.295842][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1432.565652][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1432.595600][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1433.195659][T10370] Bluetooth: hci3: command tx timeout
[ 1433.489617][ T9875] bridge_slave_1: left allmulticast mode
[ 1433.537724][ T9875] bridge_slave_1: left promiscuous mode
[ 1433.544686][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1433.875180][ T9875] bridge_slave_0: left allmulticast mode
[ 1433.881080][ T9875] bridge_slave_0: left promiscuous mode
[ 1433.977356][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1435.124969][T11987] binder: 11986:11987 ioctl c0306201 0 returned -14
[ 1435.277374][T10370] Bluetooth: hci3: command tx timeout
[ 1435.371636][   T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1435.399023][   T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1435.434855][   T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1435.524753][   T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1435.568136][   T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1436.301817][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1436.389943][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1436.461695][ T9875] bond0 (unregistering): Released all slaves
[ 1437.309696][ T9875] hsr_slave_0: left promiscuous mode
[ 1437.348366][ T9875] hsr_slave_1: left promiscuous mode
[ 1437.395501][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1437.444316][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1437.495460][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1437.572827][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1437.676154][   T49] Bluetooth: hci4: command tx timeout
[ 1437.762092][ T9875] veth1_macvtap: left promiscuous mode
[ 1437.795338][ T9875] veth0_macvtap: left promiscuous mode
[ 1437.801532][ T9875] veth1_vlan: left promiscuous mode
[ 1437.882690][ T9875] veth0_vlan: left promiscuous mode
[ 1439.754108][   T49] Bluetooth: hci4: command tx timeout
[ 1440.433224][ T9875] team0 (unregistering): Port device team_slave_1 removed
[ 1440.481847][ T9875] team0 (unregistering): Port device team_slave_0 removed
[ 1441.029909][T11926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1441.053598][T11926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1441.074100][T11926] bridge_slave_0: entered allmulticast mode
[ 1441.102440][T11926] bridge_slave_0: entered promiscuous mode
[ 1441.320555][T11926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1441.328661][T11926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1441.338439][T11926] bridge_slave_1: entered allmulticast mode
[ 1441.349868][T11926] bridge_slave_1: entered promiscuous mode
[ 1441.831156][   T49] Bluetooth: hci4: command tx timeout
[ 1442.158378][T11926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1442.206806][T11926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1442.797336][T11926] team0: Port device team_slave_0 added
[ 1442.864495][T11926] team0: Port device team_slave_1 added
[ 1443.502984][ T9875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.718707][T11926] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1443.739659][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1443.819141][T11926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1443.860761][T11926] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1443.876980][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1443.910124][   T49] Bluetooth: hci4: command tx timeout
[ 1443.936195][T11926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1444.096178][ T9875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1444.528351][ T9875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1445.141342][ T9875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1445.470001][T11926] hsr_slave_0: entered promiscuous mode
[ 1445.496680][T11926] hsr_slave_1: entered promiscuous mode
[ 1445.547618][T12041] batadv0: entered promiscuous mode
[ 1445.576266][T12041] bond0: entered promiscuous mode
[ 1445.596144][T12041] bond_slave_0: entered promiscuous mode
[ 1445.604924][T12041] bond_slave_1: entered promiscuous mode
[ 1445.660830][T12041] hsr1: entered allmulticast mode
[ 1445.666546][T12041] batadv0: entered allmulticast mode
[ 1445.679153][T12041] bond0: entered allmulticast mode
[ 1445.684512][T12041] bond_slave_0: entered allmulticast mode
[ 1445.748981][T12041] bond_slave_1: entered allmulticast mode
[ 1445.757033][T12041] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1446.776077][T11990] chnl_net:caif_netlink_parms(): no params data found
[ 1448.201626][ T9875] bridge_slave_1: left allmulticast mode
[ 1448.217948][ T9875] bridge_slave_1: left promiscuous mode
[ 1448.224711][ T9875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1448.363702][ T9875] bridge_slave_0: left allmulticast mode
[ 1448.394495][ T9875] bridge_slave_0: left promiscuous mode
[ 1448.436358][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1449.554618][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1449.629392][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1449.691032][ T9875] bond0 (unregistering): Released all slaves
[ 1450.866975][  T795] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1451.060128][  T795] usb 4-1: Using ep0 maxpacket: 8
[ 1451.182271][  T795] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[ 1451.225989][  T795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1451.262320][  T795] usb 4-1: config 0 has no interface number 0
[ 1451.486032][ T5308] usb 7-1: new low-speed USB device number 17 using dummy_hcd
[ 1451.549953][  T795] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1451.589444][  T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1451.658961][  T795] usb 4-1: Product: syz
[ 1451.699486][  T795] usb 4-1: Manufacturer: syz
[ 1451.704339][  T795] usb 4-1: SerialNumber: syz
[ 1451.737184][ T5308] usb 7-1: config 0 has no interfaces?
[ 1451.742974][ T5308] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[ 1451.803236][  T795] usb 4-1: config 0 descriptor??
[ 1451.809564][ T5308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1451.887201][ T5308] usb 7-1: config 0 descriptor??
[ 1451.921695][  T795] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1451.972449][  T795] uvcvideo 4-1:0.31: No valid video chain found.
[ 1452.561446][ T9875] hsr_slave_0: left promiscuous mode
[ 1452.654594][ T9875] hsr_slave_1: left promiscuous mode
[ 1452.667539][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1452.691697][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1452.739340][ T9875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1452.753975][ T9875] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1452.819755][ T9875] veth1_macvtap: left promiscuous mode
[ 1452.850250][ T9875] veth0_macvtap: left promiscuous mode
[ 1452.857033][ T9875] veth1_vlan: left promiscuous mode
[ 1452.866153][ T9875] veth0_vlan: left promiscuous mode
[ 1453.335981][ T5829] usb 7-1: USB disconnect, device number 17
[ 1455.287170][ T9875] team0 (unregistering): Port device team_slave_1 removed
[ 1455.396217][ T9875] team0 (unregistering): Port device team_slave_0 removed
[ 1458.348139][  T795] usb 4-1: USB disconnect, device number 9
[ 1458.498333][T11990] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1458.553456][T11990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1458.564248][T11990] bridge_slave_0: entered allmulticast mode
[ 1458.615074][T11990] bridge_slave_0: entered promiscuous mode
[ 1458.677360][T11990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1458.714817][T11990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1458.768444][T11990] bridge_slave_1: entered allmulticast mode
[ 1458.811356][T11990] bridge_slave_1: entered promiscuous mode
[ 1459.580589][T11990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1459.743110][T11990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1459.985417][T12133] ªªªªªª: renamed from vlan0 (while UP)
[ 1460.416331][T11990] team0: Port device team_slave_0 added
[ 1460.506018][T11990] team0: Port device team_slave_1 added
[ 1461.330205][T11990] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1461.366528][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1461.483787][T11990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1461.542352][T11990] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1461.604780][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1461.732898][T11990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1462.017651][T11926] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1462.205643][T11926] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1462.301834][T11926] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1462.725266][T11926] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1463.187681][T11990] hsr_slave_0: entered promiscuous mode
[ 1463.342049][T11990] hsr_slave_1: entered promiscuous mode
[ 1463.353779][T11990] debugfs: 'hsr0' already exists in 'hsr'
[ 1463.381782][T11990] Cannot create hsr debugfs directory
[ 1466.316315][T11926] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1466.787652][T11926] 8021q: adding VLAN 0 to HW filter on device team0
[ 1467.035622][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.043273][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1467.163589][T11990] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1467.284062][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1467.291504][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1467.368934][T11990] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1467.582722][T11990] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1467.800298][T11990] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1470.658219][T11990] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1471.088393][T11990] 8021q: adding VLAN 0 to HW filter on device team0
[ 1471.363895][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1471.371502][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1471.522268][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1471.529840][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1472.001868][T11926] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1472.372453][T12204] trusted_key: encrypted_key: insufficient parameters specified
[ 1473.800213][T11926] veth0_vlan: entered promiscuous mode
[ 1474.348482][T11926] veth1_vlan: entered promiscuous mode
[ 1475.165814][T11926] veth0_macvtap: entered promiscuous mode
[ 1475.304753][T11926] veth1_macvtap: entered promiscuous mode
[ 1478.380403][T11926] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1478.476704][T11990] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1478.664484][T11926] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1478.916557][ T3417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.962191][ T3417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.971267][ T3417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1479.256062][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1479.482063][ T5829] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1479.732804][ T5829] usb 3-1: Using ep0 maxpacket: 32
[ 1479.777059][ T5829] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1479.811610][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.885200][ T5829] usb 3-1: config 0 descriptor??
[ 1480.183782][ T5829] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1480.254693][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1480.373144][ T5829] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1480.380429][ T5829] usb 3-1: media controller created
[ 1480.388770][T12258] =====================================================
[ 1480.396489][T12258] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
[ 1480.404015][T12258]  _copy_to_user+0xcc/0x120
[ 1480.411900][T12258]  i2cdev_ioctl_smbus+0x586/0x660
[ 1480.417235][T12258]  i2cdev_ioctl+0xa14/0xf40
[ 1480.422695][T12258]  __se_sys_ioctl+0x23c/0x400
[ 1480.427559][T12258]  __x64_sys_ioctl+0x97/0xe0
[ 1480.432603][T12258]  x64_sys_call+0x1975/0x3ea0
[ 1480.437582][T12258]  do_syscall_64+0x134/0xf80
[ 1480.442601][T12258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.448614][T12258] 
[ 1480.450993][T12258] Uninit was stored to memory at:
[ 1480.457337][T12258]  __i2c_smbus_xfer+0x25a0/0x3120
[ 1480.464588][T12258]  i2c_smbus_xfer+0x2d8/0x480
[ 1480.469408][T12258]  i2cdev_ioctl_smbus+0x4a1/0x660
[ 1480.474809][T12258]  i2cdev_ioctl+0xa14/0xf40
[ 1480.479410][T12258]  __se_sys_ioctl+0x23c/0x400
[ 1480.484458][T12258]  __x64_sys_ioctl+0x97/0xe0
[ 1480.489208][T12258]  x64_sys_call+0x1975/0x3ea0
[ 1480.494252][T12258]  do_syscall_64+0x134/0xf80
[ 1480.499037][T12258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.505185][T12258] 
[ 1480.507578][T12258] Local variable msgbuf1.i created at:
[ 1480.515379][T12258]  __i2c_smbus_xfer+0x853/0x3120
[ 1480.520459][T12258]  i2c_smbus_xfer+0x2d8/0x480
[ 1480.525919][T12258] 
[ 1480.528287][T12258] Bytes 0-1 of 2 are uninitialized
[ 1480.533603][T12258] Memory access of size 2 starts at ffff88813f59fd06
[ 1480.540355][T12258] Data copied to user address 00002000000000c0
[ 1480.546730][T12258] 
[ 1480.549109][T12258] CPU: 1 UID: 0 PID: 12258 Comm: syz.2.967 Not tainted syzkaller #0 PREEMPT(full) 
[ 1480.558632][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1480.568903][T12258] =====================================================
[ 1480.575978][T12258] Disabling lock debugging due to kernel taint
[ 1480.766626][T12258] Kernel panic - not syncing: kmsan.panic set ...
[ 1480.773253][T12258] CPU: 1 UID: 0 PID: 12258 Comm: syz.2.967 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1480.784349][T12258] Tainted: [B]=BAD_PAGE
[ 1480.788620][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1480.798835][T12258] Call Trace:
[ 1480.802240][T12258]  <TASK>
[ 1480.805286][T12258]  __dump_stack+0x26/0x30
[ 1480.809841][T12258]  dump_stack_lvl+0x50/0x1c0
[ 1480.814656][T12258]  ? dump_stack+0x12/0x25
[ 1480.819133][T12258]  dump_stack+0x1e/0x25
[ 1480.823508][T12258]  vpanic+0x7b4/0x1430
[ 1480.827749][T12258]  panic+0x15d/0x160
[ 1480.831807][T12258]  kmsan_report+0x31a/0x320
[ 1480.836464][T12258]  ? kmsan_internal_check_memory+0x1e8/0x240
[ 1480.842589][T12258]  ? kmsan_copy_to_user+0xef/0x190
[ 1480.847840][T12258]  ? _copy_to_user+0xcc/0x120
[ 1480.852657][T12258]  ? i2cdev_ioctl_smbus+0x586/0x660
[ 1480.857987][T12258]  ? i2cdev_ioctl+0xa14/0xf40
[ 1480.862769][T12258]  ? __se_sys_ioctl+0x23c/0x400
[ 1480.867753][T12258]  ? __x64_sys_ioctl+0x97/0xe0
[ 1480.872660][T12258]  ? x64_sys_call+0x1975/0x3ea0
[ 1480.877743][T12258]  ? do_syscall_64+0x134/0xf80
[ 1480.882614][T12258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1480.888802][T12258]  ? __pfx_az6027_i2c_xfer+0x10/0x10
[ 1480.894301][T12258]  ? __pfx_az6027_i2c_xfer+0x10/0x10
[ 1480.899716][T12258]  ? __i2c_transfer+0x1179/0x3280
[ 1480.904860][T12258]  ? kmsan_get_metadata+0xf1/0x160
[ 1480.910161][T12258]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1480.916665][T12258]  ? kmsan_get_metadata+0xf1/0x160
[ 1480.921983][T12258]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1480.928104][T12258]  ? __i2c_smbus_xfer+0x1f6c/0x3120
[ 1480.933457][T12258]  ? kmsan_get_metadata+0xf1/0x160
[ 1480.938755][T12258]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1480.944728][T12258]  kmsan_internal_check_memory+0x1e8/0x240
[ 1480.950698][T12258]  kmsan_copy_to_user+0xef/0x190
[ 1480.955813][T12258]  _copy_to_user+0xcc/0x120
[ 1480.960435][T12258]  i2cdev_ioctl_smbus+0x586/0x660
[ 1480.965600][T12258]  i2cdev_ioctl+0xa14/0xf40
[ 1480.970220][T12258]  ? kmsan_report+0x316/0x320
[ 1480.975050][T12258]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1480.980193][T12258]  __se_sys_ioctl+0x23c/0x400
[ 1480.985018][T12258]  __x64_sys_ioctl+0x97/0xe0
[ 1480.989772][T12258]  x64_sys_call+0x1975/0x3ea0
[ 1480.994587][T12258]  do_syscall_64+0x134/0xf80
[ 1480.999286][T12258]  ? clear_bhb_loop+0x50/0xa0
[ 1481.004118][T12258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.010135][T12258] RIP: 0033:0x7fa6d2b9c799
[ 1481.014632][T12258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1481.034364][T12258] RSP: 002b:00007fa6d0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1481.042898][T12258] RAX: ffffffffffffffda RBX: 00007fa6d2e15fa0 RCX: 00007fa6d2b9c799
[ 1481.050980][T12258] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 1481.059050][T12258] RBP: 00007fa6d2c32bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1481.067110][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1481.075164][T12258] R13: 00007fa6d2e16038 R14: 00007fa6d2e15fa0 R15: 00007ffe4939b098
[ 1481.083259][T12258]  </TASK>
[ 1481.086638][T12258] Kernel Offset: disabled
[ 1481.091036][T12258] Rebooting in 86400 seconds..