last executing test programs:

1m57.939293336s ago: executing program 3 (id=49):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff000000000000000800000018110000", @ANYRES32=0x1, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000040000009500000000000000bf91000000000000b7020000010000008500000085000000b794d17b9aa6ed3567000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x3, 0x1, 0x67efdd8f}, 0x10, 0x1ffa8, 0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000001c0)=[{0x3, 0x4, 0xc, 0x4}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0x5}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1m57.479471747s ago: executing program 3 (id=56):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00'])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0)
writev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1)
statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0)
fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r3}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1', 0x1)

1m56.353331485s ago: executing program 3 (id=60):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_emit_vhci(0x0, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000020, 0x0, 0x8001}]})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0)

1m50.033110615s ago: executing program 3 (id=77):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r3 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r4, r4, r4, 0x0)
r5 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0xc, 0x0, 0x5, 0x7fff7ffc}, {0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)

1m47.101012769s ago: executing program 3 (id=83):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003400)=ANY=[], 0x48)
openat$kvm(0xffffffffffffff9c, 0x0, 0x820000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket(0x26, 0x4, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000240)={'ip6gretap0\x00'})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]})
r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r4, 0x40046109, 0x0)
ioctl$CEC_S_MODE(r4, 0xc05c6104, &(0x7f00000000c0)=0x7)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000400)={0x6, {{0xa, 0x4e21, 0x720, @ipv4={'\x00', '\xff\xff', @loopback}, 0x82}}}, 0x88)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000004c0)={0x0, 0x262, 0x1, {0x3, @sdr={0x56544943, 0x8}}, 0x6b})
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_uring_setup(0x75fc, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)

1m45.234310255s ago: executing program 3 (id=87):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f0000000500)=ANY=[@ANYBLOB="2f5e2d282d272e2a03212c3970002c236a2c2e2f62696e64657266732f62696e64657230002c2c002c7375626a5f757365723d242e232c66736d616769633d3078383030303030303030303030303030312c7365636c6162656c2c6673636f6e746578743d756e636f6e67696e65645f752c6d61736b3d5e4d41595f2b5845432c61707072616973652c0087e004439811ef4ad70fa96a87a04a948d5fe99cd16fa3f0e5bf7ef431150ca312673ce5c8d3ac3e310d"])
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

1m30.033971947s ago: executing program 32 (id=87):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000080)='./file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x25, 0x9, 0x0, 0x800, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount$nfs4(&(0x7f0000000000)='-.%^%\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20c0c24, &(0x7f0000000500)=ANY=[@ANYBLOB="2f5e2d282d272e2a03212c3970002c236a2c2e2f62696e64657266732f62696e64657230002c2c002c7375626a5f757365723d242e232c66736d616769633d3078383030303030303030303030303030312c7365636c6162656c2c6673636f6e746578743d756e636f6e67696e65645f752c6d61736b3d5e4d41595f2b5845432c61707072616973652c0087e004439811ef4ad70fa96a87a04a948d5fe99cd16fa3f0e5bf7ef431150ca312673ce5c8d3ac3e310d"])
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

59.575900432s ago: executing program 0 (id=199):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010005bd70000000000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

57.911792435s ago: executing program 0 (id=202):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000001c0)={{<r0=>0xffffffffffffffff, &(0x7f0000000080)='^\x00', 0x200000, &(0x7f00000000c0)={@align, {0x40, 0x4, 0x4, 0x8000000000000001}}, 0xfffffffa, &(0x7f0000000100), &(0x7f0000000140)=0x4}, {[0xa, 0x9, 0x10001, 0x7f]}, 0x1, 0x0, &(0x7f0000000180)})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x8000000000003ff, 0x6, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x80000006, 0x3a08}, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4)
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ec)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000010c0)=0xfffffffc, 0x4)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, <r8=>0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r8, r9, 0x5, 0x200, 0x4, 0x5, {0x200007, 0x9, 0x5, 0xa, 0x8000, 0x9, 0x5, 0x5, 0x0, 0xfffc, 0x7, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}})
write(0xffffffffffffffff, &(0x7f0000001000)='A', 0x1)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x852}, 0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

55.770548499s ago: executing program 0 (id=209):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x29)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc)
fsmount(0xffffffffffffffff, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48)
ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x1fff, 0x30}, 0xc)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000), 0x0)
sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

52.478712201s ago: executing program 0 (id=214):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

51.990374823s ago: executing program 0 (id=216):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r5, r5, r5, 0x0)
r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0xc, 0x0, 0x5, 0x7fff7ffc}, {0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1)
r7 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00')
pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4)

51.094074176s ago: executing program 0 (id=221):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r1 = socket$kcm(0x23, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r1, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
accept4(r1, 0x0, 0x0, 0x80000)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r8 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r8, 0xf, &(0x7f0000000000)=""/63)

35.948856857s ago: executing program 33 (id=221):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r1 = socket$kcm(0x23, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r1, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
accept4(r1, 0x0, 0x0, 0x80000)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r8 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r8, 0xf, &(0x7f0000000000)=""/63)

13.405955973s ago: executing program 5 (id=312):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003400)=ANY=[], 0x48)
openat$kvm(0xffffffffffffff9c, 0x0, 0x820000, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
listen(r0, 0x3)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r1, &(0x7f0000001dc0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000000)='&', 0x20000}], 0x1}, 0x85)
accept4(r0, 0x0, 0x0, 0x80000)

10.511589826s ago: executing program 5 (id=321):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac2(0x4, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206a0803004000010203010902a200030109e010080b0001010020010904000000010120000924010600013a000505240b060009240b9b04a8a50bd10f24070603000502000300020003000d240d030000040200010028ee07240c098102d50904010000010220000904010101010220000824020106016a030905010908003c081208250101030a020009040200000102200009040201010102200009058209100002ff0608250101300900015daa849506d2d92646501ba8486e2e4c19d8455e96290a"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

10.3545435s ago: executing program 1 (id=324):
r0 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0)
syz_open_dev$hiddev(0x0, 0x7, 0x80140)
syz_open_dev$hidraw(0x0, 0x100000000, 0x420082)
r1 = syz_open_dev$evdev(&(0x7f0000005bc0), 0x4, 0x100)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0)

10.201188114s ago: executing program 2 (id=325):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r1 = socket$kcm(0x23, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r1, 0x800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x1, {0x1, 0xf0, 0x1}, 0xff}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xf}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
accept4(r1, 0x0, 0x0, 0x80000)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r8 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_STAT_ANY(r8, 0xf, &(0x7f0000000000)=""/63)
recvmmsg(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000240))

7.17545935s ago: executing program 1 (id=336):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_emit_vhci(0x0, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000)
close(0x3)

7.17470828s ago: executing program 2 (id=337):
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1)

7.029372633s ago: executing program 5 (id=339):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=[@ip_retopts={{0xc}}], 0xc}, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x81)
socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x3a, 0x301, 0x2270bd24, 0x25dfcc02, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4898}, 0x48090)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x60, r6, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r7, &(0x7f0000000600)='1\x00', 0x2)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0xb7)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000001c0)=0x9)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000180)=0x1)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xb7)

6.874489557s ago: executing program 1 (id=340):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00'])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0)
writev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1)
statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0)
fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r3}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r5, &(0x7f00000000c0)='1\x00', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r6, &(0x7f00000001c0)='1', 0x1)

5.789799314s ago: executing program 4 (id=342):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r2 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r3, r3, r3, 0x0)
r4 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0xc, 0x0, 0x5, 0x7fff7ffc}, {0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1)
r5 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00')
pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4)

5.755572126s ago: executing program 1 (id=343):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88b00, 0xd6)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
fanotify_init(0x356dd4690ec76413, 0x40000)
listen(r1, 0x10)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600)='1', 0x1)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd25, 0x25dfdbff, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x20040844)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fanotify_init(0x0, 0x400)
close_range(r0, 0xffffffffffffffff, 0x0)

5.56806225s ago: executing program 5 (id=345):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00'])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0)
writev(r3, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1)
statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f00000000c0)='1\x00', 0x1)

5.451819323s ago: executing program 6 (id=346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00', 0xa)
mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')

5.309867967s ago: executing program 4 (id=347):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x7317, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xfff3}, {0xffe0, 0x9}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xffff}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xd}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x200000d4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x3, 0x2, 0x4})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
syz_ublk_setup_io_uring(0x3ae4, &(0x7f0000000200)={0x0, 0x8fea, 0x10, 0x2, 0x43}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendto(0xffffffffffffffff, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)='a', 0x1}], 0x1}}], 0x1, 0x4000000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)
timer_settime(r5, 0x1, &(0x7f0000000040), 0x0)
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0)

4.690458872s ago: executing program 1 (id=348):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1\x00', 0x1)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="d20000000504000087000000757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bf"])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f00000001c0)='1\x00', 0x1)

4.358732671s ago: executing program 6 (id=349):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.314475272s ago: executing program 5 (id=350):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28)
syz_open_procfs(0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)

4.250542243s ago: executing program 4 (id=351):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
r3 = syz_open_dev$dri(0x0, 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x7)

2.38263544s ago: executing program 5 (id=352):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3})
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x18)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0xb})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0xfffffffffffffffb, 0x0, 0x97, 0xe, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.138511356s ago: executing program 4 (id=353):
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380))
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x2}})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

1.102437882s ago: executing program 6 (id=354):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r2, @ANYBLOB=',\x00'])
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = getegid()
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0)
writev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1)
statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0)
fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000980)={{}, {0x1, 0x2}, [{}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x2, 0x3}], {}, [{0x8, 0x2}, {0x8, 0x4, r3}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r5, &(0x7f00000000c0)='1\x00', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r6, &(0x7f00000001c0)='1', 0x1)

989.141015ms ago: executing program 4 (id=355):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x74}}, 0x40)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000040)={0xd0, 0xffffffff})
close_range(r4, r4, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x32)
socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(0x0, r6)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
r8 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, 0x0)
rt_tgsigqueueinfo(r8, r8, 0x43d, &(0x7f00000001c0)={0x7, 0xc4, 0x6})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0)

969.686376ms ago: executing program 2 (id=356):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

838.443569ms ago: executing program 2 (id=357):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r2 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r3, r3, r3, 0x0)
r4 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0xc, 0x0, 0x5, 0x7fff7ffc}, {0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x1)
r5 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00')
pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4)

605.479755ms ago: executing program 2 (id=358):
gettid()
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xd004, 0x2, 0xfffffb, 0x29c}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
lstat(&(0x7f0000000500)='./file0/../file0/file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c90010000c00"], 0x15)

570.075256ms ago: executing program 4 (id=359):
timer_create(0x1, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)=""/72, 0x48}], 0x1, 0x45, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x1f3cd27b}], 0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

495.845538ms ago: executing program 6 (id=360):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}], 0x10}}], 0x1, 0x50008000)
write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef)

398.0997ms ago: executing program 2 (id=361):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101002)
write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x24000000)
bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x5, {0x42, 0x200, 0xfffffffd}}, 0x10)
ioctl$XFS_IOC_SWAPEXT(r1, 0xc0a4586d, &(0x7f0000000240)={0x0, r4, r0, 0x7, 0xffff, '\x00', {0xfe, 0x4, 0x0, 0x31a, 0x7fffffff, 0xa, 0x1, 0x643, {0x0, 0x6}, {0x1, 0xfffffffe}, {0x3, 0x1}, 0x4, 0x3ff, 0x9, 0x10000, 0x0, 0x7, 0x9, 0xffff, 0xff, 0x0, '\x00', 0x8, 0x73580, 0x0, 0x2c0}})
r5 = socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0)
sendmsg$tipc(r5, &(0x7f0000000440)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigpending(0x0, 0x0)
r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @rand_addr, 0x8}, 0x1c)
shutdown(r9, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'basic\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}]}, 0x4c}}, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={<r10=>0x0, 0xc4}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r10, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0xc)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf00bf00, 0x2e})

395.14876ms ago: executing program 6 (id=362):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c4, 0x94, 0x94, 0x290, 0x1bc, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0xfe}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x5, 0x7}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x0, 0x1], 0x2, 0x3}}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420)
r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x1, 0xc})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000002780)=[{{&(0x7f0000000340)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000002740)=[{&(0x7f00000005c0)="c3", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r4, 0x4, 0x10001}, 0xc)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3)
chroot(0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x10000, 0x870, 0x1, 0x1, 0xd59f82, 0x1, 0x0, 0x19ef, 0x2a, 0x9, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}})
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8)
close(r2)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r9, 0x0)
bind$unix(r8, &(0x7f0000000240)=@file={0x1}, 0x6e)
listen(r8, 0x0)
connect$unix(r7, &(0x7f0000000640)=@file={0x1}, 0x6e)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

174.559106ms ago: executing program 1 (id=363):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28)
syz_open_procfs(0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)

0s ago: executing program 6 (id=364):
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
syz_ublk_setup_io_uring(0x46f5, &(0x7f0000000000)={0x0, 0x44a8, 0x40, 0x0, 0x132}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000001c0)="23abaf585cfef53bb3e25e932efcb030faaeb56a23d562b9a2268ae99cd03de6bdf8ae2e699adc8f69fb03354752688d77fa4ae37714e71551317cfe4d29999e43326ca56a584c6988403177e59b4027", 0x50}], 0x1, &(0x7f0000003c00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008810}], 0x1, 0x4004)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000002940)=""/79, 0x4f}], 0x2}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = openat$autofs(0xffffffffffffff9c, 0x0, 0x82, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000ac0)='tunl0\x00', 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0)
write(r5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts.
syzkaller login: [   67.861247][ T4175] cgroup: Unknown subsys name 'net'
[   68.007956][ T4175] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   69.588205][ T4175] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   71.167378][ T4192] chnl_net:caif_netlink_parms(): no params data found
[   71.221758][ T4197] chnl_net:caif_netlink_parms(): no params data found
[   71.287241][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   71.361670][ T4199] chnl_net:caif_netlink_parms(): no params data found
[   71.384902][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.392155][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.401431][ T4192] device bridge_slave_0 entered promiscuous mode
[   71.447496][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.455118][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.463604][ T4192] device bridge_slave_1 entered promiscuous mode
[   71.485199][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.492546][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.501057][ T4197] device bridge_slave_0 entered promiscuous mode
[   71.516343][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.523623][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.532078][ T4197] device bridge_slave_1 entered promiscuous mode
[   71.564667][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.572142][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.580887][ T4188] device bridge_slave_0 entered promiscuous mode
[   71.591695][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.598869][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.608216][ T4188] device bridge_slave_1 entered promiscuous mode
[   71.618473][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.635271][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.650164][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   71.673609][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.684729][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.744403][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.751644][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.768894][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.781300][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.807950][ T4197] team0: Port device team_slave_0 added
[   71.821449][ T4197] team0: Port device team_slave_1 added
[   71.827494][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.834874][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.843316][ T4199] device bridge_slave_0 entered promiscuous mode
[   71.858541][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.866931][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.875645][ T4199] device bridge_slave_1 entered promiscuous mode
[   71.885926][ T4192] team0: Port device team_slave_0 added
[   71.906616][ T4188] team0: Port device team_slave_0 added
[   71.921313][ T4192] team0: Port device team_slave_1 added
[   71.935909][ T4188] team0: Port device team_slave_1 added
[   71.968282][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.975347][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.001640][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.027655][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.037343][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.045478][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.071870][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.084965][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.094651][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.103202][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.130056][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.155553][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.162608][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.189594][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.208017][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.218018][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.244524][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.268183][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.275483][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.284598][ T4194] device bridge_slave_0 entered promiscuous mode
[   72.294053][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.304585][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.330828][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.362783][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.370043][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.377996][ T4194] device bridge_slave_1 entered promiscuous mode
[   72.392941][ T4199] team0: Port device team_slave_0 added
[   72.436000][ T4197] device hsr_slave_0 entered promiscuous mode
[   72.446747][ T4197] device hsr_slave_1 entered promiscuous mode
[   72.456331][ T4199] team0: Port device team_slave_1 added
[   72.473584][ T4192] device hsr_slave_0 entered promiscuous mode
[   72.480954][ T4192] device hsr_slave_1 entered promiscuous mode
[   72.487861][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.496450][ T4192] Cannot create hsr debugfs directory
[   72.542349][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.554263][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.564187][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.571527][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.597702][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.612946][ T4188] device hsr_slave_0 entered promiscuous mode
[   72.620301][ T4188] device hsr_slave_1 entered promiscuous mode
[   72.627031][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.634750][ T4188] Cannot create hsr debugfs directory
[   72.664864][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.672043][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.698115][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.749138][ T4194] team0: Port device team_slave_0 added
[   72.794782][ T4194] team0: Port device team_slave_1 added
[   72.821468][ T4199] device hsr_slave_0 entered promiscuous mode
[   72.828397][ T4199] device hsr_slave_1 entered promiscuous mode
[   72.835470][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.843103][ T4199] Cannot create hsr debugfs directory
[   72.860811][ T4177] Bluetooth: hci4: command 0x0409 tx timeout
[   72.879602][ T4177] Bluetooth: hci3: command 0x0409 tx timeout
[   72.895290][ T4177] Bluetooth: hci2: command 0x0409 tx timeout
[   72.901868][ T4177] Bluetooth: hci1: command 0x0409 tx timeout
[   72.907996][ T4177] Bluetooth: hci0: command 0x0409 tx timeout
[   72.929372][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.936534][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.963166][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.010167][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.017200][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.044823][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.189227][ T4194] device hsr_slave_0 entered promiscuous mode
[   73.196335][ T4194] device hsr_slave_1 entered promiscuous mode
[   73.203463][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.211284][ T4194] Cannot create hsr debugfs directory
[   73.297463][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.308955][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.320874][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.348836][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.404506][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.425145][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.439276][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.453030][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.522343][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.537779][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.570334][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.581121][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.674194][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.694955][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.719588][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.732531][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.748862][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.757112][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.785137][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   73.799789][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.811615][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.827944][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.837781][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.850919][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.860797][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.870755][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.878121][ T3092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.888639][ T4192] 8021q: adding VLAN 0 to HW filter on device team0
[   73.897411][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.914273][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.928851][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.938697][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.947877][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.962029][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.973175][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.980364][ T3092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.012221][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.022735][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.033305][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.044473][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.051809][ T3092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.060053][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.069160][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.077962][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.085106][ T3092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.093277][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.102493][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.112180][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.140508][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.173953][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.183615][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.194635][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.204616][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.214630][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.224234][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.234093][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.243347][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.253023][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.264265][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.272794][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.297732][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.310976][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.329970][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.342246][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.351840][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.360865][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.369379][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.378638][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.387828][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.402464][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.421311][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.431133][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.448116][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.488636][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   74.515623][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.530673][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.586254][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.602607][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.616290][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.623478][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.637637][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.648515][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.658705][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.665874][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.713468][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.724943][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.734635][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.746393][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.756802][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.768962][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.785297][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.798514][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.811223][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.822926][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.836450][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.850771][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.861723][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.880944][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.892354][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.903927][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.926030][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.937061][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.941354][ T4232] Bluetooth: hci0: command 0x041b tx timeout
[   74.952873][ T4232] Bluetooth: hci1: command 0x041b tx timeout
[   74.963025][ T4199] 8021q: adding VLAN 0 to HW filter on device team0
[   74.967592][ T4232] Bluetooth: hci2: command 0x041b tx timeout
[   74.976402][ T4232] Bluetooth: hci3: command 0x041b tx timeout
[   74.983367][ T4232] Bluetooth: hci4: command 0x041b tx timeout
[   75.007235][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.030016][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.037635][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.056885][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.073632][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.082949][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.090131][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.098629][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.108648][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.118301][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.125543][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.143183][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.163054][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.171703][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.188384][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.249449][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.268290][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.278663][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.298710][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.338259][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.356590][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.367132][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.397193][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   75.413003][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.430702][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.448814][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.459343][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.475089][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.485006][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.494247][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.507121][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.516925][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.526229][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.533403][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.553264][ T4197] device veth0_vlan entered promiscuous mode
[   75.573591][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.598818][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.613304][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.624753][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.633850][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.642572][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.651886][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.661179][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.670232][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.678750][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.685884][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.695699][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.703966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.712540][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.728533][ T4197] device veth1_vlan entered promiscuous mode
[   75.738274][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.769113][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.786366][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.813250][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.823381][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.877150][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.896716][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.906528][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.918080][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.927064][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.937116][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.960526][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.989934][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.998741][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.033155][ T4197] device veth0_macvtap entered promiscuous mode
[   76.055591][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.065010][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.075187][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.104671][ T4197] device veth1_macvtap entered promiscuous mode
[   76.127953][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.138632][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.153755][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.165571][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.175731][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.188926][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.218117][ T4188] device veth0_vlan entered promiscuous mode
[   76.261997][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.277832][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.287943][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.303937][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.347508][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.356242][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.364371][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.376429][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.385861][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.394800][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.406382][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.414470][ T4192] device veth0_vlan entered promiscuous mode
[   76.428280][ T4188] device veth1_vlan entered promiscuous mode
[   76.437725][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.446307][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.455297][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.466037][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.474435][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.483425][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.493849][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.506290][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.521067][ T4199] device veth0_vlan entered promiscuous mode
[   76.539458][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.548617][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.563713][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.571967][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.582784][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.595742][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.606092][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.615734][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.630291][ T4192] device veth1_vlan entered promiscuous mode
[   76.663359][ T4199] device veth1_vlan entered promiscuous mode
[   76.678310][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.745033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.758735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.785872][ T4192] device veth0_macvtap entered promiscuous mode
[   76.811307][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.822478][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.831969][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.841833][ T4188] device veth0_macvtap entered promiscuous mode
[   76.853449][ T4192] device veth1_macvtap entered promiscuous mode
[   76.895394][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.904777][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.909215][ T3092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.926930][ T3092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.933976][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.948026][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.958755][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.981269][ T4188] device veth1_macvtap entered promiscuous mode
[   77.000654][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.009126][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.020126][ T4230] Bluetooth: hci4: command 0x040f tx timeout
[   77.026598][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.035136][ T4230] Bluetooth: hci3: command 0x040f tx timeout
[   77.042273][ T4230] Bluetooth: hci2: command 0x040f tx timeout
[   77.049392][ T4230] Bluetooth: hci1: command 0x040f tx timeout
[   77.055772][ T4230] Bluetooth: hci0: command 0x040f tx timeout
[   77.064156][ T4199] device veth0_macvtap entered promiscuous mode
[   77.108992][ T4199] device veth1_macvtap entered promiscuous mode
[   77.126460][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.137658][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.151116][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.163147][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.174260][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.185750][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.197857][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.211173][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.224053][ T4194] device veth0_vlan entered promiscuous mode
[   77.240015][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.248446][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.257912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.268549][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.278688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.288518][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.299390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.310757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.320622][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.328657][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.339052][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.350652][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.363024][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.375584][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.388002][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.398790][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.411062][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.421835][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.432591][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.445694][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.456500][ T3092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.465074][ T4194] device veth1_vlan entered promiscuous mode
[   77.474899][ T3092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.493516][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.511718][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.524342][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.534924][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.547707][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.555431][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.564593][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.576383][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.586511][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.595811][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.605071][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.614179][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.623595][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.638661][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.647662][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.657588][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.670705][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.696612][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.708076][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.717370][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.727115][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.758037][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.768712][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.790236][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.806802][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.816976][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.829099][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.841420][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.863488][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.873240][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.883327][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.892221][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.910539][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.925474][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.956547][ T4194] device veth0_macvtap entered promiscuous mode
[   77.991219][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.011624][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.044083][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.105996][ T4194] device veth1_macvtap entered promiscuous mode
[   78.154192][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   78.198064][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.210576][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.222136][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.223566][ T4275] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   78.232899][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.232962][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.232980][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.232996][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.233011][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.238517][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.322325][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.337598][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.347104][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.366897][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.379027][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.390676][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.407092][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.417571][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.430972][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.443327][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.455523][ T4274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.463917][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.492090][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.512413][ T3092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.523052][ T3092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.534362][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.561034][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.576553][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.588377][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.604786][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.615462][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.625735][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.661554][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.669452][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.691856][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.787712][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.796729][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.811098][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.845885][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.854058][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.865360][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.928467][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.943138][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.038662][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.046507][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.098838][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.107974][ T4230] Bluetooth: hci0: command 0x0419 tx timeout
[   79.114560][ T4230] Bluetooth: hci1: command 0x0419 tx timeout
[   79.130382][ T4230] Bluetooth: hci2: command 0x0419 tx timeout
[   79.151283][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.169843][ T4230] Bluetooth: hci3: command 0x0419 tx timeout
[   79.176166][ T4230] Bluetooth: hci4: command 0x0419 tx timeout
[   79.249647][ T3092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.257629][ T3092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.276982][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.284348][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.297144][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.341082][ T4285] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   79.363309][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.597364][ T4316] jffs2: notice: (4316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   80.739698][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   80.757260][ T4316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   80.782338][ T1326] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   80.888205][ T4316] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   80.999973][ T4231] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   81.059723][ T4243] usb 1-1: Using ep0 maxpacket: 32
[   81.068210][ T4326] 9pnet: Insufficient options for proto=fd
[   81.562972][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.816604][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.829008][ T1326] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   81.839799][ T1326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.856820][ T1326] usb 5-1: config 0 descriptor??
[   81.989299][ T4333] 9pnet: Insufficient options for proto=fd
[   81.999182][ T4243] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.034518][ T4243] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   82.200251][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   82.270113][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   82.521261][ T1326] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   82.542048][ T4231] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   82.573746][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.603470][ T1326] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   82.631294][ T4243] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   82.678730][ T4231] usb 3-1: Product: syz
[   82.711101][ T4243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.732733][ T1326] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   82.761936][ T4231] usb 3-1: Manufacturer: syz
[   82.819698][ T4243] usb 1-1: Manufacturer: Ⰹ
[   82.824572][ T4231] usb 3-1: SerialNumber: syz
[   82.830270][ T1326] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   82.844750][ T4243] usb 1-1: SerialNumber: syz
[   82.872179][ T4231] usb 3-1: config 0 descriptor??
[   82.891388][ T1326] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[   83.006729][ T4243] usb 1-1: can't set config #1, error -71
[   83.025580][ T4231] hub 3-1:0.0: bad descriptor, ignoring hub
[   83.054575][ T1326] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving
[   83.120222][ T4231] hub: probe of 3-1:0.0 failed with error -5
[   83.193293][ T4243] usb 1-1: USB disconnect, device number 2
[   83.285037][ T4320] Zero length message leads to an empty skb
[   83.330754][ T4231] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[   83.736787][ T1326] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[   83.862140][ T4231] usb 3-1: USB disconnect, device number 2
[   83.928168][ T1326] usb 5-1: USB disconnect, device number 2
[   84.101262][ T4358] jffs2: notice: (4358) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   84.205342][ T4362] fido_id[4362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   84.284968][ T4267] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[   84.298155][ T4358] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   84.327681][ T4360] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[   84.349802][ T4235] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.571331][   T26] audit: type=1800 audit(1785975066.449:2): pid=4377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.29" name="out_ports" dev="configfs" ino=34034 res=0 errno=0
[   84.600474][ T4235] usb 4-1: Using ep0 maxpacket: 8
[   84.709706][ T4380] 9pnet: Insufficient options for proto=fd
[   84.720191][ T4235] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.789442][ T4235] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   84.791896][   T26] audit: type=1800 audit(1785975066.659:3): pid=4376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.28" name="in_ports" dev="configfs" ino=34030 res=0 errno=0
[   84.825331][ T4235] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   85.110242][ T4235] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   85.150449][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.303321][ T4235] usb 4-1: Product: syz
[   85.359165][ T4235] usb 4-1: Manufacturer: syz
[   85.421332][ T4235] usb 4-1: SerialNumber: syz
[   85.682820][ T4196] Bluetooth: hci5: unexpected event for opcode 0x1001
[   85.829636][ T4267] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   86.109712][ T4267] usb 1-1: Dual-Role OTG device on HNP port
[   86.710231][ T4267] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15
[   86.719339][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.792913][ T4267] gspca_main: spca501-2.14.0 probing 0000:0000
[   86.829650][ T4267] gspca_spca501: reg write: error -32
[   86.835235][ T4267] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   86.849614][ T4267] spca501: probe of 1-1:1.0 failed with error -22
[   86.918369][ T4363] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2)
[   87.019938][ T4235] usb 4-1: 1:1: cannot get freq (v2/v3): err -71
[   87.059914][ T4235] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[   87.150727][ T4235] usb 4-1: USB disconnect, device number 2
[   87.239709][ T4230] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   87.454632][ T4417] 9pnet: Insufficient options for proto=fd
[   87.688706][ T4413] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[   87.799548][   T26] audit: type=1800 audit(1785975069.669:4): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.42" name="out_ports" dev="configfs" ino=33259 res=0 errno=0
[   87.865833][   T26] audit: type=1800 audit(1785975069.719:5): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.42" name="in_ports" dev="configfs" ino=33258 res=0 errno=0
[   87.921288][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   87.974374][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   88.005042][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[   88.107833][   T26] audit: type=1800 audit(1785975069.979:6): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.43" name="out_ports" dev="configfs" ino=34176 res=0 errno=0
[   88.180051][ T4230] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   88.189410][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.204809][ T4230] usb 3-1: Product: syz
[   88.209127][ T4230] usb 3-1: Manufacturer: syz
[   88.217604][   T26] audit: type=1800 audit(1785975070.029:7): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.43" name="in_ports" dev="configfs" ino=34175 res=0 errno=0
[   88.238333][ T4230] usb 3-1: SerialNumber: syz
[   88.246008][ T4230] usb 3-1: config 0 descriptor??
[   88.300642][ T4230] hub 3-1:0.0: bad descriptor, ignoring hub
[   88.306782][ T4230] hub: probe of 3-1:0.0 failed with error -5
[   88.330956][ T4230] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6
[   89.543469][   T26] audit: type=1800 audit(1785975071.419:8): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.53" name="out_ports" dev="configfs" ino=33396 res=0 errno=0
[   89.570757][   T26] audit: type=1800 audit(1785975071.439:9): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.53" name="in_ports" dev="configfs" ino=33395 res=0 errno=0
[   89.894031][ T4466] 9pnet: Insufficient options for proto=fd
[   90.953924][   T26] audit: type=1800 audit(1785975072.829:10): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.58" name="out_ports" dev="configfs" ino=34311 res=0 errno=0
[   91.022504][   T26] audit: type=1800 audit(1785975072.849:11): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.58" name="in_ports" dev="configfs" ino=34310 res=0 errno=0
[   91.096211][   T26] audit: type=1800 audit(1785975072.969:12): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.59" name="out_ports" dev="configfs" ino=34325 res=0 errno=0
[   91.116548][    C1] vkms_vblank_simulate: vblank timer overrun
[   91.134411][   T26] audit: type=1800 audit(1785975072.969:13): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.59" name="in_ports" dev="configfs" ino=34324 res=0 errno=0
[   91.229768][ T4348] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   91.246942][ T4485] 9pnet: Insufficient options for proto=fd
[   92.224307][ T1111] cfg80211: failed to load regulatory.db
[   92.380392][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   92.459296][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   92.488184][   T26] audit: type=1800 audit(1785975074.359:14): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="out_ports" dev="configfs" ino=33502 res=0 errno=0
[   92.535166][   T26] audit: type=1800 audit(1785975074.389:15): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="in_ports" dev="configfs" ino=33501 res=0 errno=0
[   92.720189][ T4348] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[   92.779767][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.852183][ T4348] usb 4-1: Product: syz
[   92.890150][ T4348] usb 4-1: Manufacturer: syz
[   92.937466][ T4348] usb 4-1: SerialNumber: syz
[   93.095394][ T4348] usb 4-1: config 0 descriptor??
[   93.204371][ T4348] hub 4-1:0.0: bad descriptor, ignoring hub
[   93.220465][ T4348] hub: probe of 4-1:0.0 failed with error -5
[   93.306526][ T4348] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[   93.816607][ T4230] usb 3-1: USB disconnect, device number 3
[   94.631478][ T4523] 9pnet: Insufficient options for proto=fd
[   94.728337][ T4243] usb 4-1: USB disconnect, device number 3
[   94.908229][   T26] audit: type=1800 audit(1785975076.779:16): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.72" name="out_ports" dev="configfs" ino=34518 res=0 errno=0
[   95.042186][   T26] audit: type=1800 audit(1785975076.839:17): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.72" name="in_ports" dev="configfs" ino=34517 res=0 errno=0
[   95.219557][   T26] audit: type=1800 audit(1785975077.069:18): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.74" name="out_ports" dev="configfs" ino=34528 res=0 errno=0
[   95.250921][   T26] audit: type=1800 audit(1785975077.079:19): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.74" name="in_ports" dev="configfs" ino=34527 res=0 errno=0
[   95.619508][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   95.639503][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   95.649501][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   95.659506][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   95.669507][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   95.679500][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   95.689501][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   95.699499][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   95.709500][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   95.719507][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   96.640021][ T4543] sched: RT throttling activated
[   97.776405][ T4548] 9pnet: Insufficient options for proto=fd
[  100.860423][   T26] audit: type=1800 audit(1785975082.739:20): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.84" name="out_ports" dev="configfs" ino=33726 res=0 errno=0
[  101.047094][ T4584] 9pnet: Insufficient options for proto=fd
[  101.942619][   T26] audit: type=1800 audit(1785975082.779:21): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.84" name="in_ports" dev="configfs" ino=33725 res=0 errno=0
[  102.238923][   T26] audit: type=1800 audit(1785975084.109:22): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.86" name="out_ports" dev="configfs" ino=33746 res=0 errno=0
[  103.633715][   T26] audit: type=1800 audit(1785975084.369:23): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.86" name="in_ports" dev="configfs" ino=33745 res=0 errno=0
[  104.019907][ T4591] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  104.207561][ T4605] 9pnet: Insufficient options for proto=fd
[  104.369782][ T4232] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  104.547008][ T4609] jffs2: notice: (4609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  104.926516][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  106.618700][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  107.281462][ T4232] usb 3-1: string descriptor 0 read error: -71
[  107.294886][ T4232] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  107.304965][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.324682][ T4232] usb 3-1: config 0 descriptor??
[  107.351455][ T4232] usb 3-1: can't set config #0, error -71
[  107.370439][ T4232] usb 3-1: USB disconnect, device number 4
[  109.264037][ T4638] 9pnet: Insufficient options for proto=fd
[  109.350729][   T26] audit: type=1800 audit(1785975091.229:24): pid=4642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.99" name="out_ports" dev="configfs" ino=34881 res=0 errno=0
[  109.466419][   T26] audit: type=1800 audit(1785975091.249:25): pid=4642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.99" name="in_ports" dev="configfs" ino=34880 res=0 errno=0
[  109.530333][   T26] audit: type=1800 audit(1785975091.389:26): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.100" name="out_ports" dev="configfs" ino=34658 res=0 errno=0
[  109.610102][   T26] audit: type=1800 audit(1785975091.389:27): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.100" name="in_ports" dev="configfs" ino=34657 res=0 errno=0
[  112.078327][ T4665] 9pnet: Insufficient options for proto=fd
[  112.954946][ T4677] jffs2: notice: (4677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  113.019078][ T4677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  113.106323][   T26] audit: type=1800 audit(1785975094.979:28): pid=4685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="out_ports" dev="configfs" ino=34986 res=0 errno=0
[  113.175405][   T26] audit: type=1800 audit(1785975095.019:29): pid=4685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="in_ports" dev="configfs" ino=34985 res=0 errno=0
[  113.325353][   T26] audit: type=1800 audit(1785975095.199:30): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.112" name="out_ports" dev="configfs" ino=34998 res=0 errno=0
[  113.352291][   T26] audit: type=1800 audit(1785975095.229:31): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.112" name="in_ports" dev="configfs" ino=34997 res=0 errno=0
[  113.420012][ T1111] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  113.945462][ T4697] 9pnet: Insufficient options for proto=fd
[  115.069954][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  115.201726][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  117.033652][ T1111] usb 3-1: string descriptor 0 read error: -71
[  117.052619][ T1111] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  117.360467][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.588007][ T1111] usb 3-1: config 0 descriptor??
[  117.773250][ T1111] usb 3-1: can't set config #0, error -71
[  117.806769][ T1111] usb 3-1: USB disconnect, device number 5
[  117.883831][ T4720] 9pnet: Insufficient options for proto=fd
[  118.440168][ T4724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.121'.
[  118.601631][   T26] audit: type=1800 audit(1785975100.479:32): pid=4728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.122" name="out_ports" dev="configfs" ino=35034 res=0 errno=0
[  118.718339][ T4730] jffs2: notice: (4730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  118.758684][   T26] audit: type=1800 audit(1785975100.519:33): pid=4728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.122" name="in_ports" dev="configfs" ino=35033 res=0 errno=0
[  118.878923][ T4730] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  118.924189][   T26] audit: type=1800 audit(1785975100.799:34): pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.124" name="in_ports" dev="configfs" ino=35924 res=0 errno=0
[  119.026109][ T4744] 9pnet: Insufficient options for proto=fd
[  121.331293][ T4636] Bluetooth: hci5: command 0x0409 tx timeout
[  121.930213][ T4758] Invalid ELF header magic: != ELF
[  123.419786][ T4267] Bluetooth: hci5: command 0x041b tx timeout
[  123.819685][ T4636] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  123.835834][ T4735] chnl_net:caif_netlink_parms(): no params data found
[  123.985875][ T4774] 9pnet: Insufficient options for proto=fd
[  124.250138][ T4636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  124.889727][ T4636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  125.054718][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.070067][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.112411][   T26] audit: type=1800 audit(1785975106.989:35): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.135" name="out_ports" dev="configfs" ino=36076 res=0 errno=0
[  125.154994][ T4735] device bridge_slave_0 entered promiscuous mode
[  125.162127][ T4636] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  125.197799][ T4636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.258938][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.277974][   T26] audit: type=1800 audit(1785975106.989:36): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.135" name="in_ports" dev="configfs" ino=36075 res=0 errno=0
[  125.278797][ T4636] usb 5-1: Product: syz
[  125.316227][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.345251][ T4735] device bridge_slave_1 entered promiscuous mode
[  125.363430][ T4636] usb 5-1: Manufacturer: syz
[  125.370876][ T4636] usb 5-1: SerialNumber: syz
[  125.390521][ T4636] usb 5-1: config 0 descriptor??
[  125.431355][ T4636] hub 5-1:0.0: bad descriptor, ignoring hub
[  125.437354][ T4636] hub: probe of 5-1:0.0 failed with error -5
[  125.496393][ T4636] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  125.505499][ T4267] Bluetooth: hci5: command 0x040f tx timeout
[  125.522758][   T26] audit: type=1800 audit(1785975107.399:37): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.137" name="in_ports" dev="configfs" ino=36088 res=0 errno=0
[  125.572921][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.604347][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.660037][ T4735] team0: Port device team_slave_0 added
[  125.695755][ T4735] team0: Port device team_slave_1 added
[  125.729826][ T4318] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  125.819663][ T4798] 9pnet: Insufficient options for proto=fd
[  126.009938][ T4318] usb 2-1: Using ep0 maxpacket: 32
[  126.032403][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.150816][ T4318] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  126.189510][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.342268][ T1111] usb 5-1: USB disconnect, device number 3
[  126.372694][ T4318] usb 2-1: config 0 descriptor??
[  126.714515][ T4318] as10x_usb: device has been detected
[  126.765881][ T4318] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  126.781557][ T4803] jffs2: notice: (4803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  126.965327][ T4318] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  127.355634][ T4318] as10x_usb: error during firmware upload part1
[  127.402980][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.410925][ T4318] Registered device nBox DVB-T Dongle
[  127.424260][ T4318] usb 2-1: USB disconnect, device number 2
[  127.506597][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.579770][ T4232] Bluetooth: hci5: command 0x0419 tx timeout
[  127.879013][ T4318] Unregistered device nBox DVB-T Dongle
[  127.880833][ T4318] as10x_usb: device has been disconnected
[  127.898911][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.940743][ T4813] 9pnet: Insufficient options for proto=fd
[  128.266782][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.274130][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.300354][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.425266][ T4735] device hsr_slave_0 entered promiscuous mode
[  128.492309][ T4735] device hsr_slave_1 entered promiscuous mode
[  128.504787][ T4735] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.546415][ T4735] Cannot create hsr debugfs directory
[  128.663411][   T26] audit: type=1800 audit(1785975110.539:38): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.146" name="out_ports" dev="configfs" ino=36126 res=0 errno=0
[  128.707732][   T26] audit: type=1800 audit(1785975110.569:39): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.146" name="in_ports" dev="configfs" ino=36125 res=0 errno=0
[  129.106680][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.258702][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.269715][ T1111] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  129.509650][ T1111] usb 5-1: Using ep0 maxpacket: 32
[  129.584573][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.709655][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[  129.739911][ T1111] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  129.969687][ T1111] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  129.979070][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.111012][ T1111] usb 5-1: Product: syz
[  130.116183][ T1111] usb 5-1: Manufacturer: syz
[  130.121044][ T1111] usb 5-1: SerialNumber: syz
[  130.140590][ T4824] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  130.165381][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.312357][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  130.313036][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.387991][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  130.408886][   T26] audit: type=1800 audit(1785975112.279:40): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.153" name="out_ports" dev="configfs" ino=36251 res=0 errno=0
[  130.463588][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  130.480443][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  130.530555][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.540694][   T26] audit: type=1800 audit(1785975112.319:41): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.153" name="in_ports" dev="configfs" ino=36250 res=0 errno=0
[  130.563825][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.575885][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  130.584580][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.595717][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.596985][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  130.606929][ T1111] usb 5-1: MIDIStreaming interface descriptor not found
[  130.623564][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.669230][ T1111] usb 5-1: USB disconnect, device number 4
[  130.801175][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.847266][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.858604][ T4848] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  130.859143][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  131.102980][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  132.816366][ T4735] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  132.997320][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  133.145924][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  133.182992][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  133.190261][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.257594][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  133.279346][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  133.378633][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  133.395091][ T4891] udc-core: couldn't find an available UDC or it's busy
[  133.411998][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  133.429535][ T4891] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  133.453308][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  133.482753][ T4735] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  133.694253][ T4735] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  133.722066][ T4735] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  135.178402][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.455548][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.493343][ T4923] 9pnet: Insufficient options for proto=fd
[  135.518796][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.868387][ T4735] 8021q: adding VLAN 0 to HW filter on device team0
[  136.364805][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  136.396501][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  136.405207][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.412408][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.430669][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  136.703579][ T4934] sctp_transport_update_pmtu: 94 callbacks suppressed
[  136.703618][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.721704][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.733227][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.744661][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.879265][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.890130][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.900987][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.912207][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.923067][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.933905][ T4934] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  136.969063][   T26] audit: type=1800 audit(1785975118.839:42): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.166" name="out_ports" dev="configfs" ino=35708 res=0 errno=0
[  137.000706][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.009890][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.018603][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.025833][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.069818][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  137.101403][   T26] audit: type=1800 audit(1785975118.869:43): pid=4939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.166" name="in_ports" dev="configfs" ino=35705 res=0 errno=0
[  137.152148][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  137.199388][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  137.214011][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  137.268130][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  137.431471][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  137.465893][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  137.527427][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.541836][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.599019][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.679755][ T4330] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  137.960994][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.052758][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  138.077962][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  138.176966][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  138.218813][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  138.239619][ T4330] usb 5-1: Using ep0 maxpacket: 16
[  138.379284][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  138.400674][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  139.188926][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  139.224299][ T4965] jffs2: notice: (4965) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  139.231166][ T4330] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.254789][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  139.280551][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.291565][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.300066][ T4330] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.329562][ T4330] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  139.343333][ T4330] usb 5-1: config 0 interface 0 has no altsetting 0
[  139.352431][ T4330] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  139.362115][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.417799][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  139.489627][ T4330] usb 5-1: config 0 descriptor??
[  139.495608][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  139.508216][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.517724][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.535917][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.034657][ T4983] 9pnet: Insufficient options for proto=fd
[  140.367531][ T4330] usb 5-1: USB disconnect, device number 5
[  141.007102][  T144] device hsr_slave_0 left promiscuous mode
[  141.118954][  T144] device hsr_slave_1 left promiscuous mode
[  141.138976][   T26] audit: type=1800 audit(1785975123.009:44): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.178" name="out_ports" dev="configfs" ino=36449 res=0 errno=0
[  141.164830][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.184850][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.190587][   T26] audit: type=1800 audit(1785975123.039:45): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.178" name="in_ports" dev="configfs" ino=36448 res=0 errno=0
[  141.224808][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.249552][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.268655][  T144] device bridge_slave_1 left promiscuous mode
[  141.309729][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.440425][  T144] device bridge_slave_0 left promiscuous mode
[  141.447773][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.671355][  T144] device veth1_macvtap left promiscuous mode
[  141.707408][  T144] device veth0_macvtap left promiscuous mode
[  141.730037][  T144] device veth1_vlan left promiscuous mode
[  141.741083][  T144] device veth0_vlan left promiscuous mode
[  142.391894][  T144] team0 (unregistering): Port device team_slave_1 removed
[  142.430597][  T144] team0 (unregistering): Port device team_slave_0 removed
[  142.471082][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.508100][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.598587][  T144] bond0 (unregistering): Released all slaves
[  143.272604][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.341864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  144.281421][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.495218][ T5052] 9pnet: Insufficient options for proto=fd
[  145.362432][   T26] audit: type=1800 audit(1785975127.239:46): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.189" name="out_ports" dev="configfs" ino=36514 res=0 errno=0
[  145.411742][   T26] audit: type=1800 audit(1785975127.289:47): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.189" name="in_ports" dev="configfs" ino=36513 res=0 errno=0
[  145.744824][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  145.762270][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  145.781705][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  145.880288][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  145.909091][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  145.919061][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  145.937466][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  146.984882][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.004607][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.593961][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  147.660763][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.741410][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.765202][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.817324][ T5110] 9pnet: Insufficient options for proto=fd
[  147.876951][ T5110] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  148.029237][ T4735] device veth0_vlan entered promiscuous mode
[  148.502507][ T4735] device veth1_vlan entered promiscuous mode
[  148.758296][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.793453][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.815179][ T4735] device veth0_macvtap entered promiscuous mode
[  148.847645][ T4735] device veth1_macvtap entered promiscuous mode
[  148.920379][   T26] audit: type=1800 audit(1785975130.799:48): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="out_ports" dev="configfs" ino=36619 res=0 errno=0
[  149.009944][ T5123] 9pnet: Insufficient options for proto=fd
[  149.177535][   T26] audit: type=1800 audit(1785975130.799:49): pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.200" name="in_ports" dev="configfs" ino=36618 res=0 errno=0
[  149.499592][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.596549][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.890265][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.170756][   T26] audit: type=1800 audit(1785975132.049:50): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.203" name="zoned" dev="configfs" ino=36689 res=0 errno=0
[  150.190924][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.266067][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.287708][   T26] audit: type=1800 audit(1785975132.089:51): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.203" name="power" dev="configfs" ino=36690 res=0 errno=0
[  150.348759][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.407700][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.431812][   T26] audit: type=1800 audit(1785975132.089:52): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.203" name="zoned" dev="configfs" ino=36692 res=0 errno=0
[  150.529559][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.984759][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.001592][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.028794][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.039681][   T26] audit: type=1800 audit(1785975132.099:53): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.203" name="power" dev="configfs" ino=36693 res=0 errno=0
[  151.060499][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.081560][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.168118][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.199233][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.240300][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.289504][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.326241][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.364364][   T26] audit: type=1800 audit(1785975133.239:54): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.207" name="out_ports" dev="configfs" ino=36796 res=0 errno=0
[  151.384680][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.409662][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.475036][ T4735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.104871][ T4735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.124400][   T26] audit: type=1800 audit(1785975133.269:55): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.207" name="in_ports" dev="configfs" ino=36795 res=0 errno=0
[  153.306286][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.491748][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  153.591260][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  153.717301][ T4735] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.778078][ T4735] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.829904][ T4735] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.899067][ T4735] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.153696][   T26] audit: type=1800 audit(1785975136.029:56): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.212" name="out_ports" dev="configfs" ino=36854 res=0 errno=0
[  154.556481][   T26] audit: type=1800 audit(1785975136.059:57): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.212" name="in_ports" dev="configfs" ino=36853 res=0 errno=0
[  154.773625][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.809790][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.876950][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  154.930882][ T3092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.948588][ T3092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.976575][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  155.201731][ T5184] jffs2: notice: (5184) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  156.247914][   T26] audit: type=1800 audit(1785975138.119:58): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.219" name="out_ports" dev="configfs" ino=38113 res=0 errno=0
[  156.697327][   T26] audit: type=1800 audit(1785975138.249:59): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.219" name="in_ports" dev="configfs" ino=38111 res=0 errno=0
[  156.908920][ T5208] gadgetfs: bound to dummy_udc driver
[  156.946252][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'.
[  158.060993][ T5245] jffs2: notice: (5245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  158.199808][ T5245] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  159.409656][   T26] audit: type=1800 audit(1785975141.279:60): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.233" name="out_ports" dev="configfs" ino=38173 res=0 errno=0
[  159.528946][   T26] audit: type=1800 audit(1785975141.339:61): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.233" name="in_ports" dev="configfs" ino=38172 res=0 errno=0
[  160.332541][ T5288] 9pnet: Insufficient options for proto=fd
[  160.339874][ T4330] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  160.413150][ T5288] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  160.800596][ T4330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  160.884600][ T4330] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  161.085240][ T4330] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  161.279561][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.301994][ T5295] jffs2: notice: (5295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  161.553731][ T4330] spcp8x5 2-1:1.0: SPCP8x5 converter detected
[  161.567614][ T4330] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[  161.950677][ T5275] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  161.973031][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  161.986115][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  161.994884][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  162.003382][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  162.011802][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  162.020937][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  162.095269][ T5275] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  162.117931][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  162.139796][ T5275] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  162.299799][ T5269] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  162.390987][ T5082] usb 2-1: USB disconnect, device number 4
[  162.503887][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'.
[  162.536451][ T5082] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  162.547794][ T5082] spcp8x5 2-1:1.0: device disconnected
[  165.980299][ T5357] netlink: 348 bytes leftover after parsing attributes in process `syz.4.248'.
[  165.989806][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'.
[  166.723491][ T5354] 9pnet: Insufficient options for proto=fd
[  167.126421][ T5368] program syz.4.251 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.167800][ T5368] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  171.172740][ T5380] device gretap1 entered promiscuous mode
[  171.183623][ T5380] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready
[  171.236483][ T5382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.256'.
[  171.252449][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[  171.607932][ T5396] sctp_transport_update_pmtu: 49 callbacks suppressed
[  171.608049][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  171.626145][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  171.641237][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  171.651527][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  171.759319][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  171.977508][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  172.172011][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  172.182522][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  172.194524][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  173.640263][ T5396] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  174.054569][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'.
[  174.520864][   T26] audit: type=1800 audit(1785975156.399:62): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.262" name="attr_allow_any_host" dev="configfs" ino=38361 res=0 errno=0
[  174.523289][ T5423] nvmet: adding nsid 1 to subsystem testnqn
[  174.577797][ T5426] lo speed is unknown, defaulting to 1000
[  174.695746][ T5426] lo speed is unknown, defaulting to 1000
[  174.731704][ T5426] lo speed is unknown, defaulting to 1000
[  174.909922][ T5410] chnl_net:caif_netlink_parms(): no params data found
[  176.124649][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.267'.
[  176.139596][ T1326] Bluetooth: hci2: command 0x0409 tx timeout
[  176.231444][ T5426] infiniband syz1: set active
[  176.237198][ T5426] infiniband syz1: added lo
[  176.372083][ T5082] lo speed is unknown, defaulting to 1000
[  176.385167][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.395036][ T5426] infiniband syz1: Couldn't open port 1
[  176.419883][ T1326] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  176.435069][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.511106][ T5410] device bridge_slave_0 entered promiscuous mode
[  176.520480][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.529002][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.538156][ T5410] device bridge_slave_1 entered promiscuous mode
[  176.739674][ T1326] usb 3-1: Using ep0 maxpacket: 16
[  176.751374][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.765518][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.796895][ T5426] RDS/IB: syz1: added
[  176.804383][ T5426] smc: adding ib device syz1 with port count 1
[  176.814295][ T5426] smc:    ib device syz1 port 1 has pnetid 
[  176.840233][ T4243] lo speed is unknown, defaulting to 1000
[  176.851953][ T5426] lo speed is unknown, defaulting to 1000
[  176.860820][ T1326] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.873173][ T1326] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.883668][ T1326] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  176.897970][ T1326] usb 3-1: config 0 interface 0 has no altsetting 0
[  176.904886][ T1326] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  176.914313][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.924161][ T5410] team0: Port device team_slave_0 added
[  176.931037][ T1326] usb 3-1: config 0 descriptor??
[  176.948675][ T5410] team0: Port device team_slave_1 added
[  176.993471][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.001650][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.028122][ T5410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.062974][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.075322][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.140964][ T5410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.200203][ T5426] lo speed is unknown, defaulting to 1000
[  177.235012][ T5410] device hsr_slave_0 entered promiscuous mode
[  177.250429][ T5410] device hsr_slave_1 entered promiscuous mode
[  177.267581][ T5410] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.287738][ T5410] Cannot create hsr debugfs directory
[  177.383678][ T5475] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  177.491855][ T5475] device-mapper: table: 248:0: thin-pool: Error creating metadata object
[  177.522538][ T5475] device-mapper: ioctl: error adding target to table
[  177.576556][ T5426] lo speed is unknown, defaulting to 1000
[  177.604537][ T4272] usb 3-1: USB disconnect, device number 6
[  177.634080][ T5410] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  177.658898][ T5410] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  177.709922][ T5410] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  177.739398][ T5410] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  177.905686][ T5426] lo speed is unknown, defaulting to 1000
[  177.955215][ T5484] jffs2: notice: (5484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  178.070043][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.145129][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.199277][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.221617][ T4243] Bluetooth: hci2: command 0x041b tx timeout
[  178.241155][ T5410] 8021q: adding VLAN 0 to HW filter on device team0
[  178.251390][ T5426] lo speed is unknown, defaulting to 1000
[  178.266534][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.320354][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.359980][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.367155][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.418353][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.427725][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.454762][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.462143][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.507809][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.533804][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.585041][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.633226][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.668410][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.707435][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.741094][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.765516][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.806015][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.838424][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.043820][ T5426] lo speed is unknown, defaulting to 1000
[  179.053162][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.063999][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.130657][ T5410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.297330][ T5426] lo speed is unknown, defaulting to 1000
[  179.345440][ T5520] netlink: 48 bytes leftover after parsing attributes in process `syz.2.278'.
[  179.523674][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.537275][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.577951][ T5410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.299781][ T1326] Bluetooth: hci2: command 0x040f tx timeout
[  180.797694][ T5538] block nbd4: shutting down sockets
[  182.380611][ T1326] Bluetooth: hci2: command 0x0419 tx timeout
[  183.779267][ T5556] netlink: 'syz.1.282': attribute type 4 has an invalid length.
[  183.860519][ T5556] rdma_rxe: ignoring netdev event = 23 for lo
[  183.867378][ T5556] rdma_rxe: lo changed mtu to 11337732
[  183.873693][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  183.882207][ T5556] infiniband syz1: set active
[  183.887739][ T5082] lo speed is unknown, defaulting to 1000
[  183.914150][ T5559] jffs2: notice: (5559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  184.694547][ T5571] Bluetooth: hci0: unsupported parameter 255
[  184.702481][ T5571] Bluetooth: hci0: unsupported parameter 255
[  184.799343][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'.
[  184.817118][ T5576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.018980][ T5576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.246100][ T5581] netlink: 72 bytes leftover after parsing attributes in process `syz.5.289'.
[  185.580839][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  185.601239][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  185.784556][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  185.795151][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  185.809354][ T5410] device veth0_vlan entered promiscuous mode
[  185.821772][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  185.831690][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  185.847802][ T5410] device veth1_vlan entered promiscuous mode
[  186.065755][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  186.093205][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  186.106888][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  186.118158][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  186.133955][ T5410] device veth0_macvtap entered promiscuous mode
[  186.155092][ T5410] device veth1_macvtap entered promiscuous mode
[  186.180572][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.191862][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.201954][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.212574][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.223286][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.234620][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.244868][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.257896][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.268281][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.280590][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.293147][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.303235][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  186.319895][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  186.334128][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  186.344142][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  186.367328][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.378165][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.436540][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.464386][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.499271][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.541898][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.734319][ T5410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.905507][ T5410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  187.011872][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.063534][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  187.078644][ T5616] Bluetooth: hci0: unsupported parameter 255
[  187.085781][ T5616] Bluetooth: hci0: unsupported parameter 255
[  187.141250][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  187.188169][ T5410] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.213628][ T5410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.255478][ T5410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.277877][ T5410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.628426][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.651088][ T5621] jffs2: notice: (5621) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  187.657395][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.781368][ T5621] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  187.793458][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  187.813606][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.872375][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.890055][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  190.293973][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  190.549626][ T4348] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  190.604315][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  190.618559][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  190.627476][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  190.635877][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  190.644326][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  190.653264][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  190.781922][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  191.095847][ T4348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  191.178642][ T4348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  191.490338][ T4348] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  191.554642][ T4348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.673711][ T4348] usb 6-1: Product: syz
[  191.717015][ T4348] usb 6-1: Manufacturer: syz
[  191.772004][ T4348] usb 6-1: SerialNumber: syz
[  191.915781][ T4348] usb 6-1: config 0 descriptor??
[  192.021919][ T4348] hub 6-1:0.0: bad descriptor, ignoring hub
[  192.113659][ T4348] hub: probe of 6-1:0.0 failed with error -5
[  192.140918][    C1] sctp_transport_update_pmtu: 49 callbacks suppressed
[  192.140938][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.224023][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.234278][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.244574][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.329068][ T4348] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input9
[  192.363742][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.374027][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.685999][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.696209][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.706376][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  192.716555][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  194.542488][ T4348] usb 6-1: USB disconnect, device number 2
[  194.609653][    C1] ODEBUG: Out of memory. ODEBUG disabled
[  194.637227][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.643645][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.802933][   T26] audit: type=1800 audit(1785975176.659:63): pid=5692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.313" name="in_ports" dev="configfs" ino=40023 res=0 errno=0
[  195.067374][ T5696] input: syz1 as /devices/virtual/input/input10
[  195.136757][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.315'.
[  196.732883][ T4636] Bluetooth: hci0: command 0x0406 tx timeout
[  196.741461][ T4636] Bluetooth: hci1: command 0x0406 tx timeout
[  196.752464][ T4636] Bluetooth: hci4: command 0x0406 tx timeout
[  196.922433][ T5731] tipc: Started in network mode
[  196.947207][ T5731] tipc: Node identity e0000001, cluster identity 4711
[  196.989498][ T5731] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  197.079504][ T1111] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  197.088357][ T5728] syz.6.323 (5728) used greatest stack depth: 18496 bytes left
[  197.151099][ T5738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'.
[  197.160181][ T4636] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  197.245953][ T5740] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  197.359604][ T1111] usb 6-1: Using ep0 maxpacket: 16
[  197.512198][ T1111] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.529923][ T4636] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  197.543025][ T1111] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.563566][ T4636] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  197.584851][ T1111] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  197.636963][ T1111] usb 6-1: config 0 interface 0 has no altsetting 0
[  198.118239][ T5766] i2c i2c-0: new_device: Extra parameters
[  198.138803][ T1111] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  198.212187][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.267293][ T1111] usb 6-1: config 0 descriptor??
[  198.929615][ T4636] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  198.938875][ T4636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.995002][ T4636] usb 2-1: Product: syz
[  198.999328][ T4636] usb 2-1: Manufacturer: syz
[  199.113026][ T4636] usb 2-1: SerialNumber: syz
[  199.333812][ T4636] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  199.826307][   T26] audit: type=1800 audit(1785975181.699:64): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.333" name="in_ports" dev="configfs" ino=39361 res=0 errno=0
[  199.952649][ T4243] usb 6-1: USB disconnect, device number 3
[  200.028047][   T23] usb 2-1: USB disconnect, device number 5
[  200.040094][ T4636] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  200.072106][   T23] usb 2-1: ath9k_htc: USB layer deinitialized
[  200.332610][ T5794] netlink: 'syz.5.339': attribute type 1 has an invalid length.
[  200.508303][ T5805] 9pnet: Insufficient options for proto=fd
[  200.604854][ T5805] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  200.970396][ T5794] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.228126][ T5799] tipc: Started in network mode
[  201.313694][ T5799] tipc: Node identity ac14142f, cluster identity 4711
[  201.420893][ T5799] tipc: New replicast peer: 172.20.20.170
[  201.427721][ T5799] tipc: Enabled bearer <udp:syz2>, priority 10
[  201.438745][ T5807] tipc: New replicast peer: 0.0.0.0
[  201.684801][ T5814] netlink: 'syz.1.343': attribute type 20 has an invalid length.
[  201.761011][ T5814] IPv6: NLM_F_CREATE should be specified when creating new route
[  202.045237][ T5824] 9pnet: Insufficient options for proto=fd
[  202.071141][   T26] audit: type=1800 audit(1785975183.949:65): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.346" name="in_ports" dev="configfs" ino=39475 res=0 errno=0
[  202.842845][ T4272] tipc: Node number set to 2886997039
[  203.138947][ T5846] program syz.1.348 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.187799][ T5846] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  206.303597][ T5869] 9pnet: Insufficient options for proto=fd
[  206.506880][    T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  206.527097][ T5875] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  206.779679][    T7] usb 6-1: Using ep0 maxpacket: 16
[  206.831794][ T5897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.361'.
[  206.915051][    T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.934432][    T7] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  206.976410][    T7] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  206.988684][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.003665][ T5082] Bluetooth: hci3: command 0x0406 tx timeout
[  207.037115][    T7] usb 6-1: config 0 descriptor??
[  207.127284][    T7] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  207.156187][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.164565][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.485114][ T1111] usb 6-1: USB disconnect, device number 4
[  207.686132][ T5910] 
[  207.688542][ T5910] ============================================
[  207.694709][ T5910] WARNING: possible recursive locking detected
[  207.700883][ T5910] syzkaller #0 Not tainted
[  207.705382][ T5910] --------------------------------------------
[  207.711520][ T5910] kworker/1:12/5910 is trying to acquire lock:
[  207.717667][ T5910] ffff88814c286930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0
[  207.727433][ T5910] 
[  207.727433][ T5910] but task is already holding lock:
[  207.734789][ T5910] ffff88806062d930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0
[  207.744538][ T5910] 
[  207.744538][ T5910] other info that might help us debug this:
[  207.752589][ T5910]  Possible unsafe locking scenario:
[  207.752589][ T5910] 
[  207.760064][ T5910]        CPU0
[  207.763340][ T5910]        ----
[  207.766629][ T5910]   lock(&grp->list_lock);
[  207.771044][ T5910]   lock(&grp->list_lock);
[  207.775459][ T5910] 
[  207.775459][ T5910]  *** DEADLOCK ***
[  207.775459][ T5910] 
[  207.783602][ T5910]  May be due to missing lock nesting notation
[  207.783602][ T5910] 
[  207.791917][ T5910] 3 locks held by kworker/1:12/5910:
[  207.797197][ T5910]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  207.807501][ T5910]  #1: ffffc900031cfd00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  207.819348][ T5910]  #2: ffff88806062d930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x1cb/0x8c0
[  207.829562][ T5910] 
[  207.829562][ T5910] stack backtrace:
[  207.835447][ T5910] CPU: 1 PID: 5910 Comm: kworker/1:12 Not tainted syzkaller #0
[  207.842987][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  207.853041][ T5910] Workqueue: events snd_rawmidi_input_event_work
[  207.859408][ T5910] Call Trace:
[  207.862722][ T5910]  <TASK>
[  207.865652][ T5910]  dump_stack_lvl+0x188/0x250
[  207.870334][ T5910]  ? show_regs_print_info+0x20/0x20
[  207.875632][ T5910]  ? load_image+0x410/0x410
[  207.880156][ T5910]  __lock_acquire+0x1247/0x7b50
[  207.885021][ T5910]  ? verify_lock_unused+0x140/0x140
[  207.890226][ T5910]  ? verify_lock_unused+0x140/0x140
[  207.895444][ T5910]  ? verify_lock_unused+0x140/0x140
[  207.900648][ T5910]  ? ktime_get+0x7b/0x270
[  207.905005][ T5910]  lock_acquire+0x19e/0x400
[  207.909526][ T5910]  ? snd_seq_deliver_event+0x1cb/0x8c0
[  207.915110][ T5910]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  207.921299][ T5910]  ? read_lock_is_recursive+0x10/0x10
[  207.926705][ T5910]  ? __rwlock_init+0x140/0x140
[  207.931475][ T5910]  ? do_raw_read_unlock+0x39/0x70
[  207.936507][ T5910]  _raw_read_lock+0x32/0x40
[  207.941017][ T5910]  ? snd_seq_deliver_event+0x1cb/0x8c0
[  207.946500][ T5910]  snd_seq_deliver_event+0x1cb/0x8c0
[  207.951794][ T5910]  snd_seq_kernel_client_dispatch+0x1fc/0x2f0
[  207.957881][ T5910]  snd_seq_control_queue+0x8ff/0x1010
[  207.963261][ T5910]  ? snd_seq_queue_remove_cells+0x2e0/0x2e0
[  207.969177][ T5910]  ? mark_lock+0x94/0x320
[  207.973540][ T5910]  ? snd_seq_port_use_ptr+0xfd/0x120
[  207.978935][ T5910]  ? __lock_acquire+0x7b50/0x7b50
[  207.983980][ T5910]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  207.989898][ T5910]  ? _raw_spin_unlock+0x40/0x40
[  207.994763][ T5910]  ? mark_lock+0x94/0x320
[  207.999098][ T5910]  ? do_raw_read_unlock+0x39/0x70
[  208.004124][ T5910]  ? _raw_read_unlock+0x24/0x40
[  208.008976][ T5910]  ? snd_seq_port_use_ptr+0xfd/0x120
[  208.014375][ T5910]  ? snd_seq_system_notify+0x170/0x170
[  208.019840][ T5910]  snd_seq_deliver_single_event+0x806/0xb30
[  208.025741][ T5910]  ? snd_seq_deliver_event+0x1e2/0x8c0
[  208.031202][ T5910]  ? snd_sequencer_device_done+0x20/0x20
[  208.036954][ T5910]  snd_seq_kernel_client_dispatch+0x1fc/0x2f0
[  208.043259][ T5910]  snd_seq_oss_timer_start+0x2ce/0x510
[  208.048744][ T5910]  ? snd_seq_oss_process_timer_event+0x3d0/0x3d0
[  208.055095][ T5910]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  208.060998][ T5910]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  208.066909][ T5910]  ? _raw_spin_unlock+0x40/0x40
[  208.071778][ T5910]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  208.077682][ T5910]  ? _raw_spin_unlock+0x40/0x40
[  208.082555][ T5910]  ? snd_seq_oss_readq_put_timestamp+0x333/0x5b0
[  208.088912][ T5910]  snd_seq_oss_midi_input+0x2e8/0x890
[  208.094609][ T5910]  ? snd_seq_oss_midi_get_addr+0x260/0x260
[  208.100466][ T5910]  ? do_raw_read_unlock+0x39/0x70
[  208.105524][ T5910]  ? _raw_read_unlock+0x24/0x40
[  208.110384][ T5910]  ? snd_seq_port_use_ptr+0xfd/0x120
[  208.115682][ T5910]  ? snd_seq_oss_process_event+0x2910/0x2910
[  208.121835][ T5910]  snd_seq_deliver_single_event+0x806/0xb30
[  208.127760][ T5910]  ? lockdep_hardirqs_on+0x94/0x140
[  208.133004][ T5910]  ? snd_sequencer_device_done+0x20/0x20
[  208.138654][ T5910]  ? do_raw_read_unlock+0x39/0x70
[  208.143682][ T5910]  snd_seq_deliver_event+0x49d/0x8c0
[  208.148974][ T5910]  snd_seq_kernel_client_dispatch+0x1fc/0x2f0
[  208.155050][ T5910]  snd_midi_input_event+0x289/0x3d0
[  208.160259][ T5910]  ? event_process_midi+0x3e0/0x3e0
[  208.165463][ T5910]  ? _raw_spin_unlock_irq+0x1f/0x40
[  208.170753][ T5910]  process_one_work+0x867/0xff0
[  208.175735][ T5910]  ? worker_detach_from_pool+0x240/0x240
[  208.181390][ T5910]  ? lockdep_hardirqs_off+0x70/0x100
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  208.186695][ T5910]  ? _raw_spin_lock_irq+0xb7/0xf0
[  208.191747][ T5910]  ? _raw_spin_lock_irqsave+0x100/0x100
[  208.197310][ T5910]  ? wq_worker_running+0x97/0x170
[  208.202344][ T5910]  worker_thread+0xad7/0x12a0
[  208.207124][ T5910]  kthread+0x42e/0x520
[  208.211286][ T5910]  ? rcu_lock_release+0x20/0x20
[  208.216140][ T5910]  ? kthread_blkcg+0xd0/0xd0
[  208.220928][ T5910]  ret_from_fork+0x1f/0x30
[  208.225440][ T5910]  </TASK>
[  208.693327][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.765373][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.226204][ T5898] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.235543][ T5898] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.244931][ T5898] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.254952][ T5898] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.391581][ T5917] rdma_rxe: ignoring netdev event = 23 for lo
[  209.412315][ T5917] rdma_rxe: lo changed mtu to 68
[  209.417345][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  209.422107][    C1] sctp_transport_update_pmtu: 3 callbacks suppressed
[  209.422156][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.465824][ T5917] infiniband syz1: set active
[  209.483046][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  209.501336][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.511518][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.521676][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.543548][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  209.570961][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  209.578656][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  209.589074][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  209.600610][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  209.630023][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.660203][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.721650][ T5909] lo speed is unknown, defaulting to 1000
[  209.740734][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.751009][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.821099][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  209.831449][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  210.155744][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.244193][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.312942][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.376769][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.198104][  T154] device hsr_slave_0 left promiscuous mode
[  211.205523][  T154] device hsr_slave_1 left promiscuous mode
[  211.215516][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.224151][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.234703][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.242407][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.253082][  T154] device bridge_slave_1 left promiscuous mode
[  211.259387][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.268825][  T154] device bridge_slave_0 left promiscuous mode
[  211.279757][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.293608][  T154] device veth1_macvtap left promiscuous mode
[  211.299804][  T154] device veth0_macvtap left promiscuous mode
[  211.306939][  T154] device veth1_vlan left promiscuous mode
[  211.315820][  T154] device veth0_vlan left promiscuous mode
[  211.427991][  T154] team0 (unregistering): Port device team_slave_1 removed
[  211.440159][  T154] team0 (unregistering): Port device team_slave_0 removed
[  211.451444][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.464046][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.516257][  T154] bond0 (unregistering): Released all slaves
[  212.513682][  T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.556064][  T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.626446][  T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.673145][  T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.763876][  T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.816660][  T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.873896][  T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.916380][  T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.022569][  T154] tipc: Left network mode
[  214.275171][  T154] device hsr_slave_0 left promiscuous mode
[  214.281659][  T154] device hsr_slave_1 left promiscuous mode
[  214.288246][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.296508][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.305444][  T154] device bridge_slave_1 left promiscuous mode
[  214.312026][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.322754][  T154] device bridge_slave_0 left promiscuous mode
[  214.329019][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.342461][  T154] device hsr_slave_0 left promiscuous mode
[  214.348825][  T154] device hsr_slave_1 left promiscuous mode
[  214.355295][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.365016][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.373709][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.382246][  T154] device bridge_slave_0 left promiscuous mode
[  214.388536][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.401789][  T154] device hsr_slave_0 left promiscuous mode
[  214.408292][  T154] device hsr_slave_1 left promiscuous mode
[  214.415570][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.424715][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.432587][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.442765][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.450805][  T154] device bridge_slave_1 left promiscuous mode
[  214.457044][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.468118][  T154] device bridge_slave_0 left promiscuous mode
[  214.475106][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.485892][  T154] rdma_rxe: ignoring netdev event = 10 for lo
[  214.494861][  T154] device veth1_macvtap left promiscuous mode
[  214.501410][  T154] device veth0_macvtap left promiscuous mode
[  214.507481][  T154] device veth1_vlan left promiscuous mode
[  214.513634][  T154] device veth0_vlan left promiscuous mode
[  214.520464][  T154] device veth1_macvtap left promiscuous mode
[  214.526514][  T154] device veth0_macvtap left promiscuous mode
[  214.534631][  T154] device veth1_vlan left promiscuous mode
[  214.543484][  T154] device veth0_vlan left promiscuous mode
[  214.593384][  T154] infiniband syz1: set down
[  214.701338][  T154] team0 (unregistering): Port device team_slave_1 removed
[  214.712434][  T154] team0 (unregistering): Port device team_slave_0 removed
[  214.723622][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.736195][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.783389][  T154] bond0 (unregistering): Released all slaves
[  214.862834][  T154] team0 (unregistering): Port device team_slave_1 removed
[  214.875836][  T154] team0 (unregistering): Port device team_slave_0 removed
[  214.889276][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.901742][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.946474][  T154] bond0 (unregistering): Released all slaves
[  214.993892][    T9] smc: removing ib device syz1
[  215.141813][  T154] team0 (unregistering): Port device team_slave_1 removed
[  215.160401][  T154] team0 (unregistering): Port device team_slave_0 removed
[  215.177057][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.195670][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.255684][  T154] bond0 (unregistering): Released all slaves
[  215.298120][ T5910] lo speed is unknown, defaulting to 1000