last executing test programs:

49.186734227s ago: executing program 1 (id=2):
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x8050)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0xa, 0x8, 0xa})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
unshare(0x28000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

47.923930555s ago: executing program 1 (id=9):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
close(0x3)
r1 = socket$pppoe(0x18, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000100)='isp1301 0x2', 0xb)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000000100)='isp1301 0x2c', 0xc)
connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000680)="c8", 0x1}], 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)

47.338885365s ago: executing program 1 (id=11):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$loop(&(0x7f0000000000), 0xa779, 0x100)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
epoll_create1(0x80000)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

46.469796825s ago: executing program 1 (id=13):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'veth0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params]}, 0x28}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r4, &(0x7f0000000500)="0802110000010802110000000800", 0xe)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
eventfd2(0x7, 0x1)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

31.128430764s ago: executing program 32 (id=13):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'veth0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params]}, 0x28}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
write(r4, &(0x7f0000000500)="0802110000010802110000000800", 0xe)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
eventfd2(0x7, 0x1)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

9.804885217s ago: executing program 0 (id=184):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904"], 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000380)="ab")
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000001c0)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r3, 0x3}, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="000125bd7000fedbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newsa={0x154, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x87, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x7ff]}}]}, 0x154}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0)
syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2)
sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801)

6.596973706s ago: executing program 0 (id=197):
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e00095a0c", @ANYRESHEX], 0x8)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0)
ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1d, &(0x7f0000000080)="691ba0ff9f01d874195b0200cade4278fc42b738000000000094000000", 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38)
syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00')
syz_open_dev$tty20(0xc, 0x4, 0x1)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}})
r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)

5.18764512s ago: executing program 4 (id=201):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_open_dev$evdev(0x0, 0x2, 0x8000)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x6a03, "0f9d0000002000200000b82100"})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
socket$netlink(0x10, 0x3, 0x13)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)

5.078511734s ago: executing program 2 (id=210):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000600000000000070a11173857249d8881937ecfbd3cde5a9810000009500ff0100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$sndseq(0xffffff9c, &(0x7f00000005c0), 0x668080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"})
add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x38}}, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, 0x0, 0x0)
syz_open_dev$dvb_demux(0x0, 0x1, 0x41)
connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
fcntl$dupfd(r6, 0x406, r6)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb)

4.333459242s ago: executing program 0 (id=204):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000380)=""/177, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xffff, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_adjtime(0x0, &(0x7f00000004c0)={0x8b8d, 0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x100, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7})
io_setup(0x2, &(0x7f0000000000))
connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000147b3fc7f3bed53ea0201000a0000000600074000000000100001800c0002800580010088000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x801)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e)
openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0)

4.148488834s ago: executing program 2 (id=207):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x40814)
sendmsg$nl_route(r1, 0x0, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$tipc(0x1e, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x2)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

4.093741186s ago: executing program 4 (id=208):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x53)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4809)
recvmmsg(r2, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x197e0000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)=""/4092, 0xffc}, {&(0x7f0000003740)=""/185, 0xb9}], 0x2}, 0x9}], 0x3, 0x0, 0x0)
r4 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000002980), 0x12)
r5 = openat$rtc(0xffffffffffffff9c, 0x0, 0x94781, 0x0)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000100)={0xd, 0x3, 0x6, 0x119, 0x6, 0x1, 0x3, 0x165, 0xffffffffffffffff})
socket$can_raw(0x1d, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0xb)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r8}, &(0x7f0000000100)=ANY=[@ANYBLOB='enc=raw hash=sha3-224\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/77], 0x0, 0x0)
io_uring_setup(0x724, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c00028008", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14)
r9 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000440)={0x0, @bt={0x5, 0xcb7, 0x0, 0x2, 0x7c8, 0xe, 0x7, 0x7, 0x7fff, 0x0, 0x4f, 0x2, 0x9, 0x1, 0x2, 0x7, {0xa4, 0x10000}, 0x8, 0x7f}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x2000000, 0x3, {{0x6, 0x4, 0x3, 0x2e, 0x18, 0x67, 0x0, 0x9, 0x29, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}]}}}}})

3.470496165s ago: executing program 3 (id=209):
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000a580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000894}, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0)

2.887421614s ago: executing program 4 (id=211):
socket$igmp6(0xa, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0xc, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c)
readv(r5, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), 0x0)
sendmmsg$inet6(r7, &(0x7f0000002940), 0x40000000000017d, 0x811)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x690, 0x280, 0x7, 0x2, 0x0, 0x0, {0x0, 0x0, 0x1}, {0x2000000, 0x0, 0x20}, {0x0, 0x1}, {}, 0x0, 0x101, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)

2.874933374s ago: executing program 0 (id=212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xe, 0x0, 0xc], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000600000000000070a11173857249d8881937ecfbd3cde5a9810000009500ff0100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$sndseq(0xffffff9c, &(0x7f00000005c0), 0x668080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"})
add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x38}}, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, 0x0, 0x0)
syz_open_dev$dvb_demux(0x0, 0x1, 0x41)
connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r8 = fcntl$dupfd(r7, 0x406, r7)
setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb)
write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYRESOCT=r5, @ANYRES64=r7, @ANYRES16=r8, @ANYRESDEC, @ANYRES64, @ANYRES8=r1], 0xfffffdcf)

2.843936974s ago: executing program 2 (id=213):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x2, 0x1, 0xfff7fffd, 0x2, 0x0, 0x0, 0x7})
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r1 = socket(0x28, 0x5, 0x0)
setns(0xc9, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
socket(0x8, 0x5, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
setuid(0xee00)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x4)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x4})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.164890106s ago: executing program 2 (id=214):
clock_gettime(0x7, &(0x7f00000009c0))
io_setup(0x6, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022"], 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r5, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
socket$igmp(0x2, 0x3, 0x2)

2.087012791s ago: executing program 3 (id=215):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1b0})
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff}]})
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0xffff, 0x0, 0x2, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1, 0x0, 0x0, 0x40000})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100))
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20000000)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000000c0)={0x4, 0x4, 0xdddd1000, 0x1000, &(0x7f000042b000/0x1000)=nil, 0x8})
r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000000)=0xf5)
writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000440)={{&(0x7f0000000000/0x1000)=nil, 0x1000}, 0x1})

1.864887947s ago: executing program 3 (id=216):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40000008, 0x108008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="a2adf67ad85ee4b33cff20916328efbab88fbeee9b1f2cda424e74598d60d73c17e8db07124d35ec83436992fe98ea9d4c8f61ebfaf5e19f7865f17c4cc4a8371f6ded8c57a8b8084cabac62e5db0d523f4f332b4f84c2bb78863855e869dfddae9b2245d7d5c989c4df95ed9a4656d041d597624d"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
iopl(0x3)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
chdir(&(0x7f0000000100)='./file0\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1)
getpid()
process_madvise(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="cd0e", 0x2}], 0x10000000000001c6, 0x4, 0x0)
poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x44}], 0x1, 0xe6)

1.244643461s ago: executing program 4 (id=217):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2)
close(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="626f6e6400907361389926ec0ac932f40000000c00028008001300040000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
r3 = getpid()
syz_emit_ethernet(0x46, 0x0, 0x0)
syz_emit_ethernet(0xa6, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000702c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0x1, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x547, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x2, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4004, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0xff, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x4014c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c)

1.218892367s ago: executing program 0 (id=218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x8020000)
r1 = semget$private(0x0, 0x4000, 0x0)
semctl$GETALL(r1, 0x0, 0x12, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x48000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), 0x0, &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xaa, 0x3}}]}, 0x84}}, 0x8084)

1.153607093s ago: executing program 3 (id=219):
mkdirat(0xffffffffffffff9c, 0x0, 0x1d1)
faccessat2(0xffffffffffffff9c, 0x0, 0xc4, 0x1100)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x33)
lstat(&(0x7f0000000140)='./dev/sda\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000380))
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c)
statx(r0, &(0x7f00000003c0)='./dev/sda\x00', 0x2000, 0x7ff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$fuse(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100), 0x80820, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',blksize=0x0000000000001000,max_read=0x0000000000000007,allow_other,allow_other,blksize=0x0000000000000600,obj_type=\'#,fowner=', @ANYRESDEC, @ANYBLOB="2c6673757569643d64653610b83237642d363532642d5d6530612d613161352d30363735352c66736d616769633d3078303030303030303030303030303030372c657569643d000000", @ANYRESDEC=r7, @ANYBLOB=',pcr=00000000000000000046,dont_hash,dont_measure,euid>', @ANYRESDEC, @ANYBLOB=',smackfshat=]&S-}/,,\x00'])

1.074657151s ago: executing program 2 (id=220):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r2, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r4, 0x0, 0x0, 0xc88c5)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0)
bind$inet(r7, 0x0, 0x0)
write$FUSE_NOTIFY_RESEND(r6, 0x0, 0x0)
connect$inet(r7, 0x0, 0x0)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r7, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=""/2})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0)

979.572122ms ago: executing program 0 (id=221):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48, 0x0, 0x80000001}]})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-'], 0xfe33)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000100000000000000020008463340019a41785fb6b5d24000900000000000000000c0000005f384fbfb1973ccc5f55f8b79040edf075a1b504d19ef2d6506eda00800000e76ec2e260"], 0x24, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x3, 0x2}, 0x10)
bind$tipc(r7, 0x0, 0x0)

442.772707ms ago: executing program 4 (id=222):
shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0x5}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
clock_gettime(0x5, &(0x7f0000000000))
setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0xea60}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r2, &(0x7f0000000100)="9ce9278bc8e075ab325f533c317c0f6cc8ec5759ac10394692141c2a6f6ee9377498cc806957c4202eb5c8e5ed5e41298228b77cd208054dbdf1f07b2870dbdd0c4cee5ed895041c0a077925fb2b3f84475a628ebc6c9bb6212649b6a234a3bf24c4d136c29dda77bfb3bf0ab3f1a83a2bfb4e5828b2d3c1b833293e34800aaebe584a9f2d84", 0x86, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0)
write(r3, &(0x7f0000000140)='ne', 0x2)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x2, 0x3, r3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)={'wg0\x00', @random="01000000ff96"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x181341, 0x0)
ioctl$TIOCGSOFTCAR(r4, 0x5414, &(0x7f0000000280))
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014})

194.646316ms ago: executing program 2 (id=223):
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

87.611727ms ago: executing program 3 (id=224):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x1b0})
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff}]})
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0xffff, 0x0, 0x2, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1, 0x0, 0x0, 0x40000})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100))
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20000000)
ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f00000000c0)={0x4, 0x4, 0xdddd1000, 0x1000, &(0x7f000042b000/0x1000)=nil, 0x8})
r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000000)=0xf5)
writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000440)={{&(0x7f0000000000/0x1000)=nil, 0x1000}, 0x1})

14.486957ms ago: executing program 3 (id=225):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x0, 0xee01}}, './file0\x00'})
ioctl$KVM_SET_IRQCHIP(r8, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

0s ago: executing program 4 (id=226):
mkdir(&(0x7f0000000080)='proc\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0)
fchdir(r0)
chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00')
chdir(&(0x7f0000000240)='g1\x00')
mkdir(0x0, 0x1ff)
mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='proc/self/root\x00', 0x1ff)
mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff)
mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff)
mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='640\n', 0x4)
write(0xffffffffffffffff, &(0x7f00000004c0)='360\n\x00', 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="4008000371cdcd18f9300d98be05000000010000000000020000080800054000000010080003ce0001000000000000000419220000000000000040000000010a00064000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='333333\n\x00', 0x7)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='460800\n\x00', 0x7)
mkdir(&(0x7f0000000640)='functions/uvc.0/streaming/header/h\x00', 0x1ff)
fchdir(r0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x6, 0xffff, 0x0, 0xfb5, 0x9})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f8, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})
chdir(&(0x7f0000000680)='sys/kernel/config/usb_gadget/g1/functions/uvc.0/streaming\x00')
symlink(&(0x7f00000006c0)='uncompressed/u\x00', &(0x7f0000000700)='header/h/u\x00')
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2b}, @void, @val={0xc, 0x99, {0x5, 0x36}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}}, 0xc880)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54955' (ED25519) to the list of known hosts.
[   32.884372][ T5663] cgroup: Unknown subsys name 'net'
[   33.057964][ T5663] cgroup: Unknown subsys name 'cpuset'
[   33.062059][ T5663] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   33.914253][ T5663] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.825826][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.826495][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.827584][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.828096][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.828342][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.828444][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.828840][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.830708][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.830768][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.830980][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.831206][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.832482][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.832570][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.832709][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.834724][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.834901][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.835534][   T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.836770][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.837453][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.837521][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   38.490629][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.490708][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.490770][ T5737] bridge_slave_0: entered allmulticast mode
[   38.491505][ T5737] bridge_slave_0: entered promiscuous mode
[   38.505929][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.505997][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.506091][ T5734] bridge_slave_0: entered allmulticast mode
[   38.507159][ T5734] bridge_slave_0: entered promiscuous mode
[   38.522107][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.522149][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.522214][ T5737] bridge_slave_1: entered allmulticast mode
[   38.522887][ T5737] bridge_slave_1: entered promiscuous mode
[   38.540190][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.540264][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.540360][ T5734] bridge_slave_1: entered allmulticast mode
[   38.541735][ T5734] bridge_slave_1: entered promiscuous mode
[   38.609312][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.611930][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.612078][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.612192][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.612277][ T5735] bridge_slave_0: entered allmulticast mode
[   38.613498][ T5735] bridge_slave_0: entered promiscuous mode
[   38.617080][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.617153][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.617251][ T5735] bridge_slave_1: entered allmulticast mode
[   38.618709][ T5735] bridge_slave_1: entered promiscuous mode
[   38.635236][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.635719][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.635800][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.635900][ T5745] bridge_slave_0: entered allmulticast mode
[   38.637341][ T5745] bridge_slave_0: entered promiscuous mode
[   38.673354][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.679239][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.679280][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.679331][ T5745] bridge_slave_1: entered allmulticast mode
[   38.680206][ T5745] bridge_slave_1: entered promiscuous mode
[   38.690920][ T5737] team0: Port device team_slave_0 added
[   38.694577][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.716946][ T5737] team0: Port device team_slave_1 added
[   38.727378][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.734651][ T5734] team0: Port device team_slave_0 added
[   38.735093][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.735102][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.735115][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.739004][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.762616][ T5734] team0: Port device team_slave_1 added
[   38.764288][ T5735] team0: Port device team_slave_0 added
[   38.764935][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.764947][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.764969][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.768875][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.790000][ T5735] team0: Port device team_slave_1 added
[   38.819380][ T5745] team0: Port device team_slave_0 added
[   38.829286][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.829299][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.829320][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.833138][ T5745] team0: Port device team_slave_1 added
[   38.851527][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.851540][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.851558][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.868559][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.868573][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.868611][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.870059][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.870069][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.870086][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.878890][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.878904][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.878924][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.880467][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.880479][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.880496][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.886174][ T5737] hsr_slave_0: entered promiscuous mode
[   38.887004][ T5737] hsr_slave_1: entered promiscuous mode
[   38.928429][ T5735] hsr_slave_0: entered promiscuous mode
[   38.928905][ T5735] hsr_slave_1: entered promiscuous mode
[   38.929301][ T5735] debugfs: 'hsr0' already exists in 'hsr'
[   38.929351][ T5735] Cannot create hsr debugfs directory
[   38.943656][ T5734] hsr_slave_0: entered promiscuous mode
[   38.944313][ T5734] hsr_slave_1: entered promiscuous mode
[   38.944840][ T5734] debugfs: 'hsr0' already exists in 'hsr'
[   38.944856][ T5734] Cannot create hsr debugfs directory
[   39.006062][ T5745] hsr_slave_0: entered promiscuous mode
[   39.006519][ T5745] hsr_slave_1: entered promiscuous mode
[   39.007320][ T5745] debugfs: 'hsr0' already exists in 'hsr'
[   39.007332][ T5745] Cannot create hsr debugfs directory
[   39.248113][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.255101][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.255917][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.259737][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.260939][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.263465][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.273155][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.276016][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.321790][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.324276][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.326953][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.330245][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.330939][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.334554][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.337137][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.340636][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.403516][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.407322][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.407743][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.413135][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.413641][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.416176][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.422809][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.426058][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.488647][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.491889][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.494483][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.504395][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.507180][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.509040][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.513076][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.513541][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.515267][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.532620][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[   39.545180][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.545776][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.551009][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.555700][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.555748][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.560682][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.587135][ T5735] 8021q: adding VLAN 0 to HW filter on device team0
[   39.594263][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[   39.600643][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.600686][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.614679][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.614723][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.615777][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.615819][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.617026][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.617105][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.692294][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.705737][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[   39.710913][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.710958][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.724347][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.724392][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.748380][ T5745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.904334][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.916251][ T5739] Bluetooth: hci2: command tx timeout
[   39.916373][ T5739] Bluetooth: hci3: command tx timeout
[   39.916432][ T5739] Bluetooth: hci0: command tx timeout
[   39.916474][ T5744] Bluetooth: hci1: command tx timeout
[   39.963316][ T5737] veth0_vlan: entered promiscuous mode
[   39.970093][ T5737] veth1_vlan: entered promiscuous mode
[   39.989523][ T5737] veth0_macvtap: entered promiscuous mode
[   39.992808][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.994339][ T5737] veth1_macvtap: entered promiscuous mode
[   40.004285][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.011095][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.031426][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.057786][ T5735] veth0_vlan: entered promiscuous mode
[   40.060932][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.068441][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.070536][ T5735] veth1_vlan: entered promiscuous mode
[   40.102941][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.102961][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.134278][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.134293][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.143557][ T5745] veth0_vlan: entered promiscuous mode
[   40.146170][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.147328][ T5734] veth0_vlan: entered promiscuous mode
[   40.150835][ T5735] veth0_macvtap: entered promiscuous mode
[   40.152836][ T5735] veth1_macvtap: entered promiscuous mode
[   40.154150][ T5745] veth1_vlan: entered promiscuous mode
[   40.157492][ T5734] veth1_vlan: entered promiscuous mode
[   40.168198][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.177573][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.185886][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.185944][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.189882][ T5737] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.192491][ T5737] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.194801][ T5737] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.197315][ T5737] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.201879][ T5734] veth0_macvtap: entered promiscuous mode
[   40.206961][ T5745] veth0_macvtap: entered promiscuous mode
[   40.210107][ T5734] veth1_macvtap: entered promiscuous mode
[   40.217121][ T5737] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.219965][ T5745] veth1_macvtap: entered promiscuous mode
[   40.225584][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.225608][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.225626][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.225643][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.242067][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.249076][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.264233][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.271347][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.277255][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.277267][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.285569][ T5609] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.285719][ T5609] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.285968][ T5609] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.304701][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.304719][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.368262][ T5609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.368808][ T5609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.368985][ T5609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.369003][ T5609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.381489][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.381507][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.383957][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.383971][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.398555][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.398571][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.413032][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.413044][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.417429][ T5890] tipc: Started in network mode
[   40.417444][ T5890] tipc: Node identity de111c4ddb81, cluster identity 4711
[   40.417565][ T5890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   40.418767][ T5890] syzkaller0: entered promiscuous mode
[   40.418777][ T5890] syzkaller0: entered allmulticast mode
[   40.428490][ T5890] tipc: Resetting bearer <eth:syzkaller0>
[   40.434135][ T5889] tipc: Resetting bearer <eth:syzkaller0>
[   40.446008][ T5889] tipc: Disabling bearer <eth:syzkaller0>
[   40.465398][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.778455][ T5899] IPVS: wrr: TCP 127.0.0.1:21 - no destination available
[   40.779904][  T231] IPVS: starting estimator thread 0...
[   40.805568][   T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   40.875635][ T5900] IPVS: using max 30 ests per chain, 72000 per kthread
[   40.961318][   T35] usb 7-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[   40.962976][   T35] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.962992][   T35] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[   40.963005][   T35] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   40.963017][   T35] usb 7-1: config 0 interface 0 has no altsetting 0
[   40.963032][   T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.970108][   T35] usb 7-1: config 0 descriptor??
[   40.972267][ T5898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   41.391889][   T35] usbhid 7-1:0.0: can't add hid device: -71
[   41.391943][   T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   41.394387][   T35] usb 7-1: USB disconnect, device number 2
[   41.488718][ T5903] syzkaller0: entered promiscuous mode
[   41.488738][ T5903] syzkaller0: entered allmulticast mode
[   41.669105][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669131][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669141][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669149][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669157][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669164][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669173][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669181][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669189][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669196][ T5905] tc action pedit 'at' offset 5 out of bounds
[   41.669212][ T5905] 0: reclassify loop, rule prio 0, protocol 800
[   41.671602][ T5907] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02
[   41.995487][ T5751] Bluetooth: hci2: command tx timeout
[   41.995510][ T5751] Bluetooth: hci1: command tx timeout
[   41.995573][ T5744] Bluetooth: hci0: command tx timeout
[   41.995667][ T5744] Bluetooth: hci3: command tx timeout
[   44.076962][ T5100] Bluetooth: hci0: command tx timeout
[   44.076992][ T5100] Bluetooth: hci1: command tx timeout
[   44.077010][ T5100] Bluetooth: hci2: command tx timeout
[   44.077124][ T5744] Bluetooth: hci3: command tx timeout
[   44.264876][ T5941] netlink: 'syz.3.19': attribute type 1 has an invalid length.
[   44.282088][ T5941] macvtap1: entered allmulticast mode
[   44.321186][ T5943] syzkaller0: entered promiscuous mode
[   44.321206][ T5943] syzkaller0: entered allmulticast mode
[   44.454750][ T5947] loop0: detected capacity change from 0 to 32768
[   44.551418][ T5947] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown.
[   44.696592][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   44.696617][ T5967] veth1: entered promiscuous mode
[   44.696626][ T5967] veth1: entered allmulticast mode
[   44.698895][ T5967] veth1: left promiscuous mode
[   44.698907][ T5967] veth1: left allmulticast mode
[   45.644312][ T5982] tc_dump_action: action bad kind
[   45.745920][ T5981] netlink: 'syz.0.34': attribute type 1 has an invalid length.
[   45.746653][ T5981] 8021q: VLANs not supported on vxcan0
[   45.871087][ T5989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   45.871948][ T5989] syzkaller0: entered promiscuous mode
[   45.871965][ T5989] syzkaller0: entered allmulticast mode
[   45.888285][ T5989] tipc: Resetting bearer <eth:syzkaller0>
[   45.890925][ T5988] tipc: Resetting bearer <eth:syzkaller0>
[   45.894668][ T5988] tipc: Disabling bearer <eth:syzkaller0>
[   46.017250][ T5991] syzkaller0: entered promiscuous mode
[   46.017264][ T5991] syzkaller0: entered allmulticast mode
[   46.126455][ T5993] syzkaller0: entered promiscuous mode
[   46.126468][ T5993] syzkaller0: entered allmulticast mode
[   46.130134][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'.
[   46.155984][ T5751] Bluetooth: hci2: command tx timeout
[   46.156006][ T5751] Bluetooth: hci1: command tx timeout
[   46.156020][ T5751] Bluetooth: hci0: command tx timeout
[   46.156050][ T5744] Bluetooth: hci3: command tx timeout
[   46.283051][ T5999] syzkaller0: entered promiscuous mode
[   46.283065][ T5999] syzkaller0: entered allmulticast mode
[   46.653772][ T6007] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size.
[   47.059628][ T6012] ip6erspan0: entered allmulticast mode
[   47.188369][ T6016] tipc: Started in network mode
[   47.188395][ T6016] tipc: Node identity 5aebb2221b02, cluster identity 4711
[   47.188576][ T6016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.189547][ T6016] syzkaller0: entered promiscuous mode
[   47.189559][ T6016] syzkaller0: entered allmulticast mode
[   47.195431][ T6016] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   47.213363][ T6016] tipc: Resetting bearer <eth:syzkaller0>
[   47.217666][ T6015] tipc: Resetting bearer <eth:syzkaller0>
[   47.222749][ T6015] tipc: Disabling bearer <eth:syzkaller0>
[   47.355536][   T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   47.505409][   T35] usb 5-1: Using ep0 maxpacket: 16
[   47.506130][   T35] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   47.507094][   T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   47.508949][   T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.508969][   T35] usb 5-1: Product: syz
[   47.508981][   T35] usb 5-1: Manufacturer: syz
[   47.508995][   T35] usb 5-1: SerialNumber: syz
[   47.511326][   T35] usb 5-1: config 0 descriptor??
[   47.518550][   T35] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   47.518576][   T35] em28xx 5-1:0.0: DVB interface 0 found: bulk
[   47.642544][ T6020] netlink: 'syz.2.50': attribute type 1 has an invalid length.
[   47.661794][ T6020] macvtap1: entered allmulticast mode
[   47.824339][ T6023] jffs2: notice: (6023) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   48.122128][   T35] em28xx 5-1:0.0: chip ID is em2765
[   48.502843][ T6028] FAULT_INJECTION: forcing a failure.
[   48.502843][ T6028] name failslab, interval 1, probability 0, space 0, times 1
[   48.502874][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.2.52 Not tainted syzkaller #0 PREEMPT(full) 
[   48.502894][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   48.502904][ T6028] Call Trace:
[   48.502910][ T6028]  <TASK>
[   48.502918][ T6028]  dump_stack_lvl+0x100/0x190
[   48.502947][ T6028]  should_fail_ex.cold+0x5/0xa
[   48.502971][ T6028]  should_failslab+0xc2/0x120
[   48.502999][ T6028]  __kmalloc_cache_noprof+0x91/0x6d0
[   48.503018][ T6028]  ? parse_pred+0x302/0x3070
[   48.503043][ T6028]  ? parse_pred+0x69b/0x3070
[   48.503071][ T6028]  parse_pred+0x69b/0x3070
[   48.503101][ T6028]  ? __pfx_parse_pred+0x10/0x10
[   48.503133][ T6028]  ? rcu_is_watching+0x13/0xc0
[   48.503153][ T6028]  ? trace_kmalloc+0xeb/0x110
[   48.503179][ T6028]  ? __kasan_kmalloc+0xaa/0xb0
[   48.503203][ T6028]  ? __kmalloc_noprof+0x350/0x840
[   48.503227][ T6028]  ? process_preds+0x4c2/0x1d90
[   48.503254][ T6028]  process_preds+0x6a6/0x1d90
[   48.503283][ T6028]  ? create_filter_start.constprop.0+0x134/0x310
[   48.503311][ T6028]  create_filter+0x140/0x210
[   48.503336][ T6028]  ? __pfx_create_filter+0x10/0x10
[   48.503360][ T6028]  ? __pfx___mutex_lock+0x10/0x10
[   48.503382][ T6028]  ? __might_fault+0xc5/0x140
[   48.503401][ T6028]  ? find_held_lock+0x2b/0x80
[   48.503423][ T6028]  apply_event_filter+0x220/0x500
[   48.503449][ T6028]  ? __pfx_apply_event_filter+0x10/0x10
[   48.503482][ T6028]  event_filter_write+0x16d/0x290
[   48.503504][ T6028]  vfs_write+0x2aa/0x1050
[   48.503526][ T6028]  ? __pfx_event_filter_write+0x10/0x10
[   48.503545][ T6028]  ? lock_acquire+0x1d1/0x380
[   48.503568][ T6028]  ? __fget_files+0x34/0x3d0
[   48.503589][ T6028]  ? __pfx_vfs_write+0x10/0x10
[   48.503608][ T6028]  ? find_held_lock+0x2b/0x80
[   48.503628][ T6028]  ? __fget_files+0x215/0x3d0
[   48.503652][ T6028]  ? __fget_files+0x21f/0x3d0
[   48.503681][ T6028]  ksys_write+0x12a/0x250
[   48.503701][ T6028]  ? __pfx_ksys_write+0x10/0x10
[   48.503736][ T6028]  __do_fast_syscall_32+0x13a/0x8b0
[   48.503764][ T6028]  do_fast_syscall_32+0x32/0x70
[   48.503788][ T6028]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   48.503809][ T6028] RIP: 0023:0xf743efec
[   48.503828][ T6028] Code: Unable to access opcode bytes at 0xf743efc2.
[   48.503836][ T6028] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   48.503854][ T6028] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[   48.503865][ T6028] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000
[   48.503875][ T6028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   48.503885][ T6028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   48.503895][ T6028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   48.503919][ T6028]  </TASK>
[   48.656335][ T5744] Bluetooth: Wrong link type (-71)
[   48.731734][   T35] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   48.731767][   T35] em28xx 5-1:0.0: board has no eeprom
[   48.885612][ T6033] input: syz0 as /devices/virtual/input/input5
[   48.897091][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'.
[   49.003879][ T6037] warning: `syz.3.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.045398][   T35] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   49.045415][   T35] em28xx 5-1:0.0: dvb set to bulk mode.
[   49.057795][   T35] em28xx 5-1:0.0: Binding DVB extension
[   49.131969][ T6035] Zero length message leads to an empty skb
[   50.172839][ T6048] syz.2.57 (6048): /proc/6047/oom_adj is deprecated, please use /proc/6047/oom_score_adj instead.
[   50.425365][ T4819] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   50.481508][ T5901] usb 5-1: USB disconnect, device number 2
[   50.482465][ T5901] em28xx 5-1:0.0: Disconnecting em28xx
[   50.504467][   T35] em28xx 5-1:0.0: Registering input extension
[   50.508556][ T5901] em28xx 5-1:0.0: Closing input extension
[   50.521937][ T5901] em28xx: Freeing device
[   50.585843][ T4819] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[   50.586726][ T4819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   50.586738][ T4819] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   50.588353][ T4819] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   50.588365][ T4819] usb 7-1: Product: syz
[   50.588372][ T4819] usb 7-1: SerialNumber: syz
[   50.590715][ T4819] usb 7-1: config 0 descriptor??
[   51.043108][ T6059] fuse: Bad value for 'fd'
[   51.382861][ T6070] pci_bus 0000:01: busn_res: [bus 01] is released
[   51.401355][ T6071] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port
[   51.405382][ T6071] pci 0000:00:04.0: PCI bridge to [bus 01]
[   51.405537][ T6071] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[   51.405644][ T6071] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[   51.407268][ T6071] pci 0000:00:04.0:   bridge window [mem 0xfe000000-0xfe1fffff 64bit pref]
[   51.407858][ T6071] pci 0000:00:04.0: enabling Extended Tags
[   51.417425][ T6071] pci 0000:00:04.0: Adding to iommu group 4
[   51.427062][ T6071] pci 0000:00:04.0: PCI bridge to [bus 01]
[   51.429682][ T6071] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[   51.429712][ T6071] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000
[   51.429782][ T6071] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned
[   51.429798][ T6071] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned
[   51.429814][ T6071] pci 0000:00:04.0: bridge window [io  0x1000-0x1fff]: assigned
[   51.429880][ T6071] pci 0000:00:04.0: PCI bridge to [bus 01]
[   51.429939][ T6071] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[   51.431703][ T6071] pci 0000:00:04.0:   bridge window [mem 0x80000000-0x801fffff]
[   51.432910][ T6071] pci 0000:00:04.0:   bridge window [mem 0x580000000-0x5801fffff 64bit pref]
[   51.477521][ T6071] pcieport 0000:00:04.0: PME: Signaling with IRQ 25
[   51.482381][ T6071] pcieport 0000:00:04.0: AER: enabled with IRQ 26
[   51.652584][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'.
[   51.652708][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'.
[   52.189495][ T6082] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET)
[   52.248666][ T6085] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[   52.249618][ T6085] udc usbip-vudc.0: failed to start g1: -19
[   52.254475][ T6085] UDC core: g1: couldn't find an available UDC or it's busy
[   52.942632][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'.
[   53.169544][ T6107] netlink: 640 bytes leftover after parsing attributes in process `syz.0.77'.
[   53.171559][ T6107] openvswitch: netlink: Flow actions attr not present in new flow.
[   53.186308][   T73] usb 7-1: USB disconnect, device number 3
[   53.323663][ T6112] pci_bus 0000:01: busn_res: [bus 01] is released
[   53.349225][ T6112] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port
[   53.352466][ T6112] pci 0000:00:04.0: PCI bridge to [bus 01]
[   53.352621][ T6112] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[   53.352715][ T6112] pci 0000:00:04.0:   bridge window [mem 0x80000000-0x801fffff]
[   53.354035][ T6112] pci 0000:00:04.0:   bridge window [mem 0x580000000-0x5801fffff 64bit pref]
[   53.354457][ T6112] pci 0000:00:04.0: enabling Extended Tags
[   53.364828][ T6112] pci 0000:00:04.0: Adding to iommu group 4
[   53.376282][ T6112] pci 0000:00:04.0: PCI bridge to [bus 01]
[   53.379423][ T6112] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[   53.379456][ T6112] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000
[   53.379564][ T6112] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned
[   53.379591][ T6112] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned
[   53.379617][ T6112] pci 0000:00:04.0: bridge window [io  0x1000-0x1fff]: assigned
[   53.379727][ T6112] pci 0000:00:04.0: PCI bridge to [bus 01]
[   53.379802][ T6112] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[   53.382206][ T6112] pci 0000:00:04.0:   bridge window [mem 0x80000000-0x801fffff]
[   53.383329][ T6112] pci 0000:00:04.0:   bridge window [mem 0x580000000-0x5801fffff 64bit pref]
[   53.421769][ T6112] pcieport 0000:00:04.0: PME: Signaling with IRQ 25
[   53.428609][ T6112] pcieport 0000:00:04.0: AER: enabled with IRQ 26
[   54.253725][ T6124] Console: switching to colour dummy device 80x25
[   54.326443][ T6120] syzkaller1: entered promiscuous mode
[   54.326457][ T6120] syzkaller1: entered allmulticast mode
[   54.528201][ T6126] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[   54.540088][ T6126] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[   54.540226][ T6126] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[   54.540461][ T6126] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[   54.541036][ T6126] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[   54.595123][ T6126] pci 0000:00:01.0: Adding to iommu group 1
[   54.623335][ T6126] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[   54.623360][ T6126] pci 0000:00:01.0: vgaarb: bridge control possible
[   54.623373][ T6126] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[   54.642904][ T6126] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned
[   54.648411][ T6126] pci 0000:00:01.0: BAR 2 [mem 0x80200000-0x80200fff]: assigned
[   54.665395][ T6126] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[   54.714827][ T6126] [drm] Found bochs VGA, ID 0xb0c5.
[   54.714925][ T6126] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80200000.
[   54.787847][ T6126] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[   55.069063][ T6126] Console: switching to colour frame buffer device 160x50
[   55.096165][ T6126] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[   58.500374][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   58.504107][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   58.505171][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   58.506376][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   58.506799][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   58.955642][ T5609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.069230][ T5609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.119599][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.119694][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.119751][ T6154] bridge_slave_0: entered allmulticast mode
[   59.120483][ T6154] bridge_slave_0: entered promiscuous mode
[   59.121877][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.121984][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.122046][ T6154] bridge_slave_1: entered allmulticast mode
[   59.123008][ T6154] bridge_slave_1: entered promiscuous mode
[   59.141582][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.143834][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.186682][ T5609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.191027][ T6154] team0: Port device team_slave_0 added
[   59.192585][ T6154] team0: Port device team_slave_1 added
[   59.204931][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.204941][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.204954][ T6154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.206117][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.206125][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.206137][ T6154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.227624][ T6154] hsr_slave_0: entered promiscuous mode
[   59.228065][ T6154] hsr_slave_1: entered promiscuous mode
[   59.228356][ T6154] debugfs: 'hsr0' already exists in 'hsr'
[   59.228367][ T6154] Cannot create hsr debugfs directory
[   59.258425][ T5609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.354233][ T6154] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   59.361552][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.379192][ T6154] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   59.382302][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.412982][ T6154] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   59.421396][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.421886][ T6154] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   59.436747][ T6154] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.464516][ T5609] bridge_slave_1: left allmulticast mode
[   59.464551][ T5609] bridge_slave_1: left promiscuous mode
[   59.466109][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.482300][ T5609] bridge_slave_0: left allmulticast mode
[   59.482324][ T5609] bridge_slave_0: left promiscuous mode
[   59.482815][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.874812][ T5609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.880644][ T5609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.883025][ T5609] bond0 (unregistering): Released all slaves
[   60.059715][ T6199] ucma_write: process 79 (syz.0.98) changed security contexts after opening file descriptor, this is not allowed.
[   60.064300][ T6199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   60.064315][ T6199] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   60.065179][ T6199] vhci_hcd vhci_hcd.0: Device attached
[   60.084382][ T6200] vhci_hcd: connection closed
[   60.089359][   T13] vhci_hcd vhci_hcd.0: stop threads
[   60.089671][   T13] vhci_hcd vhci_hcd.0: release socket
[   60.090100][   T13] vhci_hcd vhci_hcd.0: disconnect device
[   60.189846][ T6154] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.204751][ T6154] 8021q: adding VLAN 0 to HW filter on device team0
[   60.213818][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.213887][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.258882][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.258928][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.347058][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2
[   60.555563][ T5100] Bluetooth: hci4: command tx timeout
[   60.951572][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3
[   61.093192][ T5609] hsr_slave_0: left promiscuous mode
[   61.102269][ T5609] hsr_slave_1: left promiscuous mode
[   61.103124][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.103167][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.114647][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.114661][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.265139][ T6239] Bluetooth: MGMT ver 1.23
[   61.333953][ T6241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[   61.394556][ T5609] veth1_macvtap: left promiscuous mode
[   61.394723][ T5609] veth0_macvtap: left promiscuous mode
[   61.410968][ T5609] veth1_vlan: left promiscuous mode
[   61.411089][ T5609] veth0_vlan: left promiscuous mode
[   61.419240][ T6244] netlink: 'syz.0.105': attribute type 4 has an invalid length.
[   61.940852][ T5609] team0 (unregistering): Port device team_slave_1 removed
[   61.964003][ T5609] team0 (unregistering): Port device team_slave_0 removed
[   62.076559][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4
[   62.147922][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.503269][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5
[   62.649788][ T5100] Bluetooth: hci4: command tx timeout
[   62.918411][ T6154] veth0_vlan: entered promiscuous mode
[   62.928249][ T6154] veth1_vlan: entered promiscuous mode
[   62.962524][ T6154] veth0_macvtap: entered promiscuous mode
[   62.969223][ T6154] veth1_macvtap: entered promiscuous mode
[   63.021703][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.031081][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.137980][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.245491][ T5609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.295918][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.295931][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.351212][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.351226][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.357152][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.357176][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.715413][ T5100] Bluetooth: hci4: command tx timeout
[   64.906354][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   65.086202][    T9] usb 7-1: Using ep0 maxpacket: 32
[   65.092863][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[   65.094893][    T9] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[   65.125079][    T9] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[   65.125096][    T9] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[   65.125105][    T9] usb 7-1: config 14 has no interface number 0
[   65.134930][    T9] usb 7-1: config 14 has no interface number 1
[   65.137894][    T9] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   65.138077][    T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[   65.138232][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[   65.138246][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[   65.138259][    T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[   65.138591][    T9] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   65.138606][    T9] usb 7-1: config 14 interface 57 has no altsetting 0
[   65.138868][    T9] usb 7-1: config 14 interface 228 has no altsetting 0
[   65.180805][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.180845][    T9] usb 7-1: Product: syz
[   65.181015][    T9] usb 7-1: Manufacturer: syz
[   65.181023][    T9] usb 7-1: SerialNumber: syz
[   65.431507][ T6316] netlink: 76 bytes leftover after parsing attributes in process `syz.4.120'.
[   65.431523][ T6316] netlink: 72 bytes leftover after parsing attributes in process `syz.4.120'.
[   65.431577][ T6316] netlink: 'syz.4.120': attribute type 3 has an invalid length.
[   65.431585][ T6316] netlink: 11 bytes leftover after parsing attributes in process `syz.4.120'.
[   65.757787][    T9] legousbtower 7-1:14.57: interrupt endpoints not found
[   65.908561][ T6333] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   66.162561][    T9] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178
[   66.170593][    T9] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[   66.285493][ T4819] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   66.435849][ T4819] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[   66.437122][ T4819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   66.437136][ T4819] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   66.437153][ T4819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.443138][ T4819] spcp8x5 9-1:1.0: SPCP8x5 converter detected
[   66.447992][ T4819] usb 9-1: SPCP8x5 converter now attached to ttyUSB0
[   66.795413][ T5100] Bluetooth: hci4: command tx timeout
[   66.807385][ T6336] SPCP8x5 ttyUSB0: failed to set control lines: -110
[   66.808272][ T6336] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[   66.809275][ T6336] SPCP8x5 ttyUSB0: failed to set control lines: -32
[   66.906054][ T6353] capability: warning: `syz.3.128' uses deprecated v2 capabilities in a way that may be insecure
[   66.974764][ T6336] SPCP8x5 ttyUSB0: failed to set control lines: -32
[   67.105550][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.106964][ T6358] mmap: syz.3.130 (6358) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   67.107078][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.111062][ T2397] usb 7-1: USB disconnect, device number 4
[   67.143702][ T2397] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected
[   67.207103][ T6354] SPCP8x5 ttyUSB0: failed to set control lines: -32
[   67.209801][   T73] usb 9-1: USB disconnect, device number 2
[   67.220803][   T73] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[   67.222856][   T73] spcp8x5 9-1:1.0: device disconnected
[   67.595816][ T6362] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[   67.595843][ T6362] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   67.597137][ T6362] vhci_hcd vhci_hcd.0: Device attached
[   67.826672][    T9] vhci_hcd vhci_hcd.4: vhci_device speed not set
[   67.835525][   T82] IPVS: starting estimator thread 0...
[   67.895567][    T9] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[   67.926764][ T6368] IPVS: using max 42 ests per chain, 100800 per kthread
[   68.759073][ T6363] vhci_hcd: connection reset by peer
[   68.760023][   T13] vhci_hcd vhci_hcd.4: stop threads
[   68.760038][   T13] vhci_hcd vhci_hcd.4: release socket
[   68.760643][   T13] vhci_hcd vhci_hcd.4: disconnect device
[   68.904988][ T6383] ftl_cs: FTL header not found.
[   68.933123][ T6389] 9p: Bad value for 'rfdno'
[   69.082923][ T6383] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536]
[   69.084690][ T6388] ubi0: attaching mtd1
[   69.090953][ T6388] ubi0: scanning is finished
[   69.090981][ T6388] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   69.288832][ T6388] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22
[   69.367331][ T5100] Bluetooth: hci3: Malformed Event: 0x02
[   69.367708][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'.
[   69.367718][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'.
[   69.367732][ T6395] netlink: 'syz.3.137': attribute type 19 has an invalid length.
[   69.367739][ T6395] netlink: 'syz.3.137': attribute type 20 has an invalid length.
[   69.948329][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'.
[   70.031587][ T6408] overlayfs: failed to resolve './cgroup': -2
[   70.104108][ T6410] process 'syz.3.142' launched '/dev/fd/4' with NULL argv: empty string added
[   70.567270][ T6420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.144'.
[   70.673226][ T6424] sysfs: Unknown parameter 'mode'
[   70.758732][ T6424] pci_bus 0000:01: busn_res: [bus 01] is released
[   71.039431][ T1437] ieee802154 phy0 wpan0: encryption failed: -22
[   71.039516][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[   71.058356][   T50] cfg80211: failed to load regulatory.db
[   71.739606][ T6441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.145'.
[   72.851421][ T6459] lo speed is unknown, defaulting to 1000
[   72.851486][ T6459] lo speed is unknown, defaulting to 1000
[   72.854766][ T6459] lo speed is unknown, defaulting to 1000
[   72.857347][ T6459] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   72.857379][ T6459] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   72.857417][ T6459] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   72.861035][ T6459] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.871794][ T6459] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   72.901980][ T5100] Bluetooth: hci3: hcon ffff888046d74000 sent 1 < count 47384
[   72.923987][ T6459] lo speed is unknown, defaulting to 1000
[   72.925279][ T6459] lo speed is unknown, defaulting to 1000
[   72.927034][ T6459] lo speed is unknown, defaulting to 1000
[   72.927704][ T6459] lo speed is unknown, defaulting to 1000
[   73.105421][    T9] vhci_hcd vhci_hcd.4: vhci_device speed not set
[   73.150341][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.075443][ T4819] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   75.237235][ T4819] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   75.237274][ T4819] usb 5-1: too many configurations: 9, using maximum allowed: 8
[   75.238339][ T4819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.238377][ T4819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.238399][ T4819] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.239481][ T4819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.239504][ T4819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.239517][ T4819] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.240597][ T4819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.240619][ T4819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.240633][ T4819] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.241490][ T4819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.241516][ T4819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.241530][ T4819] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.242449][ T4819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.242494][ T4819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.242516][ T4819] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.243736][ T4819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.243771][ T4819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.243795][ T4819] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.244854][ T4819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.244889][ T4819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.244913][ T4819] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.248885][ T4819] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   75.248907][ T4819] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   75.248921][ T4819] usb 5-1: config 0 interface 0 has no altsetting 0
[   75.250721][ T4819] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   75.250736][ T4819] usb 5-1: Product: syz
[   75.250743][ T4819] usb 5-1: Manufacturer: syz
[   75.250751][ T4819] usb 5-1: SerialNumber: syz
[   75.252208][ T4819] usb 5-1: config 0 descriptor??
[   75.266756][ T4819] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[   75.523317][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.523878][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.680362][ T2397] usb 5-1: USB disconnect, device number 3
[   75.686801][ T2397] yurex 5-1:0.0: USB YUREX #0 now disconnected
[   75.713232][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.716735][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.825407][   T35] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   75.848247][ T6519] ip6erspan0: left allmulticast mode
[   75.865439][ T5609] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.866324][ T5609] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.866346][ T5609] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.866363][ T5609] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.972862][ T6540] Console: switching to colour dummy device 80x25
[   76.080613][   T35] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   76.118038][ T6542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.173'.
[   76.391161][   T35] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   76.391193][   T35] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.391208][   T35] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[   76.391249][   T35] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.438701][   T35] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   76.438724][   T35] usb 9-1: Product: syz
[   76.438737][   T35] usb 9-1: Manufacturer: syz
[   76.654218][ T6533] Process accounting resumed
[   77.037787][   T35] cdc_wdm 9-1:1.0: skipping garbage
[   77.037800][   T35] cdc_wdm 9-1:1.0: skipping garbage
[   77.125610][ T1345] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   77.212010][ T5100] Bluetooth: hci4: Malformed Event: 0x02
[   77.212350][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'.
[   77.212360][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'.
[   77.212375][ T6532] netlink: 'syz.4.171': attribute type 19 has an invalid length.
[   77.212382][ T6532] netlink: 'syz.4.171': attribute type 20 has an invalid length.
[   77.286133][ T1345] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   77.287061][ T1345] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   77.287088][ T1345] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   77.287121][ T1345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.294121][ T6547] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   77.311030][ T1345] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   77.623691][   T35] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[   77.623704][   T35] cdc_wdm 9-1:1.0: Unknown control protocol
[   77.626446][   T35] usb 9-1: USB disconnect, device number 3
[   77.701330][ T1345] usb 5-1: USB disconnect, device number 4
[   78.341724][ T6568] syz_tun: entered allmulticast mode
[   79.035477][ T5100] Bluetooth: hci3: command 0x0406 tx timeout
[   79.163452][ T6568] syz_tun: left allmulticast mode
[   80.136033][ T5788] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   80.286318][ T5788] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   80.287369][ T5788] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.289209][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.289231][ T5788] usb 5-1: Product: syz
[   80.289245][ T5788] usb 5-1: Manufacturer: syz
[   80.289260][ T5788] usb 5-1: SerialNumber: syz
[   80.313168][ T5788] sisusb 5-1:1.0: Invalid USB2VGA device
[   80.313189][ T5788] sisusb 5-1:1.0: probe with driver sisusb failed with error -22
[   80.368977][ T5744] Bluetooth: hci3: Malformed Event: 0x02
[   80.369237][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'.
[   80.369250][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'.
[   80.369264][ T6619] netlink: 'syz.3.186': attribute type 19 has an invalid length.
[   80.369271][ T6619] netlink: 'syz.3.186': attribute type 20 has an invalid length.
[   80.755442][ T5788] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[   80.861056][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'.
[   80.915772][ T5788] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[   80.916538][ T5788] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC
[   80.916553][ T5788] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   80.917654][ T5788] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[   80.917666][ T5788] usb 9-1: Manufacturer: syz
[   80.917673][ T5788] usb 9-1: SerialNumber: syz
[   81.155359][ T5788] usbhid 9-1:36.0: couldn't find an input interrupt endpoint
[   81.159339][ T5788] usb 9-1: USB disconnect, device number 4
[   82.945066][ T5788] usb 5-1: USB disconnect, device number 5
[   84.738541][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'.
[   85.382485][ T6743] netlink: 'syz.3.206': attribute type 2 has an invalid length.
[   86.391206][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'.
[   87.183034][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.212'.
[   88.188322][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'.
[   88.712700][ T6804] tipc: Failed to remove unknown binding: 66,0,0/0:2560130711/2560130713
[   88.712728][ T6804] tipc: Failed to remove unknown binding: 66,0,0/0:2560130711/2560130712
[   89.582962][ T6817] 
[   89.583787][ T6817] ======================================================
[   89.585978][ T6817] WARNING: possible circular locking dependency detected
[   89.588185][ T6817] syzkaller #0 Not tainted
[   89.589696][ T6817] ------------------------------------------------------
[   89.591883][ T6817] syz.4.226/6817 is trying to acquire lock:
[   89.593731][ T6817] ffffffff90401ce8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650
[   89.597076][ T6817] 
[   89.597076][ T6817] but task is already holding lock:
[   89.599548][ T6817] ffff888013129440 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: configfs_symlink+0x452/0x1340
[   89.602833][ T6817] 
[   89.602833][ T6817] which lock already depends on the new lock.
[   89.602833][ T6817] 
[   89.606066][ T6817] 
[   89.606066][ T6817] the existing dependency chain (in reverse order) is:
[   89.608843][ T6817] 
[   89.608843][ T6817] -> #3 (&sb->s_type->i_mutex_key#30){++++}-{4:4}:
[   89.611534][ T6817]        lock_acquire+0x1d1/0x380
[   89.613137][ T6817]        down_write+0x8b/0x1f0
[   89.614687][ T6817]        configfs_depend_item_unlocked+0xf3/0x6a0
[   89.616681][ T6817]        usbg_make_tpg+0x251/0x610
[   89.618317][ T6817]        target_fabric_make_tpg+0xab/0x8c0
[   89.620134][ T6817]        configfs_mkdir+0x525/0xd40
[   89.621765][ T6817]        vfs_mkdir+0x364/0x850
[   89.623297][ T6817]        filename_mkdirat+0x48b/0x5e0
[   89.625001][ T6817]        __ia32_sys_mkdirat+0x88/0xc0
[   89.626678][ T6817]        __do_fast_syscall_32+0x13a/0x8b0
[   89.628451][ T6817]        do_fast_syscall_32+0x32/0x70
[   89.630111][ T6817]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.632243][ T6817] 
[   89.632243][ T6817] -> #2 (tpg_instances_lock){+.+.}-{4:4}:
[   89.634639][ T6817]        lock_acquire+0x1d1/0x380
[   89.636240][ T6817]        __mutex_lock+0x1a4/0x1bd0
[   89.637919][ T6817]        tcm_alloc_inst+0x5f/0x1e0
[   89.639524][ T6817]        try_get_usb_function_instance+0x136/0x1f0
[   89.641555][ T6817]        usb_get_function_instance+0x16/0x70
[   89.643447][ T6817]        function_make+0x18c/0x3f0
[   89.645124][ T6817]        configfs_mkdir+0x525/0xd40
[   89.646766][ T6817]        vfs_mkdir+0x364/0x850
[   89.648283][ T6817]        filename_mkdirat+0x48b/0x5e0
[   89.649967][ T6817]        __ia32_sys_mkdirat+0x88/0xc0
[   89.651648][ T6817]        __do_fast_syscall_32+0x13a/0x8b0
[   89.653423][ T6817]        do_fast_syscall_32+0x32/0x70
[   89.655025][ T6817]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.657170][ T6817] 
[   89.657170][ T6817] -> #1 (func_lock){+.+.}-{4:4}:
[   89.659492][ T6817]        lock_acquire+0x1d1/0x380
[   89.661084][ T6817]        __mutex_lock+0x1a4/0x1bd0
[   89.662659][ T6817]        try_get_usb_function_instance+0x26/0x1f0
[   89.664661][ T6817]        usb_get_function_instance+0x16/0x70
[   89.666530][ T6817]        function_make+0x18c/0x3f0
[   89.668144][ T6817]        configfs_mkdir+0x525/0xd40
[   89.669770][ T6817]        vfs_mkdir+0x364/0x850
[   89.671297][ T6817]        filename_mkdirat+0x48b/0x5e0
[   89.673093][ T6817]        __ia32_sys_mkdirat+0x88/0xc0
[   89.674866][ T6817]        __do_fast_syscall_32+0x13a/0x8b0
[   89.676656][ T6817]        do_fast_syscall_32+0x32/0x70
[   89.678386][ T6817]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.680473][ T6817] 
[   89.680473][ T6817] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[   89.682990][ T6817]        check_prev_add+0xeb/0xe60
[   89.684678][ T6817]        __lock_acquire+0x1528/0x1f40
[   89.686694][ T6817]        lock_acquire+0x1d1/0x380
[   89.688668][ T6817]        __mutex_lock+0x1a4/0x1bd0
[   89.690473][ T6817]        uvcg_streaming_header_allow_link+0x7c/0x650
[   89.692969][ T6817]        configfs_symlink+0x695/0x1340
[   89.695220][ T6817]        vfs_symlink+0x178/0x4d0
[   89.697123][ T6817]        filename_symlinkat+0x2a6/0x560
[   89.699136][ T6817]        __ia32_sys_symlink+0x78/0xb0
[   89.701280][ T6817]        __do_fast_syscall_32+0x13a/0x8b0
[   89.703512][ T6817]        do_fast_syscall_32+0x32/0x70
[   89.705727][ T6817]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.708319][ T6817] 
[   89.708319][ T6817] other info that might help us debug this:
[   89.708319][ T6817] 
[   89.712402][ T6817] Chain exists of:
[   89.712402][ T6817]   gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#30
[   89.712402][ T6817] 
[   89.717819][ T6817]  Possible unsafe locking scenario:
[   89.717819][ T6817] 
[   89.720893][ T6817]        CPU0                    CPU1
[   89.723182][ T6817]        ----                    ----
[   89.725099][ T6817]   lock(&sb->s_type->i_mutex_key#30);
[   89.727199][ T6817]                                lock(tpg_instances_lock);
[   89.729897][ T6817]                                lock(&sb->s_type->i_mutex_key#30);
[   89.732808][ T6817]   lock(gadget_subsys.su_mutex);
[   89.734383][ T6817] 
[   89.734383][ T6817]  *** DEADLOCK ***
[   89.734383][ T6817] 
[   89.736955][ T6817] locks held by syz.4.226/6817: 2, last CPU#3:
[   89.738864][ T6817]  #0: ffff8880216ca460 (sb_writers#16){.+.+}-{0:0}, at: filename_create+0x10d/0x400
[   89.741782][ T6817]  #1: ffff888013129440 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: configfs_symlink+0x452/0x1340
[   89.745169][ T6817] 
[   89.745169][ T6817] stack backtrace:
[   89.747266][ T6817] CPU: 3 UID: 0 PID: 6817 Comm: syz.4.226 Not tainted syzkaller #0 PREEMPT(full) 
[   89.750130][ T6817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   89.753308][ T6817] Call Trace:
[   89.754362][ T6817]  <TASK>
[   89.755302][ T6817]  dump_stack_lvl+0x100/0x190
[   89.756850][ T6817]  print_circular_bug.cold+0x178/0x1be
[   89.758558][ T6817]  check_noncircular+0x146/0x160
[   89.760111][ T6817]  ? lock_acquire+0x1d1/0x380
[   89.761598][ T6817]  check_prev_add+0xeb/0xe60
[   89.763145][ T6817]  ? lockdep_hardirqs_on+0x7d/0x110
[   89.764777][ T6817]  __lock_acquire+0x1528/0x1f40
[   89.766373][ T6817]  ? kasan_save_free_info+0x3b/0x70
[   89.768040][ T6817]  ? __kasan_slab_free+0x5f/0x80
[   89.769594][ T6817]  lock_acquire+0x1d1/0x380
[   89.771020][ T6817]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[   89.773018][ T6817]  ? __pfx___might_resched+0x10/0x10
[   89.774703][ T6817]  __mutex_lock+0x1a4/0x1bd0
[   89.776176][ T6817]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[   89.778203][ T6817]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[   89.780161][ T6817]  ? __pfx___mutex_lock+0x10/0x10
[   89.781746][ T6817]  ? __pfx___might_resched+0x10/0x10
[   89.783446][ T6817]  ? make_vfsgid+0xf1/0x140
[   89.784880][ T6817]  ? uvcg_streaming_header_allow_link+0x7c/0x650
[   89.786869][ T6817]  uvcg_streaming_header_allow_link+0x7c/0x650
[   89.788829][ T6817]  ? inode_permission+0x374/0x620
[   89.790434][ T6817]  ? mntput_no_expire+0xe7/0x220
[   89.792022][ T6817]  configfs_symlink+0x695/0x1340
[   89.793624][ T6817]  ? bpf_lsm_inode_permission+0x9/0x10
[   89.795331][ T6817]  ? security_inode_permission+0xbf/0x250
[   89.797139][ T6817]  ? __pfx_configfs_symlink+0x10/0x10
[   89.798846][ T6817]  vfs_symlink+0x178/0x4d0
[   89.800252][ T6817]  filename_symlinkat+0x2a6/0x560
[   89.801836][ T6817]  ? __pfx_filename_symlinkat+0x10/0x10
[   89.803630][ T6817]  ? strncpy_from_user+0x19d/0x2d0
[   89.805238][ T6817]  ? do_getname+0x191/0x390
[   89.806888][ T6817]  __ia32_sys_symlink+0x78/0xb0
[   89.808462][ T6817]  __do_fast_syscall_32+0x13a/0x8b0
[   89.810086][ T6817]  do_fast_syscall_32+0x32/0x70
[   89.811599][ T6817]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.813517][ T6817] RIP: 0023:0xf73cefec
[   89.814758][ T6817] Code: Unable to access opcode bytes at 0xf73cefc2.
[   89.816740][ T6817] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000053
[   89.819217][ T6817] RAX: ffffffffffffffda RBX: 00000000800006c0 RCX: 0000000080000700
[   89.821721][ T6817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   89.824244][ T6817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   89.826742][ T6817] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   89.829260][ T6817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   89.831832][ T6817]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   90.371635][ T5609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.429471][ T5609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.509063][ T5609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.560132][ T5609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.620584][ T5609] bridge_slave_1: left allmulticast mode
[   90.620608][ T5609] bridge_slave_1: left promiscuous mode
[   90.620715][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.624086][ T5609] bridge_slave_0: left allmulticast mode
[   90.624104][ T5609] bridge_slave_0: left promiscuous mode
[   90.624211][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.680276][ T5609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.681841][ T5609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.682805][ T5609] bond0 (unregistering): Released all slaves
[   90.757774][ T5609] tipc: Left network mode
[   90.798856][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6
[   90.899136][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8
[   90.902049][ T5609] hsr_slave_0: left promiscuous mode
[   90.902386][ T5609] hsr_slave_1: left promiscuous mode
[   90.902724][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.902735][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.903188][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.903199][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.905180][ T5609] veth1_macvtap: left promiscuous mode
[   90.905210][ T5609] veth0_macvtap: left promiscuous mode
[   90.905689][ T5609] veth1_vlan: left promiscuous mode
[   90.905734][ T5609] veth0_vlan: left promiscuous mode
[   90.959748][ T5609] team0 (unregistering): Port device team_slave_1 removed
[   90.962963][ T5609] team0 (unregistering): Port device team_slave_0 removed
[   91.076673][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7
[   91.185254][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9
[   91.238836][ T5609] IPVS: stop unused estimator thread 0...