last executing test programs:

5m8.165671196s ago: executing program 32 (id=346):
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x48)
memfd_create(0x0, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r2, 0x3)
accept4(r2, 0x0, 0x0, 0x0)

4m31.302545571s ago: executing program 0 (id=415):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

4m24.151624834s ago: executing program 0 (id=429):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file6\x00', 0x8f4c185ec875ad85)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a})
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000000)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x2, 0x2a}, 0x2c)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x8800)
socket$kcm(0x10, 0x2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
ppoll(&(0x7f0000000800)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019480)={0xffffffffffffffff, 0x0, 0x7c, 0x3b, &(0x7f0000019300)="f754b542566d4e92fca886218c2b1ab192dfae618e54dd66f0099e49b8b2bcd177921c644f392af1980a7abc408ba0f61e41f959b5e9a537b175b8c5c8b0b402a8d9482bb5349478500538bfb49a1ec5115be13b37f026ac6fa61638ac84c471b1ff93c0b6144bc840c01e56dda90efea51ae85408a71b249be2b1aa", &(0x7f0000000000)=""/59, 0x694, 0x0, 0x7f, 0xc8, &(0x7f0000019500)="62ac0233062b6b9b83a4330b5e2956b95b86868fdb1ac783a9d082b211233964896038be6f8e4e3f1e6eed2f037b6696c96e9edf118c8121e1d02dea1d5b69b49f7c74f0abb51c563014780b2c532a0f3e461df743221228e63222a1f15e2ebcc5cb79f55bdcf2f491e17662275781fd038582a64600673570cf1ee279bdd3", &(0x7f0000019380)="ae15e2980e6dfe91b8b719e9ec7fd1f61023e1c3ef840a73b62b68ab4265877ce5be9d7a1fa24eb0eb251d2ac5d3507bb14ad8fa9c1b0f64c3cc18d117f2aa4929a43165981642fdf751dc7507c3600842643575d26957daf0cf1c90ee1a74693a4aa14fd229ec8b5120c8ac26c179905d583f8138aeee07806fe4f95d5c2018afa62aeccae080094acea921f89e0d1c82bf8a97a41c17abbf8e3e0330ac431730322fa2c00097160b2d43ee5ddfdb89e2e00e4108568abed504dd307735c9fb00b956d514fa50d0", 0x6, 0x0, 0xfffffffe}, 0x50)
r5 = syz_open_pts(r4, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x0)

4m19.84494823s ago: executing program 0 (id=440):
io_setup(0x5, &(0x7f0000000180)=<r0=>0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000001c0)={0x6, "42cbf017c075dd2a90e900000000000000000100", <r2=>0xffffffffffffffff})
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

4m18.518014991s ago: executing program 0 (id=445):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700))
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
copy_file_range(r6, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)

4m17.100490814s ago: executing program 0 (id=448):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r3, 0x0, 0x0, 0xc2a)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019240)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']})

4m14.41594907s ago: executing program 0 (id=451):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

4m13.697349512s ago: executing program 33 (id=451):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

3m31.091155419s ago: executing program 4 (id=532):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00')
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, 0x0, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

3m29.963561544s ago: executing program 4 (id=535):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000280), &(0x7f0000000040)=@udp, 0x60eacb91a194b081}, 0x20)

3m29.123723983s ago: executing program 4 (id=537):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700))
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})

3m27.245344565s ago: executing program 4 (id=548):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700))
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})

3m26.879953982s ago: executing program 4 (id=543):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

3m25.228742175s ago: executing program 4 (id=549):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r2, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
syz_open_pts(0xffffffffffffffff, 0x40100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100)
chdir(0x0)
write$FUSE_CREATE_OPEN(r3, 0x0, 0x0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg(r5, 0x0, 0x120)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0)
pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x40000000)

3m24.765657065s ago: executing program 34 (id=549):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r2, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
syz_open_pts(0xffffffffffffffff, 0x40100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100)
chdir(0x0)
write$FUSE_CREATE_OPEN(r3, 0x0, 0x0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg(r5, 0x0, 0x120)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0)
pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x40000000)

3m2.455395003s ago: executing program 3 (id=606):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)

3m1.434967055s ago: executing program 3 (id=600):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000400)={'dvmrp1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@restrict={0xf}, @struct={0x4, 0x6, 0x0, 0x4, 0x0, 0x9, [{0x1, 0x4, 0x7fffffff}, {0xa, 0x0, 0x2}, {0x1, 0x0, 0x9}, {0x8, 0x4, 0x9}, {0xf, 0x3, 0xffff}, {0xd, 0x2, 0x80000000}]}, @float={0xf, 0x0, 0x0, 0x10, 0x10}]}}, &(0x7f0000000000)=""/115, 0x86, 0x73, 0x1, 0x9}, 0x28)
listen(r3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r7, 0x89f3, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20)
recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="cdea58702d"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

2m57.691971897s ago: executing program 3 (id=610):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0xb, '{lLn'}]}}, 0x0}, 0x0)

2m53.971942967s ago: executing program 3 (id=622):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700))
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
copy_file_range(r5, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})

2m52.797879459s ago: executing program 3 (id=623):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r1, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x1d6, 0xf5}, &(0x7f0000000480)=0x9c)

2m52.249549499s ago: executing program 3 (id=625):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file6\x00', 0x8f4c185ec875ad85)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a})
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000000)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x2, 0x2a}, 0x2c)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x8800)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
ppoll(&(0x7f0000000800)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019480)={0xffffffffffffffff, 0x0, 0x7c, 0x3b, &(0x7f0000019300)="f754b542566d4e92fca886218c2b1ab192dfae618e54dd66f0099e49b8b2bcd177921c644f392af1980a7abc408ba0f61e41f959b5e9a537b175b8c5c8b0b402a8d9482bb5349478500538bfb49a1ec5115be13b37f026ac6fa61638ac84c471b1ff93c0b6144bc840c01e56dda90efea51ae85408a71b249be2b1aa", &(0x7f0000000000)=""/59, 0x694, 0x0, 0xfe, 0xc8, &(0x7f0000019500)="62ac0233062b6b9b83a4330b5e2956b95b86868fdb1ac783a9d082b211233964896038be6f8e4e3f1e6eed2f037b6696c96e9edf118c8121e1d02dea1d5b69b49f7c74f0abb51c563014780b2c532a0f3e461df743221228e63222a1f15e2ebcc5cb79f55bdcf2f491e17662275781fd038582a64600673570cf1ee279bdd35779abbeec0bfd8aa1650fa7546d85e9222b8e577c4174eada29128ed2752f035a285014e5c5940790f2a486bc73e1b809e8ccfcd868692c12472530b9dd32ecf7d4ed3e509a762ced6f60ffa0d3ee5f0f755ffcf0f3d2a46bedbab7f140d9c99f31ddcc41e20e439f8be8331c3fdad4edc03e4da63dd12782ef434066a14d", &(0x7f0000019380)="ae15e2980e6dfe91b8b719e9ec7fd1f61023e1c3ef840a73b62b68ab4265877ce5be9d7a1fa24eb0eb251d2ac5d3507bb14ad8fa9c1b0f64c3cc18d117f2aa4929a43165981642fdf751dc7507c3600842643575d26957daf0cf1c90ee1a74693a4aa14fd229ec8b5120c8ac26c179905d583f8138aeee07806fe4f95d5c2018afa62aeccae080094acea921f89e0d1c82bf8a97a41c17abbf8e3e0330ac431730322fa2c00097160b2d43ee5ddfdb89e2e00e4108568abed504dd307735c9fb00b956d514fa50d0", 0x6, 0x0, 0xfffffffe}, 0x50)
r5 = syz_open_pts(r4, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x0)

2m50.334996717s ago: executing program 35 (id=625):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x48)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file6\x00', 0x8f4c185ec875ad85)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a})
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000000)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x2, 0x2a}, 0x2c)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x8800)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
ppoll(&(0x7f0000000800)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019480)={0xffffffffffffffff, 0x0, 0x7c, 0x3b, &(0x7f0000019300)="f754b542566d4e92fca886218c2b1ab192dfae618e54dd66f0099e49b8b2bcd177921c644f392af1980a7abc408ba0f61e41f959b5e9a537b175b8c5c8b0b402a8d9482bb5349478500538bfb49a1ec5115be13b37f026ac6fa61638ac84c471b1ff93c0b6144bc840c01e56dda90efea51ae85408a71b249be2b1aa", &(0x7f0000000000)=""/59, 0x694, 0x0, 0xfe, 0xc8, &(0x7f0000019500)="62ac0233062b6b9b83a4330b5e2956b95b86868fdb1ac783a9d082b211233964896038be6f8e4e3f1e6eed2f037b6696c96e9edf118c8121e1d02dea1d5b69b49f7c74f0abb51c563014780b2c532a0f3e461df743221228e63222a1f15e2ebcc5cb79f55bdcf2f491e17662275781fd038582a64600673570cf1ee279bdd35779abbeec0bfd8aa1650fa7546d85e9222b8e577c4174eada29128ed2752f035a285014e5c5940790f2a486bc73e1b809e8ccfcd868692c12472530b9dd32ecf7d4ed3e509a762ced6f60ffa0d3ee5f0f755ffcf0f3d2a46bedbab7f140d9c99f31ddcc41e20e439f8be8331c3fdad4edc03e4da63dd12782ef434066a14d", &(0x7f0000019380)="ae15e2980e6dfe91b8b719e9ec7fd1f61023e1c3ef840a73b62b68ab4265877ce5be9d7a1fa24eb0eb251d2ac5d3507bb14ad8fa9c1b0f64c3cc18d117f2aa4929a43165981642fdf751dc7507c3600842643575d26957daf0cf1c90ee1a74693a4aa14fd229ec8b5120c8ac26c179905d583f8138aeee07806fe4f95d5c2018afa62aeccae080094acea921f89e0d1c82bf8a97a41c17abbf8e3e0330ac431730322fa2c00097160b2d43ee5ddfdb89e2e00e4108568abed504dd307735c9fb00b956d514fa50d0", 0x6, 0x0, 0xfffffffe}, 0x50)
r5 = syz_open_pts(r4, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x0)

2m31.841720572s ago: executing program 5 (id=674):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x1717, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000), 0x4}, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}})
io_uring_enter(r1, 0x27e2, 0x0, 0xf, 0x0, 0x0)

2m31.635566358s ago: executing program 5 (id=677):
mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x10005, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000040))

2m30.475840178s ago: executing program 5 (id=670):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00')
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setpgid(0xffffffffffffffff, r2)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, 0x0, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

2m25.208455298s ago: executing program 5 (id=683):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700))
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r4, 0x0)
setpgid(0x0, r4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
copy_file_range(r6, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})

2m24.817414458s ago: executing program 5 (id=681):
syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ptrace$peek(0x2, r0, &(0x7f0000000340))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x70}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0}, 0x0)
r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1)

2m23.000531913s ago: executing program 5 (id=686):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0xf, "cf7467b1e8d26bc450cbd8737cd619068d722fb209414078fd2b22563cb25ce9", 0x1, 0x8, 0x9, 0x8, 0x1, 0x2, 0x1})

2m21.988140723s ago: executing program 36 (id=686):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0xf, "cf7467b1e8d26bc450cbd8737cd619068d722fb209414078fd2b22563cb25ce9", 0x1, 0x8, 0x9, 0x8, 0x1, 0x2, 0x1})

2m21.966242836s ago: executing program 6 (id=688):
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000380)=0x3)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0xfa83, 0x5a7]}}, {0x6, 0x0, 0xfe, 0xc1, @tick=0xffffff00, {0x9, 0x30}, {0xa, 0x9}, @result={0x6, 0x4005}}], 0x38)

2m15.231408365s ago: executing program 6 (id=696):
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000380)=0x3)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0xfa83, 0x5a7]}}, {0x6, 0x0, 0xfe, 0xc1, @tick=0xffffff00, {0x9, 0x30}, {0xa, 0x9}, @result={0x6, 0x4005}}], 0x38)

2m13.616631643s ago: executing program 6 (id=699):
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0xfa83, 0x5a7]}}, {0x6, 0x0, 0xfe, 0xc1, @tick=0xffffff00, {0x9, 0x30}, {0xa, 0x9}, @result={0x6, 0x4005}}], 0x38)

2m13.347808728s ago: executing program 6 (id=690):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700))
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r4, 0x0)
setpgid(0x0, r4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
copy_file_range(r6, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})

2m12.306638842s ago: executing program 6 (id=693):
syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ptrace$peek(0x2, r0, &(0x7f0000000340))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x70}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0}, 0x0)
r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1)

2m10.049964173s ago: executing program 6 (id=702):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000004780), 0x1, 0x0)
poll(&(0x7f00000047c0)=[{r0}], 0x1, 0x84)

2m9.111061534s ago: executing program 37 (id=702):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000004780), 0x1, 0x0)
poll(&(0x7f00000047c0)=[{r0}], 0x1, 0x84)

1m51.823134484s ago: executing program 9 (id=728):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x6, 0x80002, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100003b00015300"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYBLOB])
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0), 0x8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000280)={0x24}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r5, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40)
sendto$inet(r1, &(0x7f0000000300)="faab", 0x2, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)

1m50.935726369s ago: executing program 9 (id=730):
r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0xa0480, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x15)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x511003, 0x10e)
statx(r1, 0x0, 0x800, 0x4, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x5, 0x40000000}, 0x8)
connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r4 = syz_open_procfs(0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x2, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}, {@dfltgid}, {@mmap}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@access_user}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {}, {@cache_loose}], [{@uid_eq}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'hash'}}, {@audit}]}})
writev(r4, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0)

1m49.137114201s ago: executing program 9 (id=733):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x6, 0xf7})

1m48.899378672s ago: executing program 9 (id=736):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700))
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
copy_file_range(r6, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})

1m48.592742231s ago: executing program 9 (id=738):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)

1m47.74799822s ago: executing program 9 (id=740):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x3d, 0x0, [{0x7, 0x9, 0x1, 0xffffff89, 0x6, 0x6}, {0x1, 0x4, 0x6, 0x7fff, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}]})

1m47.252873824s ago: executing program 38 (id=740):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x3d, 0x0, [{0x7, 0x9, 0x1, 0xffffff89, 0x6, 0x6}, {0x1, 0x4, 0x6, 0x7fff, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0xc0000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}]})

9.642031856s ago: executing program 7 (id=990):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x80}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
copy_file_range(r6, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r4, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})

8.487758825s ago: executing program 1 (id=992):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffee2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000080000000000000000000009030000000000000000000004"], 0x0, 0x4a}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a0100000000000000000700000008000a4000000000090002007a3100000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0)
socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x50, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1a, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe}]}}}}}}, 0x0)
r5 = accept4(r2, 0x0, 0x0, 0x800)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)

8.315251747s ago: executing program 7 (id=994):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7ff, 0x6040)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1)
ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000040))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0)

7.059839489s ago: executing program 7 (id=996):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)

6.496369282s ago: executing program 8 (id=997):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00')
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setpgid(0xffffffffffffffff, r2)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, 0x0, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

5.34511741s ago: executing program 1 (id=998):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000180)={0x3517, 0x1, 0x1, "0000087aba10fd00000000008000"})

5.34496929s ago: executing program 7 (id=999):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

4.770406494s ago: executing program 8 (id=1000):
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r1, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r1}])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000080)='0', 0x1)
io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800})
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
close_range(r7, 0xffffffffffffffff, 0x0)

4.511727898s ago: executing program 1 (id=1001):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ab00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x8000000000000001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r2, 0x2, 0x0)

4.238579453s ago: executing program 1 (id=1003):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0x5}, 0xd}}}, 0x7)
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = epoll_create(0x5)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={r5, r4, 0x4cd})
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/21], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

4.199795878s ago: executing program 8 (id=1004):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

3.170665151s ago: executing program 2 (id=1005):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x32, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x0, 0x20000006}]}}}}}}}, 0x0)

3.093373281s ago: executing program 1 (id=1006):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)

3.027977649s ago: executing program 8 (id=1007):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xf010000})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000280)=0x2)
socket$qrtr(0x2a, 0x2, 0x0)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0xf40, 0x0, 0x0, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0xff, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x4, 0x3, 0x7, 0xa, 0x5, 0x1, 0x52, 0xc, 0x8, 0x400002, 0x2]})

2.845496303s ago: executing program 2 (id=1008):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00')
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setpgid(0xffffffffffffffff, r2)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, 0x0, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

1.613435852s ago: executing program 8 (id=1009):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffee2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000080000000000000000000009030000000000000000000004"], 0x0, 0x4a}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a0100000000000000000700000008000a4000000000090002007a3100000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0)
socket(0x10, 0x80002, 0x0)
syz_emit_ethernet(0x50, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1a, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe}]}}}}}}, 0x0)
r5 = accept4(r2, 0x0, 0x0, 0x800)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)

1.613162551s ago: executing program 1 (id=1010):
syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ptrace$peek(0x2, r0, &(0x7f0000000340))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x70}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0}, 0x0)
r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, 0x0)

1.612907442s ago: executing program 2 (id=1011):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ab00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x8000000000000001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r2, 0x2, 0x0)

1.612393072s ago: executing program 7 (id=1017):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00')
r1 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setpgid(0xffffffffffffffff, r2)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, 0x0, 0x0)
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

1.432041475s ago: executing program 2 (id=1012):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000180)={0x3517, 0x1, 0x1, "0000087aba10fd00000000008000"})

535.680901ms ago: executing program 7 (id=1013):
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r1, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r1}])
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000080)='0', 0x1)
io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800})
close(0x3)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
close_range(r7, 0xffffffffffffffff, 0x0)

402.860568ms ago: executing program 2 (id=1014):
r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000700))
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r2, 0x0)
setpgid(0x0, r2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
copy_file_range(r4, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})

259.911247ms ago: executing program 8 (id=1015):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0x5}, 0xd}}}, 0x7)
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = epoll_create(0x5)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={r5, r4, 0x4cd})
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/21], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

0s ago: executing program 2 (id=1016):
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x3)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x32, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x0, 0x20000006}]}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

6] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.187578][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.202492][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.212623][ T7116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.226641][ T7116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.239578][ T5824] usb 4-1: Using ep0 maxpacket: 16
[  242.245674][  T966] usb 3-1: Using ep0 maxpacket: 16
[  242.255811][ T5824] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  242.271327][ T7116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.279064][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  242.287470][ T5824] usb 4-1: Product: syz
[  242.298117][  T966] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  242.313329][ T7116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.322254][  T966] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  242.335153][ T5824] usb 4-1: Manufacturer: syz
[  242.339887][ T5824] usb 4-1: SerialNumber: syz
[  242.345669][  T966] usb 3-1: Product: syz
[  242.350076][ T7116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.359883][ T5824] usb 4-1: config 0 descriptor??
[  242.364937][  T966] usb 3-1: Manufacturer: syz
[  242.369597][  T966] usb 3-1: SerialNumber: syz
[  242.374727][ T7116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.393514][  T966] usb 3-1: config 0 descriptor??
[  242.400574][ T7116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.606518][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.640527][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.684510][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.700904][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.011047][ T5581] usb 4-1: USB disconnect, device number 8
[  244.680539][  T966] usb 3-1: USB disconnect, device number 10
[  245.316968][ T7337] (null): rxe_set_mtu: Set mtu to 1024
[  245.964616][ T7337] infiniband syz2: set active
[  245.972625][ T7337] infiniband syz2: added veth1_to_team
[  245.981446][ T7337] syz2: rxe_create_cq: returned err = -12
[  245.987749][ T7337] infiniband syz2: Couldn't create ib_mad CQ
[  245.993986][ T7337] infiniband syz2: Couldn't open port 1
[  246.029751][ T7337] RDS/IB: syz2: added
[  246.034510][ T7337] smc: adding ib device syz2 with port count 1
[  246.041056][ T7337] smc:    ib device syz2 port 1 has pnetid 
[  246.229328][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  246.254614][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  246.736907][    T9] usb 1-1: device descriptor read/64, error -32
[  247.480725][ T7351] netlink: 100 bytes leftover after parsing attributes in process `syz.4.378'.
[  247.528086][ T7353] netlink: 'syz.3.379': attribute type 10 has an invalid length.
[  247.585036][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  247.694472][ T7353] team0: Port device dummy0 added
[  248.116819][    T9] usb 1-1: Using ep0 maxpacket: 16
[  248.970372][    T9] usb 1-1: device descriptor read/all, error -71
[  248.978726][    T9] usb usb1-port1: attempt power cycle
[  249.157143][ T5824] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  249.453115][ T5824] usb 5-1: Using ep0 maxpacket: 16
[  249.575701][ T5824] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  249.621539][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  249.660242][ T5824] usb 5-1: Product: syz
[  249.684783][ T5824] usb 5-1: Manufacturer: syz
[  249.703922][ T5824] usb 5-1: SerialNumber: syz
[  249.730669][ T5824] usb 5-1: config 0 descriptor??
[  250.130117][ T7384] ERROR: device name not specified.
[  252.571022][ T5855] usb 5-1: USB disconnect, device number 2
[  254.385487][ T7434] netlink: 'syz.4.392': attribute type 10 has an invalid length.
[  254.496914][ T7434] team0: Port device dummy0 added
[  255.516803][ T7452] netlink: 100 bytes leftover after parsing attributes in process `syz.3.396'.
[  255.588639][ T5855] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  255.806775][ T5855] usb 5-1: Using ep0 maxpacket: 16
[  255.923504][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  255.933240][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  255.969222][ T5855] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  256.083334][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  256.205967][ T5855] usb 5-1: Product: syz
[  256.275288][ T5855] usb 5-1: Manufacturer: syz
[  256.322752][ T5855] usb 5-1: SerialNumber: syz
[  256.368546][ T5855] usb 5-1: config 0 descriptor??
[  258.006729][   T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  258.435280][    T9] usb 5-1: USB disconnect, device number 3
[  258.736690][   T23] usb 4-1: Using ep0 maxpacket: 16
[  258.746432][   T23] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  258.757660][   T23] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  258.765795][   T23] usb 4-1: Product: syz
[  258.770034][   T23] usb 4-1: Manufacturer: syz
[  258.774664][   T23] usb 4-1: SerialNumber: syz
[  258.792751][   T23] usb 4-1: config 0 descriptor??
[  259.539408][    T9] IPVS: starting estimator thread 0...
[  259.567653][ T7490] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  260.457102][ T7493] IPVS: using max 25 ests per chain, 60000 per kthread
[  260.926962][ T7487] netlink: 'syz.0.405': attribute type 10 has an invalid length.
[  261.357598][ T7487] team0: Port device dummy0 added
[  262.154888][    T9] usb 4-1: USB disconnect, device number 9
[  263.249835][ T5824] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  263.637198][ T5824] usb 3-1: Using ep0 maxpacket: 16
[  263.654552][ T5824] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  263.668738][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  263.683826][ T5824] usb 3-1: Product: syz
[  263.698298][ T5824] usb 3-1: Manufacturer: syz
[  263.703193][ T5824] usb 3-1: SerialNumber: syz
[  263.740299][ T5824] usb 3-1: config 0 descriptor??
[  264.129359][ T7543] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  264.421350][    T9] IPVS: starting estimator thread 0...
[  265.286750][ T7546] IPVS: using max 18 ests per chain, 43200 per kthread
[  266.342280][    T9] usb 3-1: USB disconnect, device number 11
[  267.412414][ T7570] netlink: 'syz.3.419': attribute type 10 has an invalid length.
[  269.066003][ T7595] syz.3.422: attempt to access beyond end of device
[  269.066003][ T7595] md34: rw=2048, sector=0, nr_sectors = 8 limit=0
[  269.986745][ T5825] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  270.204599][ T5825] usb 3-1: Using ep0 maxpacket: 16
[  270.218489][ T5825] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  270.228447][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  270.236586][ T5825] usb 3-1: Product: syz
[  270.247090][ T5825] usb 3-1: Manufacturer: syz
[  270.271213][ T5825] usb 3-1: SerialNumber: syz
[  270.298178][ T5825] usb 3-1: config 0 descriptor??
[  272.167178][ T7662] netlink: 100 bytes leftover after parsing attributes in process `syz.4.435'.
[  272.550168][ T7664] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  272.630289][    T9] IPVS: starting estimator thread 0...
[  272.777212][ T7676] IPVS: using max 16 ests per chain, 38400 per kthread
[  272.946341][    T9] usb 3-1: USB disconnect, device number 12
[  274.796924][ T5855] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  275.007085][ T5855] usb 4-1: Using ep0 maxpacket: 32
[  275.019669][ T5855] usb 4-1: config 33 has 0 interfaces, different from the descriptor's value: 9
[  275.035725][ T5855] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  275.055238][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.295456][ T5855] usb 4-1: USB disconnect, device number 10
[  276.358756][ T7733] netlink: 100 bytes leftover after parsing attributes in process `syz.0.445'.
[  276.526952][ T5825] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  276.566956][  T966] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  276.796898][ T5825] usb 3-1: Using ep0 maxpacket: 16
[  276.855379][  T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.946751][ T5825] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  276.970589][  T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.981275][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  277.005903][  T966] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  277.026233][ T5825] usb 3-1: Product: syz
[  277.036369][ T5825] usb 3-1: Manufacturer: syz
[  277.062030][ T5825] usb 3-1: SerialNumber: syz
[  277.071545][  T966] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  277.096849][  T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.119193][ T5825] usb 3-1: config 0 descriptor??
[  277.143971][  T966] usb 5-1: config 0 descriptor??
[  277.268711][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.447'.
[  277.353548][ T5825] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  277.407975][ T5825] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  277.653018][  T966] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  277.841677][ T7730] syz.4.446 uses obsolete (PF_INET,SOCK_PACKET)
[  278.206259][  T966] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  278.420376][ T7745] fido_id[7745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  278.589384][  T966] usb 5-1: USB disconnect, device number 4
[  278.662926][ T7755] fido_id[7755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  279.497098][    T9] usb 3-1: USB disconnect, device number 13
[  280.116915][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  280.237106][ T7775] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  280.244915][ T5581] IPVS: starting estimator thread 0...
[  280.311381][ T1087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.347064][ T5855] usb 5-1: Using ep0 maxpacket: 16
[  280.356710][ T7780] IPVS: using max 19 ests per chain, 45600 per kthread
[  280.374250][ T5855] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  280.414838][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  280.494725][ T5855] usb 5-1: Product: syz
[  280.516745][ T5855] usb 5-1: Manufacturer: syz
[  280.521402][ T5855] usb 5-1: SerialNumber: syz
[  280.534575][ T1087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.552830][ T5855] usb 5-1: config 0 descriptor??
[  280.715473][ T1087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.849153][ T1087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.659033][ T7793] misc userio: Invalid payload size
[  282.359382][ T7795] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  282.776831][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'.
[  283.453395][ T5825] usb 5-1: USB disconnect, device number 5
[  283.553366][ T7804] netlink: 100 bytes leftover after parsing attributes in process `syz.4.456'.
[  283.778459][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  283.791500][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  283.799915][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  283.808831][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  283.816986][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  283.824507][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  285.863535][ T7811] chnl_net:caif_netlink_parms(): no params data found
[  285.916839][ T5781] Bluetooth: hci2: command tx timeout
[  286.126502][ T1087] hsr_slave_0: left promiscuous mode
[  286.139392][ T1087] hsr_slave_1: left promiscuous mode
[  286.145405][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.153925][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.162229][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.171911][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.187750][ T1087] bridge_slave_1: left allmulticast mode
[  286.193452][ T1087] bridge_slave_1: left promiscuous mode
[  286.199456][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.211890][ T1087] bridge_slave_0: left allmulticast mode
[  286.218835][ T1087] bridge_slave_0: left promiscuous mode
[  286.224654][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.259900][ T1087] veth1_macvtap: left promiscuous mode
[  286.265501][ T1087] veth0_macvtap: left promiscuous mode
[  286.272012][ T1087] veth1_vlan: left promiscuous mode
[  286.277532][ T1087] veth0_vlan: left promiscuous mode
[  286.905813][ T1087] team0 (unregistering): Port device team_slave_1 removed
[  286.943744][ T1087] team0 (unregistering): Port device team_slave_0 removed
[  286.983910][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.022036][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.238378][ T1087] team0 (unregistering): Port device dummy0 removed
[  287.473423][ T1087] bond0 (unregistering): Released all slaves
[  287.554538][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.561874][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.569960][ T7811] bridge_slave_0: entered allmulticast mode
[  287.577653][ T7811] bridge_slave_0: entered promiscuous mode
[  287.613216][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.624623][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.632268][ T7811] bridge_slave_1: entered allmulticast mode
[  287.642668][ T7811] bridge_slave_1: entered promiscuous mode
[  287.689662][ T7811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.706126][ T7811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.762290][ T7811] team0: Port device team_slave_0 added
[  287.775272][ T7811] team0: Port device team_slave_1 added
[  287.832179][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.839499][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.876866][ T7811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.893492][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.900824][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.928166][ T7811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.996828][ T5781] Bluetooth: hci2: command tx timeout
[  288.035817][ T7811] hsr_slave_0: entered promiscuous mode
[  288.043368][ T7811] hsr_slave_1: entered promiscuous mode
[  288.054175][ T7811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  288.063191][ T7811] Cannot create hsr debugfs directory
[  288.085633][ T1087] IPVS: stop unused estimator thread 0...
[  288.352324][ T7811] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  288.365480][ T7811] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  288.383989][ T7811] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  288.397392][ T7811] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  288.543152][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.574869][ T7811] 8021q: adding VLAN 0 to HW filter on device team0
[  288.593023][  T167] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.600194][  T167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.617977][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.625313][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.955065][ T7811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.320760][ T7811] veth0_vlan: entered promiscuous mode
[  289.334168][ T7811] veth1_vlan: entered promiscuous mode
[  289.365801][ T7811] veth0_macvtap: entered promiscuous mode
[  289.384763][ T7811] veth1_macvtap: entered promiscuous mode
[  289.410199][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.423928][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.441230][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.453127][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.467869][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.481730][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.494759][ T7811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.511926][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.523673][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.541750][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.555981][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.570563][ T7811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.581332][ T7811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.593165][ T7811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.614364][ T7811] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.628810][ T7811] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.639041][ T7811] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.654039][ T7811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.779458][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.796710][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.842105][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.850844][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.078399][ T5781] Bluetooth: hci2: command tx timeout
[  291.154082][ T7928] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.472'.
[  291.859263][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  292.358132][ T5781] Bluetooth: hci2: command tx timeout
[  292.736316][    T9] usb 3-1: Using ep0 maxpacket: 16
[  292.812450][    T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  292.972055][    T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  293.138617][    T9] usb 3-1: Product: syz
[  293.198119][ T7935] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  293.210513][ T5923] IPVS: starting estimator thread 0...
[  293.233439][    T9] usb 3-1: Manufacturer: syz
[  293.246512][    T9] usb 3-1: SerialNumber: syz
[  293.296741][ T7941] IPVS: using max 29 ests per chain, 69600 per kthread
[  293.304815][    T9] usb 3-1: config 0 descriptor??
[  294.567357][ T7951] misc userio: Invalid payload size
[  295.277723][ T7952] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  295.373495][ T7961] netlink: 100 bytes leftover after parsing attributes in process `syz.5.468'.
[  295.617916][ T5838] usb 3-1: USB disconnect, device number 14
[  295.888103][ T5923] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  295.897085][ T5781] Bluetooth: hci0: ACL packet for unknown connection handle 1
[  296.120598][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short
[  296.131234][ T5923] usb 4-1: config 174 has an invalid interface number: 153 but max is 0
[  296.145515][ T5923] usb 4-1: config 174 has no interface number 0
[  296.372965][ T5923] usb 4-1: config 174 interface 153 has no altsetting 0
[  296.706836][ T5923] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=77.4a
[  296.739186][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.772744][ T5923] usb 4-1: Product: syz
[  296.791283][ T5923] usb 4-1: Manufacturer: syz
[  296.806224][ T5923] usb 4-1: SerialNumber: syz
[  297.123548][ T5923] sierra 4-1:174.153: Sierra USB modem converter detected
[  297.153983][ T5923] usb 4-1: USB disconnect, device number 11
[  297.666087][ T5923] sierra 4-1:174.153: device disconnected
[  299.165377][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  299.165496][   T28] audit: type=1804 audit(1768355698.299:68): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.478" name="/newroot/120/bus/bus" dev="overlay" ino=654 res=1 errno=0
[  299.267076][   T28] audit: type=1804 audit(1768355698.349:69): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.478" name="/newroot/120/bus/bus" dev="overlay" ino=654 res=1 errno=0
[  300.792275][ T8032] misc userio: Invalid payload size
[  301.580261][ T5923] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  301.942006][ T8046] netlink: 100 bytes leftover after parsing attributes in process `syz.5.484'.
[  301.953045][ T5923] usb 4-1: Using ep0 maxpacket: 16
[  301.974484][ T5923] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  302.001002][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  302.036949][ T5923] usb 4-1: Product: syz
[  302.054565][ T5923] usb 4-1: Manufacturer: syz
[  302.083335][ T5923] usb 4-1: SerialNumber: syz
[  302.149590][ T5923] usb 4-1: config 0 descriptor??
[  303.416926][ T8057] futex_wake_op: syz.4.485 tries to shift op by -1; fix this program
[  304.933131][ T5581] usb 4-1: USB disconnect, device number 12
[  305.957012][ T5781] Bluetooth: hci2: ACL packet for unknown connection handle 1
[  309.269506][ T8121] misc userio: Invalid payload size
[  309.451527][ T5581] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  309.686851][ T5581] usb 4-1: Using ep0 maxpacket: 16
[  309.725897][ T5581] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  309.996896][ T5581] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  310.016761][ T5581] usb 4-1: Product: syz
[  310.020988][ T5581] usb 4-1: Manufacturer: syz
[  310.025609][ T5581] usb 4-1: SerialNumber: syz
[  310.051272][ T5581] usb 4-1: config 0 descriptor??
[  312.179107][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 1
[  313.215021][ T5581] usb 4-1: USB disconnect, device number 13
[  313.403058][ T8166] netlink: 100 bytes leftover after parsing attributes in process `syz.3.506'.
[  315.555865][ T8191] misc userio: Invalid payload size
[  316.031163][   T28] audit: type=1804 audit(1768355715.179:70): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.507" name="/newroot/16/bus/bus" dev="overlay" ino=115 res=1 errno=0
[  316.183506][   T28] audit: type=1804 audit(1768355715.279:71): pid=8196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.507" name="/newroot/16/bus/bus" dev="overlay" ino=115 res=1 errno=0
[  317.362804][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  317.369333][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  318.160499][ T5825] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  318.487066][ T8222] netlink: 100 bytes leftover after parsing attributes in process `syz.2.519'.
[  318.556818][ T5825] usb 5-1: Using ep0 maxpacket: 16
[  318.986803][ T5825] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  319.070721][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  319.100950][ T5825] usb 5-1: Product: syz
[  319.203609][ T5825] usb 5-1: Manufacturer: syz
[  319.226820][ T5825] usb 5-1: SerialNumber: syz
[  319.240097][ T5825] usb 5-1: config 0 descriptor??
[  320.862625][ T8241] netlink: 100 bytes leftover after parsing attributes in process `syz.5.530'.
[  321.433320][ T5781] Bluetooth: hci3: ACL packet for unknown connection handle 1
[  322.498741][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.525'.
[  322.527097][ T5838] usb 5-1: USB disconnect, device number 6
[  324.317662][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  324.724213][   T28] audit: type=1804 audit(1768355723.869:72): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.534" name="/newroot/136/bus/bus" dev="overlay" ino=727 res=1 errno=0
[  325.261391][   T28] audit: type=1804 audit(1768355723.899:73): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.534" name="/newroot/136/bus/bus" dev="overlay" ino=727 res=1 errno=0
[  325.508111][ T8315] netlink: 100 bytes leftover after parsing attributes in process `syz.4.537'.
[  325.656685][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  325.874495][ T5825] usb 6-1: Using ep0 maxpacket: 16
[  325.907695][ T5825] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  325.938550][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  325.975353][ T5825] usb 6-1: Product: syz
[  326.003385][ T5825] usb 6-1: Manufacturer: syz
[  326.024838][ T5825] usb 6-1: SerialNumber: syz
[  326.051749][ T5825] usb 6-1: config 0 descriptor??
[  326.522162][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 1
[  327.448457][ T8338] netlink: 100 bytes leftover after parsing attributes in process `syz.4.548'.
[  328.786541][  T966] usb 6-1: USB disconnect, device number 2
[  329.275125][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'.
[  329.742807][  T167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.913518][  T167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.933038][ T8376] netlink: 100 bytes leftover after parsing attributes in process `syz.5.552'.
[  330.060867][  T167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.160681][  T167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.252716][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 1
[  330.721895][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  330.732267][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  330.753971][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  330.768280][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  330.782620][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  330.791922][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  330.947045][ T5825] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  331.737155][ T5825] usb 4-1: Using ep0 maxpacket: 16
[  331.751788][ T5825] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  331.778591][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  331.805491][ T5825] usb 4-1: Product: syz
[  331.819661][ T5825] usb 4-1: Manufacturer: syz
[  331.836862][ T5825] usb 4-1: SerialNumber: syz
[  331.986843][ T5825] usb 4-1: config 0 descriptor??
[  332.877861][ T5778] Bluetooth: hci0: command tx timeout
[  333.661171][ T8446] netlink: 100 bytes leftover after parsing attributes in process `syz.5.564'.
[  334.907394][ T5825] usb 4-1: USB disconnect, device number 14
[  334.966693][ T5778] Bluetooth: hci0: command tx timeout
[  336.796855][  T787] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  337.091640][ T5778] Bluetooth: hci0: command tx timeout
[  337.127245][  T787] usb 3-1: Using ep0 maxpacket: 16
[  337.283504][  T787] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  337.313080][  T787] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  337.354379][ T8397] chnl_net:caif_netlink_parms(): no params data found
[  337.397445][  T787] usb 3-1: Product: syz
[  337.401688][  T787] usb 3-1: Manufacturer: syz
[  337.471571][  T787] usb 3-1: SerialNumber: syz
[  337.502136][  T787] usb 3-1: config 0 descriptor??
[  337.611540][ T8503] netlink: 100 bytes leftover after parsing attributes in process `syz.3.578'.
[  337.766928][  T167] hsr_slave_0: left promiscuous mode
[  337.797297][  T167] hsr_slave_1: left promiscuous mode
[  337.864693][ T8487] Bluetooth: MGMT ver 1.22
[  337.951731][  T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.993734][  T167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.045714][  T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.059556][  T167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.071535][  T167] bridge_slave_1: left allmulticast mode
[  338.166957][  T167] bridge_slave_1: left promiscuous mode
[  338.233385][  T167] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.626608][  T167] bridge_slave_0: left allmulticast mode
[  338.703915][  T167] bridge_slave_0: left promiscuous mode
[  338.805143][  T167] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.864091][  T167] veth1_macvtap: left promiscuous mode
[  338.870745][  T167] veth0_macvtap: left promiscuous mode
[  338.876466][  T167] veth1_vlan: left promiscuous mode
[  338.881924][  T167] veth0_vlan: left promiscuous mode
[  339.118796][ T5778] Bluetooth: hci0: command tx timeout
[  340.058730][  T787] usb 3-1: USB disconnect, device number 15
[  341.221885][  T167] team0 (unregistering): Port device team_slave_1 removed
[  341.313794][  T167] team0 (unregistering): Port device team_slave_0 removed
[  341.376331][  T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  341.439593][  T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  341.643311][  T167] team0 (unregistering): Port device dummy0 removed
[  341.868941][  T167] bond0 (unregistering): Released all slaves
[  342.085967][ T8537] netlink: 100 bytes leftover after parsing attributes in process `syz.5.592'.
[  342.274892][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.321963][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.359171][ T8397] bridge_slave_0: entered allmulticast mode
[  342.383112][ T8397] bridge_slave_0: entered promiscuous mode
[  342.396091][ T8397] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.403623][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.426986][ T8397] bridge_slave_1: entered allmulticast mode
[  342.439655][ T8397] bridge_slave_1: entered promiscuous mode
[  343.215620][ T8397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.304927][ T8397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.544704][ T8397] team0: Port device team_slave_0 added
[  343.587717][ T8397] team0: Port device team_slave_1 added
[  343.723353][ T8397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.736984][ T5855] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  343.740756][ T8397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.779930][ T8397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.787014][   T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  343.812451][ T8397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.822329][  T167] IPVS: stop unused estimator thread 0...
[  343.837432][ T8397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.895810][ T8397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.916952][ T5855] usb 6-1: Using ep0 maxpacket: 16
[  343.926379][ T5855] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  343.945922][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  343.990207][ T5855] usb 6-1: Product: syz
[  343.994451][ T5855] usb 6-1: Manufacturer: syz
[  344.027114][ T5855] usb 6-1: SerialNumber: syz
[  344.061075][   T23] usb 4-1: Using ep0 maxpacket: 32
[  344.078236][ T8397] hsr_slave_0: entered promiscuous mode
[  344.084621][   T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  344.085322][ T5855] usb 6-1: config 0 descriptor??
[  344.113072][ T8397] hsr_slave_1: entered promiscuous mode
[  344.120731][ T8397] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  344.137575][   T23] usb 4-1: config 0 has no interface number 0
[  344.159501][ T8397] Cannot create hsr debugfs directory
[  344.169519][   T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  344.222065][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.267068][   T23] usb 4-1: Product: syz
[  344.271308][   T23] usb 4-1: Manufacturer: syz
[  344.275956][   T23] usb 4-1: SerialNumber: syz
[  344.319521][   T23] usb 4-1: config 0 descriptor??
[  344.352612][   T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  344.644465][   T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  344.671537][   T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  345.346093][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  345.357443][ T5855] usb 4-1: USB disconnect, device number 15
[  345.622519][ T5855] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  345.644985][ T5855] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  345.672682][ T5855] quatech2 4-1:0.51: device disconnected
[  345.945874][ T8397] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  345.978915][ T8397] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  346.013551][ T8397] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  346.050634][ T8397] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  346.887774][  T966] usb 6-1: USB disconnect, device number 3
[  347.132241][ T8397] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.529696][ T8397] 8021q: adding VLAN 0 to HW filter on device team0
[  347.813631][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.820878][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.891496][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.898836][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.726751][ T8600] Device name cannot be null; rc = [-22]
[  349.886856][ T5855] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  350.077088][ T5855] usb 6-1: Using ep0 maxpacket: 32
[  350.131761][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.320053][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.427632][ T5855] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  350.506803][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.562232][ T5855] usb 6-1: config 0 descriptor??
[  350.923078][ T8397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.074683][ T5855] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  351.096740][ T5855] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  351.272420][ T5855] ft260 0003:0403:6030.0004: chip code: 0000 0000
[  351.425349][ T8635] netlink: 100 bytes leftover after parsing attributes in process `syz.2.597'.
[  351.506167][ T8397] veth0_vlan: entered promiscuous mode
[  351.528996][ T8397] veth1_vlan: entered promiscuous mode
[  351.569472][ T8397] veth0_macvtap: entered promiscuous mode
[  351.584659][ T8397] veth1_macvtap: entered promiscuous mode
[  351.605100][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.618305][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.628747][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.639622][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.656843][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.673861][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.697235][  T966] usb 6-1: USB disconnect, device number 4
[  351.716438][ T8397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.750213][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  351.761817][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.772212][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  351.784785][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.795149][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  351.805956][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.818862][ T8397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  351.838300][ T8397] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.847586][ T8397] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.862620][ T8397] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.873302][ T8397] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.972759][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.994838][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.030741][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.040748][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.296363][ T8669] netlink: 6 bytes leftover after parsing attributes in process `syz.3.600'.
[  353.465913][ T8669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  354.677126][ T5825] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  354.877808][ T5825] usb 7-1: Using ep0 maxpacket: 16
[  354.903888][ T5825] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  354.933693][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  354.955777][ T5825] usb 7-1: Product: syz
[  354.961818][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.980945][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.000737][ T5825] usb 7-1: Manufacturer: syz
[  355.005423][ T5825] usb 7-1: SerialNumber: syz
[  355.164227][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.210184][ T5825] usb 7-1: config 0 descriptor??
[  355.215612][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.791637][ T8706] netlink: 100 bytes leftover after parsing attributes in process `syz.5.609'.
[  357.156698][ T5923] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  357.367043][ T5923] usb 4-1: Using ep0 maxpacket: 8
[  357.505317][ T8727] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  357.695282][    T9] usb 7-1: USB disconnect, device number 2
[  357.888688][ T5923] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  357.926675][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.944610][ T5923] usb 4-1: config 0 descriptor??
[  359.034511][ T5923] a4tech 0003:09DA:001A.0005: collection stack underflow
[  359.067426][ T5923] a4tech 0003:09DA:001A.0005: item 0 0 0 12 parsing failed
[  359.085693][ T5923] a4tech 0003:09DA:001A.0005: parse failed
[  359.116314][ T5923] a4tech: probe of 0003:09DA:001A.0005 failed with error -22
[  359.253936][ T5923] usb 4-1: USB disconnect, device number 16
[  359.531179][ T8750] netlink: 6 bytes leftover after parsing attributes in process `syz.6.618'.
[  359.595962][ T8750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  361.530064][ T8770] netlink: 100 bytes leftover after parsing attributes in process `syz.3.622'.
[  361.649635][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.684676][ T8748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.705322][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.715957][ T8748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.777014][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  362.033306][ T5923] usb 6-1: Using ep0 maxpacket: 16
[  362.073442][ T5923] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  362.103737][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  362.112484][ T5923] usb 6-1: Product: syz
[  362.125144][ T5923] usb 6-1: Manufacturer: syz
[  362.140755][ T5923] usb 6-1: SerialNumber: syz
[  362.160557][ T5923] usb 6-1: config 0 descriptor??

syzkaller
syzkaller login: [  364.097254][   T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.175680][   T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.289679][   T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.416295][   T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.791418][ T8805] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[  364.799476][ T8805] netlink: 'syz.2.630': attribute type 4 has an invalid length.
[  365.148599][    T8] usb 6-1: USB disconnect, device number 5
[  365.536543][ T8809] netlink: 100 bytes leftover after parsing attributes in process `syz.6.631'.
[  366.447369][ T8832] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  367.722462][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  367.732597][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  367.742756][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  367.752657][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  367.767370][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  367.775476][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  368.093817][ T8849] netlink: 6 bytes leftover after parsing attributes in process `syz.5.640'.
[  368.125279][ T8849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  368.301153][  T966] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  368.526781][  T966] usb 7-1: Using ep0 maxpacket: 16
[  368.620030][  T966] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  368.721487][  T966] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  368.744057][  T966] usb 7-1: Product: syz
[  368.749786][  T966] usb 7-1: Manufacturer: syz
[  368.759263][  T966] usb 7-1: SerialNumber: syz
[  369.061492][  T966] usb 7-1: config 0 descriptor??
[  369.490488][ T8849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.507916][ T8849] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.516054][ T8849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.524826][ T8849] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.848011][ T5778] Bluetooth: hci3: command tx timeout
[  371.469506][ T5838] usb 7-1: USB disconnect, device number 3
[  371.529736][ T5778] Bluetooth: hci2: Malformed Event: 0x13
[  371.736030][   T48] hsr_slave_0: left promiscuous mode
[  371.813252][   T48] hsr_slave_1: left promiscuous mode
[  371.872592][   T48] bridge_slave_1: left allmulticast mode
[  371.878932][   T48] bridge_slave_1: left promiscuous mode
[  371.885901][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.918599][ T5778] Bluetooth: hci3: command tx timeout
[  371.955658][   T48] bridge_slave_0: left allmulticast mode
[  371.971693][   T48] bridge_slave_0: left promiscuous mode
[  372.002925][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.427958][   T48] veth1_macvtap: left promiscuous mode
[  372.433570][   T48] veth0_macvtap: left promiscuous mode
[  372.479145][   T48] veth1_vlan: left promiscuous mode
[  372.484612][   T48] veth0_vlan: left promiscuous mode
[  372.670152][   T48] infiniband syz2: set down
[  373.081228][   T48] team0 (unregistering): Port device team_slave_1 removed
[  373.112487][   T11] smc: removing ib device syz2
[  373.139951][   T48] team0 (unregistering): Port device team_slave_0 removed
[  373.186481][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.235012][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.584078][   T48] team0 (unregistering): Port device dummy0 removed
[  373.996647][ T5778] Bluetooth: hci3: command tx timeout
[  374.538920][ T5838] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  374.549763][   T48] bond0 (unregistering): Released all slaves
[  374.668819][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.5.647'.
[  374.693019][  T966] infiniband syz2: ib_query_port failed (-19)
[  374.762047][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.772551][ T5838] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  374.786641][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.841716][ T5838] usb 3-1: config 0 descriptor??
[  374.866888][ T5855] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  374.919599][ T8836] chnl_net:caif_netlink_parms(): no params data found
[  375.094036][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.097061][ T5855] usb 7-1: Using ep0 maxpacket: 16
[  375.126471][ T5855] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  375.133985][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.148186][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  375.158368][ T5855] usb 7-1: Product: syz
[  375.162577][ T5855] usb 7-1: Manufacturer: syz
[  375.168966][ T5855] usb 7-1: SerialNumber: syz
[  375.181489][ T5855] usb 7-1: config 0 descriptor??
[  375.210592][ T5838] usbhid 3-1:0.0: can't add hid device: -71
[  375.228049][ T5838] usbhid: probe of 3-1:0.0 failed with error -71
[  375.263362][ T5838] usb 3-1: USB disconnect, device number 16
[  375.494257][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.546757][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.584900][ T8836] bridge_slave_0: entered allmulticast mode
[  375.682024][ T8836] bridge_slave_0: entered promiscuous mode
[  375.703488][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.915482][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.078384][ T5778] Bluetooth: hci3: command tx timeout
[  376.091315][ T8836] bridge_slave_1: entered allmulticast mode
[  376.332055][ T8836] bridge_slave_1: entered promiscuous mode
[  376.593283][ T8924] binder: BINDER_SET_CONTEXT_MGR already set
[  376.615400][ T8925] netlink: 6 bytes leftover after parsing attributes in process `syz.2.654'.
[  376.623142][ T8924] binder: 8922:8924 ioctl 4018620d 2000000002c0 returned -16
[  376.655455][ T8925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.751956][ T8836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.371715][ T8836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.616775][ T8938] netlink: 100 bytes leftover after parsing attributes in process `syz.5.656'.
[  377.703722][ T5838] usb 7-1: USB disconnect, device number 4
[  377.895922][ T8836] team0: Port device team_slave_0 added
[  378.086085][ T8928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.102051][ T8928] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.128989][ T8928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.139028][ T8928] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.205690][ T8836] team0: Port device team_slave_1 added
[  378.236291][   T48] IPVS: stop unused estimator thread 0...
[  378.268636][ T8836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.276144][ T8836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.314526][ T8836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.338268][ T8836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.345257][ T8836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.371597][ T8836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.520874][ T8836] hsr_slave_0: entered promiscuous mode
[  378.542525][ T8836] hsr_slave_1: entered promiscuous mode
[  378.567523][ T8836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  378.578865][ T8836] Cannot create hsr debugfs directory
[  378.809494][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  378.815952][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  380.519282][ T8836] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  380.532328][ T8836] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  380.545438][ T8836] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  380.556859][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  380.570417][ T8836] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  380.689203][ T8836] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.720892][ T8836] 8021q: adding VLAN 0 to HW filter on device team0
[  380.740792][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.746970][ T5923] usb 3-1: Using ep0 maxpacket: 16
[  380.748311][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.766863][ T5923] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  380.775978][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  380.789337][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.796640][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.816758][ T5923] usb 3-1: Product: syz
[  380.821008][ T5923] usb 3-1: Manufacturer: syz
[  380.825647][ T5923] usb 3-1: SerialNumber: syz
[  380.843988][ T5923] usb 3-1: config 0 descriptor??
[  381.171079][ T8836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.328387][ T8836] veth0_vlan: entered promiscuous mode
[  382.346197][ T8836] veth1_vlan: entered promiscuous mode
[  382.393041][ T8836] veth0_macvtap: entered promiscuous mode
[  382.404079][ T8836] veth1_macvtap: entered promiscuous mode
[  382.437831][ T8836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.455159][ T8836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.476535][ T8836] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.485820][ T8836] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.497712][ T8836] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.506473][ T8836] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.604979][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.618003][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.656278][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.669945][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.134741][ T9031] netlink: 6 bytes leftover after parsing attributes in process `syz.7.667'.
[  383.491608][ T9031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.913847][   T23] usb 3-1: USB disconnect, device number 17
[  384.281070][ T9048] netlink: 100 bytes leftover after parsing attributes in process `syz.2.669'.
[  385.026980][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.035163][ T9038] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.297626][ T9038] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.315489][ T9038] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.280787][ T1087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.411025][ T1087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.499899][ T1087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.584620][ T1087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.581028][ T1087] hsr_slave_0: left promiscuous mode
[  387.588891][ T1087] hsr_slave_1: left promiscuous mode
[  387.596222][ T1087] bridge_slave_1: left allmulticast mode
[  387.602427][ T1087] bridge_slave_1: left promiscuous mode
[  387.613176][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.624564][ T1087] bridge_slave_0: left allmulticast mode
[  387.637270][ T1087] bridge_slave_0: left promiscuous mode
[  387.643188][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.682786][ T1087] veth1_macvtap: left promiscuous mode
[  387.689756][ T1087] veth0_macvtap: left promiscuous mode
[  387.695394][ T1087] veth1_vlan: left promiscuous mode
[  387.702656][ T1087] veth0_vlan: left promiscuous mode
[  388.253332][ T1087] team0 (unregistering): Port device team_slave_1 removed
[  388.294892][ T1087] team0 (unregistering): Port device team_slave_0 removed
[  388.341085][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.384696][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.591181][ T1087] team0 (unregistering): Port device dummy0 removed
[  388.813971][ T1087] bond0 (unregistering): Released all slaves
[  389.193151][ T1087] IPVS: stop unused estimator thread 0...
[  389.553952][ T9120] netlink: 100 bytes leftover after parsing attributes in process `syz.5.683'.
[  390.638637][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  390.648141][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  390.656041][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  390.666107][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  390.674688][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  390.682228][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  392.427972][ T1087] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.671915][ T1087] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.801957][ T5781] Bluetooth: hci1: command tx timeout
[  392.937388][ T1087] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.616849][ T9137] chnl_net:caif_netlink_parms(): no params data found
[  393.704126][ T1087] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.978112][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.987809][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.995838][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  394.003142][ T9137] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.010146][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  394.018958][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  394.026363][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  394.034742][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.054401][ T9137] bridge_slave_0: entered allmulticast mode
[  394.061824][ T9137] bridge_slave_0: entered promiscuous mode
[  394.099370][ T9137] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.106665][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.113904][ T9137] bridge_slave_1: entered allmulticast mode
[  394.122128][ T9137] bridge_slave_1: entered promiscuous mode
[  394.257305][ T9137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.298734][ T9137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.428047][ T9137] team0: Port device team_slave_0 added
[  394.549576][ T9137] team0: Port device team_slave_1 added
[  394.774669][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.782167][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.813445][ T9137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.877044][ T5781] Bluetooth: hci1: command tx timeout
[  394.935071][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.955460][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.984467][ T9137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.077688][ T9137] hsr_slave_0: entered promiscuous mode
[  395.084086][ T9137] hsr_slave_1: entered promiscuous mode
[  395.404557][ T9175] chnl_net:caif_netlink_parms(): no params data found
[  395.827451][ T1087] hsr_slave_0: left promiscuous mode
[  395.833675][ T1087] hsr_slave_1: left promiscuous mode
[  395.841285][ T1087] bridge_slave_1: left allmulticast mode
[  395.847086][ T1087] bridge_slave_1: left promiscuous mode
[  395.852860][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.864199][ T1087] bridge_slave_0: left allmulticast mode
[  395.872341][ T1087] bridge_slave_0: left promiscuous mode
[  395.879008][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.911435][ T1087] veth1_macvtap: left promiscuous mode
[  395.917188][ T1087] veth0_macvtap: left promiscuous mode
[  395.922839][ T1087] veth1_vlan: left promiscuous mode
[  395.930995][ T1087] veth0_vlan: left promiscuous mode
[  396.093687][ T5781] Bluetooth: hci2: command tx timeout
[  396.429312][ T1087] team0 (unregistering): Port device team_slave_1 removed
[  396.469678][ T1087] team0 (unregistering): Port device team_slave_0 removed
[  396.511006][ T1087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.558469][ T1087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  396.960639][ T5781] Bluetooth: hci1: command tx timeout
[  396.995190][ T1087] bond0 (unregistering): Released all slaves
[  397.070831][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.078173][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.085344][ T9175] bridge_slave_0: entered allmulticast mode
[  397.093054][ T9175] bridge_slave_0: entered promiscuous mode
[  397.101920][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.109141][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.116843][ T9175] bridge_slave_1: entered allmulticast mode
[  397.124656][ T9175] bridge_slave_1: entered promiscuous mode
[  397.205168][ T9175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.230521][ T9175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.319325][ T9175] team0: Port device team_slave_0 added
[  397.344589][ T9175] team0: Port device team_slave_1 added
[  397.405837][ T9175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.413250][ T9175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.443182][ T9175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.456311][ T9175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.463720][ T9175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.491822][ T9175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.523562][ T1087] IPVS: stop unused estimator thread 0...
[  397.530150][ T9137] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  397.543813][ T9137] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  397.559606][ T9137] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  397.607386][ T9137] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  397.654232][ T9175] hsr_slave_0: entered promiscuous mode
[  397.662442][ T9175] hsr_slave_1: entered promiscuous mode
[  397.671057][ T9175] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  397.678974][ T9175] Cannot create hsr debugfs directory
[  397.909256][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.973657][ T9137] 8021q: adding VLAN 0 to HW filter on device team0
[  398.016586][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.023798][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.063648][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.070920][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.101426][ T9175] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  398.143608][ T9175] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  398.156998][ T5781] Bluetooth: hci2: command tx timeout
[  398.159675][ T9175] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  398.188404][ T9175] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  398.360939][ T9175] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.426332][ T9175] 8021q: adding VLAN 0 to HW filter on device team0
[  398.458829][  T167] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.465998][  T167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.509465][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.516708][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.558340][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.683431][ T9137] veth0_vlan: entered promiscuous mode
[  398.728981][ T9137] veth1_vlan: entered promiscuous mode
[  398.789963][ T9137] veth0_macvtap: entered promiscuous mode
[  398.809214][ T9137] veth1_macvtap: entered promiscuous mode
[  398.851001][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.882193][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.910142][ T9137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.937214][ T9137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.945981][ T9137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.974504][ T9137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.038563][ T5781] Bluetooth: hci1: command tx timeout
[  399.056292][ T9175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.175662][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.212730][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.254303][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.275215][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.148768][ T9175] veth0_vlan: entered promiscuous mode
[  400.325806][ T5781] Bluetooth: hci2: command tx timeout
[  400.418471][ T9175] veth1_vlan: entered promiscuous mode
[  400.517459][ T9175] veth0_macvtap: entered promiscuous mode
[  400.540238][ T9175] veth1_macvtap: entered promiscuous mode
[  400.572363][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  400.588708][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.604324][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  400.623501][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  400.634543][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.651417][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  400.670465][ T9175] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.680821][ T9175] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.694268][ T9175] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.711905][ T9175] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.837668][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.845571][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.887986][ T9134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.895901][ T9134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.357917][ T9303] =======================================================
[  401.357917][ T9303] WARNING: The mand mount option has been deprecated and
[  401.357917][ T9303]          and is ignored by this kernel. Remove the mand
[  401.357917][ T9303]          option from the mount to silence this warning.
[  401.357917][ T9303] =======================================================
[  401.783142][ T9305] netlink: 100 bytes leftover after parsing attributes in process `syz.6.690'.
[  401.973463][ T9308] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  402.029905][ T9308] overlayfs: overlapping lowerdir path
[  402.417144][ T5781] Bluetooth: hci2: command tx timeout
[  405.283574][ T1309] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.415838][ T1309] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.569091][ T1309] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.583092][ T9346] netlink: 100 bytes leftover after parsing attributes in process `syz.7.707'.
[  405.724207][ T1309] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.846887][ T5923] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  406.059980][ T5923] usb 9-1: config 8 has an invalid interface number: 80 but max is 0
[  406.093789][ T5923] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  406.109687][ T5923] usb 9-1: config 8 has no interface number 0
[  406.115882][ T5923] usb 9-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping
[  406.144512][ T5923] usb 9-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  406.159308][ T5923] usb 9-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  406.180974][ T5923] usb 9-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[  406.212313][ T5923] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  406.237607][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.288434][ T5923] usb 9-1: NFC: intf ffff888050293000 id ffffffff8d63c720
[  406.307163][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  406.331896][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  406.347943][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  406.359643][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  406.369971][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  406.378585][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  406.506312][  T787] usb 9-1: USB disconnect, device number 2
[  406.793753][ T9355] chnl_net:caif_netlink_parms(): no params data found
[  406.909685][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.917521][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.924707][ T9355] bridge_slave_0: entered allmulticast mode
[  406.932084][ T9355] bridge_slave_0: entered promiscuous mode
[  406.941462][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.949670][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.957582][ T9355] bridge_slave_1: entered allmulticast mode
[  406.965056][ T9355] bridge_slave_1: entered promiscuous mode
[  407.020682][ T9355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.075735][ T9355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.923581][ T9355] team0: Port device team_slave_0 added
[  407.933600][ T9355] team0: Port device team_slave_1 added
[  408.244846][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.252147][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.543800][ T5781] Bluetooth: hci0: command tx timeout
[  408.557568][ T9355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.572968][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.583004][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.611702][ T9355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.426439][ T9355] hsr_slave_0: entered promiscuous mode
[  409.490349][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  409.503005][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  409.511776][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  409.526708][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  409.534443][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  409.542976][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  409.572424][ T9355] hsr_slave_1: entered promiscuous mode
[  409.581314][ T9355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  409.589535][ T9355] Cannot create hsr debugfs directory
[  409.662351][ T1309] hsr_slave_0: left promiscuous mode
[  409.672593][ T1309] hsr_slave_1: left promiscuous mode
[  410.487122][ T1309] bridge_slave_1: left allmulticast mode
[  410.492812][ T1309] bridge_slave_1: left promiscuous mode
[  410.525165][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.542296][ T1309] bridge_slave_0: left allmulticast mode
[  410.548054][ T1309] bridge_slave_0: left promiscuous mode
[  410.553768][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.562806][ T5778] Bluetooth: hci0: command tx timeout
[  410.618249][ T9396] netlink: 100 bytes leftover after parsing attributes in process `syz.2.715'.
[  410.631500][ T1309] veth1_macvtap: left promiscuous mode
[  410.638740][ T1309] veth0_macvtap: left promiscuous mode
[  410.644518][ T1309] veth1_vlan: left promiscuous mode
[  410.650073][ T1309] veth0_vlan: left promiscuous mode
[  411.599261][ T5778] Bluetooth: hci3: command tx timeout
[  412.075027][ T1309] team0 (unregistering): Port device team_slave_1 removed
[  412.128855][ T1309] team0 (unregistering): Port device team_slave_0 removed
[  412.175183][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  412.219708][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  412.641208][ T5778] Bluetooth: hci0: command tx timeout
[  412.651307][ T1309] bond0 (unregistering): Released all slaves
[  413.753449][ T5778] Bluetooth: hci3: command tx timeout
[  414.716737][ T5778] Bluetooth: hci0: command tx timeout
[  415.022261][ T9355] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  415.032926][ T9355] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  415.067314][ T9355] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  415.087683][ T9355] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  415.164692][ T9386] chnl_net:caif_netlink_parms(): no params data found
[  415.295359][ T9386] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.306222][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.313988][ T9386] bridge_slave_0: entered allmulticast mode
[  415.321329][ T9386] bridge_slave_0: entered promiscuous mode
[  415.330378][ T9386] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.337724][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.345828][ T9386] bridge_slave_1: entered allmulticast mode
[  415.354489][ T9386] bridge_slave_1: entered promiscuous mode
[  415.406325][ T1309] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.448154][ T9386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.461231][ T9386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.504231][ T1309] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.542082][ T9386] team0: Port device team_slave_0 added
[  415.567515][ T1309] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.591385][ T9386] team0: Port device team_slave_1 added
[  415.635593][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.644000][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.671712][ T9386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.701796][ T1309] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.722525][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.729623][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.756332][ T9386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.821555][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.835397][ T9386] hsr_slave_0: entered promiscuous mode
[  415.841540][ T5778] Bluetooth: hci3: command tx timeout
[  415.854388][ T9386] hsr_slave_1: entered promiscuous mode
[  415.862156][ T9386] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  415.870605][ T9386] Cannot create hsr debugfs directory
[  416.047775][ T9355] 8021q: adding VLAN 0 to HW filter on device team0
[  416.090581][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.097829][ T9134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.108193][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.115388][ T9134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.320114][ T9355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  416.602494][ T9355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.998244][ T9355] veth0_vlan: entered promiscuous mode
[  417.033516][ T9355] veth1_vlan: entered promiscuous mode
[  417.140069][ T9355] veth0_macvtap: entered promiscuous mode
[  417.179193][ T9355] veth1_macvtap: entered promiscuous mode
[  417.202903][ T1309] hsr_slave_0: left promiscuous mode
[  417.209117][ T1309] hsr_slave_1: left promiscuous mode
[  417.215028][ T1309] bridge_slave_1: left allmulticast mode
[  417.222566][ T1309] bridge_slave_1: left promiscuous mode
[  417.233583][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.244313][ T1309] bridge_slave_0: left allmulticast mode
[  417.252740][ T1309] bridge_slave_0: left promiscuous mode
[  417.258626][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.286001][ T1309] veth1_macvtap: left promiscuous mode
[  417.292297][ T1309] veth0_macvtap: left promiscuous mode
[  417.299077][ T1309] veth1_vlan: left promiscuous mode
[  417.304374][ T1309] veth0_vlan: left promiscuous mode
[  417.839240][ T1309] team0 (unregistering): Port device team_slave_1 removed
[  417.882706][ T1309] team0 (unregistering): Port device team_slave_0 removed
[  417.927266][ T5778] Bluetooth: hci3: command tx timeout
[  417.934904][ T1309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  417.984207][ T1309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.459636][ T1309] bond0 (unregistering): Released all slaves
[  418.643737][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.655265][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.665195][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.675818][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.692641][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.702589][ T9386] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  418.728469][ T9386] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  418.756239][ T9386] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  418.773387][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.789485][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.802404][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.813087][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.834048][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.846519][ T9355] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.855833][ T9355] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.864867][ T9355] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.873618][ T9355] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.894914][ T9386] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  419.157703][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.165700][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.231950][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.257662][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.284872][ T9386] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.321668][ T9386] 8021q: adding VLAN 0 to HW filter on device team0
[  419.362861][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.370082][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.389675][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.396966][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.566472][ T9386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  421.273440][ T9386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.318791][ T9486] netlink: 100 bytes leftover after parsing attributes in process `syz.8.725'.
[  422.482177][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.604553][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.729600][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.901563][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.478098][ T9386] veth0_vlan: entered promiscuous mode
[  423.529801][ T9386] veth1_vlan: entered promiscuous mode
[  423.713662][ T9386] veth0_macvtap: entered promiscuous mode
[  424.652633][ T9517] gre1: entered promiscuous mode
[  424.684565][ T9386] veth1_macvtap: entered promiscuous mode
[  424.759930][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.818514][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.861754][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.893583][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.904112][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  424.925206][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.947484][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  424.993568][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  425.003238][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  425.058923][ T9386] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.075601][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  425.148408][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  425.208450][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  425.431984][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.452762][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.464365][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.474920][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.485537][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.496334][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.508085][ T9386] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.541143][ T9386] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.620864][ T9386] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.661400][ T9386] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.672970][ T9386] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.762168][ T9534] netlink: 100 bytes leftover after parsing attributes in process `syz.9.736'.
[  425.997610][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.057076][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.869280][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.914236][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.093554][ T9521] chnl_net:caif_netlink_parms(): no params data found
[  427.526711][ T5778] Bluetooth: hci2: command tx timeout
[  427.631239][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.793824][ T9179] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  427.919698][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.072816][ T9521] bridge_slave_0: entered allmulticast mode
[  428.220405][ T9179] usb 8-1: Using ep0 maxpacket: 16
[  428.241579][ T9521] bridge_slave_0: entered promiscuous mode
[  428.267853][ T9179] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  428.280454][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.316652][ T9179] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  428.329796][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.359009][ T9179] usb 8-1: Product: syz
[  428.363249][ T9179] usb 8-1: Manufacturer: syz
[  428.371257][ T9521] bridge_slave_1: entered allmulticast mode
[  428.398756][ T9179] usb 8-1: SerialNumber: syz
[  428.407008][ T9521] bridge_slave_1: entered promiscuous mode
[  428.458977][ T9179] usb 8-1: config 0 descriptor??
[  428.639859][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.829374][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.839655][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  428.853563][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  428.862458][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  428.871319][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  428.879483][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  428.898096][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  429.421022][ T9521] team0: Port device team_slave_0 added
[  429.607284][ T5781] Bluetooth: hci2: command tx timeout
[  429.665539][ T9521] team0: Port device team_slave_1 added
[  429.755825][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.765773][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.803902][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.864269][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.871568][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.898795][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.079091][ T9521] hsr_slave_0: entered promiscuous mode
[  430.085951][ T9521] hsr_slave_1: entered promiscuous mode
[  430.094018][ T9521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  430.103319][ T9521] Cannot create hsr debugfs directory
[  430.414438][   T12] hsr_slave_0: left promiscuous mode
[  430.425182][   T12] hsr_slave_1: left promiscuous mode
[  430.432414][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.446268][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.455045][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.468583][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.476525][   T12] bridge_slave_1: left allmulticast mode
[  430.492693][   T12] bridge_slave_1: left promiscuous mode
[  430.503662][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.516261][   T12] bridge_slave_0: left allmulticast mode
[  430.532096][   T12] bridge_slave_0: left promiscuous mode
[  430.541419][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.605100][   T12] veth1_macvtap: left promiscuous mode
[  430.612047][   T12] veth0_macvtap: left promiscuous mode
[  430.622293][   T12] veth1_vlan: left promiscuous mode
[  430.629579][   T12] veth0_vlan: left promiscuous mode
[  430.775219][   T23] usb 8-1: USB disconnect, device number 2
[  430.970418][ T5781] Bluetooth: hci0: command tx timeout
[  431.116883][ T5811] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  431.388191][ T5811] usb 3-1: Using ep0 maxpacket: 16
[  431.483206][ T5811] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  431.492432][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  431.501795][ T5811] usb 3-1: Product: syz
[  431.506289][ T5811] usb 3-1: Manufacturer: syz
[  431.524137][ T5811] usb 3-1: SerialNumber: syz
[  431.532216][ T5811] usb 3-1: config 0 descriptor??
[  431.676786][ T5781] Bluetooth: hci2: command tx timeout
[  432.061887][ T9609] netlink: 100 bytes leftover after parsing attributes in process `syz.7.744'.
[  432.860630][   T12] team0 (unregistering): Port device team_slave_1 removed
[  432.904312][   T12] team0 (unregistering): Port device team_slave_0 removed
[  432.954127][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.006002][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.036716][ T5781] Bluetooth: hci0: command tx timeout
[  433.491525][   T12] bond0 (unregistering): Released all slaves
[  433.712196][ T9575] chnl_net:caif_netlink_parms(): no params data found
[  433.757838][ T5781] Bluetooth: hci2: command tx timeout
[  433.975163][ T9179] usb 3-1: USB disconnect, device number 18
[  434.949634][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.116789][ T5781] Bluetooth: hci0: command tx timeout
[  435.263289][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.271010][ T9575] bridge_slave_0: entered allmulticast mode
[  435.295399][ T9575] bridge_slave_0: entered promiscuous mode
[  435.310908][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.327190][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.334531][ T9575] bridge_slave_1: entered allmulticast mode
[  435.345031][ T9575] bridge_slave_1: entered promiscuous mode
[  435.599296][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.676488][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.743093][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.894159][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.965757][ T9649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.751'.
[  436.084073][ T9647] hub 9-0:1.0: USB hub found
[  436.091246][ T9647] hub 9-0:1.0: 1 port detected
[  436.252793][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.309244][ T9575] team0: Port device team_slave_0 added
[  436.334329][ T9575] team0: Port device team_slave_1 added
[  436.344045][ T9657] netlink: 100 bytes leftover after parsing attributes in process `syz.7.753'.
[  436.499120][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.746068][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.776193][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.847297][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.888717][ T9521] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  436.943608][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.961576][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.076618][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.114172][ T9521] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  437.192177][ T9521] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  437.203186][ T5781] Bluetooth: hci0: command tx timeout
[  437.249432][ T9521] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  437.427608][ T5824] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  437.461405][ T9575] hsr_slave_0: entered promiscuous mode
[  437.478574][ T9575] hsr_slave_1: entered promiscuous mode
[  437.484906][ T9575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  437.497096][ T9575] Cannot create hsr debugfs directory
[  437.637087][ T5824] usb 8-1: Using ep0 maxpacket: 16
[  437.655262][ T5824] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  437.679535][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  437.707110][ T5824] usb 8-1: Product: syz
[  437.721890][ T5824] usb 8-1: Manufacturer: syz
[  437.740570][ T5824] usb 8-1: SerialNumber: syz
[  437.800131][ T5824] usb 8-1: config 0 descriptor??
[  438.924600][ T9694] netlink: 188 bytes leftover after parsing attributes in process `syz.2.757'.
[  439.439737][ T9709] netlink: 100 bytes leftover after parsing attributes in process `syz.2.760'.
[  439.573219][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.902303][ T9521] 8021q: adding VLAN 0 to HW filter on device team0
[  440.076901][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.084083][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.155576][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.162812][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.216744][ T5824] usb 8-1: USB disconnect, device number 3
[  440.242891][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  440.253174][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  441.000533][   T12] hsr_slave_0: left promiscuous mode
[  441.032561][   T12] hsr_slave_1: left promiscuous mode
[  441.058264][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.065722][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.079479][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.089094][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.097544][   T12] bridge_slave_1: left allmulticast mode
[  441.103241][   T12] bridge_slave_1: left promiscuous mode
[  441.115747][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.126918][   T12] bridge_slave_0: left allmulticast mode
[  441.132661][   T12] bridge_slave_0: left promiscuous mode
[  441.139243][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.172620][   T12] veth1_macvtap: left promiscuous mode
[  441.178557][   T12] veth0_macvtap: left promiscuous mode
[  441.184277][   T12] veth1_vlan: left promiscuous mode
[  441.191520][   T12] veth0_vlan: left promiscuous mode
[  441.720729][   T12] team0 (unregistering): Port device team_slave_1 removed
[  441.762251][   T12] team0 (unregistering): Port device team_slave_0 removed
[  441.804635][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.851105][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.301565][   T12] bond0 (unregistering): Released all slaves
[  442.492431][ T9575] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  442.502285][ T9575] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  442.520164][ T9575] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  442.547840][ T9575] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  442.599524][ T9521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.782323][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.869936][ T9575] 8021q: adding VLAN 0 to HW filter on device team0
[  442.902689][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.909864][ T9278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.929097][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.936375][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.996147][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.088657][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.176207][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.260075][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.290183][ T9521] veth0_vlan: entered promiscuous mode
[  443.318048][ T9521] veth1_vlan: entered promiscuous mode
[  443.407984][ T9521] veth0_macvtap: entered promiscuous mode
[  443.428210][ T9521] veth1_macvtap: entered promiscuous mode
[  443.474927][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.488947][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.500102][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.511076][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.523168][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.558221][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.571980][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.584445][ T9521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.594934][ T9521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.608454][ T9521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.641375][ T9521] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.655321][ T9521] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.664882][ T9521] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.673866][ T9521] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.716122][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.894232][ T9575] veth0_vlan: entered promiscuous mode
[  443.900350][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.912084][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.935911][ T9575] veth1_vlan: entered promiscuous mode
[  443.994917][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.011220][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.050558][ T9575] veth0_macvtap: entered promiscuous mode
[  444.064777][ T9575] veth1_macvtap: entered promiscuous mode
[  444.331360][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.361773][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.383947][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.394559][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.405525][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  444.416197][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.431143][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.442210][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.453396][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.567579][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.650281][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.754196][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.864604][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  445.000631][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.137234][ T9575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.169546][ T9575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.192832][ T9575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.241557][ T9575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.256226][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  445.266063][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  445.274824][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  445.293175][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  445.301633][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  445.312497][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  446.387397][ T9134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.395313][ T9134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.496828][   T12] hsr_slave_0: left promiscuous mode
[  446.514767][   T12] hsr_slave_1: left promiscuous mode
[  446.523526][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.534528][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.545888][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.559498][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.569145][   T12] bridge_slave_1: left allmulticast mode
[  446.574945][   T12] bridge_slave_1: left promiscuous mode
[  446.593687][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.622501][   T12] bridge_slave_0: left allmulticast mode
[  446.628642][   T12] bridge_slave_0: left promiscuous mode
[  446.634418][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.665575][   T12] veth1_macvtap: left promiscuous mode
[  446.671433][   T12] veth0_macvtap: left promiscuous mode
[  446.677396][   T12] veth1_vlan: left promiscuous mode
[  446.683603][   T12] veth0_vlan: left promiscuous mode
[  447.203187][   T12] team0 (unregistering): Port device team_slave_1 removed
[  447.248243][   T12] team0 (unregistering): Port device team_slave_0 removed
[  447.293581][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  447.342362][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.360992][ T5781] Bluetooth: hci1: command tx timeout
[  447.782886][   T12] bond0 (unregistering): Released all slaves
[  448.069696][ T9775] chnl_net:caif_netlink_parms(): no params data found
[  448.117998][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.125960][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.292897][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.390861][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.494637][ T9775] bridge_slave_0: entered allmulticast mode
[  448.629475][ T9775] bridge_slave_0: entered promiscuous mode
[  448.818901][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.879155][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.886378][ T9775] bridge_slave_1: entered allmulticast mode
[  448.961925][ T9775] bridge_slave_1: entered promiscuous mode
[  449.190276][ T9775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.295278][ T9775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.437237][ T5781] Bluetooth: hci1: command tx timeout
[  449.557482][ T9775] team0: Port device team_slave_0 added
[  449.572351][ T9775] team0: Port device team_slave_1 added
[  449.664112][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.678677][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.713469][ T9775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.742267][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.761373][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.936839][ T9775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.652780][ T9775] hsr_slave_0: entered promiscuous mode
[  450.707030][ T9775] hsr_slave_1: entered promiscuous mode
[  450.720197][ T9831] netlink: 100 bytes leftover after parsing attributes in process `syz.1.775'.
[  451.517273][ T5781] Bluetooth: hci1: command tx timeout
[  452.174289][ T9775] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  452.213386][ T9775] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  452.240889][ T9775] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  452.264121][ T9775] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  452.420311][ T9775] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.474415][ T9775] 8021q: adding VLAN 0 to HW filter on device team0
[  452.490656][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.497864][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.525579][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.532920][ T9134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.179624][ T9775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.277550][ T9775] veth0_vlan: entered promiscuous mode
[  453.303556][ T9775] veth1_vlan: entered promiscuous mode
[  453.356373][ T9775] veth0_macvtap: entered promiscuous mode
[  453.370075][ T9775] veth1_macvtap: entered promiscuous mode
[  453.408991][ T9775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.425978][ T9775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.437997][ T9775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.454566][ T9775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.464709][ T9775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  453.479534][ T9775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.495715][ T9775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.515543][ T9775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.536418][ T9775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.549427][ T9775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.565774][ T9775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.575865][ T9775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.591170][ T9775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.600262][ T5781] Bluetooth: hci1: command tx timeout
[  453.609011][ T9775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.630512][ T9775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.640182][ T9775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.650321][ T9775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.659218][ T9775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.802670][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.821049][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.910944][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.946371][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.248950][ T9901] netlink: 100 bytes leftover after parsing attributes in process `syz.8.787'.
[  455.276841][ T5811] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  455.466627][ T5811] usb 3-1: Using ep0 maxpacket: 16
[  455.494177][ T5811] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  455.522920][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  455.543728][ T5811] usb 3-1: Product: syz
[  455.564483][ T9921] overlayfs: failed to resolve './file1/file0': -2
[  455.572803][ T5811] usb 3-1: Manufacturer: syz
[  455.593846][ T5811] usb 3-1: SerialNumber: syz
[  455.650229][ T5811] usb 3-1: config 0 descriptor??
[  457.073757][ T9939] netlink: 100 bytes leftover after parsing attributes in process `syz.8.797'.
[  458.463489][ T5811] usb 3-1: USB disconnect, device number 19
[  458.675358][ T9958] hfs: can't find a HFS filesystem on dev nullb0
[  459.618487][ T9978] netlink: 100 bytes leftover after parsing attributes in process `syz.2.807'.
[  460.329641][ T5923] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  460.546619][ T5923] usb 9-1: Using ep0 maxpacket: 16
[  460.668851][ T9997] random: crng reseeded on system resumption
[  462.209857][ T5923] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  462.567155][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  462.585857][ T5923] usb 9-1: Product: syz
[  462.595725][ T5923] usb 9-1: Manufacturer: syz
[  462.605811][ T5923] usb 9-1: SerialNumber: syz
[  462.630975][ T5923] usb 9-1: config 0 descriptor??
[  462.721586][T10001] tipc: Started in network mode
[  462.736091][T10001] tipc: Node identity d6a4f8617721, cluster identity 4711
[  462.755808][T10001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  462.775118][T10008] syzkaller0: entered promiscuous mode
[  462.791760][T10008] syzkaller0: entered allmulticast mode
[  462.884354][ T5824] usb 9-1: USB disconnect, device number 3
[  463.713749][T10000] tipc: Resetting bearer <eth:syzkaller0>
[  463.774364][T10000] tipc: Disabling bearer <eth:syzkaller0>
[  463.934575][T10025] netlink: 100 bytes leftover after parsing attributes in process `syz.2.818'.
[  464.372281][T10038] netlink: 100 bytes leftover after parsing attributes in process `syz.1.828'.
[  467.096631][ T5923] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  467.293509][T10071] tmpfs: Bad value for 'mpol'
[  467.336603][ T5923] usb 9-1: Using ep0 maxpacket: 16
[  467.370622][ T5923] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  467.398578][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  467.416741][ T5923] usb 9-1: Product: syz
[  467.431331][ T5923] usb 9-1: Manufacturer: syz
[  467.435983][ T5923] usb 9-1: SerialNumber: syz
[  467.470150][ T5923] usb 9-1: config 0 descriptor??
[  468.779368][T10088] netlink: 100 bytes leftover after parsing attributes in process `syz.7.831'.
[  470.894007][ T9179] usb 9-1: USB disconnect, device number 4
[  471.558656][T10129] netlink: 100 bytes leftover after parsing attributes in process `syz.2.841'.
[  472.556660][ T5824] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  472.740690][ T5824] usb 9-1: Using ep0 maxpacket: 16
[  472.775279][ T5824] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  472.805464][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  472.830061][ T5824] usb 9-1: Product: syz
[  472.834557][ T5824] usb 9-1: Manufacturer: syz
[  472.853778][ T5824] usb 9-1: SerialNumber: syz
[  472.920956][ T5824] usb 9-1: config 0 descriptor??
[  476.662143][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'.
[  476.696844][T10171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'.
[  476.891668][ T5838] usb 9-1: USB disconnect, device number 5
[  476.945282][T10179] netlink: 100 bytes leftover after parsing attributes in process `syz.2.852'.
[  477.538580][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'.
[  483.517451][T10238] netlink: 100 bytes leftover after parsing attributes in process `syz.2.863'.
[  484.118546][ T5824] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  485.916683][ T5824] usb 3-1: Using ep0 maxpacket: 16
[  485.953943][ T5824] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  485.976883][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  486.019699][ T5824] usb 3-1: Product: syz
[  486.024031][ T5824] usb 3-1: Manufacturer: syz
[  486.049227][ T5824] usb 3-1: SerialNumber: syz
[  486.068885][ T5824] usb 3-1: config 0 descriptor??
[  488.016280][T10290] netlink: 100 bytes leftover after parsing attributes in process `syz.1.874'.
[  488.045073][T10290] autofs4:pid:10290:autofs_fill_super: called with bogus options
[  488.379703][ T5923] usb 3-1: USB disconnect, device number 20
[  491.898647][T10341] netlink: 100 bytes leftover after parsing attributes in process `syz.2.883'.
[  491.910705][T10341] autofs4:pid:10341:autofs_fill_super: called with bogus options
[  492.419797][ T5824] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  493.108806][ T5824] usb 2-1: Using ep0 maxpacket: 16
[  493.165872][ T5824] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  493.188083][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  493.203913][ T5824] usb 2-1: Product: syz
[  493.212475][ T5824] usb 2-1: Manufacturer: syz
[  493.217297][ T5824] usb 2-1: SerialNumber: syz
[  493.226241][ T5824] usb 2-1: config 0 descriptor??
[  495.557320][ T5923] usb 2-1: USB disconnect, device number 9
[  495.735519][T10393] syzkaller1: entered promiscuous mode
[  495.751256][T10393] syzkaller1: entered allmulticast mode
[  495.780605][T10395] netlink: 100 bytes leftover after parsing attributes in process `syz.8.894'.
[  495.884547][T10395] autofs4:pid:10395:autofs_fill_super: called with bogus options
[  497.796947][ T5811] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  497.997121][ T5811] usb 2-1: Using ep0 maxpacket: 16
[  498.219028][ T5811] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  498.219258][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  498.219430][ T5811] usb 2-1: Product: syz
[  498.219594][ T5811] usb 2-1: Manufacturer: syz
[  498.219768][ T5811] usb 2-1: SerialNumber: syz
[  498.268372][ T5811] usb 2-1: config 0 descriptor??
[  498.645964][T10436] netlink: 100 bytes leftover after parsing attributes in process `syz.7.904'.
[  499.936608][ T5811] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  500.128954][ T5811] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.171152][ T5811] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  500.214582][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.268734][ T5811] usb 8-1: config 0 descriptor??
[  500.315986][ T5811] pwc: Askey VC010 type 2 USB webcam detected.
[  500.633807][ T9179] usb 2-1: USB disconnect, device number 10
[  501.004465][ T5811] pwc: recv_control_msg error -32 req 02 val 2b00
[  501.054921][ T5811] pwc: recv_control_msg error -32 req 02 val 2700
[  501.077944][ T5811] pwc: recv_control_msg error -32 req 02 val 2c00
[  501.479923][ T5811] pwc: recv_control_msg error -71 req 04 val 1300
[  501.773623][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  501.782245][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  501.803983][ T5811] pwc: recv_control_msg error -71 req 04 val 1400
[  501.811088][ T5811] pwc: recv_control_msg error -71 req 02 val 2000
[  501.818071][ T5811] pwc: recv_control_msg error -71 req 02 val 2100
[  501.825074][ T5811] pwc: recv_control_msg error -71 req 04 val 1500
[  501.832028][ T5811] pwc: recv_control_msg error -71 req 02 val 2500
[  501.839220][ T5811] pwc: recv_control_msg error -71 req 02 val 2400
[  501.846072][ T5811] pwc: recv_control_msg error -71 req 02 val 2600
[  501.853056][ T5811] pwc: recv_control_msg error -71 req 02 val 2900
[  501.859951][ T5811] pwc: recv_control_msg error -71 req 02 val 2800
[  501.867015][ T5811] pwc: recv_control_msg error -71 req 04 val 1100
[  501.874688][ T5811] pwc: recv_control_msg error -71 req 04 val 1200
[  501.928204][ T5811] pwc: Registered as video103.
[  501.970725][ T5811] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8
[  502.097681][ T5811] usb 8-1: USB disconnect, device number 4
[  502.844086][T10499] netlink: 100 bytes leftover after parsing attributes in process `syz.2.917'.
[  503.456736][ T5811] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  503.653451][ T5811] usb 3-1: Using ep0 maxpacket: 16
[  503.675896][ T5811] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  503.695456][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  503.728404][ T5811] usb 3-1: Product: syz
[  503.732737][ T5811] usb 3-1: Manufacturer: syz
[  503.750954][ T5811] usb 3-1: SerialNumber: syz
[  503.781935][ T5811] usb 3-1: config 0 descriptor??
[  506.627181][ T5923] usb 3-1: USB disconnect, device number 21
[  506.765651][T10555] netlink: 100 bytes leftover after parsing attributes in process `syz.2.928'.
[  507.737596][T10572] qrtr: Invalid version 255
[  509.059062][ T9179] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  509.246615][ T9179] usb 2-1: Using ep0 maxpacket: 16
[  509.260467][ T9179] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  509.276549][ T9179] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  509.284672][ T9179] usb 2-1: Product: syz
[  509.297080][ T9179] usb 2-1: Manufacturer: syz
[  509.301735][ T9179] usb 2-1: SerialNumber: syz
[  509.327659][ T9179] usb 2-1: config 0 descriptor??
[  511.094426][T10616] netlink: 100 bytes leftover after parsing attributes in process `syz.8.940'.
[  511.338651][ T5923] usb 2-1: USB disconnect, device number 11
[  511.576610][ T9179] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  512.317161][ T9179] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  512.369378][ T9179] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.415981][ T9179] usb 8-1: Product: syz
[  512.451735][ T9179] usb 8-1: Manufacturer: syz
[  512.484376][ T9179] usb 8-1: SerialNumber: syz
[  512.518492][ T9179] usb 8-1: config 0 descriptor??
[  512.539347][ T9179] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  512.590922][ T9179] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  512.626313][ T9179] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  512.651686][ T9179] usb 8-1: media controller created
[  512.729490][ T9179] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  512.939322][ T9179] DVB: Unable to find symbol mt352_attach()
[  513.059921][ T9179] DVB: Unable to find symbol nxt6000_attach()
[  513.066352][ T9179] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  513.087557][ T9179] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9
[  513.108637][ T9179] dvb-usb: schedule remote query interval to 1000 msecs.
[  513.116200][ T9179] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  513.134597][ T9179] dvb-usb: bulk message failed: -22 (7/0)
[  513.160477][ T9179] dvb-usb: bulk message failed: -22 (7/0)
[  513.189078][ T9179] usb 8-1: USB disconnect, device number 5
[  513.398805][ T9179] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  513.599171][T10681] netlink: 100 bytes leftover after parsing attributes in process `syz.7.956'.
[  513.806613][ T5811] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  514.046612][ T5811] usb 3-1: Using ep0 maxpacket: 16
[  514.057570][ T5811] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  514.077550][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  514.085673][ T5811] usb 3-1: Product: syz
[  514.096766][ T5811] usb 3-1: Manufacturer: syz
[  514.101458][ T5811] usb 3-1: SerialNumber: syz
[  514.138395][ T5811] usb 3-1: config 0 descriptor??
[  516.076248][T10734] netlink: 100 bytes leftover after parsing attributes in process `syz.7.968'.
[  516.629849][ T5923] usb 3-1: USB disconnect, device number 22
[  519.917480][ T5811] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  519.982971][T10822] netlink: 100 bytes leftover after parsing attributes in process `syz.2.979'.
[  520.206676][ T5811] usb 2-1: Using ep0 maxpacket: 16
[  520.307260][ T5811] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  520.334822][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  520.376527][ T5811] usb 2-1: Product: syz
[  520.380760][ T5811] usb 2-1: Manufacturer: syz
[  520.389538][ T5811] usb 2-1: SerialNumber: syz
[  520.397872][ T5811] usb 2-1: config 0 descriptor??
[  523.725896][    T8] usb 2-1: USB disconnect, device number 12
[  525.137197][T10870] netlink: 100 bytes leftover after parsing attributes in process `syz.7.990'.
[  527.401349][ T5856] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  527.616774][ T5856] usb 3-1: Using ep0 maxpacket: 16
[  527.699778][ T5856] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  527.709141][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  527.720373][ T5856] usb 3-1: Product: syz
[  527.724629][ T5856] usb 3-1: Manufacturer: syz
[  527.730151][ T5856] usb 3-1: SerialNumber: syz
[  527.771143][ T5856] usb 3-1: config 0 descriptor??
[  530.080440][ T5856] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  530.140196][ T5855] usb 3-1: USB disconnect, device number 23
[  530.188654][T10922] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1002'.
[  530.302211][ T5856] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  530.322898][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.354125][ T5856] usb 8-1: Product: syz
[  530.368440][ T5856] usb 8-1: Manufacturer: syz
[  530.380812][ T5856] usb 8-1: SerialNumber: syz
[  531.478066][ T5856] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  531.490784][ T5856] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  531.502788][ T5856] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  531.515215][ T5856] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  531.569501][ T5856] lan78xx: probe of 8-1:1.0 failed with error -71
[  531.610623][ T5856] usb 8-1: USB disconnect, device number 6
[  532.098028][T10946] use of bytesused == 0 is deprecated and will be removed in the future,
[  532.106896][T10946] use the actual size instead.
[  533.296662][ T5856] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  534.306779][ T5856] usb 2-1: Using ep0 maxpacket: 16
[  534.361329][ T5856] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  534.400756][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  534.438290][ T5856] usb 2-1: Product: syz
[  534.449499][ T5856] usb 2-1: Manufacturer: syz
[  534.472228][ T5856] usb 2-1: SerialNumber: syz
[  534.495498][ T5856] usb 2-1: config 0 descriptor??
[  534.556575][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  535.077121][T10994] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN
[  535.088902][T10994] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  535.097340][T10994] CPU: 1 PID: 10994 Comm: syz.2.1014 Not tainted syzkaller #0
[  535.104820][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  535.114897][T10994] RIP: 0010:klist_remove+0x15c/0x390
[  535.120228][T10994] Code: 80 3c 04 00 74 08 4c 89 f7 e8 80 30 89 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 59 30 89 f7 49 8b 47 58 48 89 44 24 10 4c 89
[  535.139856][T10994] RSP: 0000:ffffc90014d275e0 EFLAGS: 00010202
[  535.145962][T10994] RAX: 000000000000000b RBX: ffff888028818000 RCX: dffffc0000000000
[  535.153972][T10994] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  535.161968][T10994] RBP: ffffc90014d276c8 R08: ffffffff8e31d943 R09: 1ffffffff1c63b28
[  535.169960][T10994] R10: dffffc0000000000 R11: fffffbfff1c63b29 R12: 1ffff110033ce00c
[  535.177953][T10994] R13: dffffc0000000000 R14: ffff888019e70060 R15: 0000000000000000
[  535.185954][T10994] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  535.194939][T10994] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  535.201547][T10994] CR2: 000000110c29ca6b CR3: 000000004d4eb000 CR4: 00000000003506e0
[  535.209575][T10994] Call Trace:
[  535.212884][T10994]  <TASK>
[  535.215846][T10994]  ? klist_del+0x110/0x110
[  535.220289][T10994]  ? kobject_move+0x597/0x6d0
[  535.224992][T10994]  ? kobject_put+0x470/0x470
[  535.229619][T10994]  ? get_device_parent+0x366/0x390
[  535.234785][T10994]  device_move+0x193/0x6f0
[  535.239232][T10994]  hci_conn_del_sysfs+0xaf/0x160
[  535.244251][T10994]  hci_conn_del+0x8d8/0xc80
[  535.248787][T10994]  hci_conn_hash_flush+0x185/0x220
[  535.253925][T10994]  hci_dev_close_sync+0x962/0xfb0
[  535.258983][T10994]  ? hci_unregister_dev+0x212/0x510
[  535.264212][T10994]  ? hci_dev_open_sync+0x2b50/0x2b50
[  535.269535][T10994]  ? up_write+0x1c3/0x410
[  535.273904][T10994]  hci_unregister_dev+0x21a/0x510
[  535.278963][T10994]  vhci_release+0x155/0x1a0
[  535.283509][T10994]  ? vhci_open+0x360/0x360
[  535.287969][T10994]  __fput+0x234/0x970
[  535.291984][T10994]  task_work_run+0x1ce/0x250
[  535.296602][T10994]  ? task_work_cancel+0x240/0x240
[  535.301668][T10994]  ? do_exit+0x906/0x23c0
[  535.306033][T10994]  ? kmem_cache_free+0xf8/0x280
[  535.310946][T10994]  do_exit+0x90b/0x23c0
[  535.315128][T10994]  ? put_task_struct+0xc0/0xc0
[  535.319919][T10994]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  535.325925][T10994]  ? get_signal+0x1068/0x1400
[  535.330626][T10994]  ? lock_chain_count+0x20/0x20
[  535.335496][T10994]  ? _raw_spin_lock_irq+0xaf/0xe0
[  535.340571][T10994]  do_group_exit+0x21b/0x2d0
[  535.345195][T10994]  ? lockdep_hardirqs_on+0x98/0x150
[  535.350417][T10994]  get_signal+0x12fc/0x1400
[  535.354964][T10994]  arch_do_signal_or_restart+0x9c/0x7b0
[  535.360601][T10994]  ? get_sigframe_size+0x20/0x20
[  535.365582][T10994]  ? __se_sys_clock_nanosleep+0x2ea/0x370
[  535.371337][T10994]  ? exit_to_user_mode_loop+0x3b/0x110
[  535.376826][T10994]  exit_to_user_mode_loop+0x70/0x110
[  535.382144][T10994]  exit_to_user_mode_prepare+0xf6/0x180
[  535.387739][T10994]  syscall_exit_to_user_mode+0x1a/0x50
[  535.393233][T10994]  do_syscall_64+0x61/0xb0
[  535.397676][T10994]  ? clear_bhb_loop+0x40/0x90
[  535.402379][T10994]  ? clear_bhb_loop+0x40/0x90
[  535.407096][T10994]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.413022][T10994] RIP: 0033:0x7f0b65dc2005
[  535.417497][T10994] Code: Unable to access opcode bytes at 0x7f0b65dc1fdb.
[  535.424537][T10994] RSP: 002b:00007f0b66c59f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  535.432976][T10994] RAX: 0000000000000000 RBX: 00007f0b65fe5fa0 RCX: 00007f0b65dc2005
[  535.440985][T10994] RDX: 00007f0b66c59fc0 RSI: 0000000000000000 RDI: 0000000000000000
[  535.448987][T10994] RBP: 00007f0b65e13f91 R08: 0000000000000000 R09: 0000000000000000
[  535.456981][T10994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  535.465094][T10994] R13: 00007f0b65fe6038 R14: 00007f0b65fe5fa0 R15: 00007ffd5f0f58a8
[  535.473108][T10994]  </TASK>
[  535.476170][T10994] Modules linked in:
[  535.632198][T10994] ---[ end trace 0000000000000000 ]---
[  535.639058][T10994] RIP: 0010:klist_remove+0x15c/0x390
[  535.644535][T10994] Code: 80 3c 04 00 74 08 4c 89 f7 e8 80 30 89 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 59 30 89 f7 49 8b 47 58 48 89 44 24 10 4c 89
[  535.667872][T10994] RSP: 0000:ffffc90014d275e0 EFLAGS: 00010202
[  535.674058][T10994] RAX: 000000000000000b RBX: ffff888028818000 RCX: dffffc0000000000
[  535.690313][T10994] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  535.698991][T10994] RBP: ffffc90014d276c8 R08: ffffffff8e31d943 R09: 1ffffffff1c63b28
[  535.708428][T10994] R10: dffffc0000000000 R11: fffffbfff1c63b29 R12: 1ffff110033ce00c
[  535.716435][T10994] R13: dffffc0000000000 R14: ffff888019e70060 R15: 0000000000000000
[  535.724477][T10994] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  535.733475][T10994] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  535.740277][T10994] CR2: 00007f0270bb7198 CR3: 000000002e14c000 CR4: 00000000003506e0
[  535.896046][T10994] Kernel panic - not syncing: Fatal exception
[  535.902740][T10994] Kernel Offset: disabled
[  535.907069][T10994] Rebooting in 86400 seconds..