last executing test programs:

17m41.277448735s ago: executing program 32 (id=85):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000f40)={0x1a})

14m15.530086232s ago: executing program 33 (id=591):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10)
close(r3)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x28, 0x0, &(0x7f0000000240)=[@request_death, @clear_death, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
inotify_init()
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000095455e810094242090d57e76181141fa76", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8], 0x48)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x163902)

9m41.582253175s ago: executing program 1 (id=1251):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x5, 0x28011, 0xffffffffffffffff, 0x7dd56000)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x51, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

9m40.275684503s ago: executing program 1 (id=1257):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
r1 = signalfd(r0, 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
timerfd_create(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00')
prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x4fffff)

9m38.087248686s ago: executing program 1 (id=1260):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8)
mkdir(0x0, 0x0)
open(&(0x7f0000000140)='.\x00', 0x448000, 0x100)
r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary)
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
mknodat(r0, 0x0, 0x100, 0xfffffffc)

9m27.6591602s ago: executing program 1 (id=1280):
mknodat$null(0xffffffffffffff9c, 0x0, 0x408, 0x103)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000ed04000000d84900000100000005000000656036aea195b1af72d65b8df441666d530a2b548c7fa846efff348b93083adf7dbfb3e16a3cc840f9cbffe994ae7c76dfb5f0259f97c86c3ea3bab237e3357fa24b8a0ae0c94634a9fb1d97d09c64b7268d2e1f1e3bb22eda517600fe86727808702197e920d6483fd954a6500095", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000a00)={0x234, 0x7d, 0x0, {{0x500, 0xf3, 0x0, 0x5000000, {}, 0x80100000, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvqox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x14, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00!\x83\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234)

9m24.789270055s ago: executing program 1 (id=1286):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESOCT], 0xd)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0x9, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1ff, @mcast2, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0xc693}, 0xffffffffffffffff, 0xa}}, 0x48)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r4, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r6 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x26020400)
sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff00003e0000001f0000000000000008001c00c9000000ed4121d9e5302944611ca41f28cb7aed6d1e728b90ba61f35424634b22cb075aa11462703430c64a20ffeea10ff706429fd6b9272f39f575926196adeb5ec875eb3bd65147a7d5a93ae70447947e83a9fc9dd10d40bf24120304de3fae46bbb2df5ac465c35d86c6883b17d34cc7cab3fcb87d8e0d209f87fbcfb17ffc93eb3162a822175e30a89c56d2c9699a9686cb7983fb47db360e59668ac25ef98132d1cc63546b1227f89b22792fb9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

9m22.082532618s ago: executing program 1 (id=1291):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)

9m11.283790246s ago: executing program 3 (id=1308):
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x6d, 0x2}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0x40, &(0x7f00000003c0)='cubic', 0x4)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080), 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000100)="d5c0e9", 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)

9m7.365902948s ago: executing program 3 (id=1311):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESOCT], 0xd)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0x9, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1ff, @mcast2, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0xc693}, 0xffffffffffffffff, 0xa}}, 0x48)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r4, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

9m6.494158103s ago: executing program 34 (id=1291):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)

9m6.384747531s ago: executing program 3 (id=1313):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8)
mkdir(0x0, 0x0)
open(&(0x7f0000000140)='.\x00', 0x448000, 0x100)
r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary)
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
mknodat(r0, 0x0, 0x100, 0xfffffffc)

9m4.407842048s ago: executing program 3 (id=1318):
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x6d, 0x2}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0x40, &(0x7f00000003c0)='cubic', 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$9p(0xffffffffffffffff, &(0x7f0000000100)="d5c0e9", 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)

9m1.661277241s ago: executing program 3 (id=1322):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)

8m58.465841591s ago: executing program 3 (id=1330):
mknodat$null(0xffffffffffffff9c, 0x0, 0x408, 0x103)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
socket$kcm(0x2d, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000ed04000000d84900000100000005000000656036aea195b1af72d65b8df441666d530a2b548c7fa846efff348b93083adf7dbfb3e16a3cc840f9cbffe994ae7c76dfb5f0259f97c86c3ea3bab237e3357fa24b8a0ae0c94634a9fb1d97d09c64b7268d2e1f1e3bb22eda517600fe86727808702197e920d6483fd954a6500095", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000a00)={0x234, 0x7d, 0x0, {{0x500, 0xf3, 0x0, 0x5000000, {}, 0x80100000, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvqox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x14, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00!\x83\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000f5000002"], 0xfce)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @empty, 0x9}, 0x1c)

8m42.78835707s ago: executing program 35 (id=1330):
mknodat$null(0xffffffffffffff9c, 0x0, 0x408, 0x103)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
socket$kcm(0x2d, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000ed04000000d84900000100000005000000656036aea195b1af72d65b8df441666d530a2b548c7fa846efff348b93083adf7dbfb3e16a3cc840f9cbffe994ae7c76dfb5f0259f97c86c3ea3bab237e3357fa24b8a0ae0c94634a9fb1d97d09c64b7268d2e1f1e3bb22eda517600fe86727808702197e920d6483fd954a6500095", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000a00)={0x234, 0x7d, 0x0, {{0x500, 0xf3, 0x0, 0x5000000, {}, 0x80100000, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvqox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x14, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00!\x83\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000f5000002"], 0xfce)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @empty, 0x9}, 0x1c)

5m26.784665581s ago: executing program 7 (id=1818):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1001f0)

5m25.598928376s ago: executing program 7 (id=1820):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
signalfd(r0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
timerfd_create(0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00')
prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x4fffff)

5m24.65603472s ago: executing program 7 (id=1821):
socket$kcm(0xa, 0x2, 0x0)
close(0x4)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x4008af24, &(0x7f0000002500))
mmap$IORING_OFF_SQ_RING(0x0, 0x40040, 0x3000007, 0x8010, r1, 0x0)
r2 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x521, 0x2000000, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0))
userfaultfd(0x800)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054)
read$nci(r3, 0x0, 0x24)
syz_usb_connect(0x6, 0x62, &(0x7f0000000140)=ANY=[], 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f00000004c0)="0393cd", 0x3}], 0x1)

5m20.865677457s ago: executing program 7 (id=1837):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x8, 0x4)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

5m18.290466855s ago: executing program 7 (id=1848):
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0xca9, 0x800)
read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000a9d000/0x4000)=nil, 0x4000, 0x1)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0)
ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000240)={0x11})

5m15.969429421s ago: executing program 7 (id=1854):
open(0x0, 0x66842, 0x90)
prlimit64(0x0, 0xf, &(0x7f0000000200)={0xfffffffffffffffa, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mount$9p_tcp(0x0, 0x0, &(0x7f0000000080), 0x10000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x4000040)
r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x2, 0x101082)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000480)=""/206)

4m56.475872115s ago: executing program 36 (id=1854):
open(0x0, 0x66842, 0x90)
prlimit64(0x0, 0xf, &(0x7f0000000200)={0xfffffffffffffffa, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mount$9p_tcp(0x0, 0x0, &(0x7f0000000080), 0x10000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x4000040)
r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x2, 0x101082)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000480)=""/206)

4m33.171894165s ago: executing program 9 (id=1951):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x24001035)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendmsg$inet6(r0, 0x0, 0x20008814)
syz_emit_ethernet(0x76, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}]}}}}}}}, 0x0)
connect$inet6(r0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x0, @local}, {0xa, 0x6e23, 0x0, @empty, 0x6}, 0x1, {[0x0, 0x0, 0x0, 0x80000004, 0x0, 0x1, 0xfffffffe, 0x40]}}, 0x5c)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r3, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)

4m30.894742042s ago: executing program 9 (id=1953):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0}, './bus\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x3ff, 0x4, 0xe5ce, 0x1}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x4}, {0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1043, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wo\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',\x00'])

4m29.079375147s ago: executing program 9 (id=1957):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000)

4m26.403754657s ago: executing program 9 (id=1961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r1 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000180))
r2 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0x5, 0x5b, 0x5, 0x8}, 0x10)

4m22.640422402s ago: executing program 9 (id=1970):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
signalfd(r0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
timerfd_create(0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00')
prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x4fffff)

4m19.43992868s ago: executing program 9 (id=1972):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000)

4m3.945326179s ago: executing program 37 (id=1972):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000)

1m53.903004871s ago: executing program 0 (id=2325):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESOCT], 0xd)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
getrlimit(0x9, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1ff, @mcast2, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0xc693}, 0xffffffffffffffff, 0xa}}, 0x48)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r4, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r6 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x26020400)
sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff00003e0000001f0000000000000008001c00c9000000ed4121d9e5302944611ca41f28cb7aed6d1e728b90ba61f35424634b22cb075aa11462703430c64a20ffeea10ff706429fd6b9272f39f575926196adeb5ec875eb3bd65147a7d5a93ae70447947e83a9fc9dd10d40bf24120304de3fae46bbb2df5ac465c35d86c6883b17d34cc7cab3fcb87d8e0d209f87fbcfb17ffc93eb3162a822175e30a89c56d2c9699a9686cb7983fb47db360e59668ac25ef98132d1cc63546b1227f89b22792fb9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

1m52.183829799s ago: executing program 0 (id=2330):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
getpid()
umount2(&(0x7f0000000040)='.\x00', 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x800, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)

1m51.844181327s ago: executing program 0 (id=2332):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r1)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fdc82a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf7e4b9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ad4eebf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dd1c65f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40408c1}, 0x1)
ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000080)={0x2, 0x3ff, {0x52, 0x4, 0x9, {0xbf6, 0xb}, {0x200, 0x8}, @ramp={0x81, 0x5a7, {0x15, 0x7f, 0xd9d, 0x9}}}, {0x54, 0x3, 0x98e1, {0x3, 0x31}, {0x0, 0x1}, @period={0x5d, 0xffff, 0x9, 0x3, 0x2, {0xfffe, 0x0, 0x8, 0xffff}, 0x0, 0x0}}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbb81000000000000000000182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0202000100000000fc0100"/78], 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x29, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r6, 0xa0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x32344d59, 0x80000001}})
r7 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a"], 0x0, 0x28}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r7, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}}, 0x4084)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={0x0, 0x1c}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033", 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000000c0)={0x400, 0x3, 0xfffffff9})
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800)

1m51.144601126s ago: executing program 0 (id=2336):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

1m46.030020441s ago: executing program 0 (id=2345):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
mbind(&(0x7f000070c000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1fd, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x4)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'geneve0\x00', {0x2, 0x4e23, @rand_addr=0x64010100}})
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x1)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "250500", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x8}}}}}}, 0x0)
ppoll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)

1m44.783414731s ago: executing program 0 (id=2350):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
syz_open_dev$sndpcmc(0x0, 0x3, 0x50020)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1a00000000000000000000000400000000010000", @ANYRES32, @ANYBLOB='u=\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300000000000000000000000000a33f92d385dd6ce8d33356c6160e000000000000b711c0fc06068eab19a97a958dcc19854fad4030a8b34da8cf2f9917868a454f249ff41637170428a515b28dbd510700d8155cc60dfc7ffb617dce85d1a12f0b7e669ae749adf86a0e56b7cf3e4bbc059885e7596f1c0492e3dee96a5b9ee6e0fa87603f976db03e68d731"], 0x50)
listen(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x6c}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)

21.55920505s ago: executing program 5 (id=2516):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$sndpcmc(0x0, 0x0, 0x2800)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

19.91328079s ago: executing program 2 (id=2521):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
mbind(&(0x7f000070c000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1fd, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x4)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'geneve0\x00', {0x2, 0x4e23, @rand_addr=0x64010100}})
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "250500", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x8}}}}}}, 0x0)
ppoll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)

19.744850619s ago: executing program 5 (id=2522):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r1)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x1}, 0x4b)

18.119137046s ago: executing program 5 (id=2525):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0)
io_submit(r3, 0x1, &(0x7f0000001040)=[0x0])
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r5, &(0x7f0000000080)=""/42, 0x54)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000080)=0x7)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

17.67515646s ago: executing program 2 (id=2527):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x356, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, {0x10, 0x4}, {0xc0, 0xb, 0x40020000}, {0x0, 0x8}, {0x4, 0xb}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0xb, 0x400009, 0x3, 0x0, 0x3f, 0x1, 0x0, 0x7})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x80)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0)
syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

16.255613266s ago: executing program 5 (id=2530):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
preadv(r1, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/202, 0xca}, {&(0x7f00000024c0)=""/44, 0x2c}, {&(0x7f0000002500)=""/181, 0xb5}], 0x4, 0x200000, 0x10800009)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6}, 0x10)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r8, 0x3, 0x6, @random="afbebd4aea8d"}, 0x10)
write$binfmt_misc(r4, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f40)={'tunl0\x00', <r9=>0x0, 0x7, 0x8, 0x4, 0x8, {{0x25, 0x4, 0x3, 0x8, 0x94, 0x64, 0x0, 0xea, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0x96, [@private=0xa010102, @empty, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0x2, [{@local, 0xc}]}, @ssrr={0x89, 0x17, 0x40, [@remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2]}, @ssrr={0x89, 0x13, 0x45, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @local]}, @end, @lsrr={0x83, 0x17, 0x2f, [@dev={0xac, 0x14, 0x14, 0x25}, @local, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1b}]}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0x2, [{@remote, 0x6}]}, @timestamp={0x44, 0xc, 0xb6, 0x0, 0x5, [0x6, 0xfb03]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001040)={'batadv_slave_0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="d15dbc075f0f2aee162a4c39dc82c61f43c44184feb79932a1b638a4628f8ed2f9b3d50ee4154139bf283296cf9cc28f11278a199abc8507273981b471dafeb6646179f5be1034a070cb78baf6aa9c7b92ca92446e97d50591e2bea33c643020098762c83984cfc0e8b32e6613cb343b9115", 0x72}, {&(0x7f0000000300)="07272db4f70d01c676959a376a0260cfebc8a733733e96f76619aee7a14bd3fe17635ca1814d3b02fa8ab84efad3e5e687c2260c07af644d4cfa46815d49b564c862083097a99beb8fe3c37b5807a2b5b8024250e2f2eeff6f56d28f5990a5818d841e9837764fa548755bc720e963e13398c1100d2d9063396c44ab11f835b3dbd2aafbdedad095ad1cc23a90", 0x8d}, {&(0x7f00000003c0)="9d23bfc51bf01bd7eca40daf7281814f0311d03034ce7604d422159ebbe82348233286c988f7d3e4768cb305745e5ab7cab66e2b90950c6f46b3f3e901d448ae8ec6c3d99a8188bb54207dca6a593812ae606855f6272efe9e12d295254206dac795e870f936804de0cf1f702d3737bdce6e", 0x72}], 0x3, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff0}}], 0x18}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000500)="4037424d7e450932c4eea662fedfb6e5cefb45e0e46a48e9c842e33c2ab53032900e3713e28f36b8479a02b316c898e8a3bab65327e553c8a5ae18e3b7f1a6af1e33fe057525a5d6dae24be7d5d671050a21567acd44877e169b7ca2416e3353ac133d26c0371f6e73220700d671926c9f15bd7f9b611aee2d8594b857eac13e04dc5ed702ed36a258cccb4b59b550c002fb97bdf7dde56b9efa7ac9721731bea787615a558fecd59cdef38a89a7", 0xae}, {0x0}, {&(0x7f0000000680)="9d9ac8b71a9d7aedff0fb079b2a2b94de3927195fddb3f54be7b2e1fe6ec3acda68c6f927dc8cf3fcd116f6188c9315a5fb3c2a1740d3266efd16cbc649ed39b9d36bf586a2a45de69858d376d0fed038ee6cf4cd672430931b25c71cde63a6f583971e6633f534033bee4ddaaa6aff2cfb5b5f1bd8efc3080aed6283e64799ba2180e1b68086ab77ffb4ba51528a412b67142c8", 0x94}, {0x0}, {&(0x7f00000007c0)="fdc7e8880eaa45d707cd6d3dfe08f81c74a99ca0d101ed3d103e0e572f2b554801cd214726060c5815f441533325e61528fd5c97ee368b5725cf41fb3d28e626a5e6698a481e7bbe3102b41ac8be89fa8425dff0da060e044264de2cfe9cd109c8eb6c54fcc6b19782b14d9a16b9fbc16996c7a430abc67900f2858285fd8777565489e6", 0x84}, {&(0x7f0000000900)="ea8c8269442813bf0c378cec45727c491dec7d9931483eeb4591aeb43e2bebbe6adcaf61254bdef95b050cdb7529ddfd6f5388afad99d1d118b05f97aa7c83f6973d14b3a28fd666a8ef144845b5a2c55ba4b3f4993aca457f7546eff039f08f79285252b2d6c65e629d6353348a2fe424d697df3c1346759f1a3a7bb99f34cc9f922a92e6eb97cb54d6a95b1ee6d9e27c950bf6eea8a686f64659b1eb59ea3bbb96ac8b8ae0be64c52f292bba416aa5ecac27914403abeafede6ecd9e18005c79de49658e33fe4b148da439bfaea25bddd136ee0db37cdc3d6ef6f941cb448227d193b942ed5e2da5f48fc49290356b79a19d", 0xf3}], 0x6}}, {{&(0x7f0000000a80)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000ec0), 0x0, &(0x7f0000001080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x58}}], 0x3, 0x8000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="380000000e6f6619e48dad9effb7b189a2d15f90052c5f86f7601d0b9a43280800004c1026e5911899f71c26488fae27dbce8342eb0bc86ba391c350a179efd81f326fe8647e11180010630a26bada83f6d16faf967c6a556fce98ca1d4283f8", @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x2400408c)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 'macvtap0\x00'}}, 0x1e)
epoll_create1(0x0)

12.571787958s ago: executing program 4 (id=2533):
sched_setattr(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000022001f3d000000020000000000000000"], 0x14}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffdfff8, r0}, 0x38)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$inet(0xa, 0x801, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'ip_vti0\x00', {}, 0x840})
connect$inet6(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

12.303614306s ago: executing program 2 (id=2535):
syz_emit_vhci(0x0, 0xd)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1ff, @mcast2, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0xc693}, 0xffffffffffffffff, 0xa}}, 0x48)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0)
recvfrom$inet6(r4, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

11.482495456s ago: executing program 8 (id=2536):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)

10.395832374s ago: executing program 5 (id=2537):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x41, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x200c404b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
getpgid(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
pread64(r1, 0x0, 0x0, 0x66)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452d007400660000020190780a010101ac1414bb0b03907800090000465c003b00657b98402f0004e00000017f000001070b85010102072717ac1414bb00000000ac1e0101e0000002ffffffff0a0101000a010101ffffffff6401010194040100440c4880"], 0x0)
ftruncate(r5, 0x1000006)
fcntl$addseals(r5, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x1000000})
request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f00000000c0)='H\xe5+\xf0:a\xba\x1e8\xb0\xd1\xba/\xa9G9\x8f\xb9\xa1\\-\x00\xab+ \'\b\xbd\x85\x85\xbfE\r\x0e\xf5\xabI\x04\xa0\xd8,\x10m\xba\xa1\xf9\xcfG', 0xffffffffffffffff)

10.390012956s ago: executing program 8 (id=2539):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000180))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0xffffff2e}], 0x1}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x12a)
mkdirat(0xffffffffffffff9c, 0x0, 0x140)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
syz_usbip_server_init(0x1)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
creat(&(0x7f0000000240)='./file1\x00', 0x88)

8.257478251s ago: executing program 8 (id=2541):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0)
io_submit(r3, 0x1, &(0x7f0000001040)=[0x0])
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
getdents(r5, &(0x7f0000000080)=""/42, 0x54)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000080)=0x7)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0xc0c4)

7.964113314s ago: executing program 2 (id=2542):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r2, 0x8cee000)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000001c00)=ANY=[], 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xffe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r4, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)}, 0x8}], 0x1, 0x180, 0x0)

6.647032614s ago: executing program 8 (id=2544):
getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000600)={&(0x7f00000002c0)=[{0x2, 0x4010, 0x0, 0x0}], 0x1})

6.314140543s ago: executing program 4 (id=2545):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$sndpcmc(0x0, 0x0, 0x2800)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

6.312377771s ago: executing program 2 (id=2546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt(r0, 0x1, 0x3, &(0x7f0000000000)=""/20, &(0x7f0000000140)=0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x12, 0x82, 0xe0, 0x8, 0x2040, 0x9301, 0x30eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2d, 0x7, 0x30, 0x5, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0xae, 0x63, 0xb0, 0x8}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000400)={0x43, 0x2, 0x80, "0a564b68096302007f750080210000020013016dab00653a6f431e9f08ec00", 0x44495658})
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4)
ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000000180)={&(0x7f0000000100)='\x00', &(0x7f0000000140)='}\x00'})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68)
syz_open_procfs$pagemap(0x0, &(0x7f0000000600))
mprotect(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x1)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x9, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x20, 0x94, &(0x7f0000000000)=""/148}, &(0x7f00000000c0)="5b8e7ecf0140", 0x0, 0x0, 0x0, 0x0, 0x0})
socket$kcm(0x10, 0x3, 0x10)

5.259377442s ago: executing program 4 (id=2549):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0xf0a040c7e3f0623b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0xa0442, 0x10)
ppoll(&(0x7f0000000080)=[{r0, 0x1201}], 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r4 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}})
sendmmsg$alg(r3, 0x0, 0x0, 0x8040)
recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x10002)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x56, &(0x7f0000000980)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3, 0x14327ecb}]}}}}}}}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x40cc)

4.480756604s ago: executing program 6 (id=2550):
mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x5, 0x28011, 0xffffffffffffffff, 0x7dd56000)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.280615827s ago: executing program 2 (id=2551):
socket$kcm(0xa, 0x2, 0x0)
close(0x4)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x4008af24, &(0x7f0000002500))
mmap$IORING_OFF_SQ_RING(0x0, 0x40040, 0x3000007, 0x8010, r1, 0x0)
r2 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x521, 0x2000000, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0))
userfaultfd(0x800)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054)
read$nci(r3, 0x0, 0x24)
syz_usb_connect(0x6, 0x62, &(0x7f0000000140)=ANY=[], 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5db1ba0ea1f3114fd93245ffb4d3ccc8f2581eb4c6eb", @ANYRESDEC, @ANYRESHEX], 0x48}}, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f00000004c0)="0393cd", 0x3}], 0x1)

4.256651598s ago: executing program 8 (id=2552):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x356, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, {0x10, 0x4}, {0xc0, 0xb, 0x40020000}, {0x0, 0x8}, {0x4, 0xb}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0xb, 0x400009, 0x3, 0x0, 0x3f, 0x1, 0x0, 0x7})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x80)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0)
syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

4.019334202s ago: executing program 4 (id=2553):
syz_emit_vhci(0x0, 0xd)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1ff, @mcast2, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0xc693}, 0xffffffffffffffff, 0xa}}, 0x48)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0)
recvfrom$inet6(r4, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

3.931358565s ago: executing program 6 (id=2554):
ftruncate(0xffffffffffffffff, 0xffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004402, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r2, 0x0, 0xffffffdb)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
recvmsg$unix(r3, &(0x7f0000001c00)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001a80)=[{0x0}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/246, 0xf6}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/246, 0xf6}, {&(0x7f00000009c0)=""/192, 0xc0}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x8}, 0x40000000)
syz_emit_ethernet(0x36, 0x0, 0x0)

3.906654736s ago: executing program 5 (id=2555):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a4, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
gettid()
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000100)=[{0x807, 0x2801, 0x0, 0x0}], 0x1})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r2 = syz_open_dev$vbi(0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000280)=0x6, 0x4)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000002c0)={0x9, 0x3, 0x5, 0x5, 0x11, 0x3, 0x7})
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, 0x0, 0x20000001)
recvmsg$kcm(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102)

3.608000422s ago: executing program 6 (id=2556):
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$chown(0x4, r0, 0xee01, 0x0)
keyctl$setperm(0x5, r0, 0x172831)
keyctl$describe(0x6, r0, 0x0, 0x0)
keyctl$search(0xa, r0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$FIOCLEX(r1, 0x5451)
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000300)="791b", 0x2, r6)
r7 = add_key$keyring(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x2}, 0x0, 0x0, r6)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x4, @none, 0x80, 0x2}, 0xe)
keyctl$KEYCTL_MOVE(0x1e, r6, r6, r7, 0x0)

1.779558982s ago: executing program 6 (id=2557):
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x118, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}]}, 0x118}, 0x1, 0x0, 0x0, 0x64000}, 0x4040)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getpriority(0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)=[{&(0x7f0000003240)=ANY=[], 0x404}, {&(0x7f00000010c0)={0x118, 0x31, 0x10, 0x70bd27, 0x25dfdbfe, "", [@typed={0x5, 0x43, 0x0, 0x0, @str='\x00'}, @nested={0x35, 0x4b, 0x0, 0x1, [@generic="6ce9a3840df453ee6371cb83a66f93d1a27c764c6c29222f8444530b3b1e4294d983f5a2a814549a2c8a6f222f01d11d2b"]}, @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @u32=0x8}]}, @nested={0x8, 0x75, 0x0, 0x1, [@generic, @nested={0x4, 0x144}]}, @typed={0x11, 0x37, 0x0, 0x0, @str='/dev/urandom\x00'}, @nested={0x3f, 0x80, 0x0, 0x1, [@generic="49022c4b5cd85b3a47b21488589dacc7574c1a060d3d1b2c56e307e033c8b2d4946c0c751a795dae9929de6e8e417f7a3aaac65cb29cc4bcd69d87"]}, @generic="134ca5a96c85261c97cf8928b12a6537bc46e8454dde951dcbb39cf0127c3980221aadbfd6b45e7f152b5801568dd99ebfefd12686476a26394248b30ff4110dee5bae19891034380985f8b90cd018d573d14749c1a66c7626f942d5d2ea75"]}, 0x118}, {0x0}, {&(0x7f0000003240)={0x1338, 0x39, 0x0, 0x70bd28, 0x25dfdbfe, "", [@typed={0xe2, 0xbb, 0x0, 0x0, @binary="29b10366aabf6eb576cb6c12b15e182c726ad9d7e5daebf14eac869b7097169d4c24b77b1c51aab44054ef50f63de6f0998f4529a5ec8a4829e2042c3f71c0c1396c21576e7558c10492502814b506ec62d4d400caf02c29a4e60e446de7d8d8839f3bef4e8499f4e364ac5ca42f7771d8c34bb660de6668928178d57843a07e3a1663eb2bb66ce9128c8f278bdd096a77c14809c0d96f052fe6b9ee8e8fbe17c053b89996de5a61d893b6e1dae55fa8b0e7fe0be41ee61b15b3d83705845f0a85b4bfc6af26f6bfac655fd6e6329659edcd828576dd6ac846a7961b7212"}, @nested={0x103, 0x6f, 0x0, 0x1, [@generic="dc1bcd4aad110c49a7dde4fa8566a6d0978db68ba44e3ed673047abc77e14f506b10a7", @nested={0xda, 0x102, 0x0, 0x1, [@generic="498b1404103ce26086a225b63d1065b3a35827c803a8fcd51cfcaf102f4d9bf8281191de91325842969b507560a3a92d8146de4a0f8c10f01c5fbb6b2b2d9067dfcaa35726141a86b2875e6a", @typed={0x8, 0xfa, 0x0, 0x0, @fd}, @generic="b1b58bbd256232fca30c1a44f8d2bf118bfd11dc1256e6f950dccdf915f22634b8a235bd924139a7593b0b716108710bd48b4a4746b83a", @generic="929b41bf4dc80a319c32854bec876cd2d5993c5d5eaa31ef400a71d25ba85e9d77719a4fb9d46f3da3d64d198b6baf6eb15da599080a8e9c7a92e51ffca055", @typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0x4, 0xdf}]}, @generic]}, @generic="ec6024954b2e511af35710bd3940ac00f97f9622515653cc1db03b1b20402a868a5fa1f171833dcf6819d909aa333380a7f4033cbef3d18174397005042313679e1529b67b882227d0c4a3df9750a4db7fc9e9160f4897dcaa65e757fc61b015a2e30c5a0aa157a36807472425e343ffe23fc5cddc45eccf45e55cd3aab58bb2edd50dce94ae2d1eac90033e748433461d69e7f57d21a154c423c2e015ecff3de5907e18b6a72a66936f8f0843963e722e6d", @generic="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", @typed={0xc, 0xec, 0x0, 0x0, @u64=0x80}, @nested={0xb0, 0x102, 0x0, 0x1, [@nested={0x4, 0x84}, @generic="eb24357ef15c9dc69e64c72f4fb4dc6a5df06fb16e2fd60cd65400fe2522191acccb6fe635749d4a7eaa5af794ce81cf9e93b478a089024647c639e8f9889354828f36b081badc0554a531c8aa43f9833ed15406522bebd481c539d2c96868c277a238c635614440fcfc60d020fe0f38554935848c0db7e78c7b96c66233f820d79648f4", @typed={0x8, 0x8f, 0x0, 0x0, @pid}, @nested={0x4, 0x34}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x40}]}, @nested={0x10, 0x3d, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0x4, 0xf4}, @typed={0x4, 0xc1}]}]}, 0x1338}, {&(0x7f0000002840)={0x28, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x18, 0x2b, 0x0, 0x1, [@typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@private1}]}]}, 0x28}, {&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x110}, {&(0x7f0000002ac0)={0x140, 0x1d, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x15, 0xaf, 0x0, 0x1, [@typed={0x4, 0x77}, @nested={0x4, 0xeb}, @generic, @generic="4d0741a1df181bb60f"]}, @nested={0x4, 0xec}, @nested={0x114, 0x128, 0x0, 0x1, [@generic="b7fb0555c475ad685332af0145e93929e165c82fe9d3772007e4d9f0095e4eed8487da6f464ef0da9f8703e4c7d6e0faaa8f5cab6bdf0b847be56bee4fd666512dc508827b5a137b260c9b2837d871a55e91f5d17b6195c3b1dfd63c21dd96d8014e36f83100820fd09c2561f3c959f2fcaaec7918", @generic="dabbd9ed6cf1f1cfa55d2bb46e3d3f478fbd38970bfc9b4a6ed70fa1dc848aeed45140b06555f27538f5b3e72294ef402807c09479fb6936b4c0c1107fd30db1a93f4c10957eed6e209ec1ceec2afc511c649c302a26806cd59a47022a938f0d5c580fc0720faaf2f94f50a7adbcca24e2d1539a91c27ad025b503054384b9", @nested={0x4, 0x148}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8c}]}]}, 0x140}, {&(0x7f0000002880)=ANY=[], 0x150}, {&(0x7f0000003000)=ANY=[@ANYBLOB="cc0000003600000227bd7000fbdbdf2563f0372f865e46131678ef81bd2e2a1e1e4e5c580f71393f02907dcb97c7296b2b5a260430aee19d6527341faf9cd43afbe3cd337d7c8a52a85845972010795f71f5898dbbc9cfbc2a1727011dd2df533ff22a723fcc4ddfd97ee4c2e3ec4248f61a85b1bef7abfb9c27e67acca578436656a70d5602c0c144be3de7dd69061e596d32d1a57481c456eda2253de3d9cae74012f716704ec5bbd1e03a7b51aa66ff3b672c712816f5f01b00"/203], 0xcc}], 0x9, &(0x7f0000005380)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r2]}}], 0xb0, 0xc000}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r6})
sendto$inet6(r7, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"})
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x4c)

1.688965195s ago: executing program 4 (id=2558):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4040814)

1.197976117s ago: executing program 8 (id=2559):
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r0 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r0})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8)

1.07549717s ago: executing program 4 (id=2560):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}], 0x2, 0x40000002, 0x0)

972.011874ms ago: executing program 6 (id=2561):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
open_tree(0xffffffffffffffff, 0x0, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

0s ago: executing program 6 (id=2562):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0)

kernel console output (not intermixed with test programs):

to clone upperpath
[  733.880663][   T14] bridge_slave_1: left allmulticast mode
[  733.907783][   T14] bridge_slave_1: left promiscuous mode
[  733.925273][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.965867][   T14] bridge_slave_0: left allmulticast mode
[  733.988031][   T14] bridge_slave_0: left promiscuous mode
[  734.010228][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.834721][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  734.868713][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  734.891021][   T14] bond0 (unregistering): Released all slaves
[  734.916421][T11221] syzkaller0: entered promiscuous mode
[  734.922133][T11221] syzkaller0: entered allmulticast mode
[  735.039832][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15
[  735.236084][T10773] veth0_macvtap: entered promiscuous mode
[  735.327676][T10773] veth1_macvtap: entered promiscuous mode
[  735.575875][   T14] hsr_slave_0: left promiscuous mode
[  735.608376][   T14] hsr_slave_1: left promiscuous mode
[  735.619161][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  735.643220][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  735.665148][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  735.677999][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  735.886893][ T5627] Bluetooth: hci5: command tx timeout
[  736.054213][T11255] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1448'.
[  736.775645][T11259] fuse: Unknown parameter 'group_+d'
[  736.805903][   T14] veth1_macvtap: left promiscuous mode
[  736.814175][   T14] veth0_macvtap: left promiscuous mode
[  736.828183][   T14] veth1_vlan: left promiscuous mode
[  736.837646][   T14] veth0_vlan: left promiscuous mode
[  738.041719][T11268] overlayfs: failed to clone upperpath
[  738.197025][T11275] netlink: 'syz.5.1454': attribute type 4 has an invalid length.
[  742.396159][   T14] team0 (unregistering): Port device team_slave_1 removed
[  742.413918][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'.
[  742.423218][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'.
[  742.434724][   T14] team0 (unregistering): Port device team_slave_0 removed
[  742.556568][ T5627] Bluetooth: hci2: Unable to find connection for big 0x00
[  742.658419][T10773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  742.694900][T10773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  742.804024][ T1109] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  742.851603][   T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.038660][T11300] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1464'.
[  743.934451][   T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.947601][   T48] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  745.921594][T11143] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.940805][T11143] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.953530][T11143] bridge_slave_0: entered allmulticast mode
[  746.122188][T11143] bridge_slave_0: entered promiscuous mode
[  746.592955][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  746.612814][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  746.673369][T11143] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.816454][T11143] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.932727][T11143] bridge_slave_1: entered allmulticast mode
[  746.979405][T11143] bridge_slave_1: entered promiscuous mode
[  747.491287][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1470'.
[  748.531572][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  748.562729][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  749.894431][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.906842][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.924835][T11358] netlink: 'syz.0.1475': attribute type 4 has an invalid length.
[  752.103430][T11143] team0: Port device team_slave_0 added
[  752.162215][T11143] team0: Port device team_slave_1 added
[  752.203194][T11367] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.1477'.
[  752.396906][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  752.435716][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.517551][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  752.594812][ T9529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  752.595030][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  752.616588][ T9529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  752.626558][ T9529] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  752.640644][ T9529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  752.652278][ T9529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  752.706120][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  752.771975][ T9529] Bluetooth: hci0: Unable to find connection for big 0x00
[  752.838841][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  752.895154][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16
[  753.302557][T11143] hsr_slave_0: entered promiscuous mode
[  753.326320][T11143] hsr_slave_1: entered promiscuous mode
[  753.348117][T11143] debugfs: 'hsr0' already exists in 'hsr'
[  753.368590][T11143] Cannot create hsr debugfs directory
[  753.617772][T11387] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1479'.
[  754.545112][   T14] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.751109][ T9529] Bluetooth: hci3: command tx timeout
[  754.885231][   T14] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.271732][T11403] 9pnet_fd: Insufficient options for proto=fd
[  755.658348][   T14] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.828486][ T9529] Bluetooth: hci3: command tx timeout
[  758.804745][   T14] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.951009][ T9529] Bluetooth: hci3: command tx timeout
[  759.271358][T11429] overlayfs: failed to clone upperpath
[  760.980405][ T9529] Bluetooth: hci3: command tx timeout
[  761.076135][T11448] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  761.468512][   T14] bridge_slave_1: left allmulticast mode
[  761.475392][   T14] bridge_slave_1: left promiscuous mode
[  761.483270][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.498197][   T14] bridge_slave_0: left allmulticast mode
[  761.518831][   T14] bridge_slave_0: left promiscuous mode
[  761.527573][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.555636][T11456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  761.716435][T11458] fuse: Unknown parameter '00000000000000000000003'
[  763.783053][   T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  765.203799][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  765.239593][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  765.272008][   T14] bond0 (unregistering): Released all slaves
[  765.548679][T11483] netlink: 'syz.5.1489': attribute type 4 has an invalid length.
[  765.686147][T11143] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  765.758098][T11143] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  766.446881][T11143] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  766.524152][T11143] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  766.551261][T11483] syzkaller1: entered promiscuous mode
[  766.560814][T11483] syzkaller1: entered allmulticast mode
[  766.718192][T11507] overlayfs: failed to clone upperpath
[  766.877174][T11143] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  766.927896][T11143] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  766.976119][T11143] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  767.027056][T11143] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  767.182492][T11371] bridge0: port 1(bridge_slave_0) entered blocking state
[  767.220446][T11371] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.258594][T11371] bridge_slave_0: entered allmulticast mode
[  767.297628][T11371] bridge_slave_0: entered promiscuous mode
[  767.858918][T11371] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.902434][T11371] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.931008][T11371] bridge_slave_1: entered allmulticast mode
[  768.351688][T11371] bridge_slave_1: entered promiscuous mode
[  768.427213][   T14] hsr_slave_0: left promiscuous mode
[  768.461794][   T14] hsr_slave_1: left promiscuous mode
[  768.482754][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  768.510002][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  768.547848][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  768.574243][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  768.683999][   T14] veth1_macvtap: left promiscuous mode
[  768.705776][   T14] veth0_macvtap: left promiscuous mode
[  768.727530][   T14] veth1_vlan: left promiscuous mode
[  768.762332][   T14] veth0_vlan: left promiscuous mode
[  769.041058][ T5903] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  769.213395][ T5903] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  769.230550][ T5903] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  769.250917][ T5903] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  769.263887][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.347040][T11547] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  769.407765][ T5903] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  769.860238][   T14] team0 (unregistering): Port device team_slave_1 removed
[  769.899133][   T14] team0 (unregistering): Port device team_slave_0 removed
[  770.034511][T10223] usb 8-1: USB disconnect, device number 8
[  770.478125][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18
[  770.533247][T11371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  770.603051][T11371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  770.865587][T11371] team0: Port device team_slave_0 added
[  770.921512][T11371] team0: Port device team_slave_1 added
[  771.226995][T11371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  771.265369][T11371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  771.357053][T11569] netlink: 'syz.5.1521': attribute type 4 has an invalid length.
[  771.371908][T11371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  771.427438][T11371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  771.460670][T11371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  771.565045][T11371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  773.123923][T11371] hsr_slave_0: entered promiscuous mode
[  773.139862][T11371] hsr_slave_1: entered promiscuous mode
[  773.147011][T11371] debugfs: 'hsr0' already exists in 'hsr'
[  773.166464][T11371] Cannot create hsr debugfs directory
[  774.947679][ T9529] Bluetooth: hci2: Unable to find connection for big 0x00
[  775.146738][T11143] 8021q: adding VLAN 0 to HW filter on device bond0
[  775.457728][T11143] 8021q: adding VLAN 0 to HW filter on device team0
[  775.555610][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.562828][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.672469][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.679685][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  777.157050][T11636] netlink: 1335 bytes leftover after parsing attributes in process `syz.5.1537'.
[  777.489497][T11646] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  777.545283][T11646] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  777.597297][T11646] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  777.826728][T11646] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  777.881000][T11371] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  778.348219][T11371] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  778.365351][T11371] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  778.538266][T11371] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  778.607412][T11371] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  778.742075][T11371] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  778.813223][T11371] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  778.847437][T11371] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  778.915144][T11659] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1541'.
[  779.205617][   T14] smbdirect: ib_dev[syz2] removed
[  779.624634][T11371] 8021q: adding VLAN 0 to HW filter on device bond0
[  779.771408][T11371] 8021q: adding VLAN 0 to HW filter on device team0
[  780.811829][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.819025][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  780.896175][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  780.903396][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  782.316822][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  782.553553][T11704] 9pnet_fd: Insufficient options for proto=fd
[  784.530040][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1553'.
[  785.515372][T11143] veth0_vlan: entered promiscuous mode
[  785.605703][T11143] veth1_vlan: entered promiscuous mode
[  785.807661][T11143] veth0_macvtap: entered promiscuous mode
[  785.884753][T11143] veth1_macvtap: entered promiscuous mode
[  785.923199][T11758] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1560'.
[  786.048166][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  786.125563][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  786.186919][T11371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  786.241704][ T1166] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  786.268917][ T1166] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  786.364406][ T1166] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  786.434009][ T1166] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  787.737354][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  787.750118][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  787.763289][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  787.780101][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  787.792858][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  788.490044][T11371] veth0_vlan: entered promiscuous mode
[  788.501390][T11794] Bluetooth: MGMT ver 1.23
[  788.589611][T11371] veth1_vlan: entered promiscuous mode
[  788.834858][T11371] veth0_macvtap: entered promiscuous mode
[  788.889998][T11371] veth1_macvtap: entered promiscuous mode
[  789.165603][T11371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  789.568785][T11371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  789.991118][ T5627] Bluetooth: hci1: command tx timeout
[  790.173266][ T1095] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  790.239654][ T1095] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  790.324131][ T1095] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  790.383341][ T1095] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  790.449410][T11810] 9pnet_fd: Insufficient options for proto=fd
[  792.100422][ T5627] Bluetooth: hci1: command tx timeout
[  792.434673][ T6287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.464568][ T6287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.474770][T11833] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1572'.
[  792.803442][ T1095] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.508405][ T1095] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.642562][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.684030][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.865391][T11846] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1576'.
[  793.888051][ T1095] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.965775][T11851] syzkaller0: entered promiscuous mode
[  793.984322][T11851] syzkaller0: entered allmulticast mode
[  794.190027][ T1095] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.203534][ T5627] Bluetooth: hci1: command tx timeout
[  794.340246][T11859] fuse: Unknown parameter '00000000000000000000003'
[  795.559292][   T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  795.874530][T11874] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1582'.
[  796.220531][ T1095] bridge_slave_1: left allmulticast mode
[  796.251091][ T1095] bridge_slave_1: left promiscuous mode
[  796.260777][ T5627] Bluetooth: hci1: command tx timeout
[  796.279755][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.775426][ T1095] bridge_slave_0: left allmulticast mode
[  796.783752][ T1095] bridge_slave_0: left promiscuous mode
[  796.839464][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.047008][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  800.068205][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  800.967777][ T1095] bond0 (unregistering): Released all slaves
[  801.222783][T11916] overlayfs: failed to clone upperpath
[  802.606142][T11924] overlayfs: failed to clone upperpath
[  802.665786][ T1095] hsr_slave_0: left promiscuous mode
[  802.778337][ T1095] hsr_slave_1: left promiscuous mode
[  802.827533][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  802.860831][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0
[  802.913438][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  802.956746][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1
[  803.293754][ T1095] veth1_macvtap: left promiscuous mode
[  803.293963][ T1095] veth0_macvtap: left promiscuous mode
[  803.294290][ T1095] veth1_vlan: left promiscuous mode
[  803.294656][ T1095] veth0_vlan: left promiscuous mode
[  803.324286][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1596'.
[  807.582240][ T1095] team0 (unregistering): Port device team_slave_1 removed
[  807.775382][ T1095] team0 (unregistering): Port device team_slave_0 removed
[  808.022890][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  808.029745][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  808.314750][T11960] 9pnet_fd: Insufficient options for proto=fd
[  808.482175][T11966] netlink: 'syz.0.1598': attribute type 4 has an invalid length.
[  808.635423][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17
[  808.851527][T11782] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.889544][T11782] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.938712][T11782] bridge_slave_0: entered allmulticast mode
[  808.994145][T11782] bridge_slave_0: entered promiscuous mode
[  809.541686][T11782] bridge0: port 2(bridge_slave_1) entered blocking state
[  809.614735][T11782] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.623796][T11782] bridge_slave_1: entered allmulticast mode
[  809.681344][T11782] bridge_slave_1: entered promiscuous mode
[  809.948797][T11782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  810.060216][T11782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  810.403809][T11782] team0: Port device team_slave_0 added
[  810.488241][T11782] team0: Port device team_slave_1 added
[  810.757598][T11782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  810.771505][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  810.848691][T11782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  810.931008][T11782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  810.965214][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  811.065845][T11782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  811.440038][T11782] hsr_slave_0: entered promiscuous mode
[  811.447047][T11782] hsr_slave_1: entered promiscuous mode
[  811.454750][T11782] debugfs: 'hsr0' already exists in 'hsr'
[  811.461544][T11782] Cannot create hsr debugfs directory
[  812.102654][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1615'.
[  816.034472][T12043] netlink: 'syz.7.1623': attribute type 4 has an invalid length.
[  816.261907][T12043] syzkaller1: entered promiscuous mode
[  816.590698][T12043] syzkaller1: entered allmulticast mode
[  817.715033][T11782] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  818.048474][T11782] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  818.070637][T11782] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  818.119671][T11782] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  818.334360][T11782] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  818.401126][T11782] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  818.450349][T12061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1626'.
[  818.463699][T11782] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  818.499653][T11782] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  819.336600][T12082] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1628'.
[  820.457085][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1627'.
[  821.704473][T11782] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.811868][T11782] 8021q: adding VLAN 0 to HW filter on device team0
[  821.956487][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.963770][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  822.027521][T12098] netlink: 'syz.6.1636': attribute type 4 has an invalid length.
[  822.043217][T10584] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.050518][T10584] bridge0: port 2(bridge_slave_1) entered forwarding state
[  823.650424][ T1235] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  823.843882][ T1235] usb 8-1: Using ep0 maxpacket: 8
[  823.878551][ T1235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  823.925068][ T1235] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  823.989901][ T1235] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  824.219593][ T1235] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173
[  824.230604][T12127] fuse: Unknown parameter 'fd00000000000000000000003'
[  824.251728][ T1235] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  824.299754][ T1235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.339143][ T1235] usb 8-1: config 0 descriptor??
[  824.366090][T12102] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  827.484352][ T5627] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  828.035594][  T802] usb 8-1: USB disconnect, device number 9
[  828.536459][T12161] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.1648'.
[  828.655337][ T6106] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  829.976359][T12179] overlayfs: failed to clone upperpath
[  830.177302][T11782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  830.221398][T12183] netlink: 'syz.7.1653': attribute type 4 has an invalid length.
[  830.272941][T12185] fuse: fd is not a fuse device
[  830.335233][T12183] syzkaller1: entered promiscuous mode
[  830.360768][T12183] syzkaller1: entered allmulticast mode
[  831.307116][T12200] netlink: 1335 bytes leftover after parsing attributes in process `syz.7.1656'.
[  833.394836][T11782] veth0_vlan: entered promiscuous mode
[  833.456855][T11782] veth1_vlan: entered promiscuous mode
[  833.799363][T12232] tc_dump_action: action bad kind
[  833.914478][T11782] veth0_macvtap: entered promiscuous mode
[  833.975040][T11782] veth1_macvtap: entered promiscuous mode
[  834.138936][T11782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  834.215269][T11782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  834.395705][ T1095] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  834.534680][ T1095] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  834.600703][ T1109] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  834.678390][ T1109] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  834.752095][T12244] netlink: 'syz.0.1667': attribute type 4 has an invalid length.
[  835.218586][ T6106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.303608][ T6106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  835.477664][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.490775][T12253] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.1669'.
[  835.554010][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.430788][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1670'.
[  836.451878][T12262] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1671'.
[  836.788983][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1312'.
[  836.973485][T12266] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1673'.
[  837.389064][T12265] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1312'.
[  837.994714][T12283] hsr0: entered promiscuous mode
[  839.219724][T12295] overlayfs: failed to clone upperpath
[  839.303315][T12276] hsr0: left promiscuous mode
[  841.193286][T12308] netlink: 'syz.5.1684': attribute type 4 has an invalid length.
[  841.224478][T12308] netlink: 'syz.5.1684': attribute type 10 has an invalid length.
[  841.300966][T12308] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1684'.
[  841.398090][T12308] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  841.918455][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1689'.
[  842.272801][T12320] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.1686'.
[  842.651317][T12319] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1689'.
[  843.678653][T12333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1692'.
[  845.469661][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1696'.
[  847.031874][T12368] netlink: 1319 bytes leftover after parsing attributes in process `syz.9.1701'.
[  848.718889][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1706'.
[  849.267374][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1707'.
[  849.424914][T12392] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1708'.
[  851.340616][T12422] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1715'.
[  851.343890][T12399] binder: 12393:12399 ioctl c0306201 0 returned -14
[  851.965406][T12428] fuse: fd is not a fuse device
[  852.480868][ T5903] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  852.977743][ T5903] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  853.065926][ T5903] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  853.082169][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.223470][T12451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1723'.
[  853.244928][ T5903] usb 6-1: Product: syz
[  853.277328][ T5903] usb 6-1: Manufacturer: syz
[  853.298937][ T5903] usb 6-1: SerialNumber: syz
[  853.428072][ T5903] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  853.948398][ T5903] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  854.051759][ T5903] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  854.077627][ T5903] usb 6-1: media controller created
[  854.115412][T12457] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1725'.
[  854.201322][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  855.242049][T12468] vlan0: entered promiscuous mode
[  855.452749][ T5903] usb 6-1: USB disconnect, device number 19
[  856.957057][T12486] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1731'.
[  857.680803][T12488] overlayfs: failed to clone upperpath
[  859.172905][T12504] fuse: fd is not a fuse device
[  860.070605][ T9314] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  860.776639][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1739'.
[  860.842066][T12521] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.1741'.
[  863.130865][T12528] netlink: 1331 bytes leftover after parsing attributes in process `syz.6.1743'.
[  864.525155][T12557] netlink: 'syz.6.1751': attribute type 4 has an invalid length.
[  864.896422][ T5903] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  865.163184][ T5903] usb 10-1: Using ep0 maxpacket: 32
[  865.174874][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  865.190489][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  865.213811][ T5903] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  865.259266][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.453554][ T5903] usb 10-1: config 0 descriptor??
[  866.290269][ T5903] ft260 0003:0403:6030.0002: unknown main item tag 0x0
[  866.700363][ T5903] ft260 0003:0403:6030.0002: unknown main item tag 0x0
[  866.722991][T12577] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.1755'.
[  866.838667][ T5903] ft260 0003:0403:6030.0002: chip code: 0000 0000
[  866.994892][ T5903] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0
[  867.198526][ T5903] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup
[  867.529370][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'.
[  867.627045][T12555] ft260 0003:0403:6030.0002: ft260_i2c_read: failed with -38
[  868.321597][ T5903] usb 10-1: reset high-speed USB device number 2 using dummy_hcd
[  869.260324][T12607] netlink: 1335 bytes leftover after parsing attributes in process `syz.7.1765'.
[  869.575664][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  869.582895][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  869.938192][T12614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1767'.
[  870.004012][  T802] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  870.217899][T12618] netlink: 1319 bytes leftover after parsing attributes in process `syz.9.1769'.
[  870.551698][  T802] usb 6-1: Using ep0 maxpacket: 16
[  870.585564][  T802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  870.620558][  T802] usb 6-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  870.712078][  T802] usb 6-1: config 0 interface 0 has no altsetting 0
[  870.735794][  T802] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  870.782038][  T802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.783662][T12624] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.1770'.
[  870.861930][  T802] usb 6-1: config 0 descriptor??
[  870.941966][ T1235] usb 10-1: USB disconnect, device number 2
[  872.321050][T12635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  872.330139][T12635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  872.853953][ T5626] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  873.080542][ T5626] usb 9-1: Using ep0 maxpacket: 8
[  874.131645][ T5626] usb 9-1: config index 0 descriptor too short (expected 74, got 45)
[  874.157417][ T5626] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  874.270506][  T802] usbhid 6-1:0.0: can't add hid device: -71
[  874.278898][  T802] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  874.294588][  T802] usb 6-1: USB disconnect, device number 20
[  874.366218][ T5626] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  874.416700][ T5626] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  874.469201][ T5626] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  874.543350][ T5626] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  874.612003][ T5626] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  874.678862][ T5626] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.960923][ T5626] usb 9-1: GET_CAPABILITIES returned 0
[  874.988541][ T5626] usbtmc 9-1:16.0: can't read capabilities
[  875.576816][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1777'.
[  875.719048][ T5626] usb 9-1: USB disconnect, device number 2
[  875.757642][T12666] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1785'.
[  875.987192][T12678] fuse: fd is not a fuse device
[  876.384637][T12685] netlink: 'syz.7.1789': attribute type 4 has an invalid length.
[  877.303286][ T5627] Bluetooth: hci2: Unable to find connection for big 0x00
[  877.346444][T12685] syzkaller1: entered promiscuous mode
[  877.382485][T12685] syzkaller1: entered allmulticast mode
[  878.156107][T12706] vlan0: entered promiscuous mode
[  878.620658][ T5626] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  879.180836][T12721] overlayfs: failed to clone upperpath
[  879.234680][ T5626] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  879.255734][ T5626] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  879.265815][ T5626] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.295374][ T5626] usb 8-1: Product: syz
[  879.421267][ T5626] usb 8-1: Manufacturer: syz
[  879.427771][ T5626] usb 8-1: SerialNumber: syz
[  879.474135][ T5626] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  879.725204][T12727] vlan0: entered promiscuous mode
[  879.777649][T12727] team0: Port device vlan0 added
[  880.228519][T12728] netlink: 'syz.9.1801': attribute type 4 has an invalid length.
[  880.328775][T12728] syzkaller1: entered promiscuous mode
[  880.356381][T12728] syzkaller1: entered allmulticast mode
[  880.432954][ T5626] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  880.476800][ T5626] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  880.507178][ T5626] usb 8-1: media controller created
[  880.606634][ T5626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  880.636209][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1802'.
[  883.059372][ T5626] usb 8-1: USB disconnect, device number 10
[  883.260183][T12756] trusted_key: encrypted_key: insufficient parameters specified
[  885.168468][T12776] netlink: 'syz.6.1819': attribute type 4 has an invalid length.
[  885.580609][T12776] netlink: 'syz.6.1819': attribute type 10 has an invalid length.
[  885.637357][T12776] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1819'.
[  885.718085][T12777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1816'.
[  886.909541][T12776] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  887.030440][ T1664] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  887.212341][T12798] syzkaller1: entered promiscuous mode
[  887.249256][ T1664] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  887.266969][T12798] syzkaller1: entered allmulticast mode
[  887.288526][ T1664] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  887.312277][ T1664] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.325857][ T1664] usb 8-1: Product: syz
[  887.333605][ T1664] usb 8-1: Manufacturer: syz
[  887.361483][T12797] team0: Port device vlan0 added
[  887.378590][ T1664] usb 8-1: SerialNumber: syz
[  887.490609][ T1664] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  888.512346][T12801] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1824'.
[  888.697696][ T1664] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  888.785719][ T1664] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  888.836061][ T1664] usb 8-1: media controller created
[  888.984315][ T1664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  890.427129][T12830] hsr0: entered promiscuous mode
[  890.648858][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1836'.
[  890.688845][T12829] hsr0: left promiscuous mode
[  890.948223][ T1664] usb 8-1: USB disconnect, device number 11
[  892.312093][T12849] 9pnet_fd: Insufficient options for proto=fd
[  893.046486][ T9314] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  893.139357][T12865] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.1846'.
[  893.267993][ T1166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  893.929464][T12876] trusted_key: encrypted_key: insufficient parameters specified
[  896.001889][T12857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  897.725816][T12909] hsr0: entered promiscuous mode
[  898.258432][T12906] hsr0: left promiscuous mode
[  899.812334][T11766] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  899.980417][T11766] usb 6-1: Using ep0 maxpacket: 32
[  900.003000][T11766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  900.255330][T11766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  900.312876][T11766] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  900.338462][T11766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.372444][T11766] usb 6-1: config 0 descriptor??
[  900.644482][T12939] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  900.870525][T12939] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  901.253894][T12944] 9pnet_fd: Insufficient options for proto=fd
[  901.318134][T12939] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  901.332617][T11766] ft260 0003:0403:6030.0003: unknown main item tag 0x0
[  901.343423][T11766] ft260 0003:0403:6030.0003: unknown main item tag 0x0
[  901.481527][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1868'.
[  902.471024][ T9529] Bluetooth: hci3: command 0x0406 tx timeout
[  902.507576][T11766] ft260 0003:0403:6030.0003: chip code: 0000 0000
[  902.528960][T12939] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  902.840596][T11766] ft260 0003:0403:6030.0003: failed to retrieve system status
[  902.858373][T11766] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71
[  902.911486][T11766] usb 6-1: USB disconnect, device number 21
[  903.126343][   T61] smbdirect: ib_dev[syz2] removed
[  903.770450][ T5763] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  903.960931][ T5763] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  904.001292][ T5763] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  904.049434][ T5763] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.106902][ T5763] usb 10-1: Product: syz
[  904.135853][ T5763] usb 10-1: Manufacturer: syz
[  904.161118][ T5763] usb 10-1: SerialNumber: syz
[  904.216725][ T5763] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  905.132642][ T5763] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  905.154359][ T5763] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  905.169714][ T5763] usb 10-1: media controller created
[  905.191675][T12978] tmpfs: Unknown parameter './bus'
[  905.552946][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  908.066054][ T5763] usb 10-1: USB disconnect, device number 3
[  908.827213][T13005] hsr0: entered promiscuous mode
[  909.722686][T13002] hsr0: left promiscuous mode
[  909.745587][T13012] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.1888'.
[  912.510481][ T5627] Bluetooth: hci1: command 0x0406 tx timeout
[  915.582159][T13025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1893'.
[  915.653986][T13033] syzkaller1: entered promiscuous mode
[  915.667765][T13033] syzkaller1: entered allmulticast mode
[  916.460600][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  916.482528][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  916.491832][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  916.520736][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  916.528514][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  917.740618][ T1235] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  918.371603][ T1235] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  918.413770][ T1235] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  918.434985][ T1235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.453957][ T1235] usb 6-1: Product: syz
[  918.463447][ T1235] usb 6-1: Manufacturer: syz
[  918.476748][ T1235] usb 6-1: SerialNumber: syz
[  918.505160][ T1235] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  918.580500][ T9529] Bluetooth: hci5: command tx timeout
[  918.660114][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1907'.
[  918.952863][ T1235] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  919.017258][ T1235] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  919.050551][ T1235] usb 6-1: media controller created
[  919.135031][ T1235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  920.527739][T11766] usb 6-1: USB disconnect, device number 22
[  920.661964][ T9529] Bluetooth: hci5: command tx timeout
[  921.932527][ T1119] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.741193][ T9529] Bluetooth: hci5: command tx timeout
[  923.221127][ T1119] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.593320][ T1119] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.848023][ T9529] Bluetooth: hci5: command tx timeout
[  925.578166][ T1119] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.039462][ T6106] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  927.074545][T13157] fuse: fd is not a fuse device
[  928.696614][T13174] 9pnet_fd: Insufficient options for proto=fd
[  930.273865][T13041] bridge0: port 1(bridge_slave_0) entered blocking state
[  930.354367][T13041] bridge0: port 1(bridge_slave_0) entered disabled state
[  930.368000][T13041] bridge_slave_0: entered allmulticast mode
[  930.397616][T13041] bridge_slave_0: entered promiscuous mode
[  930.463600][T13182] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  930.501088][T11766] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  930.518353][T13041] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.569932][T13041] bridge0: port 2(bridge_slave_1) entered disabled state
[  930.623930][T13041] bridge_slave_1: entered allmulticast mode
[  930.732984][T13041] bridge_slave_1: entered promiscuous mode
[  930.903651][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  930.910137][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  931.664643][ T1119] bridge_slave_1: left allmulticast mode
[  931.685454][ T1119] bridge_slave_1: left promiscuous mode
[  931.730858][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.740843][T11766] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  931.814747][T11766] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  931.857548][ T1119] bridge_slave_0: left allmulticast mode
[  931.882956][ T1119] bridge_slave_0: left promiscuous mode
[  931.884020][T11766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.911480][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.965596][T11766] usb 6-1: Product: syz
[  931.986244][T11766] usb 6-1: Manufacturer: syz
[  932.025500][T11766] usb 6-1: SerialNumber: syz
[  932.390558][T11766] usb 6-1: can't set config #2, error -71
[  932.450268][T11766] usb 6-1: USB disconnect, device number 23
[  935.964126][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  936.079879][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  936.528119][ T1119] bond0 (unregistering): Released all slaves
[  936.585670][T13041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  936.640580][T13217] vlan0: entered promiscuous mode
[  936.796707][T13217] team0: Port device vlan0 added
[  936.858352][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17
[  936.937732][T13041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  938.426593][T13041] team0: Port device team_slave_0 added
[  938.531957][T13041] team0: Port device team_slave_1 added
[  940.471102][T13041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  940.485869][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  940.572516][T13041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  940.717600][ T1119] hsr_slave_0: left promiscuous mode
[  940.765198][ T1119] hsr_slave_1: left promiscuous mode
[  940.796441][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  940.860648][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0
[  940.909831][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  941.019541][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  941.748635][ T1119] veth1_macvtap: left promiscuous mode
[  941.979266][T13244] 9pnet_fd: Insufficient options for proto=fd
[  941.990114][ T1119] veth0_macvtap: left promiscuous mode
[  942.027025][ T1119] veth1_vlan: left promiscuous mode
[  942.030417][T11766] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  942.078224][ T1119] veth0_vlan: left promiscuous mode
[  942.304518][T11766] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  942.364333][T11766] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  942.409116][T11766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.475783][T11766] usb 9-1: Product: syz
[  942.710552][T11766] usb 9-1: Manufacturer: syz
[  943.663370][T11766] usb 9-1: SerialNumber: syz
[  943.771706][T11766] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  944.160197][T13270] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1957'.
[  944.572816][T11766] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  944.620841][T11766] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  944.669931][T11766] usb 9-1: media controller created
[  944.827026][T11766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  946.919484][ T1119] team0 (unregistering): Port device team_slave_1 removed
[  947.526444][T13295] fuse: fd is not a fuse device
[  947.584265][ T1119] team0 (unregistering): Port device team_slave_0 removed
[  948.168825][T13041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  948.210378][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.305834][T13041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  948.343060][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18
[  948.605566][T11766] usb 9-1: USB disconnect, device number 3
[  948.742633][T13041] hsr_slave_0: entered promiscuous mode
[  948.749393][T13041] hsr_slave_1: entered promiscuous mode
[  949.024048][T13041] debugfs: 'hsr0' already exists in 'hsr'
[  949.049179][T13041] Cannot create hsr debugfs directory
[  950.342330][T11766] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  951.698558][T11766] usb 9-1: Using ep0 maxpacket: 32
[  951.892120][T11766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  951.940459][T11766] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  951.999403][T11766] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  952.040457][T11766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.112556][T11766] usb 9-1: config 0 descriptor??
[  952.713024][T11766] usb 9-1: can't set config #0, error -71
[  952.786301][T11766] usb 9-1: USB disconnect, device number 4
[  956.152792][T13357] overlayfs: failed to clone upperpath
[  956.887542][T11766] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  957.116002][T11766] usb 9-1: Using ep0 maxpacket: 16
[  957.126903][ T5283] 8021q: adding VLAN 0 to HW filter on device eth19
[  957.153627][T11766] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  957.225367][T11766] usb 9-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  957.299460][T11766] usb 9-1: config 0 interface 0 has no altsetting 0
[  957.351737][T11766] usb 9-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  957.417703][T11766] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.544219][T11766] usb 9-1: config 0 descriptor??
[  957.684700][T13379] netlink: 1183 bytes leftover after parsing attributes in process `syz.0.1986'.
[  957.828899][T13041] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  958.116647][ T1166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  958.222762][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  958.233462][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  959.065150][T13041] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  959.142523][T13041] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  959.272646][T13041] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  959.333424][T13041] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  959.426528][T13041] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  959.486700][T13041] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  959.561667][T13041] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  960.181530][T11766] usbhid 9-1:0.0: can't add hid device: -71
[  960.210797][T11766] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  960.296143][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1988'.
[  960.307003][T11766] usb 9-1: USB disconnect, device number 5
[  960.366230][T13041] 8021q: adding VLAN 0 to HW filter on device bond0
[  960.553432][T13041] 8021q: adding VLAN 0 to HW filter on device team0
[  960.630719][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state
[  960.637894][ T6635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  961.175359][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state
[  961.182530][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state
[  961.485178][T13411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1990'.
[  961.980105][T13420] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.1992'.
[  963.120540][T13431] fuse: fd is not a fuse device
[  965.063064][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20
[  965.190858][T13446] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.1998'.
[  965.410763][T13449] hsr0: entered promiscuous mode
[  966.026281][T13448] hsr0: left promiscuous mode
[  966.228616][T13470] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1972'.
[  967.102643][T13476] futex_wake_op: syz.0.2005 tries to shift op by -1; fix this program
[  967.410741][ T5903] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  967.555441][T13041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  967.590344][ T5903] usb 9-1: Using ep0 maxpacket: 32
[  967.619708][ T5903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  967.641421][T13482] overlayfs: failed to clone upperpath
[  967.669819][ T5903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  967.724179][ T5903] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  967.797386][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.910259][ T5903] usb 9-1: config 0 descriptor??
[  968.334134][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  968.347494][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  968.355599][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  968.364999][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  968.373177][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  968.905007][ T5903] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  968.924859][ T5903] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  969.032529][ T5903] ft260 0003:0403:6030.0004: chip code: 0000 0000
[  969.111453][ T5903] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0
[  969.313353][ T5903] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup
[  969.663106][T13478] ft260 0003:0403:6030.0004: ft260_i2c_read: failed with -38
[  969.737626][T13506] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2012'.
[  970.111725][ T5903] usb 9-1: reset high-speed USB device number 6 using dummy_hcd
[  970.118756][T13041] veth0_vlan: entered promiscuous mode
[  970.218097][T13041] veth1_vlan: entered promiscuous mode
[  970.420590][ T9529] Bluetooth: hci6: command tx timeout
[  970.459850][T13041] veth0_macvtap: entered promiscuous mode
[  970.501199][T13041] veth1_macvtap: entered promiscuous mode
[  970.627195][T13041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  970.697870][T13526] hsr0: entered promiscuous mode
[  971.212944][T13041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  971.368283][T13532] overlayfs: failed to clone upperpath
[  971.383551][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  971.421396][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  971.454470][T13539] trusted_key: encrypted_key: insufficient parameters specified
[  971.474258][T13523] hsr0: left promiscuous mode
[  971.500953][ T1119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  971.555058][ T1119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  971.614564][T11766] usb 9-1: USB disconnect, device number 6
[  973.257549][ T9529] Bluetooth: hci6: command tx timeout
[  974.522353][T13561] hsr0: entered promiscuous mode
[  974.854395][ T9314] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.065352][T11766] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  975.153012][ T6069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  975.205751][ T6069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  975.230187][T13559] hsr0: left promiscuous mode
[  975.272499][T11766] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  975.300622][ T9529] Bluetooth: hci6: command tx timeout
[  975.331931][T11766] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  975.384966][T11766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  975.420144][T11766] usb 6-1: Product: syz
[  975.444551][ T9314] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.455071][T11766] usb 6-1: Manufacturer: syz
[  975.475480][T11766] usb 6-1: SerialNumber: syz
[  975.533402][T11766] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  975.931469][T11766] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  975.965360][ T9314] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.992441][T11766] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  976.051340][T11766] usb 6-1: media controller created
[  976.220993][T11766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  976.291507][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  976.302590][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  976.321497][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  976.336161][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  976.355861][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  976.779931][ T9314] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.042709][T11766] usb 6-1: USB disconnect, device number 24
[  977.381143][ T9529] Bluetooth: hci6: command tx timeout
[  978.541617][ T9529] Bluetooth: hci3: command tx timeout
[  978.811066][T13620] trusted_key: encrypted_key: key user:syz not found
[  979.490142][T13627] netlink: 1335 bytes leftover after parsing attributes in process `syz.8.2024'.
[  979.892612][T13628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  980.003622][ T9314] bridge_slave_1: left allmulticast mode
[  980.009391][ T9314] bridge_slave_1: left promiscuous mode
[  980.026929][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.072685][ T9314] bridge_slave_0: left allmulticast mode
[  980.079130][ T9314] bridge_slave_0: left promiscuous mode
[  980.085734][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state
[  980.710391][ T9529] Bluetooth: hci3: command tx timeout
[  981.394920][T13643] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2038'.
[  981.828680][T13646] 9pnet_fd: Insufficient options for proto=fd
[  982.247503][ T9314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  982.271565][ T9314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  982.303476][ T9314] bond0 (unregistering): Released all slaves
[  982.629881][T13495] bridge0: port 1(bridge_slave_0) entered blocking state
[  982.667203][T13495] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.769690][ T9529] Bluetooth: hci3: command tx timeout
[  982.844907][T13495] bridge_slave_0: entered allmulticast mode
[  983.401334][T13495] bridge_slave_0: entered promiscuous mode
[  983.475222][T13663] team0: Port device vlan0 added
[  983.526872][T13669] netlink: 'syz.6.2045': attribute type 4 has an invalid length.
[  983.558798][T13669] netlink: 'syz.6.2045': attribute type 10 has an invalid length.
[  983.693745][T13669] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2045'.
[  983.797115][T13495] bridge0: port 2(bridge_slave_1) entered blocking state
[  983.839710][T13495] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.885347][T13495] bridge_slave_1: entered allmulticast mode
[  984.155300][T13495] bridge_slave_1: entered promiscuous mode
[  984.191143][T13669] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  984.820570][ T5627] Bluetooth: hci3: command tx timeout
[  984.964724][T13495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  984.977551][T13495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  985.991926][ T9314] hsr_slave_0: left promiscuous mode
[  986.029681][ T9314] hsr_slave_1: left promiscuous mode
[  986.078016][ T9314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  986.117943][ T9314] batman_adv: batadv0: Removing interface: batadv_slave_0
[  986.160511][ T9314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  986.187580][ T9314] batman_adv: batadv0: Removing interface: batadv_slave_1
[  986.234805][ T9314] veth1_macvtap: left promiscuous mode
[  986.252089][ T9314] veth0_macvtap: left promiscuous mode
[  986.266164][ T9314] veth1_vlan: left promiscuous mode
[  986.625097][T13703] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  986.744247][ T9314] team0 (unregistering): Port device vlan0 removed
[  987.185033][ T9314] team0 (unregistering): Port device team_slave_1 removed
[  987.279173][ T9314] team0 (unregistering): Port device team_slave_0 removed
[  989.644098][T13716] hsr0: entered promiscuous mode
[  989.764156][T13738] trusted_key: encrypted_key: key user:syz not found
[  989.899297][   T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  990.154975][T13495] team0: Port device team_slave_0 added
[  990.194339][T13723] hsr0: left promiscuous mode
[  990.223512][T13495] team0: Port device team_slave_1 added
[  990.529742][T13495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  990.579639][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  990.797020][T13495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  991.458329][T13495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.486574][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.748178][T13495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  992.345853][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  992.354267][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  992.668673][T13495] hsr_slave_0: entered promiscuous mode
[  992.675689][T13495] hsr_slave_1: entered promiscuous mode
[  992.685513][T13495] debugfs: 'hsr0' already exists in 'hsr'
[  992.970352][T13495] Cannot create hsr debugfs directory
[  993.828890][   T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.825723][   T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.695728][T13796] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.2073'.
[  996.179611][   T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.075774][   T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  998.489787][T13593] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.503232][T13593] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.513674][T13593] bridge_slave_0: entered allmulticast mode
[  998.541646][T13593] bridge_slave_0: entered promiscuous mode
[  999.206368][T13593] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.229418][T13593] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.263960][T13593] bridge_slave_1: entered allmulticast mode
[  999.286195][T13593] bridge_slave_1: entered promiscuous mode
[  999.744344][T13843] trusted_key: encrypted_key: insufficient parameters specified
[  999.834689][T13842] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2086'.
[ 1000.484189][T13593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1000.577795][T13593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1001.218660][T13593] team0: Port device team_slave_0 added
[ 1001.282572][T13593] team0: Port device team_slave_1 added
[ 1001.416736][T13593] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1001.432924][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1001.484403][T13593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1001.518821][T13593] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1001.539604][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1001.607113][T13593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1001.777449][T13593] hsr_slave_0: entered promiscuous mode
[ 1001.785107][T13593] hsr_slave_1: entered promiscuous mode
[ 1001.795902][T13593] debugfs: 'hsr0' already exists in 'hsr'
[ 1001.805023][T13593] Cannot create hsr debugfs directory
[ 1002.486819][T13877] trusted_key: encrypted_key: key user:syz not found
[ 1002.841462][   T57] bridge_slave_1: left allmulticast mode
[ 1002.893909][   T57] bridge_slave_1: left promiscuous mode
[ 1002.917436][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1002.996858][   T57] bridge_slave_0: left allmulticast mode
[ 1003.027030][   T57] bridge_slave_0: left promiscuous mode
[ 1003.051763][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1003.850480][T13891] trusted_key: encrypted_key: key user:syz not found
[ 1004.423895][T13896] xt_cgroup: invalid path, errno=-2
[ 1004.560579][T13899] futex_wake_op: syz.5.2102 tries to shift op by -1; fix this program
[ 1004.774372][T13905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1005.327799][T13910] xt_hashlimit: size too large, truncated to 1048576
[ 1005.436683][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1005.522805][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1005.562594][   T57] bond0 (unregistering): Released all slaves
[ 1005.582972][T13914] futex_wake_op: syz.6.2105 tries to shift op by -1; fix this program
[ 1006.651760][T13918] hsr0: entered promiscuous mode
[ 1006.857916][T13924] hsr0: left promiscuous mode
[ 1007.225436][T13937] xt_cgroup: invalid path, errno=-2
[ 1008.426500][   T57] hsr_slave_0: left promiscuous mode
[ 1008.472640][   T57] hsr_slave_1: left promiscuous mode
[ 1008.499730][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1008.533606][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1008.615440][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1008.633006][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1008.883849][   T57] veth1_macvtap: left promiscuous mode
[ 1008.896411][   T57] veth0_macvtap: left promiscuous mode
[ 1008.902900][   T57] veth1_vlan: left promiscuous mode
[ 1009.739773][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1009.865107][   T57] veth0_vlan: left promiscuous mode
[ 1011.837868][T13970] xt_hashlimit: size too large, truncated to 1048576
[ 1014.045974][   T57] team0 (unregistering): Port device team_slave_1 removed
[ 1014.090603][   T57] team0 (unregistering): Port device team_slave_0 removed
[ 1015.886761][T13495] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1016.022831][T13495] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1016.074173][T13495] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1016.600121][T13495] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1016.666239][T13495] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1016.729582][T13495] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1017.541005][T13495] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1017.614526][T13495] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1018.093994][T14047] xt_hashlimit: size too large, truncated to 1048576
[ 1019.247239][T14067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2137'.
[ 1019.267169][T13495] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1019.553917][T13495] 8021q: adding VLAN 0 to HW filter on device team0
[ 1020.745533][T13593] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1020.780130][T14076] 9pnet_fd: Insufficient options for proto=fd
[ 1020.836227][T13593] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1020.868987][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1020.876181][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1020.964248][T13593] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1021.013393][T13593] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1021.042295][T13593] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1021.098067][T13593] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1021.125062][T13593] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1021.167840][T13593] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1021.253251][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1021.260433][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1021.518400][ T1166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1022.393410][T14104] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2146'.
[ 1024.419927][T13593] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1024.799521][T13593] 8021q: adding VLAN 0 to HW filter on device team0
[ 1024.886162][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.893381][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1025.115119][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.122344][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1025.172763][T14139] overlayfs: failed to clone upperpath
[ 1027.365145][T14161] netlink: 1183 bytes leftover after parsing attributes in process `syz.6.2163'.
[ 1029.433846][ T9529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1029.452246][ T9529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1029.476382][ T9529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1029.487252][ T9529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1029.496512][ T9529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1030.669995][T14224] overlayfs: failed to resolve './file1/file0': -2
[ 1030.926000][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2174'.
[ 1031.670357][ T9529] Bluetooth: hci5: command tx timeout
[ 1032.334587][T13593] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1032.465508][T14231] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.2176'.
[ 1032.523956][T14241] futex_wake_op: syz.5.2178 tries to shift op by -1; fix this program
[ 1033.705261][ T9529] Bluetooth: hci5: command tx timeout
[ 1035.780403][ T9529] Bluetooth: hci5: command tx timeout
[ 1037.294830][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1037.307966][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1037.318067][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1037.328422][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1037.339919][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1037.698342][ T1095] bridge_slave_1: left allmulticast mode
[ 1037.727208][ T1095] bridge_slave_1: left promiscuous mode
[ 1037.761008][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1037.827598][ T1095] bridge_slave_0: left allmulticast mode
[ 1037.856993][ T1095] bridge_slave_0: left promiscuous mode
[ 1037.860391][ T9529] Bluetooth: hci5: command tx timeout
[ 1037.874942][T14306] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2189'.
[ 1037.929657][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1039.380453][ T9529] Bluetooth: hci6: command tx timeout
[ 1040.252945][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1040.310602][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1040.375210][ T1095] bond0 (unregistering): Released all slaves
[ 1041.006974][ T1095] hsr_slave_0: left promiscuous mode
[ 1041.118763][ T1095] hsr_slave_1: left promiscuous mode
[ 1041.146846][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1041.204011][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1041.480439][ T9529] Bluetooth: hci6: command tx timeout
[ 1043.221990][T14351] overlayfs: failed to resolve './file1/file0': -2
[ 1043.581837][ T9529] Bluetooth: hci6: command tx timeout
[ 1043.963149][ T1095] team0 (unregistering): Port device team_slave_1 removed
[ 1044.153861][ T1095] team0 (unregistering): Port device team_slave_0 removed
[ 1044.608806][T14365] tmpfs: Unknown parameter './bus'
[ 1045.110022][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1045.635225][ T9529] Bluetooth: hci6: command tx timeout
[ 1046.503190][T14193] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.536513][T14193] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.588569][T14193] bridge_slave_0: entered allmulticast mode
[ 1046.611692][T14193] bridge_slave_0: entered promiscuous mode
[ 1046.682445][T14193] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.711296][T14193] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1047.170907][T14193] bridge_slave_1: entered allmulticast mode
[ 1047.220782][T14193] bridge_slave_1: entered promiscuous mode
[ 1047.834202][T14193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1047.854125][T14193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1048.026959][T14193] team0: Port device team_slave_0 added
[ 1048.376115][T14193] team0: Port device team_slave_1 added
[ 1048.647379][T14193] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1048.680090][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1048.768985][T14193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1049.545953][T14193] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1049.552985][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1049.578963][T14193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1052.754768][T14193] hsr_slave_0: entered promiscuous mode
[ 1052.796648][T14193] hsr_slave_1: entered promiscuous mode
[ 1052.840501][T14193] debugfs: 'hsr0' already exists in 'hsr'
[ 1052.868328][T14193] Cannot create hsr debugfs directory
[ 1052.911273][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1053.217632][T10584] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1053.783396][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.789767][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1057.886196][T14294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1057.921933][T14294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1057.972424][T14294] bridge_slave_0: entered allmulticast mode
[ 1057.998930][T14294] bridge_slave_0: entered promiscuous mode
[ 1058.327797][T14515] trusted_key: encrypted_key: insufficient parameters specified
[ 1058.848690][T14294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.875977][T14294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1058.905308][T14294] bridge_slave_1: entered allmulticast mode
[ 1058.953434][T14294] bridge_slave_1: entered promiscuous mode
[ 1059.066880][T14520] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[ 1060.022765][T14294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1060.084263][T14294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1061.276231][ T1095] bridge_slave_1: left allmulticast mode
[ 1061.283136][ T1095] bridge_slave_1: left promiscuous mode
[ 1061.290593][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1061.348815][ T1095] bridge_slave_0: left allmulticast mode
[ 1061.365394][ T1095] bridge_slave_0: left promiscuous mode
[ 1061.375737][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.227906][T14554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1064.404997][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1064.463713][T14558] xt_hashlimit: size too large, truncated to 1048576
[ 1064.525522][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1064.589411][ T1095] bond0 (unregistering): Released all slaves
[ 1064.869265][T14294] team0: Port device team_slave_0 added
[ 1064.935406][T14294] team0: Port device team_slave_1 added
[ 1065.555244][ T1095] hsr_slave_0: left promiscuous mode
[ 1065.590476][ T1095] hsr_slave_1: left promiscuous mode
[ 1065.652772][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1065.734118][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1065.964525][T10223] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1066.039703][T14575] trusted_key: encrypted_key: insufficient parameters specified
[ 1066.553434][T10223] usb 9-1: Using ep0 maxpacket: 32
[ 1066.613690][T10223] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1066.668989][T10223] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1066.715790][T10223] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1066.746306][T10223] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.818629][T10223] usb 9-1: config 0 descriptor??
[ 1067.885792][T10223] ft260 0003:0403:6030.0005: unknown main item tag 0x0
[ 1067.919367][T10223] ft260 0003:0403:6030.0005: unknown main item tag 0x0
[ 1067.985167][ T1095] team0 (unregistering): Port device team_slave_1 removed
[ 1068.049638][ T1095] team0 (unregistering): Port device team_slave_0 removed
[ 1068.064519][T10223] ft260 0003:0403:6030.0005: chip code: 0000 0000
[ 1068.289534][T10223] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0
[ 1068.415095][T14584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2260'.
[ 1068.495731][T10223] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup
[ 1068.854124][T14294] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1068.878336][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1068.934473][T14294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1068.972104][T14294] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1069.028702][T14294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1069.100436][T14294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1069.180458][T10223] usb 9-1: reset high-speed USB device number 7 using dummy_hcd
[ 1069.396608][T14568] ft260 0003:0403:6030.0005: ft260_i2c_read: failed with -38
[ 1070.207089][T14294] hsr_slave_0: entered promiscuous mode
[ 1070.296291][T14294] hsr_slave_1: entered promiscuous mode
[ 1070.336530][T14294] debugfs: 'hsr0' already exists in 'hsr'
[ 1070.384801][T14294] Cannot create hsr debugfs directory
[ 1072.169150][T14616] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1072.246732][   T29] usb 9-1: USB disconnect, device number 7
[ 1072.318217][T14617] xt_hashlimit: size too large, truncated to 1048576
[ 1072.915029][T14193] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1073.046997][T14627] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[ 1073.769652][ T5763] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1073.960388][ T5763] usb 6-1: Using ep0 maxpacket: 16
[ 1074.000632][ T5763] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10
[ 1074.018499][T14631] overlayfs: failed to resolve './file1/file0': -2
[ 1074.029014][T14193] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1074.061389][ T5763] usb 6-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1074.075328][T14193] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1074.107247][ T5763] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1074.137296][ T5763] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[ 1074.177846][T14193] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1074.190391][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.217205][T14193] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1074.238854][ T5763] usb 6-1: config 0 descriptor??
[ 1074.295518][T14193] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1074.324636][T14193] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1074.426089][T14193] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1074.464688][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1074.857393][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.866272][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.275551][T14646] netlink: 1335 bytes leftover after parsing attributes in process `syz.8.2273'.
[ 1075.715073][ T5763] usbhid 6-1:0.0: can't add hid device: -71
[ 1075.751424][ T5763] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1075.816682][ T5763] usb 6-1: USB disconnect, device number 25
[ 1075.991732][T14193] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1076.162745][T14193] 8021q: adding VLAN 0 to HW filter on device team0
[ 1076.476422][T10584] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1076.483575][T10584] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1077.014651][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1077.021858][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1078.592182][T14294] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1078.629517][T14674] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2279'.
[ 1078.698510][T14294] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1078.758870][T14294] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1078.872898][T14294] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1078.907736][T14294] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1079.020920][T14294] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1079.059113][T14294] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1079.133717][T14294] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1080.176359][T14294] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1080.352213][T14707] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[ 1080.385060][T14294] 8021q: adding VLAN 0 to HW filter on device team0
[ 1080.476730][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.483962][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1080.626437][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.633663][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1080.699456][ T1664] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1081.049275][ T1664] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.110704][ T1664] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1081.159842][ T1664] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.212224][ T1664] usb 9-1: Product: syz
[ 1081.243708][ T1664] usb 9-1: Manufacturer: syz
[ 1081.563845][T14726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2291'.
[ 1081.597832][ T1664] usb 9-1: SerialNumber: syz
[ 1081.685606][ T1664] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1082.245837][ T1664] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1082.288944][ T1664] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1082.335052][ T1664] usb 9-1: media controller created
[ 1082.401083][T14734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2290'.
[ 1082.454219][ T1664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1082.742831][T14193] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1083.182248][T14193] veth0_vlan: entered promiscuous mode
[ 1083.283063][ T1664] usb 9-1: USB disconnect, device number 8
[ 1083.291759][T14193] veth1_vlan: entered promiscuous mode
[ 1084.461046][T14193] veth0_macvtap: entered promiscuous mode
[ 1084.579765][T14193] veth1_macvtap: entered promiscuous mode
[ 1084.718526][T14193] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1084.786029][T14193] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1084.852407][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.862364][ T6287] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1084.896751][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.988981][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.091273][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.151436][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1085.694811][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1085.740593][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1085.971707][T14294] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1086.035504][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1086.091470][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1087.009796][T14791] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[ 1088.538772][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2305'.
[ 1088.750874][T14819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2308'.
[ 1089.093400][T14820] xt_hashlimit: size too large, truncated to 1048576
[ 1089.366435][T14294] veth0_vlan: entered promiscuous mode
[ 1089.460036][T14294] veth1_vlan: entered promiscuous mode
[ 1089.693912][T14294] veth0_macvtap: entered promiscuous mode
[ 1089.776157][T14294] veth1_macvtap: entered promiscuous mode
[ 1089.916705][T14294] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1090.535755][T14294] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1090.616229][ T1095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.687995][ T1095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.729879][ T1095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.787830][ T1095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1091.054851][T14842] xt_cgroup: invalid path, errno=-2
[ 1092.189963][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1092.208150][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1092.295035][T14840] vlan0: entered promiscuous mode
[ 1093.613204][T14840] team0: Port device vlan0 added
[ 1093.773939][T14858] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1094.404215][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1094.419179][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1096.892769][T14876] syzkaller1: entered promiscuous mode
[ 1096.919654][T14876] syzkaller1: entered allmulticast mode
[ 1098.337009][T14891] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.2325'.
[ 1098.358600][T14894] syzkaller1: entered promiscuous mode
[ 1098.415330][T14894] syzkaller1: entered allmulticast mode
[ 1099.844336][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2333'.
[ 1100.898784][T14930] xt_hashlimit: size too large, truncated to 1048576
[ 1101.491299][ T1664] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1101.702565][ T1664] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1101.772894][ T1664] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1101.819036][ T1664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.856197][ T1664] usb 6-1: Product: syz
[ 1101.902468][ T1664] usb 6-1: Manufacturer: syz
[ 1101.926841][ T1664] usb 6-1: SerialNumber: syz
[ 1101.992796][ T1664] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1105.361395][ T1664] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1105.410027][ T1664] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1105.420840][T14959] syzkaller1: entered promiscuous mode
[ 1105.462524][T14959] syzkaller1: entered allmulticast mode
[ 1105.482378][ T1664] usb 6-1: media controller created
[ 1105.693282][ T1664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1106.381501][T14969] trusted_key: encrypted_key: key user:syz not found
[ 1109.279403][T14994] netlink: 1335 bytes leftover after parsing attributes in process `syz.5.2353'.
[ 1109.750410][ T1664] usb 6-1: USB disconnect, device number 26
[ 1110.439380][T15006] xt_hashlimit: size too large, truncated to 1048576
[ 1111.342186][T10223] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1111.361933][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1111.375210][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1111.402218][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1111.414581][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1111.422674][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1111.593342][T15023] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1111.593871][T10223] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.649633][T10223] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1112.170169][T10223] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.196140][T10223] usb 9-1: Product: syz
[ 1112.235282][T10223] usb 9-1: Manufacturer: syz
[ 1112.250675][T10223] usb 9-1: SerialNumber: syz
[ 1112.316537][T10223] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1112.969901][T10223] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1113.464333][ T9529] Bluetooth: hci3: command tx timeout
[ 1113.760041][T10223] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1113.787196][T10223] usb 9-1: media controller created
[ 1113.809461][T10223] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1113.959618][T15040] trusted_key: encrypted_key: key user:syz not found
[ 1114.146628][T15042] syzkaller1: entered promiscuous mode
[ 1114.243877][T15042] syzkaller1: entered allmulticast mode
[ 1114.556679][T15050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2367'.
[ 1115.040541][T10223] usb 9-1: USB disconnect, device number 9
[ 1115.223256][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.236506][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.846650][ T9529] Bluetooth: hci3: command tx timeout
[ 1115.856871][ T1166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.885625][T10584] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1116.717942][ T1166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.858274][T15077] futex_wake_op: syz.5.2375 tries to shift op by -1; fix this program
[ 1117.029266][T15083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1117.870682][ T9529] Bluetooth: hci3: command tx timeout
[ 1118.112027][T15083] xt_hashlimit: size too large, truncated to 1048576
[ 1118.152599][T15093] trusted_key: encrypted_key: key user:syz not found
[ 1118.259421][ T1166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1118.558357][T15100] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1119.397918][T15106] overlayfs: failed to clone upperpath
[ 1119.616348][T15107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2382'.
[ 1119.921770][ T1166] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.942381][ T9529] Bluetooth: hci3: command tx timeout
[ 1120.370414][   T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1120.627872][T15125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1120.715779][   T29] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1121.328914][   T29] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1121.395550][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1121.453403][T15131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1121.934898][   T29] usb 5-1: Product: syz
[ 1121.939146][   T29] usb 5-1: Manufacturer: syz
[ 1121.944378][   T29] usb 5-1: SerialNumber: syz
[ 1122.006637][   T29] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1122.492821][   T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1123.294616][   T29] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1123.392192][   T29] usb 5-1: media controller created
[ 1123.741909][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1124.809949][ T1166] bridge_slave_1: left allmulticast mode
[ 1124.839178][ T1166] bridge_slave_1: left promiscuous mode
[ 1124.865172][T15155] trusted_key: encrypted_key: key user:syz not found
[ 1124.916884][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.346838][ T1166] bridge_slave_0: left allmulticast mode
[ 1125.386119][ T1166] bridge_slave_0: left promiscuous mode
[ 1125.418671][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1125.718616][T15166] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2395'.
[ 1126.915827][T15175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1127.429377][   T29] usb 5-1: USB disconnect, device number 2
[ 1127.513175][T15179] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1128.236211][T15178] xt_hashlimit: size too large, truncated to 1048576
[ 1130.849854][T15204] overlayfs: overlapping lowerdir path
[ 1131.562798][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1132.197719][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1132.285723][ T1166] bond0 (unregistering): Released all slaves
[ 1133.826838][T15225] overlayfs: overlapping lowerdir path
[ 1135.969947][ T1166] hsr_slave_0: left promiscuous mode
[ 1136.023384][ T1166] hsr_slave_1: left promiscuous mode
[ 1136.052546][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1136.277301][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1136.789737][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1137.089910][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1137.158043][ T1166] veth1_macvtap: left promiscuous mode
[ 1137.179068][ T1166] veth1_vlan: left promiscuous mode
[ 1137.688949][T15248] xt_hashlimit: size too large, truncated to 1048576
[ 1138.262498][T15273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2419'.
[ 1139.939644][ T1166] team0 (unregistering): Port device vlan0 removed
[ 1141.857071][ T1166] team0 (unregistering): Port device team_slave_1 removed
[ 1141.943727][ T1166] team0 (unregistering): Port device team_slave_0 removed
[ 1144.873549][T15321] veth0_macvtap: left promiscuous mode
[ 1144.964254][T15321] veth0_macvtap: entered promiscuous mode
[ 1145.765130][T15339] hsr0: entered promiscuous mode
[ 1146.469417][T15017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1146.517508][T15017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1146.577696][T15017] bridge_slave_0: entered allmulticast mode
[ 1146.897388][T15017] bridge_slave_0: entered promiscuous mode
[ 1146.997928][T15017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1147.066272][T15017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1147.129916][T15017] bridge_slave_1: entered allmulticast mode
[ 1147.198825][T15017] bridge_slave_1: entered promiscuous mode
[ 1147.248258][T15338] hsr0: left promiscuous mode
[ 1147.324689][ T1119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1147.427238][T15372] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1148.316713][T15370] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1148.393934][T15017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1148.452538][T15017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1148.643465][T15017] team0: Port device team_slave_0 added
[ 1148.677547][T15017] team0: Port device team_slave_1 added
[ 1148.700418][ T5903] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1149.079048][ T5903] usb 3-1: Using ep0 maxpacket: 32
[ 1149.258470][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1149.319009][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1149.364154][ T5903] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1149.827995][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1149.850225][ T5903] usb 3-1: config 0 descriptor??
[ 1149.876944][T15017] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1149.917966][T15017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1150.054885][T15017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1150.120190][T15017] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1150.145931][T15017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1150.207068][T15017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1150.326699][ T5903] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[ 1150.374113][ T5903] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[ 1150.513868][T15017] hsr_slave_0: entered promiscuous mode
[ 1150.514372][ T5903] ft260 0003:0403:6030.0006: chip code: 0000 0000
[ 1150.525232][T15017] hsr_slave_1: entered promiscuous mode
[ 1151.050180][ T5903] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[ 1151.086424][T15403] netlink: 'syz.4.2446': attribute type 4 has an invalid length.
[ 1151.160429][T15403] netlink: 'syz.4.2446': attribute type 10 has an invalid length.
[ 1151.180418][T15403] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2446'.
[ 1151.248600][ T5903] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup
[ 1151.254443][T15403] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1151.566842][T15378] ft260 0003:0403:6030.0006: ft260_i2c_read: failed with -38
[ 1151.772250][  T802] usb 3-1: reset high-speed USB device number 6 using dummy_hcd
[ 1152.368874][T15425] overlayfs: overlapping lowerdir path
[ 1153.152607][ T5627] Bluetooth: hci5: command 0x0406 tx timeout
[ 1153.485616][T15431] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.2453'.
[ 1154.259858][ T5763] usb 3-1: USB disconnect, device number 6
[ 1154.448833][T15438] vlan0: entered promiscuous mode
[ 1154.733780][T15438] team0: Port device vlan0 added
[ 1155.360448][T15435] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 1155.522698][T15435] usb 9-1: not running at top speed; connect to a high speed hub
[ 1155.538654][T15435] usb 9-1: config 45 has an invalid interface number: 2 but max is 0
[ 1155.592435][T15435] usb 9-1: config 45 has no interface number 0
[ 1155.628939][T15435] usb 9-1: config 45 interface 2 has no altsetting 0
[ 1156.098909][T15435] usb 9-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1156.126157][T15435] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.136080][T15435] usb 9-1: Product: syz
[ 1156.141914][T15435] usb 9-1: Manufacturer: syz
[ 1156.149804][T15435] usb 9-1: SerialNumber: syz
[ 1156.531490][T15435] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1156.612347][T15435] dvb-usb: bulk message failed: -22 (3/0)
[ 1156.651607][T15435] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1156.699478][T15435] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1156.728822][T15435] usb 9-1: media controller created
[ 1156.749343][T15435] dvb-usb: bulk message failed: -22 (5/0)
[ 1156.775807][T15435] dvb-usb: MAC address reading failed.
[ 1156.816336][T15435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1156.919933][T15435] dvb-usb: bulk message failed: -22 (6/0)
[ 1156.964714][T15435] dvb-usb: bulk message failed: -22 (6/0)
[ 1156.987045][T15435] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1157.051137][T15435] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input7
[ 1157.079049][T15017] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1157.136704][T15017] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1157.148991][T15435] dvb-usb: schedule remote query interval to 100 msecs.
[ 1157.183983][T15459] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[ 1157.195340][T15017] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1157.203042][T15435] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1157.275574][T15435] usb 9-1: USB disconnect, device number 10
[ 1157.406341][T15462] overlayfs: overlapping lowerdir path
[ 1158.563548][T15017] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1158.624719][T15017] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1158.656502][T15435] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1158.702382][T15017] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1158.776140][T15017] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1158.865217][T15017] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1159.205154][T15481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1159.589898][T15017] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1159.601401][T15435] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1159.628851][T15017] 8021q: adding VLAN 0 to HW filter on device team0
[ 1159.697445][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1159.704624][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1159.717137][T15485] futex_wake_op: syz.5.2467 tries to shift op by -1; fix this program
[ 1159.778773][T15435] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1159.793987][T15435] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1159.999443][T15435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.009393][T15435] usb 3-1: Product: syz
[ 1160.030071][T15482] xt_hashlimit: size too large, truncated to 1048576
[ 1160.042544][T15435] usb 3-1: Manufacturer: syz
[ 1160.047750][T15435] usb 3-1: SerialNumber: syz
[ 1160.920553][T15435] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1160.952861][T10584] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1160.960032][T10584] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1161.364423][T15435] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1161.409660][T15435] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1161.467974][T15435] usb 3-1: media controller created
[ 1161.548807][T15435] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1161.624539][T15492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2468'.
[ 1162.668033][T15435] usb 3-1: USB disconnect, device number 7
[ 1163.390531][ T9529] Bluetooth: hci6: command 0x0406 tx timeout
[ 1166.785425][T15555] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.2479'.
[ 1167.216576][T15557] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2480'.
[ 1168.105029][ T5784] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1168.151718][T15567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1168.740246][ T5784] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1168.869389][T15567] xt_hashlimit: size too large, truncated to 1048576
[ 1168.909827][ T5784] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1168.958767][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.064074][ T5784] usb 6-1: Product: syz
[ 1169.161708][ T5784] usb 6-1: Manufacturer: syz
[ 1169.282953][ T5784] usb 6-1: SerialNumber: syz
[ 1169.715293][T15017] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1169.893131][ T5784] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1170.150059][T15017] veth0_vlan: entered promiscuous mode
[ 1170.198994][T15017] veth1_vlan: entered promiscuous mode
[ 1170.455033][T15435] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1170.496626][ T5784] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1171.332601][T15017] veth0_macvtap: entered promiscuous mode
[ 1171.342977][ T5784] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1171.488648][T15435] usb 9-1: Using ep0 maxpacket: 16
[ 1171.503411][T15435] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10
[ 1171.530663][T15435] usb 9-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1171.575375][ T5784] usb 6-1: media controller created
[ 1171.601348][T15435] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1171.631141][T15017] veth1_macvtap: entered promiscuous mode
[ 1171.643412][T15435] usb 9-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[ 1171.660158][T15435] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1171.727666][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1171.791699][T15435] usb 9-1: config 0 descriptor??
[ 1172.072290][T15598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1172.445470][T15598] xt_hashlimit: size too large, truncated to 1048576
[ 1173.773179][ T9529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1173.792311][ T9529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1173.803692][ T9529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1173.819603][ T9529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1173.834398][ T5784] usb 6-1: USB disconnect, device number 27
[ 1173.841313][ T9529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1173.872673][T15610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1173.894287][T15610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1175.940538][ T5627] Bluetooth: hci2: command tx timeout
[ 1176.666179][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.673091][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.031958][T15637] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[ 1178.061869][ T5627] Bluetooth: hci2: command tx timeout
[ 1178.983729][T15435] usbhid 9-1:0.0: can't add hid device: -32
[ 1179.018980][T15435] usbhid 9-1:0.0: probe with driver usbhid failed with error -32
[ 1179.090380][ T5763] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[ 1179.263115][ T5763] usb 5-1: not running at top speed; connect to a high speed hub
[ 1179.292133][ T5763] usb 5-1: config 45 has an invalid interface number: 2 but max is 0
[ 1179.331494][ T5763] usb 5-1: config 45 has no interface number 0
[ 1179.358316][ T5763] usb 5-1: config 45 interface 2 has no altsetting 0
[ 1179.373249][ T1109] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1179.417958][ T5763] usb 5-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1179.445178][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.477556][ T5763] usb 5-1: Product: syz
[ 1179.503573][ T5763] usb 5-1: Manufacturer: syz
[ 1179.554716][ T5763] usb 5-1: SerialNumber: syz
[ 1180.110361][ T5627] Bluetooth: hci2: command tx timeout
[ 1180.365772][T15435] usb 9-1: USB disconnect, device number 11
[ 1180.571395][ T5763] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1180.612082][ T5763] dvb-usb: bulk message failed: -22 (3/0)
[ 1180.845207][ T5763] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1180.868589][ T5763] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1180.893660][ T5763] usb 5-1: media controller created
[ 1181.763207][ T5763] dvb-usb: bulk message failed: -22 (5/0)
[ 1181.784392][ T5763] dvb-usb: MAC address reading failed.
[ 1181.794787][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1181.874754][ T5763] dvb-usb: bulk message failed: -22 (6/0)
[ 1181.955400][ T5763] dvb-usb: bulk message failed: -22 (6/0)
[ 1181.992650][ T5763] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1182.040929][ T5763] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[ 1182.119966][ T5763] dvb-usb: schedule remote query interval to 100 msecs.
[ 1182.180480][ T5627] Bluetooth: hci2: command tx timeout
[ 1182.293910][ T5763] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1182.478479][T15435] dvb-usb: bulk message failed: -22 (2/0)
[ 1182.530672][ T5763] usb 5-1: USB disconnect, device number 3
[ 1182.546909][T15435] dvb-usb: error while querying for an remote control event.
[ 1183.183199][ T5763] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1184.843609][T15705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1184.968245][   T61] bridge_slave_1: left allmulticast mode
[ 1184.987320][   T61] bridge_slave_1: left promiscuous mode
[ 1184.994713][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1185.023821][   T61] bridge_slave_0: left allmulticast mode
[ 1185.039568][   T61] bridge_slave_0: left promiscuous mode
[ 1185.067314][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1185.147264][T15706] xt_hashlimit: size too large, truncated to 1048576
[ 1185.929232][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'.
[ 1185.938247][T15712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2511'.
[ 1185.986914][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'.
[ 1185.996007][T15712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2511'.
[ 1187.232933][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1187.479531][T15719] xt_hashlimit: size too large, truncated to 1048576
[ 1187.984204][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1188.129571][   T61] bond0 (unregistering): Released all slaves
[ 1188.490685][T15727] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2514'.
[ 1190.016955][   T61] hsr_slave_0: left promiscuous mode
[ 1190.056900][   T61] hsr_slave_1: left promiscuous mode
[ 1190.079441][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1190.173848][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1190.479618][   T61] veth1_macvtap: left promiscuous mode
[ 1190.524353][   T61] veth0_macvtap: left promiscuous mode
[ 1190.773975][   T61] veth1_vlan: left promiscuous mode
[ 1190.794101][   T61] veth0_vlan: left promiscuous mode
[ 1192.822187][T15760] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1193.304673][T15761] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2524'.
[ 1195.513339][T15777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1196.131973][T15786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2529'.
[ 1198.787266][   T61] team0 (unregistering): Port device team_slave_1 removed
[ 1198.908502][   T61] team0 (unregistering): Port device team_slave_0 removed
[ 1200.677973][T15774] hsr0: entered promiscuous mode
[ 1200.694315][T15785] hsr0: left promiscuous mode
[ 1202.283566][T15839] overlayfs: failed to resolve './file0': -2
[ 1202.477570][T15835] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9)
[ 1202.484257][T15835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1202.492074][T15835] vhci_hcd vhci_hcd.0: Device attached
[ 1202.505342][T15838] vhci_hcd: connection closed
[ 1202.715741][ T1119] vhci_hcd vhci_hcd.8: stop threads
[ 1202.727512][ T1119] vhci_hcd vhci_hcd.8: release socket
[ 1202.733922][ T1119] vhci_hcd vhci_hcd.8: disconnect device
[ 1203.319624][T15605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1203.375506][T15605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.630254][T15605] bridge_slave_0: entered allmulticast mode
[ 1204.453099][T15605] bridge_slave_0: entered promiscuous mode
[ 1204.468893][T15605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1204.477362][T15605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1204.485351][T15605] bridge_slave_1: entered allmulticast mode
[ 1204.494162][T15605] bridge_slave_1: entered promiscuous mode
[ 1204.654682][T15605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1204.668636][T15605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1204.841008][T15857] futex_wake_op: syz.2.2542 tries to shift op by -1; fix this program
[ 1205.008400][T15605] team0: Port device team_slave_0 added
[ 1205.065095][T15605] team0: Port device team_slave_1 added
[ 1205.190985][ T5784] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1205.314537][T15605] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1205.333947][T15605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1205.367232][T15605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1205.393388][ T5784] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1205.403243][T15605] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1205.418323][T15605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1205.445648][ T5784] usb 9-1: config 0 has no interface number 0
[ 1205.481095][ T5784] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1205.507109][ T5784] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.515302][ T1664] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 1205.536671][T15605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1205.569331][ T5784] usb 9-1: Product: syz
[ 1205.581703][ T5784] usb 9-1: Manufacturer: syz
[ 1205.607314][ T5784] usb 9-1: SerialNumber: syz
[ 1205.655048][ T5784] usb 9-1: config 0 descriptor??
[ 1205.675384][ T1664] usb 3-1: not running at top speed; connect to a high speed hub
[ 1205.691977][ T1664] usb 3-1: config 45 has an invalid interface number: 2 but max is 0
[ 1205.711716][ T1664] usb 3-1: config 45 has no interface number 0
[ 1205.725409][ T1664] usb 3-1: config 45 interface 2 has no altsetting 0
[ 1205.748609][ T1664] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[ 1205.768853][ T1664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.793827][ T1664] usb 3-1: Product: syz
[ 1205.798380][ T1664] usb 3-1: Manufacturer: syz
[ 1205.803704][ T1664] usb 3-1: SerialNumber: syz
[ 1205.890840][ T5784] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1205.936329][ T5784] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1205.939335][T15605] hsr_slave_0: entered promiscuous mode
[ 1205.979430][ T5784] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1205.982131][T15605] hsr_slave_1: entered promiscuous mode
[ 1206.076757][ T5784] usb 9-1: media controller created
[ 1206.160846][ T1664] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[ 1206.178967][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1206.199810][ T1664] dvb-usb: bulk message failed: -22 (3/0)
[ 1206.304863][T15880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1206.413400][ T1664] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1206.438849][ T1664] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[ 1206.450191][ T1664] usb 3-1: media controller created
[ 1206.459253][ T1664] dvb-usb: bulk message failed: -22 (5/0)
[ 1206.469897][ T5784] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1206.479413][ T1664] dvb-usb: MAC address reading failed.
[ 1206.830436][ T1664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1206.937909][ T1664] dvb-usb: bulk message failed: -22 (6/0)
[ 1206.976773][ T5784] usb 9-1: USB disconnect, device number 12
[ 1206.983714][ T1664] dvb-usb: bulk message failed: -22 (6/0)
[ 1207.027965][ T1664] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[ 1207.118708][ T1664] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10
[ 1207.212348][ T1664] dvb-usb: schedule remote query interval to 100 msecs.
[ 1207.247162][ T1664] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[ 1207.301602][ T1664] usb 3-1: USB disconnect, device number 8
[ 1207.877816][ T1664] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[ 1208.237476][T15435] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1208.735422][T15435] usb 6-1: Using ep0 maxpacket: 32
[ 1208.952976][T15435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1208.970772][T15435] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1208.986990][T15435] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1208.996202][T15435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.016342][T15435] usb 6-1: config 0 descriptor??
[ 1209.120700][ T1664] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1209.764551][ T1664] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1209.815960][ T1664] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1209.846668][ T1664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.867126][ T1664] usb 3-1: Product: syz
[ 1209.891859][ T1664] usb 3-1: Manufacturer: syz
[ 1209.913660][ T1664] usb 3-1: SerialNumber: syz
[ 1209.983006][ T1664] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1210.026871][T15912] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2557'.
[ 1210.075268][T15435] ft260 0003:0403:6030.0007: unknown main item tag 0x0
[ 1210.101815][T15435] ft260 0003:0403:6030.0007: unknown main item tag 0x0
[ 1210.256204][T15435] ft260 0003:0403:6030.0007: chip code: 0000 0000
[ 1210.385762][ T1664] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1210.428199][ T1664] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1210.463694][T15435] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[ 1210.466547][ T1664] usb 3-1: media controller created
[ 1210.979514][T15435] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup
[ 1211.000543][ T1664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1211.360381][T15435] usb 6-1: reset high-speed USB device number 28 using dummy_hcd
[ 1211.568136][T15899] ------------[ cut here ]------------
[ 1211.574001][T15899] usb 3-1: BOGUS control dir, pipe 80000980 doesn't match bRequestType c0
[ 1211.582589][T15899] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.5.2555/15899
[ 1211.593046][T15899] Modules linked in:
[ 1211.597331][T15899] CPU: 0 UID: 0 PID: 15899 Comm: syz.5.2555 Not tainted syzkaller #0 PREEMPT(full) 
[ 1211.606837][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1211.617434][T15899] RIP: 0010:usb_submit_urb+0x160d/0x19b0
[ 1211.623314][T15899] Code: 48 89 54 24 40 e8 c3 54 8b fa 4c 89 e7 e8 bb ff db fe 48 89 c6 48 8d 3d 11 74 b1 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 94 54 8b fa 89 ee bf ff 00 00 00
[ 1211.643727][T15899] RSP: 0018:ffffc900043df918 EFLAGS: 00010283
[ 1211.650361][T15899] RAX: ffffffff8ca5d6a0 RBX: ffff88802d145700 RCX: 0000000080000980
[ 1211.658440][T15899] RDX: ffff8880284a0ea0 RSI: ffffffff8ca5d6a0 RDI: ffffffff912fce80
[ 1211.666560][T15899] RBP: ffff88807f88e058 R08: 00000000000000c0 R09: 0000000000000000
[ 1211.674646][T15899] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807f88e0b0
[ 1211.682680][T15899] R13: ffff8880222cede0 R14: ffff8880222cede6 R15: ffff8880222cede7
[ 1211.690734][T15899] FS:  00007fb49e38f6c0(0000) GS:ffff888123dee000(0000) knlGS:0000000000000000
[ 1211.699700][T15899] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1211.706360][T15899] CR2: 00005649300b24b0 CR3: 0000000071caf000 CR4: 0000000000350ef0
[ 1211.714420][T15899] Call Trace:
[ 1211.717719][T15899]  <TASK>
[ 1211.720691][T15899]  ? __init_swait_queue_head+0xca/0x150
[ 1211.726276][T15899]  usb_start_wait_urb+0x10e/0x580
[ 1211.732059][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1211.737713][T15899]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1211.743815][T15899]  ? trace_kmalloc+0xeb/0x110
[ 1211.748561][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1211.754287][T15899]  ? __asan_memset+0x23/0x50
[ 1211.758919][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1211.764634][T15899]  usb_control_msg+0x328/0x4b0
[ 1211.769451][T15899]  ? __pfx_usb_control_msg+0x10/0x10
[ 1211.774831][T15899]  ? __kmalloc_noprof+0x322/0x820
[ 1211.779892][T15899]  ? i2cdev_ioctl+0x19d/0x830
[ 1211.784783][T15899]  ? __x64_sys_ioctl+0x18e/0x210
[ 1211.789767][T15899]  ? do_syscall_64+0x115/0x870
[ 1211.794604][T15899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.800758][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1211.806463][T15899]  gl861_ctrl_msg+0x1a5/0x4a0
[ 1211.812273][T15899]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[ 1211.817575][T15899]  ? __lock_acquire+0x49f/0x1a40
[ 1211.822586][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1211.828275][T15899]  ? __lock_acquire+0x49f/0x1a40
[ 1211.834015][T15899]  gl861_i2c_master_xfer+0x545/0x690
[ 1211.839335][T15899]  __i2c_transfer+0x5d9/0x1740
[ 1211.844642][T15899]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1211.850576][T15899]  ? __pfx___i2c_transfer+0x10/0x10
[ 1211.855863][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1211.861726][T15899]  ? rt_mutex_slowtrylock+0x93/0x100
[ 1211.867087][T15899]  i2c_transfer+0x15f/0x380
[ 1211.871671][T15899]  i2cdev_ioctl_rdwr+0x3ec/0x700
[ 1211.876664][T15899]  i2cdev_ioctl+0x19d/0x830
[ 1211.881238][T15899]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1211.886359][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1211.892101][T15899]  ? __fget_files+0x21f/0x3d0
[ 1211.896926][T15899]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1211.902048][T15899]  __x64_sys_ioctl+0x18e/0x210
[ 1211.906866][T15899]  do_syscall_64+0x115/0x870
[ 1211.911530][T15899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.917467][T15899] RIP: 0033:0x7fb49d59de59
[ 1211.921954][T15899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1211.942353][T15899] RSP: 002b:00007fb49e38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1211.951370][T15899] RAX: ffffffffffffffda RBX: 00007fb49d825fa0 RCX: 00007fb49d59de59
[ 1211.959399][T15899] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000004
[ 1211.967457][T15899] RBP: 00007fb49d633e6f R08: 0000000000000000 R09: 0000000000000000
[ 1211.975511][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1211.983608][T15899] R13: 00007fb49d826038 R14: 00007fb49d825fa0 R15: 00007ffed5d43f48
[ 1211.991900][T15899]  </TASK>
[ 1211.994976][T15899] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1212.002271][T15899] CPU: 0 UID: 0 PID: 15899 Comm: syz.5.2555 Not tainted syzkaller #0 PREEMPT(full) 
[ 1212.011684][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1212.021755][T15899] Call Trace:
[ 1212.025038][T15899]  <TASK>
[ 1212.027982][T15899]  dump_stack_lvl+0x100/0x190
[ 1212.032666][T15899]  vpanic+0x552/0x970
[ 1212.036649][T15899]  ? __pfx_vpanic+0x10/0x10
[ 1212.041171][T15899]  panic+0xd1/0xe0
[ 1212.044892][T15899]  ? __pfx_panic+0x10/0x10
[ 1212.049323][T15899]  check_panic_on_warn.cold+0x19/0x34
[ 1212.054700][T15899]  ? usb_submit_urb+0x15ff/0x19b0
[ 1212.059758][T15899]  __warn.cold+0x191/0x318
[ 1212.064197][T15899]  __report_bug+0x30f/0x440
[ 1212.068717][T15899]  ? usb_submit_urb+0x15ff/0x19b0
[ 1212.073761][T15899]  ? __pfx___report_bug+0x10/0x10
[ 1212.078821][T15899]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1212.084634][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.090269][T15899]  ? lockdep_hardirqs_on+0x78/0x100
[ 1212.095506][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.101140][T15899]  ? kasan_save_stack+0x3f/0x50
[ 1212.106007][T15899]  report_bug_entry+0xe1/0x290
[ 1212.110785][T15899]  ? usb_submit_urb+0x160d/0x19b0
[ 1212.115821][T15899]  handle_bug+0x1cd/0x2a0
[ 1212.120146][T15899]  exc_invalid_op+0x17/0x50
[ 1212.124659][T15899]  asm_exc_invalid_op+0x1a/0x20
[ 1212.129526][T15899] RIP: 0010:usb_submit_urb+0x160d/0x19b0
[ 1212.135176][T15899] Code: 48 89 54 24 40 e8 c3 54 8b fa 4c 89 e7 e8 bb ff db fe 48 89 c6 48 8d 3d 11 74 b1 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 94 54 8b fa 89 ee bf ff 00 00 00
[ 1212.154780][T15899] RSP: 0018:ffffc900043df918 EFLAGS: 00010283
[ 1212.160871][T15899] RAX: ffffffff8ca5d6a0 RBX: ffff88802d145700 RCX: 0000000080000980
[ 1212.169012][T15899] RDX: ffff8880284a0ea0 RSI: ffffffff8ca5d6a0 RDI: ffffffff912fce80
[ 1212.176975][T15899] RBP: ffff88807f88e058 R08: 00000000000000c0 R09: 0000000000000000
[ 1212.184937][T15899] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807f88e0b0
[ 1212.192898][T15899] R13: ffff8880222cede0 R14: ffff8880222cede6 R15: ffff8880222cede7
[ 1212.200886][T15899]  ? usb_submit_urb+0x15f5/0x19b0
[ 1212.205934][T15899]  ? __init_swait_queue_head+0xca/0x150
[ 1212.211489][T15899]  usb_start_wait_urb+0x10e/0x580
[ 1212.216528][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.222165][T15899]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1212.227743][T15899]  ? trace_kmalloc+0xeb/0x110
[ 1212.232446][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.238097][T15899]  ? __asan_memset+0x23/0x50
[ 1212.242695][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.248362][T15899]  usb_control_msg+0x328/0x4b0
[ 1212.253147][T15899]  ? __pfx_usb_control_msg+0x10/0x10
[ 1212.258446][T15899]  ? __kmalloc_noprof+0x322/0x820
[ 1212.263530][T15899]  ? i2cdev_ioctl+0x19d/0x830
[ 1212.268237][T15899]  ? __x64_sys_ioctl+0x18e/0x210
[ 1212.273172][T15899]  ? do_syscall_64+0x115/0x870
[ 1212.277948][T15899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.284013][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.289653][T15899]  gl861_ctrl_msg+0x1a5/0x4a0
[ 1212.294351][T15899]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[ 1212.299572][T15899]  ? __lock_acquire+0x49f/0x1a40
[ 1212.304512][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.310149][T15899]  ? __lock_acquire+0x49f/0x1a40
[ 1212.315093][T15899]  gl861_i2c_master_xfer+0x545/0x690
[ 1212.320400][T15899]  __i2c_transfer+0x5d9/0x1740
[ 1212.325175][T15899]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1212.330994][T15899]  ? __pfx___i2c_transfer+0x10/0x10
[ 1212.336200][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.341833][T15899]  ? rt_mutex_slowtrylock+0x93/0x100
[ 1212.347127][T15899]  i2c_transfer+0x15f/0x380
[ 1212.351751][T15899]  i2cdev_ioctl_rdwr+0x3ec/0x700
[ 1212.356706][T15899]  i2cdev_ioctl+0x19d/0x830
[ 1212.361235][T15899]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1212.366263][T15899]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1212.371897][T15899]  ? __fget_files+0x21f/0x3d0
[ 1212.376604][T15899]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1212.381635][T15899]  __x64_sys_ioctl+0x18e/0x210
[ 1212.386405][T15899]  do_syscall_64+0x115/0x870
[ 1212.391013][T15899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.396902][T15899] RIP: 0033:0x7fb49d59de59
[ 1212.401330][T15899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1212.420945][T15899] RSP: 002b:00007fb49e38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1212.429397][T15899] RAX: ffffffffffffffda RBX: 00007fb49d825fa0 RCX: 00007fb49d59de59
[ 1212.437361][T15899] RDX: 0000200000000240 RSI: 0000000000000707 RDI: 0000000000000004
[ 1212.445328][T15899] RBP: 00007fb49d633e6f R08: 0000000000000000 R09: 0000000000000000
[ 1212.453290][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1212.461255][T15899] R13: 00007fb49d826038 R14: 00007fb49d825fa0 R15: 00007ffed5d43f48
[ 1212.469239][T15899]  </TASK>
[ 1212.472493][T15899] Kernel Offset: disabled
[ 1212.476808][T15899] Rebooting in 86400 seconds..