last executing test programs:

12m0.150930761s ago: executing program 32 (id=287):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x1, 0xa, "034000"})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x215}], 0x1)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
unshare(0x78000380)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000380)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x64}}, 0x20004890)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6})
openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x24000001)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x57, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r7}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r7}, 0x38)

8m34.089692983s ago: executing program 0 (id=600):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7})
mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}})
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)
utime(&(0x7f0000000040)='./file0\x00', 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
mq_open(0x0, 0x42, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10)
sendto(r1, 0x0, 0x0, 0x20004891, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2786dd603000bb00302b00fc020000000000000000000000000000fe8000000000000000000000000000aa3c0000000000000087030000000000000401ee000100c9"], 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x551140)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)

8m32.143924661s ago: executing program 0 (id=606):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$qrtr(0x2a, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r2, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

8m29.981665514s ago: executing program 0 (id=609):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00')
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="928e04b416f09fa7a009aee21be2", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x240)
ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000000)=0x8)
ioctl$FE_READ_STATUS(r2, 0x80046f45, &(0x7f0000000280))

8m29.711082823s ago: executing program 0 (id=610):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xffffffffffff57a7, 0xfffffffffffffff8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
set_mempolicy(0x8006, 0x0, 0x3)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x28}, 0x4004004)

8m22.850928443s ago: executing program 0 (id=618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x80002, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2000000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000040000000a00080000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e9f6ff00"/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004050000120000001000000082ce", @ANYRES32, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0)
r6 = socket(0x28, 0x5, 0x0)
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r7, 0x4)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1})
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r12=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRESDEC=r11, @ANYBLOB="310300200000000000400800000008000300", @ANYRES64=r3, @ANYRESHEX=r4, @ANYRES32=r12], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)

8m16.901381414s ago: executing program 0 (id=626):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x0, "d569e8061000fa449676000000a86917fb00000000a663004000000400", 0x34325842})
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x6101, 0x0)

8m0.440851544s ago: executing program 33 (id=626):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x17, 0x2, 0x0, "d569e8061000fa449676000000a86917fb00000000a663004000000400", 0x34325842})
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x6101, 0x0)

8m0.239948403s ago: executing program 5 (id=646):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x149040, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)

7m58.830457832s ago: executing program 5 (id=651):
r0 = getpid() (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0) (async)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) (async)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc0002009}) (async)
epoll_pwait(r2, &(0x7f0000000140), 0x0, 0x804000a, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1) (async)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) (async)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x66, &(0x7f00000008c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "000400000000"}]}}}}}}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) (async)
r4 = syz_open_procfs(r0, &(0x7f0000000080)='net/tcp6\x00') (async)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x604401, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000001940)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4096, 0x1000})
pread64(r4, &(0x7f0000003b00)=""/184, 0xb8, 0x591f)

7m57.222504999s ago: executing program 5 (id=654):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000d700"/28], 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

7m56.503258385s ago: executing program 5 (id=657):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r3, 0x18}, 0x38)
r4 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000001c0)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r6, <r7=>0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x2e, 0x0, &(0x7f0000000300))
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r7})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0xffffffff, 0xe, 0x200, 0x2], [0x8001, 0x80000001, 0x2000000000000f, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24d, 0x0, 0x1000000000000001, 0x6, 0x10004, 0x2, 0x10, 0x2, 0x1, 0x1, 0x3, 0x8, 0x4, 0x5, 0x1, 0x1, 0xc, 0xe, 0x1, 0xf, 0x7, 0x2, 0x6, 0x200, 0x1000, 0x12, 0x0, 0x0, 0xc1, 0x2, 0x5ba9, 0x8, 0x0, 0x7, 0x8, 0x3, 0x400000000, 0x100000000, 0x8001, 0x9, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x4, 0x2, 0xd, 0x4, 0x0, 0x8000000000000000, 0x3, 0x58c1, 0x5, 0x0, 0x100, 0x2da74e41, 0x1, 0x10, 0x8, 0x6, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x5, 0x7, 0x8000003, 0x102, 0x1ff, 0x7, 0xe648, 0x5, 0x6, 0xdfb3, 0x3, 0x4000000000002, 0xfffffffffffffffd, 0x4, 0x3, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x3, 0xb4000000, 0x0, 0x724, 0x8, 0x5, 0x662, 0x7, 0x9, 0x1000, 0xfffffffffffffff9, 0x7, 0xc144, 0x2, 0xfffffffffffff371, 0x4]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000180)=0x8000000000000000)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1, r9})

7m55.663384001s ago: executing program 5 (id=660):
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x8080}], 0x1, 0x0, 0x0, 0x0)

7m54.30386732s ago: executing program 5 (id=664):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async)
sendmmsg$inet6(r1, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}}], 0x1, 0x81)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
r2 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xacba, 0x0, 0x4000000000, 0x7ff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bbc, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x8}}, 0xe8) (async)
sendmmsg(r0, &(0x7f0000000480), 0x0, 0x22000000) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x9, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff}) (async)
pipe2$9p(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) (async)
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
unshare(0x400) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x11, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6c, 0x9, 0x4, 0x400001, 0x3, 0x5, 0x8, 0xffc, 0x4, 0x600, 0x3, 0x1, 0xfffffffa, 0x3, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x12, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x2, 0x5, 0x79b, 0x1, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x1000, 0x4007, 0x8b, 0x5, 0x4, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x1, 0x9, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x3, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x5, 0xb, 0x2, 0xd9a, 0x9, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0xf, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080)=0x8, 0x57) (async)
sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async)
close(r8)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000005) (async)
futex(&(0x7f0000005f00)=0x1, 0x18b, 0x1, 0x0, 0x0, 0x2)

7m35.431169991s ago: executing program 34 (id=664):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async)
sendmmsg$inet6(r1, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}}], 0x1, 0x81)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
r2 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xacba, 0x0, 0x4000000000, 0x7ff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bbc, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x8}}, 0xe8) (async)
sendmmsg(r0, &(0x7f0000000480), 0x0, 0x22000000) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x9, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff}) (async)
pipe2$9p(&(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) (async)
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async)
unshare(0x400) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x11, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6c, 0x9, 0x4, 0x400001, 0x3, 0x5, 0x8, 0xffc, 0x4, 0x600, 0x3, 0x1, 0xfffffffa, 0x3, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x12, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x2, 0x5, 0x79b, 0x1, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x1000, 0x4007, 0x8b, 0x5, 0x4, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x1, 0x9, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x3, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x5, 0xb, 0x2, 0xd9a, 0x9, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0xf, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080)=0x8, 0x57) (async)
sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async)
close(r8)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000005) (async)
futex(&(0x7f0000005f00)=0x1, 0x18b, 0x1, 0x0, 0x0, 0x2)

3m28.590926363s ago: executing program 2 (id=959):
socket(0x400000000010, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @loopback, 0xa}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x34)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

3m27.967387401s ago: executing program 2 (id=961):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000, 0x0, 0x0, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

3m27.81769376s ago: executing program 4 (id=962):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @private1={0xfc, 0x1, '\x00', 0x8}, 0x1, 0x80, 0xfffffffc, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0})

3m27.718508555s ago: executing program 3 (id=963):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x58, r1, 0x4761a3aaa1c00dfb, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x6, 0x1}, {0x239d135d612d6414, 0x1}, {0x36, 0x1}, {0x18}, {0xec6b4d5701ac9932, 0x1}, {0x1b, 0x1}, {0x12, 0x1}, {0x48, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0xc}, {0x6}, {0x30}, {0x16, 0x1}, {0x16, 0x1}, {0x3}, {0x48}, {0x60}, {0x60, 0x1}, {0x6c, 0x1}, {}]}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x12f}]}, 0x58}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0)

3m26.816662031s ago: executing program 2 (id=964):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1031, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000900}, 0x20004000)

3m26.781586262s ago: executing program 3 (id=965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

3m26.619029057s ago: executing program 4 (id=966):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x81}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050)

3m26.323052414s ago: executing program 2 (id=967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000940)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40088c4)

3m26.278293537s ago: executing program 3 (id=968):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0)

3m26.195014494s ago: executing program 4 (id=969):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @loopback, 0xa}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x34)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

3m25.875712761s ago: executing program 4 (id=970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r3, 0x101, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}]}, 0x30}}, 0x20004800)

3m25.760330639s ago: executing program 2 (id=971):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)

3m25.598943926s ago: executing program 3 (id=972):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xfffffc}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

3m25.383942497s ago: executing program 2 (id=973):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xa, 0x0, 0x80000001, 0x1, 0x3e0, 0x6, 0x1}}, {0x6, 0x2, [0xfffa]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$unix(0x1, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

3m25.37913987s ago: executing program 4 (id=974):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000)
r1 = socket(0x14, 0x2, 0x4)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000100))

3m25.191076413s ago: executing program 3 (id=975):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x4008000)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(r0, 0xc)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000080)={{0x2, 0x4e20, @local}, {0x0, @multicast}, 0x23ea8509986135bf, {0x2, 0x4e22, @empty}, 'wg2\x00'})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)

3m24.442691805s ago: executing program 3 (id=976):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d"], 0x68}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000040)={'wlan0\x00'})

3m23.936430721s ago: executing program 4 (id=977):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2f910000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fcdbdf250900000024000280060002004e21000006000b000a000000080003000000000005000d000000000008000400050000000800050003000000180001800c000700180000000100000007000600666f00000800060001000000080005000800000008000600080000004400038005000800400000001400020076657468305f766972745f7769666900080003000000000014000600ff01000000000000000000000000000106000400020000000800040005000000"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x4044041)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x4c000)

3m9.845937758s ago: executing program 35 (id=973):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xa, 0x0, 0x80000001, 0x1, 0x3e0, 0x6, 0x1}}, {0x6, 0x2, [0xfffa]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$unix(0x1, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

3m8.587105906s ago: executing program 36 (id=976):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d"], 0x68}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000040)={'wlan0\x00'})

3m8.491404708s ago: executing program 37 (id=977):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2f910000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fcdbdf250900000024000280060002004e21000006000b000a000000080003000000000005000d000000000008000400050000000800050003000000180001800c000700180000000100000007000600666f00000800060001000000080005000800000008000600080000004400038005000800400000001400020076657468305f766972745f7769666900080003000000000014000600ff01000000000000000000000000000106000400020000000800040005000000"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x4044041)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x4c000)

1m8.786853912s ago: executing program 6 (id=1079):
add_key(0x0, 0x0, &(0x7f0000000340)="0000000000000002ff6900000000000100000018000000060002", 0x1a, 0xffffffffffffffff)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x103001, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
listen(0xffffffffffffffff, 0x5)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea", 0x40, 0x408c4, 0x0, 0x0)
writev(r4, &(0x7f0000000540)=[{&(0x7f00000001c0)="00a3eab2c918c4da6eb5cd97354c9f08f58f688247fcb9fe35308d4f79075a9d32f421672992443853149f84a776ab26c81832684e8288a4407784e2518c14cb9584ccfa23053893a7d9fda136b322cf6a4d370ab2f0ac1a9a2982853170fe4e8d83a14cea902f62b1c9b0976b63074ecd585448fe5b2a2766058e8a43b4fd0d001c2d33bbe3672b3f9328f300363198abae8fa7", 0x94}, {0x0}, {0x0}], 0x3)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1m6.753191787s ago: executing program 6 (id=1082):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

57.696621316s ago: executing program 6 (id=1098):
setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100})
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
connect$bt_rfcomm(r3, &(0x7f0000000180)={0x1f, @any, 0xa}, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x39, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x2e}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @alu={0x4, 0x0, 0x0, 0x8, 0x4, 0xa4f0554390bc0c54}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x94f20a58dd00ab5e}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0xffffffff, 0xc3, &(0x7f0000000640)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x2, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r3, r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000800)=[{0x4, 0x5, 0x5, 0x9}], 0x10, 0x400}, 0x94)
pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0xffffffffffff0001)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
socket(0x10, 0x80002, 0x0)

53.262750792s ago: executing program 6 (id=1100):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x24, 0x0)

46.525857831s ago: executing program 6 (id=1105):
add_key(0x0, 0x0, &(0x7f0000000340)="0000000000000002ff6900000000000100000018000000060002", 0x1a, 0xffffffffffffffff)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x103001, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10)
listen(0xffffffffffffffff, 0x5)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15", 0x41, 0x408c4, 0x0, 0x0)
writev(r4, &(0x7f0000000540)=[{&(0x7f00000001c0)="00a3eab2c918c4da6eb5cd97354c9f08f58f688247fcb9fe35308d4f79075a9d32f421672992443853149f84a776ab26c81832684e8288a4407784e2518c14cb9584ccfa23053893a7d9fda136b322cf6a4d370ab2f0ac1a9a2982853170fe4e8d83a14cea902f62b1c9b0976b63074ecd585448fe5b2a2766058e8a43b4fd0d001c2d33bbe3672b3f9328f300363198abae8fa7", 0x94}, {0x0}, {0x0}], 0x3)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

40.733819459s ago: executing program 6 (id=1114):
gettid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[], 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55)
write(r5, &(0x7f0000000000)="0a000000010001", 0x7)

36.244936744s ago: executing program 8 (id=1118):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180)={'bond0\x00'})
r1 = socket(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
syz_emit_ethernet(0x4e, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r4=>0x0]}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x202, 0x2, 0x2, r4}, 0x10)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x480002, 0x0)
connect$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x0, @hyper}, 0x10)

33.010965117s ago: executing program 8 (id=1123):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r4, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={<r5=>0x0, 0x0, 0x2, 0x3}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x1}, &(0x7f0000000140)=0xc)
sendmmsg$inet6(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000002900000034000000090000000000000024000000000000002900000032000000fe8800"/55, @ANYRES32=0x0, @ANYBLOB="000000000273"], 0x50}}], 0x2, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_usb_connect(0x0, 0x47, &(0x7f00000002c0)=ANY=[@ANYBLOB="120150023a238910401c3405407801020301090235000208da00080904285d00cccfeca70904e00102f4044e00090508031000f1034009050e0810000b3c0c06fc080b22871ba2e92a"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket(0x10, 0x803, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x3ffd}]})

32.750593935s ago: executing program 1 (id=1124):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340))
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r3, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

28.990124517s ago: executing program 9 (id=1126):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x60}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0xa, 0x3, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfd, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000002b80)=ANY=[@ANYBLOB="f0"], 0x12f0}, {&(0x7f0000000080)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x1}, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000700)={&(0x7f0000000600)=[{0x100000000, 0x1}, {0x7, 0x3, 0x2}, {0xdb18, 0x4, 0x1}], 0x3, 0x10, 0x4146, 0x9})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)

28.296205484s ago: executing program 1 (id=1127):
setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100})
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r2)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
connect$bt_rfcomm(r3, &(0x7f0000000180)={0x1f, @any, 0xa}, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x39, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x2e}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @alu={0x4, 0x0, 0x0, 0x8, 0x4, 0xa4f0554390bc0c54}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x94f20a58dd00ab5e}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0xffffffff, 0xc3, &(0x7f0000000640)=""/195, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x2, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r3, r3, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000800)=[{0x4, 0x5, 0x5, 0x9}], 0x10, 0x400}, 0x94)
pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0xffffffffffff0001)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)
sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
socket(0x10, 0x80002, 0x0)

25.876501518s ago: executing program 8 (id=1128):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x24, 0x0)

25.385001682s ago: executing program 38 (id=1114):
gettid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[], 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55)
write(r5, &(0x7f0000000000)="0a000000010001", 0x7)

24.207961166s ago: executing program 7 (id=1130):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f0000000000)=""/227, 0xe3}, {&(0x7f00000072c0)=""/4108, 0x100c}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000e80)=""/103, 0x67}], 0x9}, 0x70004}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x100, 0x0)

22.270496782s ago: executing program 8 (id=1131):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet(0x2, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r4, 0x81000000)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200e00, 0x0)
syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x9, 0x2)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'veth0_to_bond\x00', 0x100})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000008050000000000000000000a0000040900010073797a31000000000600ea3f003700001c0004800800084000000003080004400000000508000940000000010500030084000040"], 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008090)
tkill(0x0, 0xb)

22.248793491s ago: executing program 9 (id=1132):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0xa, 0xc28, 0x9, 0x8, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x80000001, 0x1, 0x1, 0x7, 0x40, 0x7, 0x10, 0x8000, 0x5, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x5, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x1, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0xb4, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x4, 0x9, 0x0, 0x4, 0x10, 0x6, 0x5, 0x2, 0x7a, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x9, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0x2000000b, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x8, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xeaa, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x6, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0b, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x5, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xe, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

21.163376398s ago: executing program 7 (id=1133):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000180)={'bond0\x00'})
r1 = socket(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
syz_emit_ethernet(0x4e, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r4=>0x0]}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x202, 0x2, 0x2, r4}, 0x10)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x480002, 0x0)
connect$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0x0, @hyper}, 0x10)

21.107142617s ago: executing program 1 (id=1134):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x70}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xa, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='veno', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d)

18.526546074s ago: executing program 7 (id=1135):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r4, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={<r5=>0x0, 0x0, 0x2, 0x3}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x1}, &(0x7f0000000140)=0xc)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_usb_connect(0x0, 0x47, &(0x7f00000002c0)=ANY=[@ANYBLOB="120150023a238910401c3405407801020301090235000208da00080904285d00cccfeca70904e00102f4044e00090508031000f1034009050e0810000b3c0c06fc080b22871ba2e92a"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket(0x10, 0x803, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x3ffd}]})

18.467886539s ago: executing program 9 (id=1136):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
socket(0x2b, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f72"], 0x4c}}, 0x2)
syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/213, 0xd5)

18.333731232s ago: executing program 1 (id=1137):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet(0x2, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r3, 0x81000000)

12.322023983s ago: executing program 9 (id=1138):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r3, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000000180)=0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
sendmmsg$inet6(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000002900000034000000090000000000000024000000000000002900000032000000fe8800"/55, @ANYRES32=0x0, @ANYBLOB="000000000273"], 0x50}}], 0x2, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000030000001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_usb_connect(0x0, 0x47, &(0x7f00000002c0)=ANY=[@ANYBLOB="120150023a238910401c3405407801020301090235000208da00080904285d00cccfeca70904e00102f4044e00090508031000f1034009050e0810000b3c0c06fc080b22871ba2e92a"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket(0x10, 0x803, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x48c, 0x0, 0x3ffd}]})

12.311229581s ago: executing program 7 (id=1139):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x3, 0xf90}, {0x5, 0x200}, 0x6d40})
r2 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0xe8200, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x400100000000c595, 0x0, 0x1, 0x5, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

11.392306647s ago: executing program 1 (id=1140):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x24, 0x0)

10.942845562s ago: executing program 8 (id=1141):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x60}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0xa, 0x3, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfd, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000002b80)=ANY=[@ANYBLOB="f0"], 0x12f0}, {&(0x7f0000000080)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x1}, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000700)={&(0x7f0000000600)=[{0x100000000, 0x1}, {0x7, 0x3, 0x2}, {0xdb18, 0x4, 0x1}], 0x3, 0x10, 0x4146, 0x9})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)

7.442696954s ago: executing program 1 (id=1142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f0000000000)=""/227, 0xe3}, {&(0x7f00000072c0)=""/4108, 0x100c}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000e80)=""/103, 0x67}], 0x9}, 0x70004}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x100, 0x0)

6.405389084s ago: executing program 9 (id=1143):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[], 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55)
write(r5, &(0x7f0000000000)="0a000000010001", 0x7)

6.213040982s ago: executing program 8 (id=1144):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r1, 0x5, 0x0, 0x40000000, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x19}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7f}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}]}]}, 0x48}}, 0x0)

5.557948926s ago: executing program 7 (id=1145):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[], 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55)
write(r5, &(0x7f0000000000)="0a000000010001", 0x7)

2.894621893s ago: executing program 9 (id=1146):
connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @loopback, 0xa}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x34)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

0s ago: executing program 7 (id=1147):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xf, 0x7ffffffe}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

 tx timeout
[  632.564995][ T8930] Bluetooth: hci1: command 0x0c1a tx timeout
[  633.994303][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.097549][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  635.486872][ T8930] Bluetooth: hci1: command 0x0c1a tx timeout
[  635.486913][ T8930] Bluetooth: hci6: command 0x0c1a tx timeout
[  635.579815][ T1174] bond0 (unregistering): Released all slaves
[  635.755582][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7
[  636.533492][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.533613][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.533855][ T8799] bridge_slave_0: entered allmulticast mode
[  636.536945][ T8799] bridge_slave_0: entered promiscuous mode
[  637.534155][   T59] Bluetooth: hci1: command 0x0c1a tx timeout
[  637.627075][ T1174] hsr_slave_0: left promiscuous mode
[  637.706837][ T1174] hsr_slave_1: left promiscuous mode
[  637.707606][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.945167][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.853573][ T1174] team0 (unregistering): Port device team_slave_1 removed
[  638.917827][ T1174] team0 (unregistering): Port device team_slave_0 removed
[  639.328613][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.328708][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.328914][ T8799] bridge_slave_1: entered allmulticast mode
[  639.336279][ T8799] bridge_slave_1: entered promiscuous mode
[  639.373644][ T5740] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  639.543809][ T5740] usb 3-1: Using ep0 maxpacket: 16
[  639.546319][ T5740] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  639.546354][ T5740] usb 3-1: config 0 has no interface number 0
[  639.546389][ T5740] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  639.546408][ T5740] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  639.549032][ T5740] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  639.549063][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.549087][ T5740] usb 3-1: Product: syz
[  639.549098][ T5740] usb 3-1: Manufacturer: syz
[  639.549109][ T5740] usb 3-1: SerialNumber: syz
[  639.553016][ T5740] usb 3-1: config 0 descriptor??
[  639.691866][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.741942][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.877254][ T8972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.881898][ T8972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.678913][ T8799] team0: Port device team_slave_0 added
[  640.679778][ T8972] tipc: Started in network mode
[  640.679822][ T8972] tipc: Node identity fe259f395bcd, cluster identity 4711
[  640.680347][ T8972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  640.684658][ T8987] tipc: Resetting bearer <eth:syzkaller0>
[  640.869267][ T8799] team0: Port device team_slave_1 added
[  642.500111][ T8971] tipc: Disabling bearer <eth:syzkaller0>
[  642.952907][   T42] tipc: Node number set to 2783485753
[  643.012965][ T5740] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71
[  643.020488][ T5740] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71
[  643.055643][ T5740] usb 3-1: USB disconnect, device number 28
[  643.104998][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.105014][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.105039][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.107014][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.107027][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.107050][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.289104][ T8930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  643.324725][ T8930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  643.338432][ T8930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  643.385018][ T8930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  643.387323][ T8930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  643.886019][ T8799] hsr_slave_0: entered promiscuous mode
[  643.887340][ T8799] hsr_slave_1: entered promiscuous mode
[  643.889804][ T8799] debugfs: 'hsr0' already exists in 'hsr'
[  643.889828][ T8799] Cannot create hsr debugfs directory
[  645.528211][   T59] Bluetooth: hci0: command tx timeout
[  647.533495][   T59] Bluetooth: hci0: command tx timeout
[  649.613831][   T59] Bluetooth: hci0: command tx timeout
[  649.746765][ T9039] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  649.754235][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8
[  649.925156][   T42] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  650.078156][   T42] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  650.078187][   T42] usb 5-1: config 0 has no interface number 0
[  650.078233][   T42] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E
[  650.078262][   T42] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8E has invalid maxpacket 15455, setting to 64
[  650.081068][   T42] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  650.081100][   T42] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  650.081122][   T42] usb 5-1: Product: syz
[  650.081138][   T42] usb 5-1: SerialNumber: syz
[  650.166408][   T42] usb 5-1: config 0 descriptor??
[  650.169381][ T9049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  650.193086][   T42] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  651.726051][ T8930] Bluetooth: hci0: command tx timeout
[  654.576855][   T42] usb 5-1: USB disconnect, device number 24
[  658.186464][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.186599][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.186872][ T8996] bridge_slave_0: entered allmulticast mode
[  658.229396][ T8996] bridge_slave_0: entered promiscuous mode
[  658.245285][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.245515][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.245776][ T8996] bridge_slave_1: entered allmulticast mode
[  658.252209][ T8996] bridge_slave_1: entered promiscuous mode
[  658.454349][ T1174] bridge_slave_1: left allmulticast mode
[  658.454385][ T1174] bridge_slave_1: left promiscuous mode
[  658.454673][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  658.634631][ T1174] bridge_slave_0: left allmulticast mode
[  658.634669][ T1174] bridge_slave_0: left promiscuous mode
[  658.634946][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.693342][ T5740] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  659.851378][ T5740] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  659.851413][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.851926][ T5740] usb 3-1: Product: syz
[  659.851944][ T5740] usb 3-1: Manufacturer: syz
[  659.851960][ T5740] usb 3-1: SerialNumber: syz
[  659.917540][ T5740] usb 3-1: config 0 descriptor??
[  660.528831][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  660.679122][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  660.697961][ T5740] usb 3-1: Firmware: major: 74, minor: 113, hardware type: UNKNOWN (159)
[  660.741192][ T1174] bond0 (unregistering): Released all slaves
[  660.954487][ T8996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  660.971252][ T8996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  661.775351][ T5740] usb 3-1: failed to fetch extended address, random address set
[  661.775384][ T5740] usb 3-1: atusb_probe: initialization failed, error = -524
[  661.776301][ T5740] atusb 3-1:0.0: probe with driver atusb failed with error -524
[  662.247558][ T5733] usb 3-1: USB disconnect, device number 29
[  662.284832][ T1174] hsr_slave_0: left promiscuous mode
[  662.325392][ T1174] hsr_slave_1: left promiscuous mode
[  662.326467][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  662.366715][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.166832][ T1174] team0 (unregistering): Port device team_slave_1 removed
[  665.254216][ T1174] team0 (unregistering): Port device team_slave_0 removed
[  665.633962][ T8996] team0: Port device team_slave_0 added
[  665.637266][ T9113] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  665.640073][ T8996] team0: Port device team_slave_1 added
[  666.107891][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.107911][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.107943][ T8996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.803317][ T5740] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  666.983339][ T5740] usb 3-1: Using ep0 maxpacket: 16
[  666.985752][ T5740] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  666.985781][ T5740] usb 3-1: config 0 has no interface number 0
[  666.985828][ T5740] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  666.985857][ T5740] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  666.988821][ T5740] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  666.988850][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.988872][ T5740] usb 3-1: Product: syz
[  666.988887][ T5740] usb 3-1: Manufacturer: syz
[  666.988902][ T5740] usb 3-1: SerialNumber: syz
[  667.083391][ T5740] usb 3-1: config 0 descriptor??
[  667.263569][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.263589][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.263621][ T8996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.319247][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.320603][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.817215][ T9154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  668.438674][   T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  668.477491][   T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  668.486062][   T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  668.519464][   T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  668.539372][   T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  668.807549][ T9129] tipc: Disabling bearer <eth:syzkaller0>
[  668.878705][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'.
[  669.071874][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  669.093771][ T5740] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71
[  669.094055][ T5740] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71
[  669.190124][ T5740] usb 3-1: USB disconnect, device number 30
[  670.003534][   T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  670.142177][ T8996] hsr_slave_0: entered promiscuous mode
[  670.163940][   T10] usb 3-1: Using ep0 maxpacket: 16
[  670.164552][ T8996] hsr_slave_1: entered promiscuous mode
[  670.167215][ T8996] debugfs: 'hsr0' already exists in 'hsr'
[  670.167292][ T8996] Cannot create hsr debugfs directory
[  670.171492][   T10] usb 3-1: config 0 has an invalid interface number: 180 but max is 0
[  670.171519][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  670.171539][   T10] usb 3-1: config 0 has no interface number 0
[  670.238608][   T10] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72
[  670.238637][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.238655][   T10] usb 3-1: Product: syz
[  670.238668][   T10] usb 3-1: Manufacturer: syz
[  670.238681][   T10] usb 3-1: SerialNumber: syz
[  670.276811][   T10] usb 3-1: config 0 descriptor??
[  670.322194][   T10] rndis_host 3-1:0.180: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  670.572181][ T6002] usb 3-1: USB disconnect, device number 31
[  670.742764][ T8930] Bluetooth: hci6: command tx timeout
[  671.083455][ T1174] bridge_slave_1: left allmulticast mode
[  671.083495][ T1174] bridge_slave_1: left promiscuous mode
[  671.083776][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.293569][ T1174] bridge_slave_0: left allmulticast mode
[  671.293609][ T1174] bridge_slave_0: left promiscuous mode
[  671.293906][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.815724][ T8930] Bluetooth: hci6: command tx timeout
[  673.708330][ T9217] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  673.790571][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  673.910041][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  674.007636][ T1174] bond0 (unregistering): Released all slaves
[  674.014089][   T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  674.062148][   T36] audit: type=1326 audit(1780588232.981:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.062211][   T36] audit: type=1326 audit(1780588232.981:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.066947][   T36] audit: type=1326 audit(1780588232.991:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.068578][   T36] audit: type=1326 audit(1780588232.991:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.070185][   T36] audit: type=1326 audit(1780588232.991:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.114817][   T36] audit: type=1326 audit(1780588232.991:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.114975][   T36] audit: type=1326 audit(1780588233.041:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.219114][   T31] usb 3-1: Using ep0 maxpacket: 8
[  674.264824][   T36] audit: type=1326 audit(1780588233.041:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.264866][   T36] audit: type=1326 audit(1780588233.181:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.264900][   T36] audit: type=1326 audit(1780588233.191:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abb7fce59 code=0x7ffc0000
[  674.265004][   T31] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  674.265024][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.265038][   T31] usb 3-1: Product: syz
[  674.265048][   T31] usb 3-1: Manufacturer: syz
[  674.265059][   T31] usb 3-1: SerialNumber: syz
[  674.277236][   T31] usb 3-1: config 0 descriptor??
[  674.389604][   T31] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  674.389649][   T31] pctv452e: pctv452e_power_ctrl: 1
[  674.389649][   T31] 
[  674.389696][   T31] usb 3-1: selecting invalid altsetting 3
[  674.389712][   T31] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  674.389712][   T31] 
[  674.389739][   T31] dvb-usb: bulk message failed: -22 (5/0)
[  674.482928][   T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  674.485172][   T31] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  674.485384][   T31] usb 3-1: media controller created
[  674.485521][   T31] dvb-usb: bulk message failed: -22 (8/0)
[  674.485550][   T31] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  674.485687][   T31] dvb-usb: MAC address reading failed.
[  674.549061][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  674.795520][   T31] DVB: Unable to find symbol stb0899_attach()
[  674.795539][   T31] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  674.893300][ T8930] Bluetooth: hci6: command tx timeout
[  675.016927][   T31] rc_core: IR keymap rc-tt-1500 not found
[  675.016944][   T31] Registered IR keymap rc-empty
[  675.018194][   T31] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  675.031135][   T31] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input18
[  675.061451][   T31] dvb-usb: schedule remote query interval to 100 msecs.
[  675.061475][   T31] pctv452e: pctv452e_power_ctrl: 0
[  675.061475][   T31] 
[  675.061488][   T31] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  675.151631][   T31] usb 3-1: USB disconnect, device number 32
[  675.556567][ T1174] hsr_slave_0: left promiscuous mode
[  675.598079][ T1174] hsr_slave_1: left promiscuous mode
[  675.654229][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.696150][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.869183][   T31] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  677.020936][ T8930] Bluetooth: hci6: command tx timeout
[  677.086697][ T1174] team0 (unregistering): Port device team_slave_1 removed
[  677.145145][ T1174] team0 (unregistering): Port device team_slave_0 removed
[  685.261612][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'.
[  686.098422][ T1343] ieee802154 phy0 wpan0: encryption failed: -22
[  686.309675][ T1174] bridge_slave_1: left allmulticast mode
[  686.309713][ T1174] bridge_slave_1: left promiscuous mode
[  686.309999][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.411601][ T9309] FAULT_INJECTION: forcing a failure.
[  686.411601][ T9309] name failslab, interval 1, probability 0, space 0, times 0
[  686.411643][ T9309] CPU: 0 UID: 0 PID: 9309 Comm: syz.2.824 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  686.411674][ T9309] Tainted: [L]=SOFTLOCKUP
[  686.411682][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  686.411697][ T9309] Call Trace:
[  686.411706][ T9309]  <TASK>
[  686.411722][ T9309]  dump_stack_lvl+0xe8/0x150
[  686.411756][ T9309]  should_fail_ex+0x46b/0x600
[  686.411794][ T9309]  should_failslab+0xa8/0x100
[  686.411825][ T9309]  kmem_cache_alloc_noprof+0x87/0x680
[  686.411849][ T9309]  ? __netlink_lookup+0xc6/0x8b0
[  686.411882][ T9309]  ? skb_clone+0x212/0x3a0
[  686.411922][ T9309]  skb_clone+0x212/0x3a0
[  686.411960][ T9309]  __netlink_deliver_tap+0x404/0x850
[  686.412004][ T9309]  ? netlink_deliver_tap+0x2e/0x1b0
[  686.412039][ T9309]  netlink_deliver_tap+0x19c/0x1b0
[  686.412073][ T9309]  netlink_unicast+0x754/0x920
[  686.412113][ T9309]  netlink_sendmsg+0x813/0xb40
[  686.412156][ T9309]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.412191][ T9309]  ? unwind_get_return_address+0x4d/0x90
[  686.412226][ T9309]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  686.412255][ T9309]  ____sys_sendmsg+0x94c/0x9c0
[  686.412297][ T9309]  ? __pfx_____sys_sendmsg+0x10/0x10
[  686.412339][ T9309]  ? import_iovec+0x73/0xa0
[  686.412380][ T9309]  ___sys_sendmsg+0x2a5/0x360
[  686.412413][ T9309]  ? __lock_acquire+0x6b5/0x2cf0
[  686.412448][ T9309]  ? __pfx____sys_sendmsg+0x10/0x10
[  686.412521][ T9309]  ? __fget_files+0x2a/0x420
[  686.412552][ T9309]  ? __fget_files+0x3a6/0x420
[  686.412585][ T9309]  __x64_sys_sendmsg+0x1c3/0x2a0
[  686.412630][ T9309]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  686.412676][ T9309]  ? __pfx_ksys_write+0x10/0x10
[  686.412719][ T9309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.412745][ T9309]  do_syscall_64+0x174/0x580
[  686.412778][ T9309]  ? trace_irq_disable+0x3b/0x140
[  686.412803][ T9309]  ? clear_bhb_loop+0x40/0x90
[  686.412831][ T9309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.412854][ T9309] RIP: 0033:0x7fec44fbce59
[  686.412874][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.412891][ T9309] RSP: 002b:00007fec43216028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.412911][ T9309] RAX: ffffffffffffffda RBX: 00007fec45235fa0 RCX: 00007fec44fbce59
[  686.412923][ T9309] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  686.412935][ T9309] RBP: 00007fec43216090 R08: 0000000000000000 R09: 0000000000000000
[  686.412945][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.412956][ T9309] R13: 00007fec45236038 R14: 00007fec45235fa0 R15: 00007fff310e65c8
[  686.412983][ T9309]  </TASK>
[  686.722182][ T9312] netlink: 592 bytes leftover after parsing attributes in process `syz.3.825'.
[  686.756302][ T1174] bridge_slave_0: left allmulticast mode
[  686.756339][ T1174] bridge_slave_0: left promiscuous mode
[  686.766412][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.393391][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  687.455310][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  687.534093][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  687.544307][   T10] usb 5-1: Using ep0 maxpacket: 8
[  687.565018][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  687.566943][   T10] usb 5-1: config 1 has an invalid interface number: 8 but max is 0
[  687.566972][   T10] usb 5-1: config 1 has no interface number 0
[  687.567012][   T10] usb 5-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  687.567028][   T10] usb 5-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1
[  687.567047][   T10] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  687.567066][   T10] usb 5-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81
[  687.567084][   T10] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.567108][   T10] usb 5-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  687.567128][   T10] usb 5-1: config 1 interface 8 has no altsetting 0
[  687.569720][   T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07
[  687.569754][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.569770][   T10] usb 5-1: Product: syz
[  687.569780][   T10] usb 5-1: Manufacturer: syz
[  687.569791][   T10] usb 5-1: SerialNumber: syz
[  687.745697][ T1174] bond0 (unregistering): Released all slaves
[  687.793627][ T8996] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  687.887109][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  687.929724][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.933076][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.992023][ T8996] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  688.101636][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  688.115064][   T10] cxacru_cm: 5 callbacks suppressed
[  688.115100][   T10] cxacru 5-1:1.8: send of cm 0x90 failed (-71)
[  688.115272][   T10] cxacru 5-1:1.8: usbatm_usb_probe: invalid endpoint 02!
[  688.183507][   T10] cxacru 5-1:1.8: probe with driver cxacru failed with error -22
[  688.190613][   T10] usb 5-1: USB disconnect, device number 25
[  688.223336][ T8996] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  688.269475][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  688.399833][ T8996] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  688.467639][ T8996] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  688.468653][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.468780][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.469033][ T9162] bridge_slave_0: entered allmulticast mode
[  688.472072][ T9162] bridge_slave_0: entered promiscuous mode
[  688.845661][ T1174] hsr_slave_0: left promiscuous mode
[  688.883548][ T6002] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  688.884801][ T1174] hsr_slave_1: left promiscuous mode
[  688.885810][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.955231][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  689.036781][ T6002] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  689.036821][ T6002] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  689.036849][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.095960][ T6002] gspca_main: stv0680-2.14.0 probing 041e:4007
[  689.642323][ T5733] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  689.907497][ T5733] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  689.907532][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.980264][ T5733] usb 5-1: config 0 descriptor??
[  689.988913][ T5733] cp210x 5-1:0.0: cp210x converter detected
[  691.539826][ T6002] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  691.542982][ T6002] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  691.543006][ T6002] stv0680 3-1:4.0: last error: 79,  command = 0x78
[  691.669199][ T6002] usb 3-1: USB disconnect, device number 33
[  691.790572][ T5733] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  691.914056][ T1174] team0 (unregistering): Port device team_slave_1 removed
[  692.014646][ T1174] team0 (unregistering): Port device team_slave_0 removed
[  694.580523][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.581401][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.582509][ T9162] bridge_slave_1: entered allmulticast mode
[  694.623327][ T9162] bridge_slave_1: entered promiscuous mode
[  695.217914][ T9371] netlink: 'syz.3.831': attribute type 1 has an invalid length.
[  695.230859][   T36] audit: type=1326 audit(1780588254.141:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9368 comm="syz.3.831" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4abb7fce59 code=0x0
[  695.318154][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  695.410094][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  695.798705][ T9162] team0: Port device team_slave_0 added
[  696.058760][ T9162] team0: Port device team_slave_1 added
[  696.331061][ T5733] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71
[  696.331123][ T5733] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  696.516561][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  696.516576][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  696.516598][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  696.878233][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  696.878251][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  696.878283][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  696.991975][ T5733] usb 5-1: cp210x converter now attached to ttyUSB0
[  697.047952][ T5733] usb 5-1: USB disconnect, device number 26
[  697.329798][ T9162] hsr_slave_0: entered promiscuous mode
[  697.330886][ T9162] hsr_slave_1: entered promiscuous mode
[  697.331613][ T9162] debugfs: 'hsr0' already exists in 'hsr'
[  697.331634][ T9162] Cannot create hsr debugfs directory
[  698.983468][ T5733] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  699.035167][ T5733] cp210x 5-1:0.0: device disconnected
[  700.747279][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0
[  700.869929][ T8996] 8021q: adding VLAN 0 to HW filter on device team0
[  700.920788][ T2168] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.921017][ T2168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  700.985315][ T2168] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.985450][ T2168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.787908][ T5733] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  702.935019][ T5733] usb 5-1: Using ep0 maxpacket: 8
[  702.961521][ T5733] usb 5-1: unable to get BOS descriptor or descriptor too short
[  702.979200][ T5733] usb 5-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config
[  702.979259][ T5733] usb 5-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  702.979290][ T5733] usb 5-1: config 1 interface 0 has no altsetting 0
[  703.003142][ T5733] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  703.003174][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.003197][ T5733] usb 5-1: Product: syz
[  703.003221][ T5733] usb 5-1: Manufacturer: syz
[  703.003275][ T5733] usb 5-1: SerialNumber: syz
[  703.151049][ T9162] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  703.257799][ T9162] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  703.355670][ T9162] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  703.443592][ T5733] usb 5-1: No union descriptors
[  703.487282][ T5733] usb 5-1: USB disconnect, device number 27
[  703.659948][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  703.713653][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  703.719201][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  703.755112][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  703.779749][ T9162] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  703.796390][ T9162] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  703.810804][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  704.024867][ T9162] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  704.028305][ T9162] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  704.179486][ T9162] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  706.984101][   T59] Bluetooth: hci1: command tx timeout
[  707.138199][ T9433] netlink: 'syz.2.844': attribute type 32 has an invalid length.
[  707.926715][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0
[  710.071307][   T59] Bluetooth: hci1: command tx timeout
[  711.355130][ T9162] 8021q: adding VLAN 0 to HW filter on device team0
[  711.460359][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.460636][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  711.627049][ T3122] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.627211][ T3122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  713.076685][   T59] Bluetooth: hci1: command tx timeout
[  715.146723][   T59] Bluetooth: hci1: command tx timeout
[  715.600543][ T9476] overlayfs: missing 'lowerdir'
[  715.704895][   T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  715.872160][   T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  715.872192][   T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  715.872214][   T10] usb 3-1: config 220 has no interface number 2
[  715.872295][   T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  715.872324][   T10] usb 3-1: config 220 interface 0 has no altsetting 0
[  715.872344][   T10] usb 3-1: config 220 interface 76 has no altsetting 0
[  715.872363][   T10] usb 3-1: config 220 interface 1 has no altsetting 0
[  715.942746][   T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  715.942780][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.942802][   T10] usb 3-1: Product: syz
[  715.942818][   T10] usb 3-1: Manufacturer: syz
[  715.942833][   T10] usb 3-1: SerialNumber: syz
[  718.000092][   T10] usb 3-1: selecting invalid altsetting 0
[  718.052714][   T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  718.052757][   T10] uvcvideo 3-1:220.0: No valid video chain found.
[  718.080624][   T10] usb 3-1: selecting invalid altsetting 0
[  718.080742][   T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  718.112565][   T10] usb 3-1: USB disconnect, device number 34
[  718.204259][ T1174] bridge_slave_1: left allmulticast mode
[  718.204297][ T1174] bridge_slave_1: left promiscuous mode
[  718.204555][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.223632][ T6002] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  718.393316][ T6002] usb 5-1: Using ep0 maxpacket: 32
[  718.396936][ T6002] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  718.396961][ T6002] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  718.399036][ T6002] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  718.399058][ T6002] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  718.399073][ T6002] usb 5-1: Product: syz
[  718.399084][ T6002] usb 5-1: Manufacturer: syz
[  718.475191][ T6002] hub 5-1:4.0: USB hub found
[  718.676882][ T6002] hub 5-1:4.0: 2 ports detected
[  718.680446][ T1174] bridge_slave_0: left allmulticast mode
[  718.680481][ T1174] bridge_slave_0: left promiscuous mode
[  718.680824][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.902724][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.914087][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.017128][ T6002] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  719.017149][ T6002] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  719.086191][ T6002] usb 5-1: USB disconnect, device number 28
[  723.482398][ T9496] netlink: 104 bytes leftover after parsing attributes in process `syz.2.854'.
[  723.708764][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  723.798051][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  723.856586][ T1174] bond0 (unregistering): Released all slaves
[  723.951611][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.951742][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.952003][ T9408] bridge_slave_0: entered allmulticast mode
[  723.980587][ T9408] bridge_slave_0: entered promiscuous mode
[  724.293464][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.293609][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.293840][ T9408] bridge_slave_1: entered allmulticast mode
[  724.295927][ T9408] bridge_slave_1: entered promiscuous mode
[  724.411687][ T5955] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  724.619999][ T9408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  724.635449][ T5955] usb 3-1: Using ep0 maxpacket: 16
[  724.651568][ T5955] usb 3-1: config 8 has an invalid interface number: 5 but max is 2
[  724.651599][ T5955] usb 3-1: config 8 has an invalid interface number: 114 but max is 2
[  724.651621][ T5955] usb 3-1: config 8 has an invalid interface number: 187 but max is 2
[  724.651644][ T5955] usb 3-1: config 8 has no interface number 0
[  724.651661][ T5955] usb 3-1: config 8 has no interface number 1
[  724.651678][ T5955] usb 3-1: config 8 has no interface number 2
[  724.651748][ T5955] usb 3-1: config 8 interface 114 altsetting 1 endpoint 0xD has an invalid bInterval 41, changing to 9
[  724.651784][ T5955] usb 3-1: config 8 interface 114 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  724.651812][ T5955] usb 3-1: config 8 interface 114 altsetting 1 endpoint 0xB has invalid maxpacket 80, setting to 64
[  724.651840][ T5955] usb 3-1: config 8 interface 114 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[  724.651864][ T5955] usb 3-1: config 8 interface 114 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  724.651901][ T5955] usb 3-1: config 8 interface 114 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  724.651939][ T5955] usb 3-1: config 8 interface 187 altsetting 12 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  724.651967][ T5955] usb 3-1: config 8 interface 187 altsetting 12 has a duplicate endpoint with address 0x9, skipping
[  724.651989][ T5955] usb 3-1: config 8 interface 187 altsetting 12 has an invalid descriptor for endpoint zero, skipping
[  724.652017][ T5955] usb 3-1: config 8 interface 187 altsetting 12 has a duplicate endpoint with address 0x4, skipping
[  724.652041][ T5955] usb 3-1: config 8 interface 187 altsetting 12 endpoint 0x2 has invalid wMaxPacketSize 0
[  724.652063][ T5955] usb 3-1: config 8 interface 187 altsetting 12 has an endpoint descriptor with address 0x2D, changing to 0xD
[  724.652089][ T5955] usb 3-1: config 8 interface 187 altsetting 12 has a duplicate endpoint with address 0xD, skipping
[  724.652114][ T5955] usb 3-1: config 8 interface 187 altsetting 12 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  724.652142][ T5955] usb 3-1: config 8 interface 5 has no altsetting 0
[  724.652161][ T5955] usb 3-1: config 8 interface 114 has no altsetting 0
[  724.652179][ T5955] usb 3-1: config 8 interface 187 has no altsetting 0
[  724.752719][ T5955] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00e0, bcdDevice=57.c4
[  724.752815][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.752870][ T5955] usb 3-1: Product: ꧮ⤮孷㵱褶ꙷ굯啄䎼䭓熬홪옅用覸䇶�潳뙖迿ﶈ认�⽙㬻Ҩ�뜗��猸ᷪ믈홶豇掫싋羺汰䤅蠖찼唷ꂡ೽텹爛堩궭㯵緞�鈕ᄳ焇復呃佈쿺錱籄펊仨劢꛻穘嗙辙�ꇎⱺ孖鷺緛ⵆ讫䶼간
[  724.752954][ T5955] usb 3-1: Manufacturer: �
[  724.752989][ T5955] usb 3-1: SerialNumber: ь
[  724.858042][ T9408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.466398][ T1174] hsr_slave_0: left promiscuous mode
[  726.711615][ T1174] hsr_slave_1: left promiscuous mode
[  726.712659][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.731171][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  727.350029][ T1174] team0 (unregistering): Port device team_slave_1 removed
[  727.409805][ T1174] team0 (unregistering): Port device team_slave_0 removed
[  730.622508][ T8930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  730.666785][ T8930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  730.710753][ T8930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  730.727265][ T8930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  730.740381][ T8930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  731.004846][ T5733] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  731.163283][ T5733] usb 5-1: Using ep0 maxpacket: 16
[  731.171663][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  731.171688][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  731.171705][ T5733] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  731.171735][ T5733] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  731.171758][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.294064][ T5733] usb 5-1: config 0 descriptor??
[  731.434917][ T9408] team0: Port device team_slave_0 added
[  731.481893][ T9408] team0: Port device team_slave_1 added
[  731.707569][ T5955] usb 3-1: USB disconnect, device number 35
[  732.351276][ T5733] usbhid 5-1:0.0: can't add hid device: -71
[  732.351415][ T5733] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  732.390601][ T5733] usb 5-1: USB disconnect, device number 29
[  732.425224][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  732.468755][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_0
[  732.468769][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  732.468790][ T9408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  732.658574][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_1
[  732.658592][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  732.658622][ T9408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  732.988727][   T59] Bluetooth: hci0: command tx timeout
[  733.561380][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'.
[  733.881016][ T9558] netlink: 76 bytes leftover after parsing attributes in process `syz.2.864'.
[  733.972537][ T9408] hsr_slave_0: entered promiscuous mode
[  733.992265][ T9408] hsr_slave_1: entered promiscuous mode
[  733.992936][ T9408] debugfs: 'hsr0' already exists in 'hsr'
[  733.992955][ T9408] Cannot create hsr debugfs directory
[  735.154788][   T59] Bluetooth: hci0: command tx timeout
[  737.307261][   T59] Bluetooth: hci0: command tx timeout
[  739.373419][   T59] Bluetooth: hci0: command tx timeout
[  740.820110][ T9590] overlayfs: missing 'lowerdir'
[  741.131669][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10
[  742.273516][ T5733] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  742.433316][ T5733] usb 3-1: Using ep0 maxpacket: 16
[  742.437705][ T5733] usb 3-1: config 3 has an invalid interface number: 231 but max is 0
[  742.437735][ T5733] usb 3-1: config 3 has no interface number 0
[  742.437783][ T5733] usb 3-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  742.437812][ T5733] usb 3-1: config 3 interface 231 has no altsetting 0
[  742.489310][ T5733] usb 3-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d
[  742.489341][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.489359][ T5733] usb 3-1: Product: syz
[  742.489373][ T5733] usb 3-1: Manufacturer: syz
[  742.489387][ T5733] usb 3-1: SerialNumber: syz
[  742.797584][ T5733] kvaser_usb 3-1:3.231: error -ENODEV: Cannot get usb endpoint(s)
[  742.833236][ T5733] usb 3-1: USB disconnect, device number 36
[  747.333680][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.333908][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.334164][ T9526] bridge_slave_0: entered allmulticast mode
[  747.339805][ T9526] bridge_slave_0: entered promiscuous mode
[  747.371396][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.371848][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.372515][ T9526] bridge_slave_1: entered allmulticast mode
[  747.390641][ T9526] bridge_slave_1: entered promiscuous mode
[  747.469732][ T9650] ªªªªªª: renamed from vlan0 (while UP)
[  747.501473][ T9652] overlayfs: conflicting options: userxattr,metacopy=on
[  747.550099][ T1343] ieee802154 phy0 wpan0: encryption failed: -22
[  747.624621][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'.
[  747.650746][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.692827][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  747.829423][ T9662] overlayfs: missing 'lowerdir'
[  748.148775][ T9526] team0: Port device team_slave_0 added
[  748.170307][ T9526] team0: Port device team_slave_1 added
[  749.009508][ T9675] binder: 9671:9675 ioctl 4018620d 0 returned -22
[  749.051856][ T9675] binder: 9671:9675 ioctl c0306201 0 returned -14
[  750.973444][ T5955] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  751.080750][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  751.080764][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.080785][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  751.132939][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  751.132956][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  751.132980][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.148507][ T5955] usb 5-1: Using ep0 maxpacket: 8
[  751.229270][ T5955] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  751.229294][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.229309][ T5955] usb 5-1: Product: syz
[  751.229320][ T5955] usb 5-1: Manufacturer: syz
[  751.229331][ T5955] usb 5-1: SerialNumber: syz
[  751.475187][ T5955] usb 5-1: can't set config #1, error -71
[  752.185485][ T5955] usb 5-1: USB disconnect, device number 30
[  752.766361][ T1174] bridge_slave_1: left allmulticast mode
[  752.766401][ T1174] bridge_slave_1: left promiscuous mode
[  752.766691][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.994768][ T1174] bridge_slave_0: left allmulticast mode
[  754.994806][ T1174] bridge_slave_0: left promiscuous mode
[  754.995055][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.334490][ T9713] Smack: duplicate mount options
[  757.014436][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  757.096116][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  757.172055][ T1174] bond0 (unregistering): Released all slaves
[  757.446971][ T9526] hsr_slave_0: entered promiscuous mode
[  757.448195][ T9526] hsr_slave_1: entered promiscuous mode
[  757.449916][ T9526] debugfs: 'hsr0' already exists in 'hsr'
[  757.449938][ T9526] Cannot create hsr debugfs directory
[  757.791794][ T9408] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  757.997147][ T9408] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  758.019964][ T9408] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  758.084788][ T9408] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  758.140186][ T9408] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  758.268053][ T9408] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  758.283026][ T9739] kexec: Could not allocate control_code_buffer
[  758.424890][ T1174] hsr_slave_0: left promiscuous mode
[  758.624197][ T1174] hsr_slave_1: left promiscuous mode
[  758.681533][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  758.999094][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  759.737760][ T9760] fuse: Bad value for 'fd'
[  760.216663][ T1174] team0 (unregistering): Port device team_slave_1 removed
[  761.492158][ T1174] team0 (unregistering): Port device team_slave_0 removed
[  762.031094][   T31] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  762.195474][   T31] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  762.195505][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  762.195525][   T31] usb 3-1: config 0 has no interface number 0
[  762.195575][   T31] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  762.195599][   T31] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  762.256866][   T31] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  762.256916][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.256931][   T31] usb 3-1: Product: syz
[  762.256942][   T31] usb 3-1: Manufacturer: syz
[  762.256953][   T31] usb 3-1: SerialNumber: syz
[  762.301216][   T31] usb 3-1: config 0 descriptor??
[  762.340114][ T9408] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  762.450099][ T9408] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  762.451016][ T9759] netlink: 1027 bytes leftover after parsing attributes in process `syz.3.904'.
[  762.870515][ T9408] kthread_run failed with err -4
[  763.428463][ T9767] Mount JFS Failure: -22
[  763.428481][ T9767] jfs_mount failed w/return code = -22
[  763.677772][ T8930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  763.717061][ T5955] usb 3-1: USB disconnect, device number 37
[  763.739704][ T8930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  763.816219][ T8930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  763.835641][ T8930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  763.836584][ T8930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  764.374336][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  765.544529][ T9822] fuse: fd is not a fuse device
[  766.051013][ T8930] Bluetooth: hci6: command tx timeout
[  768.258304][ T8930] Bluetooth: hci6: command tx timeout
[  770.341323][ T8930] Bluetooth: hci6: command tx timeout
[  771.955225][   T36] audit: type=1326 audit(1780588330.881:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9872 comm="syz.3.919" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4abb7fce59 code=0x0
[  772.413220][ T8930] Bluetooth: hci6: command tx timeout
[  773.179618][ T9898] fuse: Unknown parameter 'group_id00000000000000000000'
[  774.430949][ T9526] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  774.667667][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  774.697318][ T9526] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  775.692231][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  775.715391][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.715569][ T9908] bridge0: port 2(bridge_slave_1) entered listening state
[  775.717364][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.717533][ T9908] bridge0: port 1(bridge_slave_0) entered listening state
[  775.772786][ T9908] bond1: left allmulticast mode
[  775.776228][ T9789] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.776356][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state
[  775.776539][ T9789] bridge_slave_0: entered allmulticast mode
[  775.846045][ T9789] bridge_slave_0: entered promiscuous mode
[  775.889604][ T9911] sch_tbf: burst 9 is lower than device lo mtu (65550) !
[  776.015988][   T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  776.035080][ T9526] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  776.076940][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  776.077882][ T9789] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.078018][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.078236][ T9789] bridge_slave_1: entered allmulticast mode
[  776.080491][ T9789] bridge_slave_1: entered promiscuous mode
[  776.127991][ T9526] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  776.187798][   T31] usb 3-1: config index 0 descriptor too short (expected 7768, got 18)
[  776.187821][   T31] usb 3-1: config 0 has an invalid interface number: 115 but max is 0
[  776.187836][   T31] usb 3-1: config 0 has no interface number 0
[  776.187857][   T31] usb 3-1: too many endpoints for config 0 interface 115 altsetting 116: 101, using maximum allowed: 30
[  776.187885][   T31] usb 3-1: config 0 interface 115 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 101
[  776.187905][   T31] usb 3-1: config 0 interface 115 has no altsetting 0
[  776.187929][   T31] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  776.187946][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.198248][   T31] usb 3-1: config 0 descriptor??
[  776.224499][   T31] ftdi_sio 3-1:0.115: FTDI USB Serial Device converter detected
[  776.297349][   T31] ftdi_sio ttyUSB0: unknown device type: 0x524d
[  776.315271][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  776.604000][ T9789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  776.899551][ T9789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  778.581897][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  778.756716][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  778.821461][ T5726] usb 3-1: USB disconnect, device number 38
[  778.962912][ T9789] team0: Port device team_slave_0 added
[  779.013944][ T5726] ftdi_sio 3-1:0.115: device disconnected
[  779.061288][ T9789] team0: Port device team_slave_1 added
[  779.366961][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  779.366981][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  779.367011][ T9789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  779.622293][ T1174] bridge_slave_1: left allmulticast mode
[  779.622332][ T1174] bridge_slave_1: left promiscuous mode
[  779.622628][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.737793][ T1174] bridge_slave_0: left allmulticast mode
[  779.737831][ T1174] bridge_slave_0: left promiscuous mode
[  779.738126][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.938199][ T9943] fuse: Unknown parameter 'group_id00000000000000000000'
[  780.639246][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.653172][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  780.653196][    C1] bridge0: topology change detected, propagating
[  780.813741][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  780.813767][    C1] bridge0: topology change detected, propagating
[  783.674823][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  783.781666][ T1174] bond0 (unregistering): Released all slaves
[  783.818170][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  783.818189][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  783.818219][ T9789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  784.118628][ T9789] hsr_slave_0: entered promiscuous mode
[  784.121692][ T9789] hsr_slave_1: entered promiscuous mode
[  784.136355][ T9789] debugfs: 'hsr0' already exists in 'hsr'
[  784.136385][ T9789] Cannot create hsr debugfs directory
[  785.608787][   T36] audit: type=1326 audit(1780588344.531:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9970 comm="syz.2.937" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec44fbce59 code=0x0
[  785.698342][ T1174] hsr_slave_0: left promiscuous mode
[  785.733316][ T1174] hsr_slave_1: left promiscuous mode
[  785.735857][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  785.785076][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  786.327714][   T31] hid_parser_main: 3989 callbacks suppressed
[  786.328875][   T31] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  786.569274][   T31] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  787.185062][ T1174] team0 (unregistering): Port device team_slave_1 removed
[  787.266725][ T1174] team0 (unregistering): Port device team_slave_0 removed
[  787.701820][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  788.205953][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0
[  788.316522][T10011] netlink: 'syz.2.943': attribute type 21 has an invalid length.
[  788.316560][T10011] netlink: 128 bytes leftover after parsing attributes in process `syz.2.943'.
[  789.450977][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  789.531281][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  789.561116][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  789.570257][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  789.573665][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  789.852399][T10011] netlink: 'syz.2.943': attribute type 5 has an invalid length.
[  789.852423][T10011] netlink: 'syz.2.943': attribute type 6 has an invalid length.
[  789.852437][T10011] netlink: 3 bytes leftover after parsing attributes in process `syz.2.943'.
[  790.850860][T10048] netlink: 'syz.3.949': attribute type 3 has an invalid length.
[  791.324956][T10058] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  791.613510][ T8930] Bluetooth: hci1: command tx timeout
[  792.481840][T10063] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  792.482520][T10070] syzkaller0: entered promiscuous mode
[  792.482545][T10070] syzkaller0: entered allmulticast mode
[  793.693278][ T8930] Bluetooth: hci1: command tx timeout
[  795.793240][ T8930] Bluetooth: hci1: command tx timeout
[  796.025769][ T9789] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  796.110747][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  796.146905][ T9789] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  796.196268][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  796.280458][ T9789] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  796.377558][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  796.408786][ T9789] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  796.447559][ T9789] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  797.344043][T10179] syzkaller0: entered promiscuous mode
[  797.344065][T10179] syzkaller0: entered allmulticast mode
[  797.853313][ T8930] Bluetooth: hci1: command tx timeout
[  808.985397][ T1343] ieee802154 phy0 wpan0: encryption failed: -22
[  812.327224][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  812.409830][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  812.411234][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  812.412400][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  812.449466][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  813.582438][   T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  813.715925][T10196] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  813.722033][T10196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  813.791568][T10196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  813.819047][T10196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  813.837436][   T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  813.920186][T10196] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  813.932819][ T8930] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  813.987971][ T8930] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  814.006176][ T8930] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  814.733434][T10196] Bluetooth: hci0: command tx timeout
[  815.787623][T10026] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.787736][T10026] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.787944][T10026] bridge_slave_0: entered allmulticast mode
[  815.792180][T10026] bridge_slave_0: entered promiscuous mode
[  816.160245][T10026] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.160375][T10026] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.160640][T10026] bridge_slave_1: entered allmulticast mode
[  816.199244][T10026] bridge_slave_1: entered promiscuous mode
[  816.253386][T10196] Bluetooth: hci8: command tx timeout
[  816.335672][T10196] Bluetooth: hci7: command tx timeout
[  816.586770][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.640535][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.813218][T10196] Bluetooth: hci0: command tx timeout
[  816.895452][ T3122] bridge_slave_1: left allmulticast mode
[  816.895498][ T3122] bridge_slave_1: left promiscuous mode
[  816.895810][ T3122] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.034662][ T3122] bridge_slave_0: left allmulticast mode
[  817.034692][ T3122] bridge_slave_0: left promiscuous mode
[  817.035018][ T3122] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.324234][ T3122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  818.333540][T10196] Bluetooth: hci8: command tx timeout
[  818.414232][T10196] Bluetooth: hci7: command tx timeout
[  818.434030][ T3122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  818.495654][ T3122] bond0 (unregistering): Released all slaves
[  818.893300][T10196] Bluetooth: hci0: command tx timeout
[  819.491263][T10026] team0: Port device team_slave_0 added
[  819.683321][ T3122] hsr_slave_0: left promiscuous mode
[  819.723496][ T3122] hsr_slave_1: left promiscuous mode
[  819.724383][ T3122] batman_adv: batadv0: Removing interface: batadv_slave_0
[  819.748117][ T3122] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.164086][ T3122] team0 (unregistering): Port device team_slave_1 removed
[  820.214220][ T3122] team0 (unregistering): Port device team_slave_0 removed
[  820.413429][T10196] Bluetooth: hci8: command tx timeout
[  820.437778][T10026] team0: Port device team_slave_1 added
[  820.493733][T10196] Bluetooth: hci7: command tx timeout
[  820.556834][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  820.556849][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.556870][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  820.630827][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  820.630841][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.630862][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  820.973279][T10196] Bluetooth: hci0: command tx timeout
[  821.030243][T10026] hsr_slave_0: entered promiscuous mode
[  821.031672][T10026] hsr_slave_1: entered promiscuous mode
[  821.032693][T10026] debugfs: 'hsr0' already exists in 'hsr'
[  821.032721][T10026] Cannot create hsr debugfs directory
[  821.878569][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  822.379079][ T9789] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.493315][T10196] Bluetooth: hci8: command tx timeout
[  822.573445][T10196] Bluetooth: hci7: command tx timeout
[  823.216370][ T3122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.635697][T10185] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.635967][T10185] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.636240][T10185] bridge_slave_0: entered allmulticast mode
[  823.639298][T10185] bridge_slave_0: entered promiscuous mode
[  823.692360][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10
[  823.748668][T10185] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.748835][T10185] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.749085][T10185] bridge_slave_1: entered allmulticast mode
[  823.752116][T10185] bridge_slave_1: entered promiscuous mode
[  824.129796][ T8930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  824.188481][ T8930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  824.189960][ T8930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  824.192167][ T8930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  824.200320][ T8930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  824.281283][ T3122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.540538][T10194] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.540717][T10194] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.540931][T10194] bridge_slave_0: entered allmulticast mode
[  824.572999][T10194] bridge_slave_0: entered promiscuous mode
[  824.880326][T10193] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.880447][T10193] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.880641][T10193] bridge_slave_0: entered allmulticast mode
[  824.882944][T10193] bridge_slave_0: entered promiscuous mode
[  824.892586][T10194] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.892858][T10194] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.932872][T10194] bridge_slave_1: entered allmulticast mode
[  824.941112][T10194] bridge_slave_1: entered promiscuous mode
[  825.197651][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.234063][T10193] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.234170][T10193] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.234361][T10193] bridge_slave_1: entered allmulticast mode
[  825.236486][T10193] bridge_slave_1: entered promiscuous mode
[  825.463951][ T3122] bond0: (slave netdevsim1): Releasing backup interface
[  825.504194][ T3122] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode
[  825.512767][ T3122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.591603][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.963774][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  826.001590][T10193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  826.026382][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  826.219918][ T3122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.286548][T10185] team0: Port device team_slave_0 added
[  826.290516][T10193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  826.334286][T10196] Bluetooth: hci2: command tx timeout
[  826.473715][T10185] team0: Port device team_slave_1 added
[  826.535496][T10194] team0: Port device team_slave_0 added
[  826.539217][T10193] team0: Port device team_slave_0 added
[  826.569671][T10194] team0: Port device team_slave_1 added
[  826.600903][T10193] team0: Port device team_slave_1 added
[  826.602239][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.602251][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.602276][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  826.702733][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.702751][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.702781][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.962652][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.962670][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.962697][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  827.012966][T10193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  827.012985][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  827.013014][T10193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  827.102353][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  827.102369][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  827.102396][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  827.157786][T10193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  827.157803][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  827.157827][T10193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  827.397485][T10185] hsr_slave_0: entered promiscuous mode
[  827.399289][T10185] hsr_slave_1: entered promiscuous mode
[  827.400024][T10185] debugfs: 'hsr0' already exists in 'hsr'
[  827.400042][T10185] Cannot create hsr debugfs directory
[  827.734282][T10194] hsr_slave_0: entered promiscuous mode
[  827.735611][T10194] hsr_slave_1: entered promiscuous mode
[  827.736530][T10194] debugfs: 'hsr0' already exists in 'hsr'
[  827.736549][T10194] Cannot create hsr debugfs directory
[  827.802192][T10193] hsr_slave_0: entered promiscuous mode
[  827.805763][T10193] hsr_slave_1: entered promiscuous mode
[  827.808386][T10193] debugfs: 'hsr0' already exists in 'hsr'
[  827.808459][T10193] Cannot create hsr debugfs directory
[  828.295214][T10026] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  828.339696][T10026] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  828.407443][T10026] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  828.413452][T10196] Bluetooth: hci2: command tx timeout
[  828.457274][T10026] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  828.732137][ T3122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.811755][T10026] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  828.852111][T10026] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  828.994045][T10026] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  829.036747][T10026] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  829.369386][ T3122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.969437][ T3122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.461437][ T3122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.503290][T10196] Bluetooth: hci2: command tx timeout
[  830.870810][T10272] bridge0: port 1(bridge_slave_0) entered blocking state
[  830.871033][T10272] bridge0: port 1(bridge_slave_0) entered disabled state
[  830.871284][T10272] bridge_slave_0: entered allmulticast mode
[  830.891241][T10272] bridge_slave_0: entered promiscuous mode
[  830.957613][T10185] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  830.987369][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  831.006498][T10272] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.006599][T10272] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.006843][T10272] bridge_slave_1: entered allmulticast mode
[  831.009538][T10272] bridge_slave_1: entered promiscuous mode
[  831.060863][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12
[  831.061458][T10185] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  831.164607][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  831.694351][T10185] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  831.812577][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  831.858524][T10185] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  831.906989][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  831.917327][T10272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.067352][T10272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.583499][T10196] Bluetooth: hci2: command tx timeout
[  832.786434][T10272] team0: Port device team_slave_0 added
[  833.330339][T10272] team0: Port device team_slave_1 added
[  833.556165][T10272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  833.556185][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.556215][T10272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  833.561772][T10272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  833.561791][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.561822][T10272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  834.305555][ T3122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  834.305621][ T3122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.462208][T10272] hsr_slave_0: entered promiscuous mode
[  834.476876][T10272] hsr_slave_1: entered promiscuous mode
[  834.477928][T10272] debugfs: 'hsr0' already exists in 'hsr'
[  834.477956][T10272] Cannot create hsr debugfs directory
[  834.878398][ T3122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  834.878428][ T3122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.061704][T10026] 8021q: adding VLAN 0 to HW filter on device bond0
[  835.370807][ T3122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  835.370850][ T3122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.949769][ T3122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  835.949799][ T3122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.025892][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9
[  836.138501][T10193] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  836.179463][T10193] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  836.195521][T10026] 8021q: adding VLAN 0 to HW filter on device team0
[  836.228815][T10193] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  836.288220][T10193] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  836.302065][T10193] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  836.337643][T10193] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  836.411906][T10193] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  836.428154][T10193] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  836.461276][ T2168] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.461369][ T2168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  836.578538][ T2168] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.578690][ T2168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  836.746060][T10185] 8021q: adding VLAN 0 to HW filter on device bond0
[  837.165084][T10194] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  837.210844][T10194] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  837.242757][T10194] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  837.278815][T10194] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  837.386738][T10194] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  837.462674][T10194] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  837.846956][T10194] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  837.891593][T10194] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  838.194055][ T3122] bridge_slave_1: left allmulticast mode
[  838.194084][ T3122] bridge_slave_1: left promiscuous mode
[  838.198761][ T3122] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.304605][ T3122] bridge_slave_0: left allmulticast mode
[  838.304635][ T3122] bridge_slave_0: left promiscuous mode
[  838.305059][ T3122] bridge0: port 1(bridge_slave_0) entered disabled state
[  838.623715][ T3122] bridge_slave_1: left allmulticast mode
[  838.623988][ T3122] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.744568][ T3122] bridge_slave_0: left allmulticast mode
[  838.744596][ T3122] bridge_slave_0: left promiscuous mode
[  838.744812][ T3122] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.123587][ T3122] bridge_slave_1: left allmulticast mode
[  839.123615][ T3122] bridge_slave_1: left promiscuous mode
[  839.123858][ T3122] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.275280][ T3122] bridge_slave_0: left allmulticast mode
[  839.275326][ T3122] bridge_slave_0: left promiscuous mode
[  839.275539][ T3122] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.103507][ T3122] bond0 (unregistering): left promiscuous mode
[  841.103535][ T3122] bond_slave_0: left promiscuous mode
[  841.103794][ T3122] bond_slave_1: left promiscuous mode
[  841.154007][ T3122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  841.215234][ T3122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  841.259382][ T3122] bond0 (unregistering): Released all slaves
[  841.272341][ T3122] bond1 (unregistering): Released all slaves
[  841.944012][ T3122] bond0 (unregistering): (slave 
1
@ÿ): Releasing backup interface
[  842.026381][ T3122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  842.045932][ T3122] bond0 (unregistering): Released all slaves
[  842.061308][ T3122] bond1 (unregistering): Released all slaves
[  843.194145][ T3122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  843.254082][ T3122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  843.299129][ T3122] bond0 (unregistering): Released all slaves
[  843.312258][ T3122] bond1 (unregistering): Released all slaves
[  843.331451][ T3122] bond2 (unregistering): Released all slaves
[  843.390454][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10
[  843.429217][T10185] 8021q: adding VLAN 0 to HW filter on device team0
[  844.000640][ T3122] tipc: Left network mode
[  844.071593][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.071693][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  844.194853][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  844.195062][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  844.596139][ T3122] rxrpc: Call ffff88803821b480 still in use (1,Complete,1409,0)!
[  845.555315][T10193] 8021q: adding VLAN 0 to HW filter on device bond0
[  845.897492][T10193] 8021q: adding VLAN 0 to HW filter on device team0
[  846.113604][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.113719][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.118361][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11
[  846.253853][T10194] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.364178][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.364364][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.584040][T10194] 8021q: adding VLAN 0 to HW filter on device team0
[  846.624044][T10026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  846.838406][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.850375][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state
[  847.142786][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.151864][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state
[  847.163838][T10272] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  847.211303][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  847.221433][T10272] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  847.339247][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  847.370501][T10272] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  847.416970][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  847.449669][T10272] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  847.488463][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  847.519103][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  848.177011][T10026] veth0_vlan: entered promiscuous mode
[  848.298035][T10026] veth1_vlan: entered promiscuous mode
[  848.657129][T10026] veth0_macvtap: entered promiscuous mode
[  848.732370][T10026] veth1_macvtap: entered promiscuous mode
[  848.840890][T10272] 8021q: adding VLAN 0 to HW filter on device bond0
[  848.867608][T10185] veth0_vlan: entered promiscuous mode
[  848.967947][T10185] veth1_vlan: entered promiscuous mode
[  848.998719][T10026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  849.023675][T10272] 8021q: adding VLAN 0 to HW filter on device team0
[  849.098559][T10026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  849.157188][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.157333][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.223787][   T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  849.243570][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.243762][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  849.246229][   T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  849.250446][   T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  849.291628][   T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  849.429204][T10193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  849.650428][T10185] veth0_macvtap: entered promiscuous mode
[  849.911900][T10185] veth1_macvtap: entered promiscuous mode
[  850.757941][T10194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  850.776509][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  850.950447][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  851.164381][  T154] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  851.166917][  T154] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  851.168094][  T154] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  851.171213][  T154] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  851.509654][ T8930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  851.540753][ T8930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  851.582144][ T8930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  851.591841][ T8930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  851.630447][ T8930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  852.642833][T10193] veth0_vlan: entered promiscuous mode
[  853.317218][T10194] veth0_vlan: entered promiscuous mode
[  853.332012][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.332060][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.353879][T10193] veth1_vlan: entered promiscuous mode
[  853.442955][T10194] veth1_vlan: entered promiscuous mode
[  853.731577][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.731601][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.754025][T10272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  853.773925][T10196] Bluetooth: hci3: command tx timeout
[  854.101684][T10193] veth0_macvtap: entered promiscuous mode
[  854.178648][T10194] veth0_macvtap: entered promiscuous mode
[  854.208435][T10193] veth1_macvtap: entered promiscuous mode
[  854.258085][T10194] veth1_macvtap: entered promiscuous mode
[  854.631706][T10193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  854.744427][T10194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  854.849088][T10193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  854.887976][T10194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  854.935717][   T43] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  854.958733][   T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  854.962070][   T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  854.984682][   T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  855.012307][ T1174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  855.047893][ T1174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  855.171209][ T1174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  855.221925][ T1174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  855.562750][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4
[  855.666022][T10272] veth0_vlan: entered promiscuous mode
[  855.860260][T10196] Bluetooth: hci3: command tx timeout
[  856.702130][T10529] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.702257][T10529] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.702552][T10529] bridge_slave_0: entered allmulticast mode
[  856.801317][T10529] bridge_slave_0: entered promiscuous mode
[  856.841647][T10272] veth1_vlan: entered promiscuous mode
[  856.880477][T10529] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.880585][T10529] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.880877][T10529] bridge_slave_1: entered allmulticast mode
[  856.932299][T10529] bridge_slave_1: entered promiscuous mode
[  857.265743][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  857.353873][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  857.467076][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  857.467099][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.659879][T10529] team0: Port device team_slave_0 added
[  857.745299][T10529] team0: Port device team_slave_1 added
[  857.933619][T10196] Bluetooth: hci3: command tx timeout
[  857.966242][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  857.966266][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  858.109486][T10529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  858.109505][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  858.109536][T10529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  858.206349][T10529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  858.206369][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  858.206401][T10529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  858.207627][  T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  858.207647][  T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  858.450570][T10272] veth0_macvtap: entered promiscuous mode
[  858.479419][ T6187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  858.479442][ T6187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  858.552680][T10272] veth1_macvtap: entered promiscuous mode
[  858.741527][T10529] hsr_slave_0: entered promiscuous mode
[  858.748241][T10529] hsr_slave_1: entered promiscuous mode
[  858.751858][T10529] debugfs: 'hsr0' already exists in 'hsr'
[  858.780040][T10529] Cannot create hsr debugfs directory
[  858.928018][T10272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  859.092106][T10272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  859.376377][   T85] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  859.378418][T10632] syzkaller0: entered promiscuous mode
[  859.378449][T10632] syzkaller0: entered allmulticast mode
[  859.430743][   T85] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  859.514050][   T85] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  859.514516][   T85] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  860.013391][T10196] Bluetooth: hci3: command tx timeout
[  860.889176][T10663] overlayfs: missing 'lowerdir'
[  861.615939][T10529] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.025126][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  864.025146][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  866.388637][T10529] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.809938][  T824] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  867.993357][  T824] usb 9-1: Using ep0 maxpacket: 16
[  868.000352][  T824] usb 9-1: config 0 has an invalid interface number: 214 but max is 0
[  868.000382][  T824] usb 9-1: config 0 has no interface number 0
[  868.000430][  T824] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  868.000461][  T824] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  868.054109][  T824] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  868.054142][  T824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.054164][  T824] usb 9-1: Product: syz
[  868.054180][  T824] usb 9-1: Manufacturer: syz
[  868.054196][  T824] usb 9-1: SerialNumber: syz
[  868.108435][  T824] usb 9-1: config 0 descriptor??
[  868.696625][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  868.701752][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  868.866243][T10529] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.502804][T10708] tipc: Started in network mode
[  869.502841][T10708] tipc: Node identity 2e821299afdc, cluster identity 4711
[  869.506633][T10708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  869.567873][  T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.567897][  T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.938010][T10715] syzkaller0: entered promiscuous mode
[  869.938040][T10715] syzkaller0: entered allmulticast mode
[  870.110929][T10704] tipc: Resetting bearer <eth:syzkaller0>
[  870.246282][T10689] tipc: Resetting bearer <eth:syzkaller0>
[  870.283422][ T6003] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  870.396558][T10689] tipc: Disabling bearer <eth:syzkaller0>
[  870.442584][ T1343] ieee802154 phy0 wpan0: encryption failed: -22
[  870.457571][ T6003] usb 2-1: Using ep0 maxpacket: 32
[  870.471234][ T6003] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  870.471269][ T6003] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  870.514601][ T6003] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  870.514633][ T6003] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  870.514654][ T6003] usb 2-1: Product: syz
[  870.514669][ T6003] usb 2-1: Manufacturer: syz
[  870.572422][ T6003] hub 2-1:4.0: USB hub found
[  870.771899][ T6003] hub 2-1:4.0: 2 ports detected
[  870.890187][  T824] usbtouchscreen 9-1:0.214: Failed to read FW rev: -71
[  870.890485][  T824] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71
[  870.926336][  T824] usb 9-1: USB disconnect, device number 2
[  871.580092][ T6003] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  871.580123][ T6003] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  871.918676][ T6003] usb 2-1: USB disconnect, device number 7
[  872.022741][T10529] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.090590][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3
[  872.091093][ T5726] tipc: Node number set to 2170426009
[  872.271214][T10732] overlayfs: missing 'lowerdir'
[  872.673170][ T5707] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  872.939912][ T5707] usb 7-1: Using ep0 maxpacket: 16
[  872.960110][ T5707] usb 7-1: unable to get BOS descriptor or descriptor too short
[  872.973456][ T5707] usb 7-1: config 8 has an invalid interface number: 40 but max is 1
[  872.973485][ T5707] usb 7-1: config 8 has an invalid interface number: 224 but max is 1
[  872.973507][ T5707] usb 7-1: config 8 has an invalid descriptor of length 27, skipping remainder of the config
[  872.973528][ T5707] usb 7-1: config 8 has no interface number 0
[  872.973545][ T5707] usb 7-1: config 8 has no interface number 1
[  872.973606][ T5707] usb 7-1: config 8 interface 224 altsetting 1 endpoint 0x8 has an invalid bInterval 241, changing to 11
[  872.973636][ T5707] usb 7-1: config 8 interface 40 has no altsetting 0
[  872.973656][ T5707] usb 7-1: config 8 interface 224 has no altsetting 0
[  873.062008][ T5707] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=78.40
[  873.062127][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.062181][ T5707] usb 7-1: Product: syz
[  873.062232][ T5707] usb 7-1: Manufacturer: syz
[  873.062274][ T5707] usb 7-1: SerialNumber: syz
[  873.726280][ T6003] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  873.945379][ T6003] usb 9-1: Using ep0 maxpacket: 16
[  873.948815][ T6003] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  873.948850][ T6003] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  874.147521][ T6003] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  874.147555][ T6003] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.147579][ T6003] usb 9-1: Product: syz
[  874.147595][ T6003] usb 9-1: Manufacturer: syz
[  874.147610][ T6003] usb 9-1: SerialNumber: syz
[  874.225920][ T6003] usb 9-1: config 0 descriptor??
[  874.296993][ T6003] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  874.297031][ T6003] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  874.985298][ T6003] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  874.986192][ T6003] em28xx 9-1:0.0: Config register raw data: 0x94
[  875.170609][ T5707] i2c-tiny-usb 7-1:8.40: version 78.40 found at bus 007 address 002
[  875.203941][ T5707]  (null): failure setting delay to 10us
[  875.204011][ T5707] i2c-tiny-usb 7-1:8.40: probe with driver i2c-tiny-usb failed with error -5
[  875.321351][ T5707] i2c-tiny-usb 7-1:8.224: version 78.40 found at bus 007 address 002
[  875.348332][ T5707]  (null): failure setting delay to 10us
[  875.348408][ T5707] i2c-tiny-usb 7-1:8.224: probe with driver i2c-tiny-usb failed with error -5
[  875.545326][ T5707] usb 7-1: USB disconnect, device number 2
[  876.014242][ T6003] em28xx 9-1:0.0: AC97 chip type couldn't be determined
[  876.014267][ T6003] em28xx 9-1:0.0: No AC97 audio processor
[  876.116576][ T5707] usb 9-1: USB disconnect, device number 3
[  876.131734][ T5707] em28xx 9-1:0.0: Disconnecting em28xx
[  876.414506][ T5707] em28xx 9-1:0.0: Freeing device
[  877.165617][T10529] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  877.256201][T10529] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  877.321007][T10529] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  877.654764][T10774] tracefs: Unknown parameter '0x0000000000000000'
[  877.865285][T10529] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  880.112757][ T5740] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  880.319588][ T5740] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  880.319619][ T5740] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  880.319672][ T5740] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.319723][ T5740] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  880.319748][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.398096][ T5740] hub 7-1:1.0: bad descriptor, ignoring hub
[  880.398138][ T5740] hub 7-1:1.0: probe with driver hub failed with error -5
[  880.427953][ T5740] cdc_wdm 7-1:1.0: skipping garbage
[  880.427976][ T5740] cdc_wdm 7-1:1.0: skipping garbage
[  880.428088][ T5740] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  880.595129][ T5740] usb 7-1: USB disconnect, device number 3
[  880.629226][T10529] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  880.761537][T10529] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  880.780823][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13
[  880.800120][T10529] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  880.869147][T10529] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  881.247173][T10793] Smack: duplicate mount options
[  881.276176][ T6003] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  881.453142][ T6003] usb 10-1: Using ep0 maxpacket: 32
[  881.458598][ T6003] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  881.458634][ T6003] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  881.497523][ T6003] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  881.497565][ T6003] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  881.497588][ T6003] usb 10-1: Product: syz
[  881.497604][ T6003] usb 10-1: Manufacturer: syz
[  881.561381][ T6003] hub 10-1:4.0: USB hub found
[  881.758338][ T6003] hub 10-1:4.0: 2 ports detected
[  882.020809][ T6003] hub 10-1:4.0: hub_hub_status failed (err = -71)
[  882.020838][ T6003] hub 10-1:4.0: config failed, can't get hub status (err -71)
[  882.083399][ T6003] usb 10-1: USB disconnect, device number 2
[  882.338578][T10529] 8021q: adding VLAN 0 to HW filter on device bond0
[  882.439895][T10529] 8021q: adding VLAN 0 to HW filter on device team0
[  882.504894][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.505034][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.882066][T10815] 9p: Could not find request transport: !—
[  883.081230][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.081382][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  885.928304][ T5622] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  886.176689][ T5622] usb 10-1: Using ep0 maxpacket: 16
[  886.187975][ T5622] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  886.188073][ T5622] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  886.655167][ T5622] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  886.655201][ T5622] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.655222][ T5622] usb 10-1: Product: syz
[  886.655237][ T5622] usb 10-1: Manufacturer: syz
[  886.805396][ T5622] usb 10-1: config 0 descriptor??
[  886.818182][ T5622] usb 10-1: can't set config #0, error -71
[  886.886372][ T5622] usb 10-1: USB disconnect, device number 3
[  887.738567][T10858] Smack: duplicate mount options
[  888.986482][T10529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  890.514627][T10529] veth0_vlan: entered promiscuous mode
[  890.676134][T10529] veth1_vlan: entered promiscuous mode
[  890.904994][T10529] veth0_macvtap: entered promiscuous mode
[  890.911982][T10529] veth1_macvtap: entered promiscuous mode
[  891.278627][T10529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  891.306790][T10529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  891.382487][T10722] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  891.417843][  T173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  891.426590][   T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  891.442704][   T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  897.456373][T10930] ieee802154 phy0 wpan0: encryption failed: -22
[  898.737870][T10939] Smack: duplicate mount options
[  898.850179][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.850203][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  899.671560][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  899.671582][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  904.303615][ T5955] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  905.379482][ T5955] usb 2-1: config 0 interface 0 has no altsetting 0
[  905.379513][ T5955] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  905.379531][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.464875][ T5955] usb 2-1: config 0 descriptor??
[  905.887338][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.887377][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.887407][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.887470][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.887500][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.887527][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.887554][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.887580][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.887607][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  905.891981][ T5955] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0
[  907.163504][T10983] ieee802154 phy0 wpan0: encryption failed: -22
[  908.056353][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2
[  908.208994][ T5955] konepure 0003:1E7D:2DBE.0006: hidraw0: USB HID v0.04 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0
[  908.249903][ T5955] usb 2-1: USB disconnect, device number 8
[  908.620853][T10990] fido_id[10990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  910.149133][T10997] Smack: duplicate mount options
[  918.863194][ T5955] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  919.056731][ T5955] usb 7-1: Using ep0 maxpacket: 16
[  919.059347][ T5955] usb 7-1: config 252 has an invalid interface number: 15 but max is 0
[  919.059376][ T5955] usb 7-1: config 252 has no interface number 0
[  919.059422][ T5955] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  919.067378][ T5955] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  919.067458][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.067513][ T5955] usb 7-1: Product: syz
[  919.067549][ T5955] usb 7-1: Manufacturer: syz
[  919.067592][ T5955] usb 7-1: SerialNumber: syz
[  919.286363][T11054] 9pnet_fd: Insufficient options for proto=fd
[  921.624440][ T5955] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  921.901718][   T49] usb 7-1: Failed to submit usb control message: -71
[  921.901756][   T49] usb 7-1: unable to send the bmi data to the device: -71
[  921.901774][   T49] usb 7-1: unable to get target info from device
[  921.901880][   T49] usb 7-1: could not get target info (-71)
[  921.902299][   T49] usb 7-1: could not probe fw (-71)
[  921.910373][ T6002] usb 7-1: USB disconnect, device number 4
[  922.271961][T11066] Smack: duplicate mount options
[  922.423163][ T5622] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  922.613264][ T5622] usb 9-1: Using ep0 maxpacket: 16
[  922.619861][ T5622] usb 9-1: unable to get BOS descriptor or descriptor too short
[  922.621401][ T5622] usb 9-1: config 8 has an invalid interface number: 40 but max is 1
[  922.621428][ T5622] usb 9-1: config 8 has an invalid interface number: 224 but max is 1
[  922.621450][ T5622] usb 9-1: config 8 has an invalid descriptor of length 27, skipping remainder of the config
[  922.621471][ T5622] usb 9-1: config 8 has no interface number 0
[  922.621488][ T5622] usb 9-1: config 8 has no interface number 1
[  922.621546][ T5622] usb 9-1: config 8 interface 224 altsetting 1 endpoint 0x8 has an invalid bInterval 241, changing to 11
[  922.621576][ T5622] usb 9-1: config 8 interface 40 has no altsetting 0
[  922.621596][ T5622] usb 9-1: config 8 interface 224 has no altsetting 0
[  922.703327][ T5622] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=78.40
[  922.703359][ T5622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.703380][ T5622] usb 9-1: Product: syz
[  922.703395][ T5622] usb 9-1: Manufacturer: syz
[  922.703409][ T5622] usb 9-1: SerialNumber: syz
[  924.046675][ T5622] i2c-tiny-usb 9-1:8.40: version 78.40 found at bus 009 address 004
[  924.050340][ T5622]  (null): failure setting delay to 10us
[  924.050412][ T5622] i2c-tiny-usb 9-1:8.40: probe with driver i2c-tiny-usb failed with error -5
[  924.146158][ T5622] i2c-tiny-usb 9-1:8.224: version 78.40 found at bus 009 address 004
[  924.148029][ T5622]  (null): failure setting delay to 10us
[  924.148099][ T5622] i2c-tiny-usb 9-1:8.224: probe with driver i2c-tiny-usb failed with error -5
[  924.212819][ T5622] usb 9-1: USB disconnect, device number 4
[  927.828568][T10750] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  927.989440][T11102] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100005802
[  927.996216][T10750] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  927.996249][T10750] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  927.996270][T10750] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  927.996321][T10750] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  928.050323][T10750] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  928.050357][T10750] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  928.050379][T10750] usb 2-1: Product: syz
[  928.050395][T10750] usb 2-1: Manufacturer: syz
[  928.180038][T11102] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100002081
[  928.205672][T11102] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100005081
[  928.207724][T11102] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2900
[  928.238653][T11102] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x6100
[  928.281325][T11102] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2080
[  928.294839][T11102] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1000
[  928.296435][T11102] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4180
[  928.644601][T10750] cdc_wdm 2-1:1.0: skipping garbage
[  928.644624][T10750] cdc_wdm 2-1:1.0: skipping garbage
[  928.644738][T10750] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  929.520926][T10196] Bluetooth: Frame is too long (len 12, expected len 4)
[  929.578373][ T5726] usb 2-1: USB disconnect, device number 9
[  930.883916][T11143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  931.952585][ T1343] ieee802154 phy0 wpan0: encryption failed: -22
[  932.125798][T11139] Smack: duplicate mount options
[  933.113495][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1078'.
[  936.507302][T11188] overlay: Unknown parameter 'context'
[  936.533162][ T6002] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  936.689026][ T6002] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  936.689058][ T6002] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  936.689083][ T6002] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  936.689119][ T6002] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  936.690906][ T6002] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  936.690937][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  936.690956][ T6002] usb 9-1: Product: syz
[  936.690976][ T6002] usb 9-1: Manufacturer: syz
[  936.838930][ T6002] cdc_wdm 9-1:1.0: skipping garbage
[  936.838953][ T6002] cdc_wdm 9-1:1.0: skipping garbage
[  936.839060][ T6002] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  936.875368][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  937.326909][T10196] Bluetooth: Frame is too long (len 12, expected len 4)
[  937.327179][ T5740] usb 9-1: USB disconnect, device number 5
[  939.843172][T10196] Bluetooth: hci8: command 0x0406 tx timeout
[  939.843215][T10196] Bluetooth: hci7: command 0x0406 tx timeout
[  939.843244][T10196] Bluetooth: hci0: command 0x0406 tx timeout
[  940.578904][T11214] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1090'.
[  941.091232][T11222] kvm: kvm [11221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100005802
[  941.165454][T11222] kvm: kvm [11221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100002081
[  941.185072][T11222] kvm: kvm [11221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100005081
[  941.188712][T11222] kvm: kvm [11221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2900
[  941.221109][T11222] kvm: kvm [11221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x6100
[  941.244177][T11222] kvm: kvm [11221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2080
[  941.247072][T11222] kvm: kvm [11221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1000
[  941.248078][T11222] kvm: kvm [11221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4180
[  944.633178][   T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  945.689374][   T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  945.689405][   T10] usb 2-1: config 0 has no interface number 0
[  945.689452][   T10] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E
[  945.689481][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8E has invalid maxpacket 15455, setting to 64
[  945.731294][   T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  945.731326][   T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  945.731347][   T10] usb 2-1: Product: syz
[  945.731363][   T10] usb 2-1: SerialNumber: syz
[  945.856985][   T10] usb 2-1: config 0 descriptor??
[  945.894406][T11244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  945.901961][   T10] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  949.153333][   T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  949.317020][   T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  949.317054][   T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  949.317075][   T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  949.317129][   T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  949.322440][   T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  949.322473][   T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  949.322496][   T10] usb 10-1: Product: syz
[  949.322512][   T10] usb 10-1: Manufacturer: syz
[  949.465724][   T10] cdc_wdm 10-1:1.0: skipping garbage
[  949.465747][   T10] cdc_wdm 10-1:1.0: skipping garbage
[  949.466997][   T10] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[  949.933171][   T59] Bluetooth: hci2: command 0x0406 tx timeout
[  949.997070][   T59] Bluetooth: Frame is too long (len 12, expected len 4)
[  950.055963][ T6003] usb 10-1: USB disconnect, device number 4
[  950.188753][ T6002] usb 2-1: USB disconnect, device number 10
[  952.167769][T11283] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1101'.
[  956.168797][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1
[  957.981550][T11309] kvm: kvm [11308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100005802
[  958.077696][T11309] kvm: kvm [11308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100002081
[  958.105052][T11309] kvm: kvm [11308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100005081
[  958.112257][T11309] kvm: kvm [11308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2900
[  958.189155][T11309] kvm: kvm [11308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x6100
[  958.270227][T11309] kvm: kvm [11308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2080
[  958.306904][T11309] kvm: kvm [11308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1000
[  958.308115][T11309] kvm: kvm [11308]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4180
[  961.003132][ T6002] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  961.684027][ T6002] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  961.684058][ T6002] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  961.684079][ T6002] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  961.684149][ T6002] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  961.690822][ T6002] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  961.690855][ T6002] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  961.690877][ T6002] usb 8-1: Product: syz
[  961.690893][ T6002] usb 8-1: Manufacturer: syz
[  961.862372][ T6002] cdc_wdm 8-1:1.0: skipping garbage
[  961.862393][ T6002] cdc_wdm 8-1:1.0: skipping garbage
[  961.862495][ T6002] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  962.098176][T11334] binder: 11324:11334 ioctl c0306201 200000000440 returned -11
[  962.170469][ T8930] Bluetooth: Frame is too long (len 12, expected len 4)
[  962.188768][T11209] usb 8-1: USB disconnect, device number 2
[  963.123177][T11209] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  963.161440][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14
[  965.573087][T11209] usb 10-1: Using ep0 maxpacket: 16
[  965.581422][T11209] usb 10-1: config 0 has an invalid interface number: 214 but max is 0
[  965.581452][T11209] usb 10-1: config 0 has no interface number 0
[  965.581497][T11209] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  965.581525][T11209] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  965.592948][T11209] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  965.619937][T11209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.619966][T11209] usb 10-1: Product: syz
[  965.619988][T11209] usb 10-1: Manufacturer: syz
[  965.620003][T11209] usb 10-1: SerialNumber: syz
[  965.722174][T11209] usb 10-1: config 0 descriptor??
[  965.921591][T11209] usbtouchscreen 10-1:0.214: Failed to read FW rev: -71
[  965.921887][T11209] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -71
[  965.999239][T11209] usb 10-1: USB disconnect, device number 5
[  968.542479][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'.
[  970.445933][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15
[  970.891577][T11380] binder: 11378:11380 ioctl c0306201 200000000440 returned -11
[  972.543154][ T6003] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  973.103137][ T6003] usb 8-1: Using ep0 maxpacket: 16
[  973.109612][ T6003] usb 8-1: config 0 has an invalid interface number: 214 but max is 0
[  973.109642][ T6003] usb 8-1: config 0 has no interface number 0
[  973.109687][ T6003] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  973.109717][ T6003] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  973.114579][ T6003] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  973.114641][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.114697][ T6003] usb 8-1: Product: syz
[  973.114738][ T6003] usb 8-1: Manufacturer: syz
[  973.114780][ T6003] usb 8-1: SerialNumber: syz
[  973.331463][ T6003] usb 8-1: config 0 descriptor??
[  973.343176][T11209] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  973.550202][T11209] usb 9-1: Using ep0 maxpacket: 16
[  973.562846][T11209] usb 9-1: unable to get BOS descriptor or descriptor too short
[  973.593415][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.595760][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  975.139867][ T8930] Bluetooth: hci3: command 0x0406 tx timeout
[  975.615120][T11209] usb 9-1: unable to read config index 0 descriptor/start: -71
[  975.615173][T11209] usb 9-1: can't read configurations, error -71
[  977.305143][ T6003] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71
[  977.305468][ T6003] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71
[  977.479094][ T6003] usb 8-1: USB disconnect, device number 3
[  980.291361][ T8930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  980.363645][ T8930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  980.369563][ T8930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  980.425101][ T8930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  980.427524][ T8930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  982.451670][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16
[  982.723855][   T59] Bluetooth: hci1: command tx timeout
[  984.907196][   T59] Bluetooth: hci1: command tx timeout
[  986.373306][T11209] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  986.714681][T11209] usb 8-1: Using ep0 maxpacket: 16
[  986.733916][T11209] usb 8-1: unable to get BOS descriptor or descriptor too short
[  986.741462][T11209] usb 8-1: config 8 has an invalid interface number: 40 but max is 1
[  986.741491][T11209] usb 8-1: config 8 has an invalid interface number: 224 but max is 1
[  986.741514][T11209] usb 8-1: config 8 has an invalid descriptor of length 27, skipping remainder of the config
[  986.741535][T11209] usb 8-1: config 8 has no interface number 0
[  986.741552][T11209] usb 8-1: config 8 has no interface number 1
[  986.741644][T11209] usb 8-1: config 8 interface 224 altsetting 1 endpoint 0x8 has an invalid bInterval 241, changing to 11
[  986.741675][T11209] usb 8-1: config 8 interface 40 has no altsetting 0
[  986.741696][T11209] usb 8-1: config 8 interface 224 has no altsetting 0
[  986.828144][T11209] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=78.40
[  986.828177][T11209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.828199][T11209] usb 8-1: Product: syz
[  986.828215][T11209] usb 8-1: Manufacturer: syz
[  986.828230][T11209] usb 8-1: SerialNumber: syz
[  986.973445][   T59] Bluetooth: hci1: command tx timeout
[  989.053379][   T59] Bluetooth: hci1: command tx timeout
[  989.197496][T11209] i2c-tiny-usb 8-1:8.40: version 78.40 found at bus 008 address 004
[  989.198020][T11209]  (null): failure setting delay to 10us
[  989.198086][T11209] i2c-tiny-usb 8-1:8.40: probe with driver i2c-tiny-usb failed with error -5
[  989.240026][T11209] i2c-tiny-usb 8-1:8.224: version 78.40 found at bus 008 address 004
[  989.240517][T11209]  (null): failure setting delay to 10us
[  989.240582][T11209] i2c-tiny-usb 8-1:8.224: probe with driver i2c-tiny-usb failed with error -5
[  989.280419][T11209] usb 8-1: USB disconnect, device number 4
[  991.093164][T10750] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  991.243521][T10750] usb 10-1: Using ep0 maxpacket: 16
[  991.274186][T10750] usb 10-1: unable to get BOS descriptor or descriptor too short
[  991.278799][T10750] usb 10-1: config 8 has an invalid interface number: 40 but max is 1
[  991.278839][T10750] usb 10-1: config 8 has an invalid interface number: 224 but max is 1
[  991.278860][T10750] usb 10-1: config 8 has an invalid descriptor of length 27, skipping remainder of the config
[  991.278880][T10750] usb 10-1: config 8 has no interface number 0
[  991.278897][T10750] usb 10-1: config 8 has no interface number 1
[  991.278958][T10750] usb 10-1: config 8 interface 224 altsetting 1 endpoint 0x8 has an invalid bInterval 241, changing to 11
[  991.278989][T10750] usb 10-1: config 8 interface 40 has no altsetting 0
[  991.279008][T10750] usb 10-1: config 8 interface 224 has no altsetting 0
[  991.430369][T10750] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=78.40
[  991.430402][T10750] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.430425][T10750] usb 10-1: Product: syz
[  991.430440][T10750] usb 10-1: Manufacturer: syz
[  991.430455][T10750] usb 10-1: SerialNumber: syz
[  994.069873][ T1343] ieee802154 phy0 wpan0: encryption failed: -22
[  995.119232][T10750] i2c-tiny-usb 10-1:8.40: version 78.40 found at bus 010 address 006
[  995.134317][T10750]  (null): failure setting delay to 10us
[  995.134393][T10750] i2c-tiny-usb 10-1:8.40: probe with driver i2c-tiny-usb failed with error -5
[  995.197083][T10750] i2c-tiny-usb 10-1:8.224: version 78.40 found at bus 010 address 006
[  995.197539][T10750]  (null): failure setting delay to 10us
[  995.197601][T10750] i2c-tiny-usb 10-1:8.224: probe with driver i2c-tiny-usb failed with error -5
[  995.315511][T10750] usb 10-1: USB disconnect, device number 6
[  997.358880][T11520] Bluetooth: MGMT ver 1.23
[ 1000.924212][   T59] Bluetooth: hci0: command 0x0406 tx timeout
[ 1001.773141][   T37] INFO: task kworker/u8:17:3122 blocked for more than 145 seconds.
[ 1001.773171][   T37]       Tainted: G             L      syzkaller #0
[ 1001.773184][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1001.773195][   T37] task:kworker/u8:17   state:D stack:21240 pid:3122  tgid:3122  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1001.773260][   T37] Workqueue: netns cleanup_net
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1001.773314][   T37] Call Trace:
[ 1001.773322][   T37]  <TASK>
[ 1001.773343][   T37]  __schedule+0x16ec/0x5620[ 1001.773343][   T37]  __schedule+0x16ec/0x5620
[ 1001.773398][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1001.773439][   T37]  ? rt_spin_lock+0x1e0/0x400
[ 1001.773469][   T37]  ? __pfx___schedule+0x10/0x10
[ 1001.773512][   T37]  ? schedule+0x90/0x360
[ 1001.773546][   T37]  schedule+0x164/0x360
[ 1001.773580][   T37]  rxrpc_destroy_all_calls+0x44e/0x570
[ 1001.773733][   T37]  ? __pfx_rxrpc_destroy_all_calls+0x10/0x10
[ 1001.773771][   T37]  ? __pfx_var_wake_function+0x10/0x10
[ 1001.773832][   T37]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1001.773865][   T37]  ? __timer_delete_sync+0x53e/0x610
[ 1001.773931][   T37]  rxrpc_exit_net+0x6f/0xc0
[ 1001.773989][   T37]  ops_undo_list+0x49f/0x940
[ 1001.774024][   T37]  ? rt_spin_unlock+0x180/0x200
[ 1001.774052][   T37]  ? __pfx_ops_undo_list+0x10/0x10
[ 1001.774082][   T37]  ? rt_spin_unlock+0x14f/0x200
[ 1001.774113][   T37]  ? idr_destroy+0x21b/0x2a0
[ 1001.774175][   T37]  ? rt_spin_unlock+0x160/0x200
[ 1001.774205][   T37]  cleanup_net+0x56e/0x800
[ 1001.774240][   T37]  ? __pfx_cleanup_net+0x10/0x10
[ 1001.774278][   T37]  ? process_scheduled_works+0xa70/0x1860
[ 1001.774303][   T37]  ? process_scheduled_works+0xa70/0x1860
[ 1001.774329][   T37]  process_scheduled_works+0xb5d/0x1860
[ 1001.774396][   T37]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1001.774429][   T37]  ? assign_work+0x3d5/0x5e0
[ 1001.774459][   T37]  worker_thread+0xa53/0xfc0
[ 1001.774516][   T37]  kthread+0x388/0x470
[ 1001.774548][   T37]  ? __pfx_worker_thread+0x10/0x10
[ 1001.774571][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.774604][   T37]  ret_from_fork+0x514/0xb70
[ 1001.774634][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1001.774671][   T37]  ? __switch_to+0xc79/0x1410
[ 1001.774710][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.774743][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1001.774788][   T37]  </TASK>
[ 1001.774927][   T37] 
[ 1001.774927][   T37] Showing all locks held in the system:
[ 1001.774942][   T37] 1 lock held by khungtaskd/37:
[ 1001.774959][   T37]  #0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1001.775029][   T37] 2 locks held by kworker/1:1/42:
[ 1001.775053][   T37] 4 locks held by kworker/u8:13/1199:
[ 1001.775068][   T37] 4 locks held by kworker/u8:15/1288:
[ 1001.775094][   T37] 3 locks held by kworker/u8:17/3122:
[ 1001.775107][   T37]  #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1001.775162][   T37]  #1: ffffc9000f397c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1001.775224][   T37]  #2: ffffffff8f340fa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1001.775286][   T37] 3 locks held by dhcpcd/5269:
[ 1001.775298][   T37] 2 locks held by getty/5359:
[ 1001.775310][   T37]  #0: ffff8880367840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1001.775418][   T37]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1001.775517][   T37] 4 locks held by kworker/1:7/6002:
[ 1001.775536][   T37] 4 locks held by syz-executor/10193:
[ 1001.775549][   T37] 2 locks held by syz-executor/10194:
[ 1001.775568][   T37] 1 lock held by udevd/10432:
[ 1001.775580][   T37]  #0: ffff888037666480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1001.775644][   T37] 2 locks held by syz-executor/10529:
[ 1001.775658][   T37] 1 lock held by udevd/10536:
[ 1001.775670][   T37]  #0: ffff888037666480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1001.775732][   T37] 1 lock held by udevd/10729:
[ 1001.775745][   T37]  #0: ffff888037666480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1001.775816][   T37] 2 locks held by syz-executor/11432:
[ 1001.775829][   T37] 1 lock held by dhcpcd/11526:
[ 1001.775841][   T37]  #0: ffff888087a0c358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[ 1001.775964][   T37] 4 locks held by syz.8.1144/11528:
[ 1001.775977][   T37] 1 lock held by dhcpcd/11529:
[ 1001.775989][   T37]  #0: ffff88802e3ec358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[ 1001.776050][   T37] 1 lock held by dhcpcd/11530:
[ 1001.776062][   T37]  #0: ffff888028f9e358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[ 1001.776122][   T37] 1 lock held by dhcpcd/11531:
[ 1001.776143][   T37]  #0: ffff888063372358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[ 1001.776208][   T37] 1 lock held by dhcpcd/11533:
[ 1001.776220][   T37]  #0: ffff888083d86358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[ 1001.776281][   T37] 2 locks held by dhcpcd/11535:
[ 1001.776294][   T37] 1 lock held by dhcpcd/11536:
[ 1001.776305][   T37]  #0: ffff888043b88358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[ 1001.776372][   T37] 1 lock held by dhcpcd/11537:
[ 1001.776385][   T37] 
[ 1001.776391][   T37] =============================================
[ 1001.776391][   T37] 
[ 1001.776408][   T37] NMI backtrace for cpu 1
[ 1001.776428][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1001.776457][   T37] Tainted: [L]=SOFTLOCKUP
[ 1001.776464][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1001.776477][   T37] Call Trace:
[ 1001.776486][   T37]  <TASK>
[ 1001.776494][   T37]  dump_stack_lvl+0xe8/0x150
[ 1001.776520][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[ 1001.776546][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1001.776574][   T37]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1001.776605][   T37]  sys_info+0x135/0x170
[ 1001.776627][   T37]  watchdog+0xfd3/0x1030
[ 1001.776689][   T37]  ? watchdog+0x1c9/0x1030
[ 1001.776717][   T37]  kthread+0x388/0x470
[ 1001.776746][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1001.776767][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.776798][   T37]  ret_from_fork+0x514/0xb70
[ 1001.776825][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1001.776850][   T37]  ? __switch_to+0xc79/0x1410
[ 1001.776887][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.776919][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1001.776963][   T37]  </TASK>
[ 1001.776971][   T37] Sending NMI from CPU 1 to CPUs 0:
[ 1001.777004][    C0] NMI backtrace for cpu 0
[ 1001.777023][    C0] CPU: 0 UID: 0 PID: 11535 Comm: dhcpcd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1001.777049][    C0] Tainted: [L]=SOFTLOCKUP
[ 1001.777055][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1001.777067][    C0] RIP: 0010:check_preemption_disabled+0x29/0xe0
[ 1001.777089][    C0] Code: 90 55 41 57 41 56 53 65 8b 05 07 2e 4e 07 65 8b 0d fc 2d 4e 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d e9 19 aa 03 00 cc 9c <59> f7 c1 00 02 00 00 74 ea 65 4c 8b 3d ae 2d 4e 07 41 f6 47 2f 04
[ 1001.777104][    C0] RSP: 0018:ffffc90004d07558 EFLAGS: 00000046
[ 1001.777120][    C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000080000000
[ 1001.777133][    C0] RDX: 0000000000000000 RSI: ffffffff8d61af6a RDI: ffffffff8ba75be0
[ 1001.777146][    C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[ 1001.777157][    C0] R10: 0000000000000100 R11: 0000000000000004 R12: 0000000000000246
[ 1001.777168][    C0] R13: ffff88802f219ec0 R14: ffff88802fb46bb0 R15: ffff88802fb46bb0
[ 1001.777183][    C0] FS:  00007f18187e5780(0000) GS:ffff888126183000(0000) knlGS:0000000000000000
[ 1001.777199][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1001.777211][    C0] CR2: 00007f181875de9c CR3: 0000000043aee000 CR4: 00000000003526f0
[ 1001.777228][    C0] Call Trace:
[ 1001.777234][    C0]  <TASK>
[ 1001.777243][    C0]  lock_is_held_type+0x5a/0x150
[ 1001.777272][    C0]  mt_validate+0x2578/0x4200
[ 1001.777289][    C0]  ? kasan_save_stack+0x3e/0x60
[ 1001.777365][    C0]  ? __pfx_mt_validate+0x10/0x10
[ 1001.777400][    C0]  validate_mm+0xd4/0x4c0
[ 1001.777468][    C0]  ? mas_next_slot+0xc45/0xd10
[ 1001.777521][    C0]  ? __pfx_validate_mm+0x10/0x10
[ 1001.777551][    C0]  ? mas_find+0xb0e/0xd30
[ 1001.777575][    C0]  ? percpu_counter_add_batch+0xea/0x1d0
[ 1001.777603][    C0]  vms_complete_munmap_vmas+0x9b1/0xc60
[ 1001.777637][    C0]  ? __pfx_vms_complete_munmap_vmas+0x10/0x10
[ 1001.777662][    C0]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1001.777691][    C0]  ? __mas_set_range+0x12f/0x3c0
[ 1001.777723][    C0]  do_vmi_align_munmap+0x3bd/0x4d0
[ 1001.777758][    C0]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[ 1001.777792][    C0]  ? mtree_range_walk+0x6fc/0x8b0
[ 1001.777823][    C0]  do_vmi_munmap+0x252/0x2d0
[ 1001.777858][    C0]  __vm_munmap+0x22c/0x3d0
[ 1001.777886][    C0]  ? __pfx___vm_munmap+0x10/0x10
[ 1001.777920][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1001.777997][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.778017][    C0]  __x64_sys_munmap+0x60/0x70
[ 1001.778060][    C0]  do_syscall_64+0x174/0x580
[ 1001.778087][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1001.778109][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1001.778130][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.778149][    C0] RIP: 0033:0x7f18189f42e7
[ 1001.778167][    C0] Code: 00 00 00 b8 0a 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 8d 0d c9 3f 01 00 f7 d8 89 01 48 83 c8 ff c3 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d a9 3f 01 00 f7 d8 89 01 48 83
[ 1001.778183][    C0] RSP: 002b:00007ffc1c4f8368 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[ 1001.778201][    C0] RAX: ffffffffffffffda RBX: 0000563e83a1a3f0 RCX: 00007f18189f42e7
[ 1001.778215][    C0] RDX: 0000000000000002 RSI: 0000000000061018 RDI: 00007f1818724000
[ 1001.778227][    C0] RBP: 00007ffc1c4f8470 R08: 0000000000000030 R09: 0000563e83a1afa0
[ 1001.778240][    C0] R10: 00007ffc1c4f82a0 R11: 0000000000000206 R12: 00007ffc1c4f83b8
[ 1001.778253][    C0] R13: 00007f1818a07000 R14: 0000563e83a1a3f0 R15: 0000000000000000
[ 1001.778276][    C0]  </TASK>
[ 1001.842585][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[ 1001.842653][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1001.842736][   T37] Tainted: [L]=SOFTLOCKUP
[ 1001.842759][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1001.842791][   T37] Call Trace:
[ 1001.842813][   T37]  <TASK>
[ 1001.842829][   T37]  vpanic+0x56c/0xa60
[ 1001.842915][   T37]  ? __pfx___schedule+0x10/0x10
[ 1001.842963][   T37]  ? __pfx_vpanic+0x10/0x10
[ 1001.842999][   T37]  panic+0xc5/0xd0
[ 1001.843075][   T37]  ? __pfx_panic+0x10/0x10
[ 1001.843148][   T37]  ? preempt_schedule_thunk+0x16/0x30
[ 1001.843239][   T37]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1001.843324][   T37]  watchdog+0x102c/0x1030
[ 1001.843420][   T37]  ? watchdog+0x1c9/0x1030
[ 1001.843478][   T37]  kthread+0x388/0x470
[ 1001.843582][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1001.843636][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.843711][   T37]  ret_from_fork+0x514/0xb70
[ 1001.843791][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1001.843849][   T37]  ? __switch_to+0xc79/0x1410
[ 1001.843943][   T37]  ? __pfx_kthread+0x10/0x10
[ 1001.844027][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1001.844133][   T37]  </TASK>
[ 1001.844749][   T37] Kernel Offset: disabled