last executing test programs:

4m26.366460553s ago: executing program 2 (id=20):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x2b, 0x80801, 0x1)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r1, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

4m25.193632355s ago: executing program 2 (id=23):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='dax\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8)
io_setup(0x8, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0xc0010140, 0x6}}], 0x20})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0xe9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, &(0x7f0000000200), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000240)=0x14)
read(r2, &(0x7f00000019c0)=""/4097, 0x1001)

4m24.530970819s ago: executing program 2 (id=25):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x5000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x404080, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
socket$alg(0x26, 0x5, 0x0)
r9 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0)
sendmsg$nl_route_sched(r9, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x40000)

4m23.557517631s ago: executing program 2 (id=26):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x3f, 0x4, 0x70bd28, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004)
setpgid(r3, 0x0)
setpgid(0x0, r3)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
copy_file_range(r4, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0)
ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x1, 0x2002)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0})
sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0)

4m23.330680873s ago: executing program 2 (id=27):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = epoll_create(0x10002e78)
epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$I2C(0x0, 0x0, 0x189802)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r4=>0x0})
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x115c, &(0x7f00000007c0)={[{}, {0xff8, 0x4e00, "bce618694f76981e222177dfb176e01efc2464575127d53a8c1eb57733772034c533beeda7177cb0fcbd1c32275fb7a86d94d7b738925f2016395786d488b57ec8cb5fefb3c4e44c2012c84931b3e137aea18a5b330b99425e75763858679fcb8488b276fe56eb3f75bf303a55698e8fce563df0aae514b4a7b452e2c62a17ea491e2935a1254b19a1e07b9186786a4b1a4b389c07a8e0cc0127e696a6c1cc7f8e963fa14a4d09e3236b0f04510d3a1e410fc6e625fb278665fd20f5055dbf80c9a37f28b3a6d9ac9ce19500e8b93ecdcadf9a6d7c82f552eb2fa3d6b67cee049fad98e8075441b663200c9a6ae7440dea1d2057113ea0b0d6b7632e052cb00d74428ec97c2f18bebde5fdedf87bbb7312a3e02ef958ccd8c4d51d4e95d1912ca4a17c315eb2bff085ddabbcd9491d9624c3d9687754c66ab9e20b3d45a3ec0c43ac66c6bdfe665395f27bf6f89bf5fa501507b513792928667a17cd5a5d2905dbdf974a4d07f31650b3351d9b25658a3575219cfb3220c0d7ce943d8c398baeecfddba11c223c489a905b4d43ef71217466b602db848a161a1b742b46f632b72bc13967fe520cdec1c2e9af005161e69c531956395aec5b795de158f33fbbd8f9f06e21411e2c8d6966cde1b19a0c6b143a21aa15654d682f6b2c24080e756444563935f5f9f75db9ea833760bdd6387b5ecb8176d2b9f84b0b67fe05e69c200a2cfa6defcf04f4fa62728377bc9aa68c818487d366482d4a72f4882dc2fd91bbc5a1efa1fdbec1eb5a723284b1ecfee2a1a808b752f963f21a68365ac36cc773ccc10808b1ae7244688b8c64c4132588b5e9dd25b5ac3247027e6ab3bb79b2e0687e562cab974c49de5ac8433b7b262a4037e87123428034052b6894bc5a2abdf362c9b377e31d7ef400bb9c44e2f942c4b514337c435282f2172fd5f86d39edd35669c7c0d0aa28e264a6df272ee058b51c6c7397956b5337fb42169f1ce56e4ec918ac2499611aa99736c182ce8a2e36e0190655d2d341bb48940cc985558a3e70c2d0617eee48aafcb29d725990af7df341ded5c6f9849f8129f82d3c65cfbb0015ce7fb6dd645a0fb80c3f04de2fd0121f6917556af21b5878e1373c63490ca9372ead12e50ee072dc426c90c87155321e729750a9f08f3128af73b68cab7b89af5cf9095c83ffb5d21d9ed057e59423d246a961852aa79790b915d28767167e660d3e74691845ef76e56e2f8b56c19778aef9845c22672cef99d56720c8a671959b3114c75de0c205b1b2527eed975bda1d7ae19cff8932465f895025a5a98b721399cfd845fde80fcacbf3bd4ff4896ae3f1e836253fb0bf03092d09c0ef00697467aee61f895596677c2a525b90ebc44bcde47130afe723704c30ba870ad7fd3b429e6c649d098c837deafabc40414b475a77990abcd542a9cf2a8551e9e5f194ebb487bc6e4e817a5913d9b8e911396fbadb2f3a45b303f7c718fece9df2543d96a4bfd0bffd0a13eda3509e6bb7bf9c7b1541503a057aeab8d0d41eaa8b28176af4099474c692e685ab31eb77fc008216f25467ebfebab9babeda83df0113a24b9e5ce89d2b0e4c53bb5f09eb9d52cc566bbedb0ccd1d39e300ea51f7b039766cbb6fb6959ab1a186d34ac270ae29e8949406e2c5161cc81e7ac54aae9f648bcbed25058a16970b72aed8da8f87b027c0cc17dbc3689bcb447ed426cd4bb5157b3d32157f08f4fb7e305749f7d8728db7e7e2eb4af1ea53c2a6e845be599f3c2eeb6366316a84685346737f3d1f0b797e95215e7bccdf85f0b6d8cd12aa080c17059f7c6f62b569d7b0833a6d565989295607bfb7b06521973f82288101be5e091cf5d9d17c7485c6514634afb6f8aa1069e67b195309d399432d8f0e2e87201b6a5deb4ceda3ec4448805211ec69fedd6379a9159dbebf23eb7bedeb8dca7f39f356af77a30afabe99eeab95ff6a2af8b5907740160c4689b7056bb323ccffdf3b7a9f4de81089c9ab7240831523d0c616abffe8be4a2458137ec54c1f0b22f1f11805979834ba98755f596e81e50eed5018cd9c1bd0acddfa15ef59f594ee9c29e45cca3a4e0afacfd495be46f9af9ad7609a416ea2c9639ef8fdbb8d74a3a17f45c3ad4fa39ca540947fa19876191ecbeaec9877ca0db879eb1c0ab033a44857da1f478b97aa79ae05cc567d8df9f54e2adf2c2e65be97e171733bd7cbc1380f7691144e18e14be99a1213464c8c437a4ca5c0f5edc1b680d9510cacf23b497cce8384a6d686be93006dd05a75e198b4751ac18f967317c9996938038054b26520e7f7971817d2fca364fe24fd845a682d9c627b9bd112bc678c9dea3d00cfb78650744b29fae9d956712272c04814218cb5a4c7d2c85a9eca1ccbac2d8dc5d0ab20c57aa4d0d08afef6c14ca22114465903035251ee7973f83e5b822331ac4939b6f8ab6724683d03018dacc2ea5a5b04f02ae773310be521cb46f7bc666a0a8ef534f210289cad6068ace5750938a7610adaca18c1166b8b431e0623420743d0750330833cbb91537ba3bad8f37060329e87e356db284dd4d3170c9308372863a9e72029e4eeee2b684bad6482a91afbc082fea1da88342f596cb2837b77a6e07d0f445d400729001770172571d06adb4a50632cc73d96601317d8678de73730e47d76f96e239a0407bf928da9abba24d7975db8b05654242566bd8306a15042ff18d701612359f1174296954d6ab5329fa37e1ec23d176965a0aa93dbb2720cd9a247b41710daf1dc0935aa0af03e79c1bd8439c7bb4b77e9838ccbdb146bf6d1a70d4c0f87671e8e3ec6ad1be63dc179cc05f1f0dc6ea8b62559aca226d4fa51d93a713cdd7d26a4e169c8827d160976b37f17683c1b73ac88b70767fa50adf9a20e84b03676c4f9c40415119220116c90d4dd6036d180ad7138a9741c55bdfdd8d5ee51abfde3931911bc2ddf97c2a41889e98d83e6ebe7f6c0500602eedea910269b471a1cb3d1f2e2cca146619379f5da5116baf2450ac7a3bb6ec8ab8a23d5e80ea5754263b790a5d15cdb11175c12e3349050950d3fde8a53c5b9214b3926b03e049af167386cb349c681edf503f40698b7e2fcaafdc335d1deca3939b7467a04dc553e8439bf168b2b8f278dce6839bacbe0aa4329df898a5c7011267158d69c0cc45eb0760e801125444207594c43df5fcbeff3bc787bc77cd36d8d36c4f6ffdbca32e0cb29e5a1c1c3b2899e19ac02cbdaa89af2500ef68e532836cff0584fe7f33a1135f82bd91cad5454b14bf3fdfe242fb5207ce835c15accd60a17f8f9459e3ad30e59332203cf2146e7e44c07f937ccc8298ad57826376d8df79729b2863ae34f98cc6bc989ae64f9b87328e7b2b2a65fd1d71625d4e516d697a978160da80d6ee9c59f972ccefb4911062cc437f34a167bc423ad08843ebbfe7d3cc7237e7bfd59ec430dfde0b5e2ce38c78ac638c94ad3eaef2fc06c626b054752479fe0e2131b14e8a6a249a583891a72424173b6519c1226a37363bf0c0a4461a8de65e4b103bb6d33351694e9bece1186f361e88417339186b276874120304da402b8bc0736520dc83132060d31b4e3b83df233988075bcc05433d08b2ce6cdc313a5cb84a327fa18e7cccde9f4542a1f0a336a2494c1c407ed87a425fcbe9703856642bdf3e629041cff1c45a30f09e9d5b447f1f86706d649d8c9731f215588e4775e71a9935358f63d41e44176ae91eea1ad90d750d3d2c4da5b5d9cc6f8d91e2877a024d6ec27b8f4f683676b87d94ddf29bbdf226f13b3828bf822e7f47e6f34d6dd2f8d81508da047e3d38867c94a0a6a62f4193d4910ecbe5ff2f4d30fa5e3eb9b3db6b7907522ffdc60df9968019226eddbbfd0576f4dd3c859722917b784d66ee141e4837e847a1c1fed79f1f8737324908e0f32ed5762ce0f6e0d1520e5c820f0cb7c5708a06b8a3626c90587ff63baca6b23ec926b6bbd53acb8c00e7b766d579601e8507cc09ef465a199a4bde9f5642cb25788f8f23e42caf036e369e4e03214d3ea4c308efd723f9ef7ce755afe366eada5d8898c520a990fe4b30894121add09c799fb61688ccc2420638c1150c2b78ae1ab1f7310d599c6968429b2e3890229f080182e0ca88fc4f7fd4ddd971c0d0bae8184cb009b5f64cc7788b23715134472e2d4c973dd6eeeedb63cfd00680505a787fb2d3e7bfc3bed042e59022e5fe3c6f774e577d31adc85c14b42bd7353db8b768cf99686d8f6a7100f000fb27a56fd266b96e4cf8636600a029b513304efed07bd3f789a5bb59d707371cc10d49b0c13a2393006d7f8d44eea309c0bdffa3dc46a0b71d2886e68e569137eceb312c53538eef5d8c5eefa33c5cc12807e39744b1088cbe3550d7fff896fecb1d160e86e1de1b00d5350e497ccedfb13c49b8560d371ae2ec0e4a0af8b7c90514437dfd8de97be06ee514cd6e7a01488d79e5efb6a878d4e5a8f37c62f11b578bdd071ae78086765ffb8d1c9ef4d47a44d091677243e2acb4093495d3f0bd17d451228ae9dca6e10a4483a81be79aa9e1be98e4bac48e89432f6d36514aea793bb5dfbe4c9e06eb52a8e2a8eb2bf31520232a7a053d1813eccf3fbae38eb67945f7a93806d1060020db2438639cae031218e0a80b263b9cbc304a595e1e0cadeb4547c8d4fa113010125ffa7dad665e54e1eacf8d1012b24dae69eb73a856d53c270705fc3466b506cf16ffb0b56ee3e9f0a81130801486802dda57f0934ae546401b8f9c52da7b85c4705f372ad007ac0044d3fd0ecf11f1b6971c960eddec7901ca325cb5da7d5f7c56ba0134546fc7531ca4a439cea6abfae60c84d55f8aa8abfefdabc087bf3eff334f5af2475e22a14596aa1b74b3255369c3aaecf805b783756470622b16a693761beb73e423f2beaeab23bf0d4071f88fc4315d19488a8e28389ac14d4b5b9535a5f7664705e1e9d091a58dab5077bc01353419548347bf3b3c0cf60791102c3f1498cd00875a00efc184b6eabbf67d929cb3871e0f3769471df49254027bab1bae292e148d0e45cdc78bb8d1c0f3cee2a2e01dd05c5c9151520de49d446005fa7eafaf8f8c02f4ee7fd585acc444613027efc1b0969949d31ecaaedd1ce9e62e7a81a5b67b243510976393dc7036dfab779643fbed416cd17ef7800f2c818efb75bf9fcf8bec1cde00e313c302f4360aad5b39214fa0f3b6603393975b058bae1259560d577e4ff0aff6387ebd0016ff3bd659bd546421283774c52c59f8339cd6828a9e344f7fd9729b8b550714e0ae7ed3a489087770ac2c949f9f7c2596c5fe3e329596b2706dded103a632f45f11989712bdd2d2f904c8223c03fb4c04d8a02a0883a953e926bd8fffa2bbaa44b2030545d4d4d87c8bc99e2b97e4f07a15be845e30ffcdc04df1d2732ba731e8d16ce903975042ee041a6582a43479e667ddded322f07f870b669f25f87a03afb0ee0d6618c583ac3ce540db85cdaf68a9a3c49dc4d2af79f1de35063b994d344f8c888e53a1c07c0df58174c3fc8296da1914fca250cf2c2c6e9f1a425ccafb6a7f2e1664fbb2f322ca4559c8d9c20b35cb62ba2d0b405904e6f0481a1778dfe39eb5943b539799df9cf2c0b4048180662666a6516964b8f5253633d71e108f4022d55067173609a2363875f8b4836b9abfa32814505b8415506653464b670b934ad39dcd4e42a16e199f58b2e522279e6c8ade60d074289faed3a6ff295eb5c8738d221e4b2cc94d971fab064"}, {0x1c, 0x4e00, "727bf88ab6c19ed803e470b9d96bb7de5f8e8c31fce773c678ed8d33"}, {0x3c, 0x4e00, "9ab0ded72c6736db19c2b877c3b42056d2ad2ad0c4be687e6608918a73468d268aaad0b51f78e4389ae6345c7bb7549ca36e5590ee2208e3a532c6eb"}, {0x9, 0x4e00, "162f85fe22e1d4b023"}, {}, {0xe1, 0x4e00, "5c2fc116364c64832d501ac501473fff0e75ceb8c5b0e2b565dbb064bd92274b21b2a0d8f34520001e1484fb3bc5f181791a0a38e7c89a134492bebc4c9ec7942b2c65df015eb9102ec823eeba1f59bfc2f30c92b45b47aecba53e66833080f52615d5855c99f7fe2b5ef524d0bdd241087f650f099bb5bc26acc89e86a599c304a8015d5cb6c31fd5e4ffba8a91c52a7bfae2343189d59e5c885ed871d505b96726223a37770376326141d76a3c3d5bfcd85e4a5f7c351f5f03046f19ce5b166a2384d23e2e3981ddfeb86adb2b7e4cbc381be461d092ca352cf02b4b706f7923"}]})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xc3, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

4m22.805939051s ago: executing program 2 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14)

4m21.582426006s ago: executing program 32 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14)

12.901497277s ago: executing program 0 (id=553):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c)
syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @bcast]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0xfe, 0x6, 0x0, @empty, @broadcast}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
ioctl$UI_DEV_CREATE(r2, 0x5501)
read$FUSE(r2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68800040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r6 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r6, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r8, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1001, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0})

12.682802349s ago: executing program 0 (id=554):
io_uring_setup(0x4a3, &(0x7f0000000000)={0x0, 0x6, 0x8, 0x2000000, 0x3a7})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4)
syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x814810, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@noxattr}]}})
mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0xfffffffa)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0)

11.482089122s ago: executing program 3 (id=557):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
lseek(0xffffffffffffffff, 0x1000004, 0x2)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26)
sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)

11.125381941s ago: executing program 3 (id=559):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x608801, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
getrlimit(0x2, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfc, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x24008000)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x1a, 0x20f5)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
clock_gettime(0x4, &(0x7f0000000100))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f00000001c0)=0x1000000, &(0x7f0000000380)='%-010d \x00'}, 0x20)

9.899316967s ago: executing program 3 (id=560):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0)
r2 = socket$inet(0x2, 0x3, 0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0506020000000000000000000007140000001100010000000000000000000000000abf08bfba86d940a23b5f8f0800b5c2522473ad089eb3d4040fc86fa5760f8692707c6259e5e1fa5dceca1730e4de7a2786974036740b1deb991601c408dcc2e639f6cb8cedec0dfc688e28b5cbbe662b3e3a36de87224299b6955337562eb68ac0a8c3a022aa45fb3d9a50ac3e88e0ece968fba6f0c9"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x4040850)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0x1000)
ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0)

8.657422172s ago: executing program 1 (id=562):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c)
syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @bcast]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r4, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0xfe, 0x6, 0x0, @empty, @broadcast}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
ioctl$UI_DEV_CREATE(r2, 0x5501)
read$FUSE(r2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68800040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a001000002010101000000000000000c00028005000100110000000c000280050001002f00000014000180080001000000000008000200ac1414bb0c000280050001003a000000060003400003ff000c000280050001003a00000006007640000300000600034000040000840002802c00018014000300fe80000000000000000000000000002314000400200100000000000000000000000000001400018008000100ac14142d080002000a0101021400018008000100ac1e010108000200ac1e00012c00018014000300fe8000000000000000000000000000aa1400040f20010000000000000000000000000002100001800c000280050001002100000014001880080002400000000108000340000000048400018006000340000100002c000180140003000000000000000000000000000000000014000400fc0100000000000000000000000000000c000280050001000100000006000340000300002c00018014000300fe88000000000000000000000000010114000400fc0000000000000000000000000000000c000280050001002f000000000000000000000000e6f49fc5b5c0376b6cfb45a9c4d35cc47c0370604b946e4b2a74b803fdbcd3c9d7abda4e844a3f10a463fd41e8908be336a9284f3201889cf4e4e069fd7ecc235c3099e95c6d11197162a1dd8f01964fc4ae5f01a94fd13bf6d33c99bc1911d6a99065842cbd0d15fdaefa5ebfa22d090b0f5c6aeb56d853ef17c73afaa170b74e641633d46763938d14a565a836cf3920695cb458c54046d05437f3ff88cc2484906dd1eeb3dc319e832c8862fa8e323ead6eaff0f8a1aa0b69a84128a1730e77ae2f862cd52c36a41f5a3d6c05422534fc914ab4f3cc43d3274c26111ba00199e266de87c5a167a8009aaf6f564c3b035d72cbc45c83c089acdbfc04d0c8d2a08a49521ae9656eaa477ce6b3ecc3b93c0ae1069c80be5bfea92720"], 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r6 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r6, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
ioctl$COMEDI_CMD(r8, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1001, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0})

8.621466764s ago: executing program 0 (id=563):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x375040, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r2})
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)

7.924995431s ago: executing program 1 (id=565):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x375040, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r2})
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)

6.545848474s ago: executing program 1 (id=568):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x608801, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
getrlimit(0x2, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x24008000)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x1a, 0x20f5)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
clock_gettime(0x4, &(0x7f0000000100))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f00000001c0)=0x1000000, &(0x7f0000000380)='%-010d \x00'}, 0x20)

6.522789366s ago: executing program 0 (id=569):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000009b80)=""/102400, 0x19000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x12})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4015}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000026000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xf000, 0x3, 0x1d4})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x4095, 0x7721, 0x16, 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x388, 0x7ffffffe)

5.562800306s ago: executing program 1 (id=570):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket(0x2, 0x80805, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r5, 0xe1d1}, 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040))
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0xdeb8, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000300)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x5})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)

5.026841274s ago: executing program 4 (id=571):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0xc0000)
bind$llc(r0, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x320, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6)
ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000ffd000/0x2000)=nil)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x110000a, 0x1}, {0x5f32, 0x8}]}})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r8, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r9)
sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x8010)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x3, r8, 0x0, 0xe, 0x5, &(0x7f0000000080)="dbccadb7b7"})
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv4_getnexthop={0x4c, 0x6a, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r12}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040)

5.025877334s ago: executing program 3 (id=572):
io_uring_setup(0x4a3, &(0x7f0000000000)={0x0, 0x6, 0x8, 0x2000000, 0x3a7})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4)
syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x814810, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@noxattr}]}})
mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0xfffffffa)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0)

4.950849348s ago: executing program 0 (id=573):
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0)
openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})

4.697818992s ago: executing program 4 (id=574):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

4.522307911s ago: executing program 4 (id=575):
prlimit64(0x0, 0xf, &(0x7f0000000000)={0x6, 0x100000001}, 0x0)
sched_setscheduler(0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x7)
getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000880}, 0x2000000c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7ffffffd, 0x400000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x8a133000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
io_setup(0x20000004, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000380)=[0x0, 0x0])
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340))
io_pgetevents(0x0, 0x47c, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0, &(0x7f00000003c0)={0x0})
pselect6(0x40, &(0x7f00000002c0)={0x1ff, 0x2, 0x4, 0x8, 0x101, 0x6, 0x9, 0x4}, &(0x7f0000000440)={0x3, 0x4, 0x3, 0x100, 0x1, 0x0, 0x100000000, 0x401}, &(0x7f0000000480)={0x3, 0x1, 0x5, 0x1, 0x5, 0x7, 0x7, 0x4}, &(0x7f00000004c0), 0xfffffffffffffffc)
close(0x3)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x9, 0x5})
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x40000)
socket$packet(0x11, 0x3, 0x300)

3.452524837s ago: executing program 4 (id=576):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x375040, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r2})
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)

2.174162505s ago: executing program 4 (id=577):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x375040, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r2=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r2})
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)

2.131765658s ago: executing program 1 (id=578):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x608801, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
getrlimit(0x2, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x24008000)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x1a, 0x20f5)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
clock_gettime(0x4, &(0x7f0000000100))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f00000001c0)=0x1000000, &(0x7f0000000380)='%-010d \x00'}, 0x20)

934.103631ms ago: executing program 1 (id=579):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r2, 0x5, 0x4)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

822.237397ms ago: executing program 3 (id=580):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x60840, 0x94)
fcntl$setsig(r1, 0xa, 0x21)
fcntl$setlease(r1, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x3)
fcntl$setstatus(r2, 0x4, 0x42c00)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000040000000, 0x0, 0x80000000004, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x2c3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffdfffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x6, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x4000000, 0x100000000]})
socket$packet(0x11, 0x3, 0x300)
r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000080)={0x1008, r4}, 0x0)
add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000ffff21bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="385a03002b92050028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="10000000440001000a000100aaaaaaaaaabb0000080004"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

746.060211ms ago: executing program 0 (id=581):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0)
r2 = socket$inet(0x2, 0x3, 0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0506020000000000000000000007140000001100010000000000000000000000000abf08bfba86d940a23b5f8f0800b5c2522473ad089eb3d4040fc86fa5760f8692707c6259e5e1fa5dceca1730e4de7a2786974036740b1deb991601c408dcc2e639f6cb8cedec0dfc688e28b5cbbe662b3e3a36de87224299b6955337562eb68ac0a8c3a022aa45fb3d9a50ac3e88e0ece968fba6f0c9"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0x1000)
ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0)

72.730667ms ago: executing program 3 (id=582):
io_uring_setup(0xdf1, 0x0)
r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
socket$phonet(0x23, 0x2, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_emit_ethernet(0x46, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='so@\xdc\xcd\xf8H-\xb8\x16u\x96\x15\f\xa2ce', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fp\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00'/119, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x4, "563e359cde7ccdca47d10000dc0000000000000000800a00000000007310717d", <r3=>0xffffffffffffffff})
syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r4, <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r5})
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000001a40)={&(0x7f00000019c0)=[{&(0x7f0000000080)="2498d0d7632484e91d4b031d427fb8348a01d5dabee7", 0x16}], 0x1, 0x6, 0x0, 0xfffffffffffffff8, 0x7ff, 0x3, 0x7, 0x3})
syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYBLOB="9f4d95f22cd82388549b4896cf70343080f7e2dad05ccd74e3c0ba005e63bd92f80894caffad3a85b55d0b437a83e7c423e1f92e9107d286ff2449d70ba77deea250f004c97a057255d2c6f59e9f954eb7421735f647ff8f096d2b1c9e6eaeaefc6ed0d8a71f6dda8f9f34aa05d60a3dbc767e7e8615e7d41c48d81999aaf592f20865daee8fce1e911f0b5f205fb6367b3f88b2d34aad0aa1ec27d006a280b49ae691f36bc0bc20bc874711f247a0739854be"], 0x0)

0s ago: executing program 4 (id=583):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts.
[   71.982091][ T5756] cgroup: Unknown subsys name 'net'
[   72.147042][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.654475][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.295927][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.305680][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.313998][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.363928][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.380020][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.387679][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.396454][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.403807][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.412296][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.419723][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.427039][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.427069][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.437246][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.449191][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.450365][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.459679][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.470501][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.476983][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.481449][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   75.487114][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.493190][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.500414][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   75.512827][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.521220][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.932210][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   76.017485][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   76.122267][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.129527][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.137029][ T5767] bridge_slave_0: entered allmulticast mode
[   76.145867][ T5767] bridge_slave_0: entered promiscuous mode
[   76.154175][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   76.166641][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   76.189278][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.196417][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.203653][ T5767] bridge_slave_1: entered allmulticast mode
[   76.211368][ T5767] bridge_slave_1: entered promiscuous mode
[   76.298738][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.306022][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.313711][ T5770] bridge_slave_0: entered allmulticast mode
[   76.321593][ T5770] bridge_slave_0: entered promiscuous mode
[   76.352562][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.365384][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.372928][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.383131][ T5770] bridge_slave_1: entered allmulticast mode
[   76.390315][ T5770] bridge_slave_1: entered promiscuous mode
[   76.415233][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.496941][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.518011][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.525273][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.532854][ T5769] bridge_slave_0: entered allmulticast mode
[   76.540393][ T5769] bridge_slave_0: entered promiscuous mode
[   76.550195][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.569683][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.576803][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.584444][ T5768] bridge_slave_0: entered allmulticast mode
[   76.591833][ T5768] bridge_slave_0: entered promiscuous mode
[   76.603661][ T5767] team0: Port device team_slave_0 added
[   76.610073][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.617252][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.624567][ T5769] bridge_slave_1: entered allmulticast mode
[   76.632060][ T5769] bridge_slave_1: entered promiscuous mode
[   76.648656][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.656166][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.663844][ T5768] bridge_slave_1: entered allmulticast mode
[   76.671342][ T5768] bridge_slave_1: entered promiscuous mode
[   76.679374][ T5767] team0: Port device team_slave_1 added
[   76.717120][ T5770] team0: Port device team_slave_0 added
[   76.744032][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.754024][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.782814][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.796330][ T5770] team0: Port device team_slave_1 added
[   76.816801][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.831942][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.841770][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.848730][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.875143][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.905939][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.955778][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.994732][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.002007][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.028244][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.042153][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.049256][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.075992][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.101525][ T5769] team0: Port device team_slave_0 added
[   77.110460][ T5768] team0: Port device team_slave_0 added
[   77.121857][ T5767] hsr_slave_0: entered promiscuous mode
[   77.128447][ T5767] hsr_slave_1: entered promiscuous mode
[   77.146487][ T5768] team0: Port device team_slave_1 added
[   77.155092][ T5769] team0: Port device team_slave_1 added
[   77.220477][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.227467][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.255759][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.278820][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.286504][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.312810][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.325695][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.332885][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.358883][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.382880][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.390598][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.416792][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.433861][ T5770] hsr_slave_0: entered promiscuous mode
[   77.440416][ T5770] hsr_slave_1: entered promiscuous mode
[   77.446576][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.454535][ T5770] Cannot create hsr debugfs directory
[   77.519987][ T5782] Bluetooth: hci0: command tx timeout
[   77.584124][ T5768] hsr_slave_0: entered promiscuous mode
[   77.590552][ T5768] hsr_slave_1: entered promiscuous mode
[   77.596736][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.604569][ T5779] Bluetooth: hci1: command tx timeout
[   77.604854][ T5782] Bluetooth: hci3: command tx timeout
[   77.616244][ T5779] Bluetooth: hci2: command tx timeout
[   77.621824][ T5768] Cannot create hsr debugfs directory
[   77.694513][ T5769] hsr_slave_0: entered promiscuous mode
[   77.701659][ T5769] hsr_slave_1: entered promiscuous mode
[   77.707866][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.715509][ T5769] Cannot create hsr debugfs directory
[   77.987456][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.001521][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.020714][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.031007][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.116426][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.136398][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.178079][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.205558][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.230597][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.251144][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.262535][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.273194][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.344915][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.358122][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.368379][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.378941][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.535171][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.548643][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.623850][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   78.639237][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.646620][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.661221][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   78.677275][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.706387][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.717107][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.724292][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.736835][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.743982][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.764672][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.771870][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.797669][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   78.845627][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   78.870615][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.877768][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.889619][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.896795][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.922587][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.929782][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.963330][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.970577][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.304382][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.415447][ T5767] veth0_vlan: entered promiscuous mode
[   79.462328][ T5767] veth1_vlan: entered promiscuous mode
[   79.562763][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.578359][ T5767] veth0_macvtap: entered promiscuous mode
[   79.599461][ T5779] Bluetooth: hci0: command tx timeout
[   79.625168][ T5767] veth1_macvtap: entered promiscuous mode
[   79.638786][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.668802][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.680502][ T5782] Bluetooth: hci3: command tx timeout
[   79.680514][ T5775] Bluetooth: hci1: command tx timeout
[   79.692985][ T5779] Bluetooth: hci2: command tx timeout
[   79.700047][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.728460][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.752575][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.764769][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.774409][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.783462][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.836001][ T5770] veth0_vlan: entered promiscuous mode
[   79.852735][ T5770] veth1_vlan: entered promiscuous mode
[   79.876480][ T5768] veth0_vlan: entered promiscuous mode
[   79.911892][ T5769] veth0_vlan: entered promiscuous mode
[   79.943409][ T5768] veth1_vlan: entered promiscuous mode
[   79.961840][ T5769] veth1_vlan: entered promiscuous mode
[   80.033801][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.047717][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.081401][ T5770] veth0_macvtap: entered promiscuous mode
[   80.092662][ T5770] veth1_macvtap: entered promiscuous mode
[   80.108130][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.128845][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.144959][ T5769] veth0_macvtap: entered promiscuous mode
[   80.157145][ T5768] veth0_macvtap: entered promiscuous mode
[   80.177748][ T5769] veth1_macvtap: entered promiscuous mode
[   80.186904][ T5768] veth1_macvtap: entered promiscuous mode
[   80.198024][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.210318][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.223051][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.266928][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.278009][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.290448][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.304574][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.315258][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.326529][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.338239][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.351218][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.366838][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.377646][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.388019][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.398727][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.410458][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.420968][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.433824][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.451286][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.480484][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.497789][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.518626][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.532046][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.551891][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.560860][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.574466][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.583619][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.597535][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.607661][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.617147][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.625949][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.638779][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.651435][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.662531][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.674066][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.686361][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.697059][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.708489][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.716213][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   80.778963][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.792964][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.803668][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.813176][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.926845][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.942779][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.980918][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.988799][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.028318][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.050595][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.110160][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.148651][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.181396][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.202918][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.245914][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.267170][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.879305][ T5782] Bluetooth: hci0: command tx timeout
[   81.884814][ T5782] Bluetooth: hci3: command tx timeout
[   81.891222][ T5782] Bluetooth: hci2: command tx timeout
[   81.896671][ T5782] Bluetooth: hci1: command tx timeout
[   83.725372][ T5854] Zero length message leads to an empty skb
[   84.495419][ T5779] Bluetooth: hci1: command tx timeout
[   84.495452][ T5782] Bluetooth: hci2: command tx timeout
[   84.501735][ T5779] Bluetooth: hci3: command tx timeout
[   84.506604][ T5782] Bluetooth: hci0: command tx timeout
[   87.046880][ T5874] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   87.729460][    T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.742168][ T5882] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   87.776618][ T5882] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   87.919938][    T8] usb 2-1: device descriptor read/64, error -71
[   88.199359][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   89.024187][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'.
[   89.556608][ T5890] netlink: 'syz.1.15': attribute type 4 has an invalid length.
[   89.565795][ T5890] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15'.
[   90.606767][ T5890] .`: renamed from bond0 (while UP)
[   91.934611][    T9] cfg80211: failed to load regulatory.db
[   92.259376][ T5911] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   93.249280][ T5771] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   93.429284][ T5771] usb 1-1: device descriptor read/64, error -71
[   93.739824][ T5771] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   93.853496][ T5929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   93.859716][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   93.898178][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   93.924002][ T5771] usb 1-1: device descriptor read/64, error -71
[   93.954638][ T5931] netlink: 'syz.2.25': attribute type 11 has an invalid length.
[   93.966012][ T5931] netlink: 'syz.2.25': attribute type 13 has an invalid length.
[   94.061439][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.070968][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.083064][ T5771] usb usb1-port1: attempt power cycle
[   94.132741][ T5933] bridge0: entered allmulticast mode
[   94.182356][ T5931] bridge_slave_1: left allmulticast mode
[   94.216512][ T5931] bridge_slave_1: left promiscuous mode
[   94.233057][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.274488][ T5931] bridge_slave_0: left allmulticast mode
[   94.289353][ T5931] bridge_slave_0: left promiscuous mode
[   94.306392][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.507224][ T5933] tipc: Started in network mode
[   94.527594][ T5933] tipc: Node identity , cluster identity 4711
[   94.536410][ T5933] tipc: Failed to obtain node identity
[   94.543912][ T5933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   94.561000][ T5771] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   94.612822][ T5771] usb 1-1: device descriptor read/8, error -71
[   94.919217][ T5771] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   95.044612][ T5771] usb 1-1: device descriptor read/8, error -71
[   95.198454][ T5771] usb usb1-port1: unable to enumerate USB device
[   96.178573][ T3506] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.582271][ T3506] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.092172][ T5973] trusted_key: encrypted_key: insufficient parameters specified
[   97.391232][ T3506] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.741665][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'.
[   98.008088][ T3506] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.646237][ T5987] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   98.751605][ T5984] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   98.873088][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   98.882132][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   98.901644][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   98.925927][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   98.937261][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   98.949163][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   99.001066][ T5993] block nbd1: NBD_DISCONNECT
[   99.075232][ T5994] syzkaller0: entered promiscuous mode
[   99.149281][ T5830] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.329117][ T5830] usb 4-1: device descriptor read/64, error -71
[   99.639299][ T5830] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   99.799240][ T5830] usb 4-1: device descriptor read/64, error -71
[   99.955704][ T5830] usb usb4-port1: attempt power cycle
[  100.824856][ T5988] chnl_net:caif_netlink_parms(): no params data found
[  101.039292][ T5782] Bluetooth: hci3: command tx timeout
[  101.239105][ T5830] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  101.272188][ T5830] usb 4-1: device descriptor read/8, error -71
[  101.429521][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'.
[  101.650988][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.658298][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.665953][ T5988] bridge_slave_0: entered allmulticast mode
[  101.676633][ T5988] bridge_slave_0: entered promiscuous mode
[  101.883455][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.978680][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.082619][ T5988] bridge_slave_1: entered allmulticast mode
[  102.208874][ T5988] bridge_slave_1: entered promiscuous mode
[  102.378356][ T5988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.432837][ T5988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.557027][ T3506] hsr_slave_0: left promiscuous mode
[  102.563372][ T3506] hsr_slave_1: left promiscuous mode
[  102.569786][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.577329][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.585776][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.595823][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.642593][ T3506] veth1_macvtap: left promiscuous mode
[  102.648496][ T3506] veth0_macvtap: left promiscuous mode
[  102.677220][ T3506] veth1_vlan: left promiscuous mode
[  102.694241][ T3506] veth0_vlan: left promiscuous mode
[  103.120053][ T5782] Bluetooth: hci3: command tx timeout
[  104.027644][ T6078] syz.0.50[6078]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  104.830029][ T6073] comedi comedi2: reset error (fatal)
[  105.101954][ T3506] team0 (unregistering): Port device team_slave_1 removed
[  105.203040][ T5782] Bluetooth: hci3: command tx timeout
[  105.222451][ T3506] team0 (unregistering): Port device team_slave_0 removed
[  105.281121][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.345765][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.424731][ T3506] bond0 (unregistering): Released all slaves
[  106.481654][ T6097] trusted_key: encrypted_key: insufficient parameters specified
[  106.570581][ T5988] team0: Port device team_slave_0 added
[  106.630242][ T5988] team0: Port device team_slave_1 added
[  106.895150][ T6102] netlink: 'syz.3.57': attribute type 4 has an invalid length.
[  106.905887][ T6102] netlink: 152 bytes leftover after parsing attributes in process `syz.3.57'.
[  107.290844][ T5782] Bluetooth: hci3: command tx timeout
[  107.821531][ T6102] .`: renamed from bond0 (while UP)
[  108.087260][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.095337][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.174919][ T5988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.260240][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.267198][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.394808][ T5988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.652065][ T5988] hsr_slave_0: entered promiscuous mode
[  109.676692][ T5988] hsr_slave_1: entered promiscuous mode
[  109.997663][ T5988] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.016744][ T5988] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.032446][ T5988] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  110.046367][ T5988] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  110.171114][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.222877][ T5988] 8021q: adding VLAN 0 to HW filter on device team0
[  110.238488][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.246368][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.332607][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.339846][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.653960][ T6140] syzkaller0: entered promiscuous mode
[  111.318403][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'.
[  111.563200][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.006049][ T6170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.968704][ T6181] xt_nat: multiple ranges no longer supported
[  113.153332][ T6186] netlink: 'syz.0.73': attribute type 4 has an invalid length.
[  113.162269][ T6186] netlink: 152 bytes leftover after parsing attributes in process `syz.0.73'.
[  113.220499][ T6186] .`: renamed from bond0 (while UP)
[  113.286481][ T5988] veth0_vlan: entered promiscuous mode
[  113.328203][ T5988] veth1_vlan: entered promiscuous mode
[  113.427755][ T5988] veth0_macvtap: entered promiscuous mode
[  113.497358][ T5988] veth1_macvtap: entered promiscuous mode
[  113.517838][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.528913][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.758130][ T6197] NILFS (nullb0): couldn't find nilfs on the device
[  114.270304][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.318919][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.353892][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.404436][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.454256][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.516047][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.543053][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.553996][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.565066][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.577520][ T5988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.588318][ T5988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.614542][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.630060][ T5988] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.641158][ T5988] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.664334][ T5988] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.791618][ T5988] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.043844][ T6205] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  115.680007][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.719587][ T5750] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  116.140354][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.569207][ T5750] usb 2-1: device descriptor read/64, error -71
[  116.596446][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.640097][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.859097][ T5750] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  117.049243][ T5750] usb 2-1: device descriptor read/64, error -71
[  117.189322][ T5750] usb usb2-port1: attempt power cycle
[  117.629158][ T5750] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  117.691190][ T5750] usb 2-1: device descriptor read/8, error -71
[  117.990451][ T5750] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  118.254512][ T5750] usb 2-1: device not accepting address 7, error -71
[  118.390294][ T5750] usb usb2-port1: unable to enumerate USB device
[  118.453544][ T6273] xt_nat: multiple ranges no longer supported
[  121.735190][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'.
[  122.540465][ T6301] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  122.839131][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  123.014600][ T5830] usb 4-1: device descriptor read/64, error -71
[  123.321111][ T5830] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  123.519574][ T5830] usb 4-1: device descriptor read/64, error -71
[  123.581812][ T6334] syz.1.92 uses obsolete (PF_INET,SOCK_PACKET)
[  123.657664][ T5830] usb usb4-port1: attempt power cycle
[  124.179252][ T5830] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.263036][ T5830] usb 4-1: device descriptor read/8, error -71
[  125.369257][ T5830] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  125.479097][ T5830] usb 4-1: device descriptor read/8, error -71
[  125.624907][ T5830] usb usb4-port1: unable to enumerate USB device
[  127.294247][ T6367] sched: RT throttling activated
[  131.140289][ T5750] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  131.337219][ T6414] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  131.451428][ T5750] usb 5-1: Using ep0 maxpacket: 16
[  131.459787][ T5750] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.472099][ T5750] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  131.485052][ T5750] usb 5-1: config 0 interface 0 has no altsetting 0
[  131.493849][ T5750] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  131.511405][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.631632][ T5750] usb 5-1: config 0 descriptor??
[  131.889459][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  132.034963][ T5750] usbhid 5-1:0.0: can't add hid device: -71
[  132.049976][ T5750] usbhid: probe of 5-1:0.0 failed with error -71
[  132.079404][ T5750] usb 5-1: USB disconnect, device number 2
[  132.130034][ T5830] usb 2-1: device descriptor read/64, error -71
[  132.349786][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  133.770771][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  133.777501][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  134.010908][ T5830] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  137.689244][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  138.209111][ T6485] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  138.259287][ T5830] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  138.469215][ T5830] usb 2-1: Using ep0 maxpacket: 16
[  138.489227][ T5830] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.502681][ T5830] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  138.571245][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.609401][ T5830] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  138.618468][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.672029][ T5830] usb 2-1: config 0 descriptor??
[  138.770593][ T6488] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  138.779116][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  139.316052][ T5830] usbhid 2-1:0.0: can't add hid device: -71
[  139.329343][ T5830] usbhid: probe of 2-1:0.0 failed with error -71
[  139.352183][ T5830] usb 2-1: USB disconnect, device number 10
[  139.384220][  T787] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  139.569322][  T787] usb 4-1: device descriptor read/64, error -71
[  139.949194][  T787] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  140.719589][  T787] usb 4-1: device descriptor read/64, error -71
[  140.963686][  T787] usb usb4-port1: attempt power cycle
[  141.719469][  T787] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  141.779588][  T787] usb 4-1: device descriptor read/8, error -71
[  143.998352][ T6532] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  144.569189][ T6211] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  144.759105][ T6211] usb 1-1: Using ep0 maxpacket: 16
[  144.778633][ T6211] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.810691][ T6211] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  144.850483][ T6211] usb 1-1: config 0 interface 0 has no altsetting 0
[  144.877473][ T6211] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  144.911711][ T6211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.960362][ T6211] usb 1-1: config 0 descriptor??
[  144.966674][ T6549] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  145.016193][ T6549] ALSA: mixer_oss: invalid index 1374389
[  145.246771][ T6211] usbhid 1-1:0.0: can't add hid device: -71
[  145.269668][ T6211] usbhid: probe of 1-1:0.0 failed with error -71
[  145.290358][ T6211] usb 1-1: USB disconnect, device number 6
[  148.999398][ T5827] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  149.509130][ T5827] usb 1-1: Using ep0 maxpacket: 16
[  149.521389][ T5827] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  149.538727][ T5827] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  149.556093][ T5827] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  149.579062][ T5827] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  149.587274][ T5827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  149.667050][ T5827] usb 1-1: config 0 has no interface number 0
[  149.694616][ T5827] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  149.726252][ T5827] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  149.738851][ T5827] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  149.749406][ T5827] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  149.813877][ T5827] usb 1-1: config 0 interface 125 has no altsetting 0
[  149.838281][ T5827] usb 1-1: config 0 interface 125 has no altsetting 2
[  149.865952][ T5827] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  149.895544][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.925900][ T5827] usb 1-1: Product: syz
[  149.946282][ T5827] usb 1-1: Manufacturer: syz
[  149.979609][ T5827] usb 1-1: SerialNumber: syz
[  150.020738][ T5827] usb 1-1: config 0 descriptor??
[  150.299709][ T6610] NILFS (nullb0): couldn't find nilfs on the device
[  150.504629][ T6612] xt_nat: multiple ranges no longer supported
[  150.600405][ T5771] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  150.680494][ T5827] usb 1-1: selecting invalid altsetting 2
[  150.690742][    C0] usb 1-1: async_complete: urb error -71
[  150.697004][    C0] usb 1-1: async_complete: urb error -71
[  150.703502][    C0] usb 1-1: async_complete: urb error -71
[  150.709339][    C0] usb 1-1: async_complete: urb error -71
[  150.715163][ T5827] get_1284_register: usb error -71
[  150.729343][ T5827] usb 1-1: USB disconnect, device number 7
[  150.789114][ T5771] usb 4-1: Using ep0 maxpacket: 16
[  150.801917][ T5771] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.823265][ T5771] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  150.911539][ T5771] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.918236][ T5771] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  150.972278][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.043671][ T5771] usb 4-1: config 0 descriptor??
[  151.306448][ T5771] usbhid 4-1:0.0: can't add hid device: -71
[  151.332123][ T5771] usbhid: probe of 4-1:0.0 failed with error -71
[  151.350148][ T5771] usb 4-1: USB disconnect, device number 14
[  151.391162][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[  153.794671][ T6658] NILFS (nullb0): couldn't find nilfs on the device
[  154.621712][ T6659] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  155.140412][ T6664] xt_nat: multiple ranges no longer supported
[  155.529115][ T5771] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  155.744460][ T5771] usb 2-1: device descriptor read/64, error -71
[  156.039170][ T5771] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  156.149359][  T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  156.297864][ T5771] usb 2-1: device descriptor read/64, error -71
[  156.470797][  T787] usb 5-1: Using ep0 maxpacket: 16
[  157.063093][  T787] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.096052][  T787] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  157.130835][ T5771] usb usb2-port1: attempt power cycle
[  157.186227][  T787] usb 5-1: config 0 interface 0 has no altsetting 0
[  157.213317][  T787] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  157.223847][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.236725][  T787] usb 5-1: config 0 descriptor??
[  157.271847][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'.
[  157.600835][  T787] usbhid 5-1:0.0: can't add hid device: -71
[  157.629832][  T787] usbhid: probe of 5-1:0.0 failed with error -71
[  158.026369][  T787] usb 5-1: USB disconnect, device number 3
[  158.552951][ T6709] NILFS (nullb0): couldn't find nilfs on the device
[  162.429710][ T6734] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  162.645945][ T6741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  162.839319][ T5827] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  163.090952][ T5771] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  163.105145][ T6749] xt_nat: multiple ranges no longer supported
[  163.233035][ T5827] usb 4-1: Using ep0 maxpacket: 16
[  163.255780][ T5827] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.302295][ T5827] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  163.332959][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0
[  163.345607][ T5827] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  163.359180][ T5771] usb 2-1: device descriptor read/64, error -71
[  163.491287][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.503555][ T5827] usb 4-1: config 0 descriptor??
[  163.630416][ T6756] tipc: Started in network mode
[  163.635508][ T6756] tipc: Node identity 4004, cluster identity 4711
[  163.642057][ T6756] tipc: Node number set to 16388
[  163.959231][ T5771] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  164.372294][ T5827] usbhid 4-1:0.0: can't add hid device: -71
[  164.400021][ T5827] usbhid: probe of 4-1:0.0 failed with error -71
[  164.461619][ T5827] usb 4-1: USB disconnect, device number 15
[  164.479708][ T5771] usb 2-1: device descriptor read/64, error -71
[  164.599502][ T5771] usb usb2-port1: attempt power cycle
[  165.343909][ T5771] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  166.215140][ T6779] netlink: 104 bytes leftover after parsing attributes in process `syz.0.189'.
[  166.224562][ T5771] usb 2-1: device not accepting address 16, error -71
[  166.589450][   T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  166.789498][   T23] usb 4-1: Using ep0 maxpacket: 16
[  166.807853][   T23] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.819418][   T23] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  166.847443][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[  166.904961][   T23] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  166.915958][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.952728][   T23] usb 4-1: config 0 descriptor??
[  167.225270][   T23] usbhid 4-1:0.0: can't add hid device: -71
[  167.244853][   T23] usbhid: probe of 4-1:0.0 failed with error -71
[  167.261953][   T23] usb 4-1: USB disconnect, device number 16
[  167.450800][ T6802] xt_nat: multiple ranges no longer supported
[  168.141327][ T6807] NILFS (nullb0): couldn't find nilfs on the device
[  168.784213][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  169.109901][   T23] usb 5-1: Using ep0 maxpacket: 16
[  169.227453][   T23] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.444237][   T23] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  169.509343][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  169.589243][   T23] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  169.607265][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.752646][ T6828] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  170.085311][   T23] usb 5-1: config 0 descriptor??
[  170.349172][ T5750] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  170.358343][   T23] usbhid 5-1:0.0: can't add hid device: -71
[  170.389621][   T23] usbhid: probe of 5-1:0.0 failed with error -71
[  170.414595][   T23] usb 5-1: USB disconnect, device number 4
[  170.538876][ T5750] usb 4-1: device descriptor read/64, error -71
[  170.749888][ T5827] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  170.860550][ T5750] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  170.942199][ T5827] usb 1-1: unable to get BOS descriptor or descriptor too short
[  170.986466][ T5827] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  171.023448][ T5827] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  171.036168][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.052508][ T5750] usb 4-1: device descriptor read/64, error -71
[  171.067890][ T5827] usb 1-1: Product: syz
[  171.076162][ T5827] usb 1-1: Manufacturer: syz
[  171.092425][ T5827] usb 1-1: SerialNumber: syz
[  171.189317][ T5750] usb usb4-port1: attempt power cycle
[  171.506377][ T6858] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  171.649120][ T5750] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  171.707146][ T5750] usb 4-1: device descriptor read/8, error -71
[  171.999448][ T5750] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  172.059920][ T5750] usb 4-1: device descriptor read/8, error -71
[  172.191589][ T5750] usb usb4-port1: unable to enumerate USB device
[  173.715882][ T5827] usb 1-1: unit 1 not found!
[  173.785519][ T5827] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1
[  173.910719][ T6887] xt_nat: multiple ranges no longer supported
[  176.068661][ T5827] usb 1-1: USB disconnect, device number 8
[  176.237038][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.259346][   T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  176.449175][   T23] usb 2-1: Using ep0 maxpacket: 16
[  176.466342][   T23] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.479088][   T23] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  176.493284][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  176.500191][   T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  176.510330][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.551195][   T23] usb 2-1: config 0 descriptor??
[  177.148117][   T23] usbhid 2-1:0.0: can't add hid device: -71
[  177.155098][   T23] usbhid: probe of 2-1:0.0 failed with error -71
[  177.177696][   T23] usb 2-1: USB disconnect, device number 18
[  177.486545][ T6906] input: syz0 as /devices/virtual/input/input5
[  177.503376][ T6922] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  177.697586][ T6906] netlink: 140 bytes leftover after parsing attributes in process `syz.4.208'.
[  178.147997][ T6932] NILFS (nullb0): couldn't find nilfs on the device
[  179.765919][ T6944] capability: warning: `syz.4.216' uses 32-bit capabilities (legacy support in use)
[  182.750839][ T5432] veth0_macvtap: left promiscuous mode
[  186.084913][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.039161][   T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  187.568586][ T6997] snd_dummy snd_dummy.0: control 1:2592:9:syz0:0 is already present
[  187.690442][   T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.716726][   T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  187.759111][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.800060][   T23] usb 1-1: config 0 descriptor??
[  188.770331][   T23] ath6kl: Failed to read usb control message: -71
[  188.777822][   T23] ath6kl: Unable to read the bmi data from the device: -71
[  189.630364][   T23] ath6kl: Unable to recv target info: -71
[  189.637817][   T23] ath6kl: Failed to init ath6kl core: -71
[  189.649465][   T23] ath6kl_usb: probe of 1-1:0.0 failed with error -71
[  189.660131][   T23] usb 1-1: USB disconnect, device number 9
[  191.462529][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.378742][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.388593][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  195.349209][  T787] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  196.061120][ T7080] NILFS (nullb0): couldn't find nilfs on the device
[  196.277207][  T787] usb 4-1: Using ep0 maxpacket: 32
[  196.306745][  T787] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  196.335766][  T787] usb 4-1: config 0 has no interface number 0
[  196.348299][  T787] usb 4-1: config 0 interface 184 has no altsetting 0
[  196.387999][  T787] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  196.397843][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.440415][  T787] usb 4-1: Product: syz
[  196.453096][  T787] usb 4-1: Manufacturer: syz
[  196.469142][  T787] usb 4-1: SerialNumber: syz
[  196.491336][  T787] usb 4-1: config 0 descriptor??
[  196.541507][  T787] smsc75xx v1.0.0
[  198.219914][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.229162][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.744466][  T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  198.823796][  T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  198.849031][  T787] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  198.875928][  T787] smsc75xx: probe of 4-1:0.184 failed with error -71
[  198.899169][  T787] usb 4-1: USB disconnect, device number 21
[  201.469435][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  202.161156][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  202.167822][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  202.167897][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  202.388155][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'.
[  202.653960][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[  204.669187][ T5750] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  205.639139][ T5750] usb 1-1: Using ep0 maxpacket: 16
[  205.660279][ T5750] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.679018][ T5750] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  205.718800][ T5750] usb 1-1: config 0 interface 0 has no altsetting 0
[  205.725899][ T5750] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  205.749064][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.771638][ T5750] usb 1-1: config 0 descriptor??
[  206.028609][ T5750] usbhid 1-1:0.0: can't add hid device: -71
[  206.039339][ T5750] usbhid: probe of 1-1:0.0 failed with error -71
[  206.060084][ T5750] usb 1-1: USB disconnect, device number 10
[  206.206197][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'.
[  206.986188][ T7206] xt_nat: multiple ranges no longer supported
[  209.727268][ T7249] input: syz0 as /devices/virtual/input/input6
[  209.802036][ T7246] netlink: 140 bytes leftover after parsing attributes in process `syz.1.278'.
[  209.919195][ T5830] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  210.129057][ T5830] usb 5-1: Using ep0 maxpacket: 16
[  210.145601][ T5830] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.559758][ T5830] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  210.572896][ T5830] usb 5-1: config 0 interface 0 has no altsetting 0
[  210.579841][ T5830] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  210.589888][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.611323][ T5830] usb 5-1: config 0 descriptor??
[  210.881148][ T7260] mmap: syz.1.281 (7260) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  211.018561][ T5830] usbhid 5-1:0.0: can't add hid device: -71
[  211.024665][ T5830] usbhid: probe of 5-1:0.0 failed with error -71
[  211.034835][ T5830] usb 5-1: USB disconnect, device number 5
[  211.064061][ T7263] =======================================================
[  211.064061][ T7263] WARNING: The mand mount option has been deprecated and
[  211.064061][ T7263]          and is ignored by this kernel. Remove the mand
[  211.064061][ T7263]          option from the mount to silence this warning.
[  211.064061][ T7263] =======================================================
[  211.101396][    C0] vkms_vblank_simulate: vblank timer overrun
[  213.580212][ T7286] xt_nat: multiple ranges no longer supported
[  213.665524][ T7287] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  214.311485][ T6211] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  214.719451][ T6211] usb 5-1: device descriptor read/64, error -71
[  215.154783][ T6211] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  215.769256][ T6211] usb 5-1: device descriptor read/64, error -71
[  215.919391][ T6211] usb usb5-port1: attempt power cycle
[  216.119113][ T1186] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  216.319084][ T1186] usb 1-1: Using ep0 maxpacket: 16
[  216.330426][ T1186] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.341524][ T1186] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  216.355798][ T1186] usb 1-1: config 0 interface 0 has no altsetting 0
[  216.363587][ T1186] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  216.383987][ T6211] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  216.441002][ T1186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.484886][ T1186] usb 1-1: config 0 descriptor??
[  216.632530][ T6211] usb 5-1: device not accepting address 8, error -71
[  216.745260][ T1186] usbhid 1-1:0.0: can't add hid device: -71
[  216.762238][ T1186] usbhid: probe of 1-1:0.0 failed with error -71
[  216.827413][ T1186] usb 1-1: USB disconnect, device number 11
[  219.659814][ T7344] xt_nat: multiple ranges no longer supported
[  219.828763][ T7349] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  220.289259][ T6211] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  220.469143][ T6211] usb 1-1: device descriptor read/64, error -71
[  220.749470][ T6211] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  220.921008][ T6211] usb 1-1: device descriptor read/64, error -71
[  221.031148][ T5827] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  221.059606][ T6211] usb usb1-port1: attempt power cycle
[  221.559390][ T5827] usb 4-1: Using ep0 maxpacket: 16
[  221.824902][ T6211] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  221.911475][ T5827] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.979043][ T5827] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  222.009316][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  222.039382][ T6211] usb 1-1: device descriptor read/8, error -71
[  222.056816][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0
[  222.077059][ T5827] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  222.307518][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.560175][ T6211] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  222.570464][ T5827] usb 4-1: config 0 descriptor??
[  222.610239][ T6211] usb 1-1: device descriptor read/8, error -71
[  222.730566][ T6211] usb usb1-port1: unable to enumerate USB device
[  223.143613][ T5827] usbhid 4-1:0.0: can't add hid device: -71
[  223.315514][ T5827] usbhid: probe of 4-1:0.0 failed with error -71
[  223.326232][ T5827] usb 4-1: USB disconnect, device number 22
[  223.659193][  T787] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  224.009780][  T787] usb 5-1: Using ep0 maxpacket: 32
[  224.047405][  T787] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  224.071557][  T787] usb 5-1: config 0 has no interface number 0
[  224.098952][  T787] usb 5-1: config 0 interface 184 has no altsetting 0
[  224.143754][  T787] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  224.156930][  T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.185484][  T787] usb 5-1: Product: syz
[  224.199020][  T787] usb 5-1: Manufacturer: syz
[  224.292109][  T787] usb 5-1: SerialNumber: syz
[  224.313357][  T787] usb 5-1: config 0 descriptor??
[  224.602956][  T787] smsc75xx v1.0.0
[  224.819051][ T7399] xt_nat: multiple ranges no longer supported
[  225.550639][  T787] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  225.575156][  T787] smsc75xx: probe of 5-1:0.184 failed with error -71
[  225.622416][  T787] usb 5-1: USB disconnect, device number 10
[  227.049156][ T7414] blktrace: Concurrent blktraces are not allowed on loop4
[  228.128572][ T7433] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  228.657211][ T7437] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  228.665097][ T7437] ALSA: mixer_oss: invalid index 1374389
[  228.709088][  T787] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  228.859066][  T787] usb 4-1: device descriptor read/64, error -71
[  229.139154][  T787] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  229.309455][  T787] usb 4-1: device descriptor read/64, error -71
[  229.459167][  T787] usb usb4-port1: attempt power cycle
[  229.793495][ T7450] blktrace: Concurrent blktraces are not allowed on loop4
[  231.585497][  T787] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  231.635600][ T7457] autofs4:pid:7457:autofs_fill_super: called with bogus options
[  231.690401][  T787] usb 4-1: device descriptor read/8, error -71
[  232.999839][ T7478] blktrace: Concurrent blktraces are not allowed on loop4
[  234.053847][ T7481] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  234.201101][ T7481] ALSA: mixer_oss: invalid index 1374389
[  235.433581][ T7492] autofs4:pid:7492:autofs_fill_super: called with bogus options
[  235.624747][ T7496] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  236.239729][  T787] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  236.498564][  T787] usb 5-1: device descriptor read/64, error -71
[  236.779121][  T787] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  237.289297][  T787] usb 5-1: device descriptor read/64, error -71
[  237.419227][  T787] usb usb5-port1: attempt power cycle
[  237.851385][  T787] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  238.181737][  T787] usb 5-1: device descriptor read/8, error -71
[  239.298840][  T787] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  239.475032][ T7526] autofs4:pid:7526:autofs_fill_super: called with bogus options
[  239.559375][  T787] usb 5-1: device not accepting address 14, error -71
[  239.578074][  T787] usb usb5-port1: unable to enumerate USB device
[  240.031026][ T5809] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  240.334075][ T5809] usb 4-1: Using ep0 maxpacket: 32
[  240.376773][ T5809] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  240.390251][ T5809] usb 4-1: config 0 has no interface number 0
[  240.428022][ T5809] usb 4-1: config 0 interface 184 has no altsetting 0
[  240.455115][ T5809] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  240.474796][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.327008][ T5809] usb 4-1: Product: syz
[  241.371899][ T5809] usb 4-1: Manufacturer: syz
[  241.389690][ T5809] usb 4-1: SerialNumber: syz
[  241.437294][ T5809] usb 4-1: config 0 descriptor??
[  241.470007][ T5809] smsc75xx v1.0.0
[  241.596517][ T7550] xt_nat: multiple ranges no longer supported
[  242.512622][ T5809] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  242.549744][ T5809] smsc75xx: probe of 4-1:0.184 failed with error -71
[  242.590720][ T5809] usb 4-1: USB disconnect, device number 27
[  243.274604][ T7557] blktrace: Concurrent blktraces are not allowed on loop4
[  244.287851][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'.
[  244.296768][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'.
[  244.319271][ T7560] netlink: 'syz.3.362': attribute type 11 has an invalid length.
[  244.383817][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.440797][ T7560] netlink: 'syz.3.362': attribute type 13 has an invalid length.
[  244.910419][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.918243][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.102829][ T7564] bridge0: entered allmulticast mode
[  245.168486][ T7564] bridge_slave_1: left allmulticast mode
[  245.181385][ T7564] bridge_slave_1: left promiscuous mode
[  245.193169][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.263326][ T7564] bridge_slave_0: left allmulticast mode
[  245.309916][ T7564] bridge_slave_0: left promiscuous mode
[  245.337544][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.616963][ T7569] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  246.066266][ T7566] tipc: Started in network mode
[  246.072710][ T7566] tipc: Node identity , cluster identity 4711
[  246.078821][ T7566] tipc: Failed to obtain node identity
[  246.085868][ T7566] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  246.219123][ T6211] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  246.325851][ T7580] autofs4:pid:7580:autofs_fill_super: called with bogus options
[  246.399211][ T6211] usb 1-1: device descriptor read/64, error -71
[  246.828004][ T6211] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  247.109046][ T6211] usb 1-1: device descriptor read/64, error -71
[  247.136424][ T7577] comedi comedi2: reset error (fatal)
[  247.240754][ T6211] usb usb1-port1: attempt power cycle
[  247.779071][ T6211] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  247.821752][ T6211] usb 1-1: device descriptor read/8, error -71
[  248.069193][   T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  248.309330][   T23] usb 4-1: Using ep0 maxpacket: 32
[  248.345994][   T23] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  248.796755][   T23] usb 4-1: config 0 has no interface number 0
[  248.816296][   T23] usb 4-1: config 0 interface 184 has no altsetting 0
[  248.826983][   T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  248.841069][ T6211] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  248.841923][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.874541][   T23] usb 4-1: Product: syz
[  248.883762][   T23] usb 4-1: Manufacturer: syz
[  248.888463][   T23] usb 4-1: SerialNumber: syz
[  248.904433][   T23] usb 4-1: config 0 descriptor??
[  248.915628][   T23] smsc75xx v1.0.0
[  249.091933][ T6211] usb 1-1: device not accepting address 19, error -71
[  249.099673][ T6211] usb usb1-port1: unable to enumerate USB device
[  249.216615][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.744915][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[  250.765880][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'.
[  250.986822][ T7612] netlink: 'syz.1.376': attribute type 11 has an invalid length.
[  251.149103][   T23] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  251.169230][   T23] smsc75xx: probe of 4-1:0.184 failed with error -71
[  251.170812][ T7612] netlink: 'syz.1.376': attribute type 13 has an invalid length.
[  251.190845][   T23] usb 4-1: USB disconnect, device number 28
[  251.299032][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.306747][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.474207][ T7612] bridge0: entered allmulticast mode
[  252.242753][ T7612] bridge_slave_1: left allmulticast mode
[  252.248464][ T7612] bridge_slave_1: left promiscuous mode
[  252.299747][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.339105][ T7612] bridge_slave_0: left allmulticast mode
[  252.409072][ T7612] bridge_slave_0: left promiscuous mode
[  252.419749][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.219090][ T7629] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  253.466230][ T7630] comedi comedi2: reset error (fatal)
[  253.988383][ T7643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.002420][ T7644] blktrace: Concurrent blktraces are not allowed on loop4
[  255.085028][ T7647] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  255.629092][ T6211] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  256.000090][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  256.006702][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  256.589035][ T6211] usb 5-1: device descriptor read/64, error -71
[  256.866860][ T6211] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  257.200816][ T6211] usb 5-1: device descriptor read/64, error -71
[  257.326719][ T6211] usb usb5-port1: attempt power cycle
[  260.299164][ T6211] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  261.259466][ T6211] usb 4-1: Using ep0 maxpacket: 16
[  261.277821][ T6211] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.302874][ T6211] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  261.327308][ T6211] usb 4-1: config 0 interface 0 has no altsetting 0
[  261.334341][ T6211] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  261.343752][ T6211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.376779][ T6211] usb 4-1: config 0 descriptor??
[  262.418270][ T6211] usbhid 4-1:0.0: can't add hid device: -71
[  262.429457][ T6211] usbhid: probe of 4-1:0.0 failed with error -71
[  262.477857][ T6211] usb 4-1: USB disconnect, device number 29
[  263.792061][ T7711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  266.423696][ T7724] tipc: Started in network mode
[  266.428677][ T7724] tipc: Node identity 4004, cluster identity 4711
[  266.435384][ T7724] tipc: Node number set to 16388
[  267.145280][ T7720] comedi comedi2: reset error (fatal)
[  268.151943][ T5809] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  268.569049][ T5809] usb 5-1: Using ep0 maxpacket: 16
[  268.780294][ T5809] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.891821][ T5809] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  269.099452][ T5809] usb 5-1: config 0 interface 0 has no altsetting 0
[  269.110423][ T5809] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  269.119846][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.131563][ T5809] usb 5-1: config 0 descriptor??
[  269.441376][ T5809] usbhid 5-1:0.0: can't add hid device: -71
[  269.447413][ T5809] usbhid: probe of 5-1:0.0 failed with error -71
[  269.510256][ T5809] usb 5-1: USB disconnect, device number 18
[  271.845241][ T7757] tipc: Started in network mode
[  271.850228][ T7757] tipc: Node identity 4004, cluster identity 4711
[  271.856720][ T7757] tipc: Node number set to 16388
[  272.616840][ T7765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.379742][ T7772] comedi comedi2: reset error (fatal)
[  274.636472][ T7781] input: syz0 as /devices/virtual/input/input7
[  274.651438][ T7781] netlink: 140 bytes leftover after parsing attributes in process `syz.0.420'.
[  275.809751][ T7793] xt_nat: multiple ranges no longer supported
[  277.129110][ T6211] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  277.329090][ T6211] usb 2-1: Using ep0 maxpacket: 32
[  277.351705][ T6211] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  277.369694][ T6211] usb 2-1: config 0 has no interface number 0
[  277.382482][ T6211] usb 2-1: config 0 interface 184 has no altsetting 0
[  277.404143][ T6211] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  277.438350][ T6211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.457760][ T6211] usb 2-1: Product: syz
[  277.467857][ T6211] usb 2-1: Manufacturer: syz
[  277.479081][ T6211] usb 2-1: SerialNumber: syz
[  277.489472][ T6211] usb 2-1: config 0 descriptor??
[  277.511220][ T6211] smsc75xx v1.0.0
[  280.349519][ T6211] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  281.156014][ T6211] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  281.247166][ T6211] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  281.290558][ T7830] syzkaller0: entered promiscuous mode
[  281.296093][ T7830] syzkaller0: entered allmulticast mode
[  281.301886][ T6211] smsc75xx: probe of 2-1:0.184 failed with error -71
[  281.326736][ T6211] usb 2-1: USB disconnect, device number 19
[  281.731063][ T7838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.838834][ T7839] xt_nat: multiple ranges no longer supported
[  288.268664][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[  288.877463][ T7881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.757398][ T7885] syzkaller0: entered promiscuous mode
[  289.795881][ T7885] syzkaller0: entered allmulticast mode
[  290.036628][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.733632][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  297.092196][ T7933] input: syz0 as /devices/virtual/input/input8
[  297.145502][ T7933] netlink: 140 bytes leftover after parsing attributes in process `syz.1.455'.
[  297.220294][ T7935] syzkaller0: entered promiscuous mode
[  297.250162][ T7935] syzkaller0: entered allmulticast mode
[  297.391722][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.627595][ T7958] NILFS (nullb0): couldn't find nilfs on the device
[  302.477017][ T7979] syzkaller0: entered promiscuous mode
[  302.482735][ T5827] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  302.492668][ T7979] syzkaller0: entered allmulticast mode
[  302.669149][   T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  302.708708][ T5827] usb 5-1: Using ep0 maxpacket: 32
[  302.727725][ T5827] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  302.741789][ T5827] usb 5-1: config 0 has no interface number 0
[  302.756511][ T5827] usb 5-1: config 0 interface 184 has no altsetting 0
[  302.777591][ T5827] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  302.798964][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.807046][ T5827] usb 5-1: Product: syz
[  302.829110][ T5827] usb 5-1: Manufacturer: syz
[  302.833809][ T5827] usb 5-1: SerialNumber: syz
[  302.840931][ T5827] usb 5-1: config 0 descriptor??
[  302.860199][ T5827] smsc75xx v1.0.0
[  302.873779][   T23] usb 1-1: Using ep0 maxpacket: 32
[  302.882574][   T23] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  302.902393][   T23] usb 1-1: config 0 has no interface number 0
[  302.927161][   T23] usb 1-1: config 0 interface 184 has no altsetting 0
[  302.946899][   T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  302.967090][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.985366][   T23] usb 1-1: Product: syz
[  302.998996][   T23] usb 1-1: Manufacturer: syz
[  303.009146][   T23] usb 1-1: SerialNumber: syz
[  303.020900][   T23] usb 1-1: config 0 descriptor??
[  303.038046][   T23] smsc75xx v1.0.0
[  304.338409][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.347372][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.442924][ T7995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.705170][   T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  304.735587][   T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  304.787334][   T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  304.959328][   T23] smsc75xx: probe of 1-1:0.184 failed with error -71
[  304.969954][   T23] usb 1-1: USB disconnect, device number 20
[  305.601699][ T5827] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  305.650271][ T5827] smsc75xx: probe of 5-1:0.184 failed with error -71
[  305.771565][ T5827] usb 5-1: USB disconnect, device number 19
[  307.342690][ T8011] tipc: Started in network mode
[  307.347682][ T8011] tipc: Node identity 4004, cluster identity 4711
[  307.355251][ T8011] tipc: Node number set to 16388
[  308.880022][ T8020] comedi comedi2: reset error (fatal)
[  309.821535][ T8035] blktrace: Concurrent blktraces are not allowed on loop4
[  313.980570][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'.
[  314.927865][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.268494][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.995487][ T8063] comedi comedi2: reset error (fatal)
[  316.573038][ T8080] blktrace: Concurrent blktraces are not allowed on loop4
[  317.261154][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  317.267512][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  321.799847][ T8116] comedi comedi2: reset error (fatal)
[  322.211008][ T8130] blktrace: Concurrent blktraces are not allowed on loop4
[  324.322065][ T8144] kernel read not supported for file /cpuacct.usage_percpu (pid: 8144 comm: syz.1.505)
[  324.438636][   T28] audit: type=1800 audit(1776474981.661:2): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.505" name="cpuacct.usage_percpu" dev="mqueue" ino=16429 res=0 errno=0
[  325.444098][ T8150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  325.564050][ T5827] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  325.786232][ T5827] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  326.085845][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping
[  326.219387][ T5827] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  326.228507][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.252523][ T5827] usb 2-1: Product: syz
[  326.256743][ T5827] usb 2-1: Manufacturer: syz
[  326.263960][ T5827] usb 2-1: SerialNumber: syz
[  326.273073][ T5827] usb 2-1: config 0 descriptor??
[  326.339438][ T8149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  326.346713][ T8149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  326.360139][ T5827] usb 2-1: ucan: probing device on interface #0
[  326.369445][ T5827] usb 2-1: ucan: invalid EP count (1)
[  326.374864][ T5827] usb 2-1: ucan: probe failed; try to update the device firmware
[  327.098713][ T8167] blktrace: Concurrent blktraces are not allowed on loop4
[  328.624828][  T787] usb 2-1: USB disconnect, device number 20
[  333.710603][ T5827] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  333.943873][ T8188] autofs4:pid:8188:autofs_fill_super: called with bogus options
[  334.259824][ T8194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.320736][ T8209] blktrace: Concurrent blktraces are not allowed on loop4
[  338.415843][ T8213] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0)
[  338.682048][ T8216] input: syz0 as /devices/virtual/input/input9
[  338.754089][ T8217] netlink: 140 bytes leftover after parsing attributes in process `syz.0.526'.
[  339.149594][ T8225] autofs4:pid:8225:autofs_fill_super: called with bogus options
[  340.069728][ T8240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.261518][ T8262] input: syz0 as /devices/virtual/input/input10
[  342.343706][ T8262] netlink: 140 bytes leftover after parsing attributes in process `syz.3.539'.
[  342.688464][ T8271] syzkaller0: entered promiscuous mode
[  342.694515][ T8271] syzkaller0: entered allmulticast mode
[  343.362574][ T8287] xt_nat: multiple ranges no longer supported
[  343.953760][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'.
[  344.493521][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  345.391415][ T8311] syzkaller0: entered promiscuous mode
[  345.410256][ T8314] input: syz0 as /devices/virtual/input/input11
[  345.413656][ T8311] syzkaller0: entered allmulticast mode
[  345.433063][ T8314] netlink: 140 bytes leftover after parsing attributes in process `syz.0.553'.
[  346.741521][  T787] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  346.979016][  T787] usb 1-1: Using ep0 maxpacket: 32
[  346.996740][  T787] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  347.009039][  T787] usb 1-1: config 0 has no interface number 0
[  347.015222][  T787] usb 1-1: config 0 interface 184 has no altsetting 0
[  347.041224][  T787] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  347.059002][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.077337][  T787] usb 1-1: Product: syz
[  347.088977][  T787] usb 1-1: Manufacturer: syz
[  347.127998][  T787] usb 1-1: SerialNumber: syz
[  347.149929][  T787] usb 1-1: config 0 descriptor??
[  347.162606][  T787] smsc75xx v1.0.0
[  347.339652][ T8342] xt_nat: multiple ranges no longer supported
[  348.852469][  T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  348.883158][  T787] smsc75xx: probe of 1-1:0.184 failed with error -71
[  348.930061][  T787] usb 1-1: USB disconnect, device number 22
[  349.747295][ T8359] syzkaller0: entered promiscuous mode
[  349.755864][ T8359] syzkaller0: entered allmulticast mode
[  349.887994][ T8355] input: syz0 as /devices/virtual/input/input12
[  349.981393][ T8355] netlink: 140 bytes leftover after parsing attributes in process `syz.1.562'.
[  351.711640][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.724598][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'.
[  353.356807][ T8390] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  353.529804][ T8396] syzkaller0: entered promiscuous mode
[  353.536232][ T8396] syzkaller0: entered allmulticast mode
[  353.579327][ T5827] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  353.599571][ T5809] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  353.939023][ T5827] usb 4-1: Using ep0 maxpacket: 32
[  353.945050][ T5809] usb 1-1: Using ep0 maxpacket: 16
[  353.954034][ T5809] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.965033][ T5827] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  353.973357][ T5827] usb 4-1: config 0 has no interface number 0
[  353.979527][ T5809] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  353.992668][ T5827] usb 4-1: config 0 interface 184 has no altsetting 0
[  354.000306][ T5809] usb 1-1: config 0 interface 0 has no altsetting 0
[  354.007214][ T5809] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  354.016360][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.172417][ T5827] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  354.172492][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.172560][ T5827] usb 4-1: Product: syz
[  354.172620][ T5827] usb 4-1: Manufacturer: syz
[  354.172690][ T5827] usb 4-1: SerialNumber: syz
[  354.277375][ T5827] usb 4-1: config 0 descriptor??
[  354.285538][ T5809] usb 1-1: config 0 descriptor??
[  354.440770][ T5827] smsc75xx v1.0.0
[  355.696741][ T5827] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  355.719853][ T5827] smsc75xx: probe of 4-1:0.184 failed with error -71
[  355.737699][ T5827] usb 4-1: USB disconnect, device number 30
[  357.435262][ T5809] usbhid 1-1:0.0: can't add hid device: -71
[  357.471995][ T5809] usbhid: probe of 1-1:0.0 failed with error -71
[  357.509919][ T5809] usb 1-1: USB disconnect, device number 23
[  358.003773][ T8435] fuse: Unknown parameter 'fd0x0000000000000006'
[  358.085158][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.580'.
[  358.235814][ T8435] ------------[ cut here ]------------
[  358.236034][   T11] ------------[ cut here ]------------
[  358.242239][ T8435] WARNING: CPU: 1 PID: 8435 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.248508][   T11] WARNING: CPU: 0 PID: 11 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.248545][   T11] Modules linked in:
[  358.248581][   T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[  358.248600][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  358.248612][   T11] Workqueue: events_unbound cfg80211_wiphy_work
[  358.248642][   T11] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.248667][   T11] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c
[  358.248684][   T11] RSP: 0018:ffffc90000107200 EFLAGS: 00010283
[  358.248704][   T11] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: 0000000000100000
[  358.260272][ T8435] Modules linked in:
[  358.271001][   T11] RDX: ffffc90017e2a000 RSI: 0000000000003385 RDI: 0000000000003386
[  358.271020][   T11] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8
[  358.271036][   T11] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001
[  358.271051][   T11] R13: ffff88805bc4e5d9 R14: ffff888024d42c70 R15: ffff888024d42ce8
[  358.271066][   T11] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  358.274966][ T8435] 
[  358.274974][ T8435] CPU: 1 PID: 8435 Comm: syz.1.579 Not tainted syzkaller #0
[  358.282450][   T11] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  358.292508][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  358.298756][   T11] CR2: 00007f9a2da9cfa8 CR3: 0000000061b80000 CR4: 00000000003506f0
[  358.298776][   T11] Call Trace:
[  358.298799][   T11]  <TASK>
[  358.306183][ T8435] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.326209][   T11]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  358.332051][ T8435] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c
[  358.340061][   T11]  ieee80211_csa_finalize+0x5a6/0xf20
[  358.343963][ T8435] RSP: 0018:ffffc900032c6e00 EFLAGS: 00010283
[  358.353157][   T11]  ? ieee80211_csa_finalize_work+0x140/0x140
[  358.361057][ T8435] 
[  358.361066][ T8435] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: 0000000000080000
[  358.361088][ T8435] RDX: ffffc9000f291000 RSI: 0000000000007814 RDI: 0000000000007815
[  358.369112][   T11]  ? cfg80211_ch_switch_started_notify+0x253/0x490
[  358.377108][ T8435] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8
[  358.386089][   T11]  ieee80211_channel_switch+0xad5/0xe70
[  358.386175][   T11]  ? ieee80211_csa_finalize+0xf20/0xf20
[  358.388438][ T8435] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001
[  358.395775][   T11]  ? rcu_is_watching+0x15/0xb0
[  358.402386][ T8435] R13: ffff88805c3565d9 R14: ffff88807c8f2c70 R15: ffff88807c8f2ce8
[  358.402407][ T8435] FS:  00007f9a2dabf6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  358.402428][ T8435] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  358.402445][ T8435] CR2: 000000110c3ccfef CR3: 0000000076640000 CR4: 00000000003506e0
[  358.402465][ T8435] Call Trace:
[  358.402475][ T8435]  <TASK>
[  358.402502][ T8435]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  358.402540][ T8435]  ieee80211_csa_finalize+0x5a6/0xf20
[  358.402579][ T8435]  ? ieee80211_csa_finalize_work+0x140/0x140
[  358.402611][ T8435]  ? cfg80211_ch_switch_started_notify+0x253/0x490
[  358.402649][ T8435]  ieee80211_channel_switch+0xad5/0xe70
[  358.402694][ T8435]  ? ieee80211_csa_finalize+0xf20/0xf20
[  358.402742][ T8435]  ? mutex_lock_nested+0x20/0x20
[  358.402768][ T8435]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  358.402813][ T8435]  rdev_channel_switch+0xeb/0x240
[  358.402839][ T8435]  nl80211_channel_switch+0xae8/0x1120
[  358.402866][ T8435]  ? genl_family_rcv_msg_doit+0xce/0x310
[  358.402895][ T8435]  ? __mutex_trylock_common+0x159/0x260
[  358.402915][ T8435]  ? mutex_unlock+0x10/0x10
[  358.402935][ T8435]  ? nl80211_set_coalesce+0x1340/0x1340
[  358.413302][   T11]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  358.421179][ T8435]  ? __nla_parse+0x40/0x50
[  358.424437][   T11]  ieee80211_ibss_process_chanswitch+0x9d6/0xd70
[  358.427362][ T8435]  ? nl80211_pre_doit+0x4f1/0x930
[  358.434719][   T11]  ? trace_drv_return_int+0x1c0/0x1c0
[  358.441309][ T8435]  genl_family_rcv_msg_doit+0x211/0x310
[  358.461563][   T11]  ? cfg80211_find_elem_match+0x1bc/0x1f0
[  358.461666][   T11]  ? mutex_lock_nested+0x20/0x20
[  358.461722][   T11]  ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80
[  358.467406][ T8435]  ? end_current_label_crit_section+0x170/0x170
[  358.473497][   T11]  ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0
[  358.479250][ T8435]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  358.481525][   T11]  ? mark_lock+0x94/0x320
[  358.489530][ T8435]  ? bpf_lsm_capable+0x9/0x10
[  358.497526][   T11]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  358.497563][   T11]  ? lock_chain_count+0x20/0x20
[  358.504096][ T8435]  ? security_capable+0x89/0xb0
[  358.512097][   T11]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  358.517775][ T8435]  genl_rcv_msg+0x619/0x7a0
[  358.523261][   T11]  ? kcov_remote_start+0x4cb/0x7e0
[  358.531304][ T8435]  ? genl_bind+0x360/0x360
[  358.531326][ T8435]  ? nl80211_exit+0x30/0x30
[  358.531347][ T8435]  ? nl80211_set_coalesce+0x1340/0x1340
[  358.536188][   T11]  ? lockdep_hardirqs_on+0x98/0x150
[  358.544219][ T8435]  ? nl80211_pre_doit+0x930/0x930
[  358.553901][   T11]  ? kcov_remote_start+0x8f/0x7e0
[  358.553935][   T11]  ieee80211_iface_work+0x717/0xc70
[  358.553960][   T11]  ? _raw_spin_unlock_irq+0x23/0x50
[  358.554000][   T11]  cfg80211_wiphy_work+0x225/0x260
[  358.560783][ T8435]  ? ref_tracker_free+0x690/0x840
[  358.568680][   T11]  ? process_scheduled_works+0x96f/0x15d0
[  358.572027][ T8435]  netlink_rcv_skb+0x241/0x4d0
[  358.574965][   T11]  process_scheduled_works+0xa5d/0x15d0
[  358.581556][ T8435]  ? genl_bind+0x360/0x360
[  358.586928][   T11]  ? worker_attach_to_pool+0x380/0x380
[  358.592912][ T8435]  ? netlink_ack+0x1180/0x1180
[  358.599424][   T11]  ? assign_work+0x3d2/0x5d0
[  358.599458][   T11]  worker_thread+0xa55/0xfc0
[  358.605017][ T8435]  ? __lock_acquire+0x7d40/0x7d40
[  358.610692][   T11]  kthread+0x2fa/0x390
[  358.615585][ T8435]  ? down_read+0x1ac/0x2e0
[  358.621393][   T11]  ? pr_cont_work+0x560/0x560
[  358.626367][ T8435]  genl_rcv+0x28/0x40
[  358.631876][   T11]  ? kthread_blkcg+0xd0/0xd0
[  358.631903][   T11]  ret_from_fork+0x48/0x80
[  358.631931][   T11]  ? kthread_blkcg+0xd0/0xd0
[  358.637606][ T8435]  netlink_unicast+0x751/0x8d0
[  358.643260][   T11]  ret_from_fork_asm+0x11/0x20
[  358.647807][ T8435]  netlink_sendmsg+0x8d0/0xbf0
[  358.654110][   T11]  </TASK>
[  358.654125][   T11] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  358.654150][   T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0
[  358.654170][   T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  358.654183][   T11] Workqueue: events_unbound cfg80211_wiphy_work
[  358.654210][   T11] Call Trace:
[  358.654218][   T11]  <TASK>
[  358.654232][   T11]  dump_stack_lvl+0x18c/0x250
[  358.654368][   T11]  ? show_regs_print_info+0x20/0x20
[  358.654488][   T11]  ? load_image+0x420/0x420
[  358.654616][   T11]  panic+0x2dc/0x730
[  358.654717][   T11]  ? bpf_jit_dump+0xd0/0xd0
[  358.654818][   T11]  ? ret_from_fork_asm+0x11/0x20
[  358.654909][   T11]  __warn+0x2e0/0x470
[  358.654968][   T11]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.655011][   T11]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.655087][   T11]  report_bug+0x2be/0x4f0
[  358.655135][   T11]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.655210][   T11]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.655279][   T11]  ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[  358.655345][   T11]  handle_bug+0xcf/0x120
[  358.655393][   T11]  exc_invalid_op+0x1a/0x50
[  358.655442][   T11]  asm_exc_invalid_op+0x1a/0x20
[  358.655517][   T11] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  358.655586][   T11] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c
[  358.655628][   T11] RSP: 0018:ffffc90000107200 EFLAGS: 00010283
[  358.655670][   T11] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: 0000000000100000
[  358.655717][   T11] RDX: ffffc90017e2a000 RSI: 0000000000003385 RDI: 0000000000003386
[  358.655760][   T11] RBP: dffffc0000000000 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8
[  358.655813][   T11] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: 0000000000000001
[  358.655851][   T11] R13: ffff88805bc4e5d9 R14: ffff888024d42c70 R15: ffff888024d42ce8
[  358.655912][   T11]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  358.656021][   T11]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  358.656107][   T11]  ieee80211_csa_finalize+0x5a6/0xf20
[  358.656191][   T11]  ? ieee80211_csa_finalize_work+0x140/0x140
[  358.656273][   T11]  ? cfg80211_ch_switch_started_notify+0x253/0x490
[  358.656352][   T11]  ieee80211_channel_switch+0xad5/0xe70
[  358.656469][   T11]  ? ieee80211_csa_finalize+0xf20/0xf20
[  358.656576][   T11]  ? rcu_is_watching+0x15/0xb0
[  358.656635][   T11]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  358.656722][   T11]  ieee80211_ibss_process_chanswitch+0x9d6/0xd70
[  358.656798][   T11]  ? trace_drv_return_int+0x1c0/0x1c0
[  358.656842][   T11]  ? cfg80211_find_elem_match+0x1bc/0x1f0
[  358.657030][   T11]  ? mutex_lock_nested+0x20/0x20
[  358.657131][   T11]  ieee80211_ibss_rx_queued_mgmt+0x1045/0x2c80
[  358.657273][   T11]  ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0
[  358.657356][   T11]  ? mark_lock+0x94/0x320
[  358.657427][   T11]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  358.657496][   T11]  ? lock_chain_count+0x20/0x20
[  358.657548][   T11]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  358.657637][   T11]  ? kcov_remote_start+0x4cb/0x7e0
[  358.657701][   T11]  ? lockdep_hardirqs_on+0x98/0x150
[  358.657773][   T11]  ? kcov_remote_start+0x8f/0x7e0
[  358.657852][   T11]  ieee80211_iface_work+0x717/0xc70
[  358.657907][   T11]  ? _raw_spin_unlock_irq+0x23/0x50
[  358.657994][   T11]  cfg80211_wiphy_work+0x225/0x260
[  358.658081][   T11]  ? process_scheduled_works+0x96f/0x15d0
[  358.658189][   T11]  process_scheduled_works+0xa5d/0x15d0
[  358.658351][   T11]  ? worker_attach_to_pool+0x380/0x380
[  358.658446][   T11]  ? assign_work+0x3d2/0x5d0
[  358.658565][   T11]  worker_thread+0xa55/0xfc0
[  358.658736][   T11]  kthread+0x2fa/0x390
[  358.658788][   T11]  ? pr_cont_work+0x560/0x560
[  358.658864][   T11]  ? kthread_blkcg+0xd0/0xd0
[  358.658923][   T11]  ret_from_fork+0x48/0x80
[  358.658981][   T11]  ? kthread_blkcg+0xd0/0xd0
[  358.659021][   T11]  ret_from_fork_asm+0x11/0x20
[  358.659139][   T11]  </TASK>
[  358.660605][   T11] Kernel Offset: disabled