last executing test programs:

5.147475253s ago: executing program 0 (id=158):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x4000010)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x200, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}]}]}, 0x54}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r5, 0xab00, r6)
r7 = dup3(r5, r2, 0x80000)
sendmsg$NFT_BATCH(r7, 0x0, 0x20000081) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
brk(0x0) (async)
ioctl$NBD_DO_IT(r7, 0xab03) (async)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2a, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

4.708896428s ago: executing program 0 (id=161):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x128}}}}}}}}}, 0x4a)

4.539840274s ago: executing program 0 (id=165):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r0, 0x406, r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x208, 0x30, 0x401, 0x0, 0x0, {}, [{0x1f4, 0x1, [@m_ct={0x1a8, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x168, 0x6, "e620aa0571f5716366e4a4307a36de589d66cb69ac16771d627554f16fafa5d7bd2e0c0df4c469edb4f6a58cfa5cbcfd57f2b8e6e3d72fd8be50922f2d40575e8caadfb91721d439b4a98591250f94b57cc7f9b357cc95f6adf24ddc063ea45eaae2e02aec5f24ee5cdc1e99f524c6f749f8c3cc6734fbb826bb41c7d13e656a614384d6d5b36f13363b7f63802eb156da50cbb98fd226b0bdbb632414f157709fc7bec1da50e02cf542f79a84a01ff47d0d56020f14eac40a98dabca6ad6f4feb9dfa62e646a084d7007d0cd28e3c2259a38b2ad23024a70036cc4b69ffb1beb0145f923fd129cb9d0e1ccace5f85056f573d9e5daa5c5340b4f1ed745267ec28dd6492b9d763401aebaec3b1e04bfcd857d3e6d4d396accec8de5444e323c29d039d4ba2110a7a003c579275ada24bd8931d5459b3cbaf44e2bb502f1b27d5e7a425ebc4df37e864f4b41c9cd372616b8f346d63f691cf92ebedd76d7afc8a5a0f2781"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
getpid()
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000000000010000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
memfd_create(&(0x7f00000000c0)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20)
r6 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f0000000500))

4.240184479s ago: executing program 1 (id=169):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x300)

3.872188985s ago: executing program 0 (id=172):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='bond0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ff01ff68aa0000000180d515735ee402d68b220000b0", @ANYRES32=r6, @ANYBLOB="0c000200ff7f000000040000"], 0x30}}, 0x20000000)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060a63e57fd1b96900000000", 0xe, 0xffffffffffffffff)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local}, 0x1c, 0x0}}], 0x2, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x0)

3.139300261s ago: executing program 2 (id=176):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0)
shutdown(r2, 0x0)

3.009334311s ago: executing program 2 (id=177):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x89901)
open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x35dc00, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1002001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xf}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x1020, &(0x7f00000011c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000029,blksize=0xe380e97578b7ab90,allow_other,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,\x00'])
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x3)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x24, 0x0, 0x0)
fchmod(0xffffffffffffffff, 0x114)
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(r1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000000)=@generic={0x0, 0xf, 0xa})
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x2, @private=0xa010101}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000880)="39643af535c574cfe39d390c598604543f91079f0118dde3accb45e2bb2aaa0ed76c7a6d1a7c29cc0f618a5d056c44bffe0005e85eb56134d2d56e720a90df7f4096b094eaae6204c59359edf9132d81fc5bdf434a98363c050e4f9d13105760d1a16b2095c4b74950bec76589ea087da53d07a10c1494aba4f895f0bf3f1ff5b6cb927a9e0fcdc413bdc043898872a94d0c99ff967af9ff6695435dc39ea0d5411b1519c3", 0xa5}, {&(0x7f0000000940)="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", 0xf6}, {&(0x7f0000000480)="ba17cabf3d3dd4bc9de07ee61fd7bea3b6d9f6b4a8efa5ab2892811d0ef22d1321b4352216261fa5885880ec256e1691d9dda507f2ed3a9cfa9fcf030f49dcbb2c564c4861a454", 0x47}, {&(0x7f0000000700)="a56434e65767ca5f32e93bd3e5c3c1223ff988d366540ee469b8d45dba28cc9e1c9d1c0753774b762fd374b8081c8bdaaaf86dd13b885491236b0f71f7d230ecd66841278eaff26dcd149bc705fca060672cfa1d1ecaaf3d663a34a22f61c902374623f16ebf1dd9c8fdefb6e581072f5c99b31499703ed57c6324ebd9c1f65d9bd57e66a073afe983aa9ec78eed0fe689a983b945accb33ec879f1bf8238ddb8a14f5e947afde4a", 0xa8}, {&(0x7f0000000c40)="a035d3ef1fa14ae999702cbf08cce29cabcf6105b417ee74f268f727fe6262f57a43e30c3bf48f3e7fa85f0fd66eba6bf2406472ad1b6b258b986b1ac3c04ab6c1ca183b7817bf0c1b25e123d67cb5d5b701f75d3d285776b897e9552bedc742610aea6fef6c43040928727ce422033d316857f4d976eb6e9f2af7ac4e064844e9a3dc2576a8d41e4351bfe83bfdb857e2f700c4b0e1ed01edf6891a26bb8b6de909f8befa0e4f36baf5132472dbd7e30fb5c8855a85a166ac504b7319cb2d85b7afbb2e553659696e3405416d231addd7024ed18516fb06", 0xd8}], 0x2, &(0x7f0000000d40)=ANY=[@ANYBLOB="640000000c01000006000000faf9f96db8fada79fa0a2ef9078acb70fbfa6ff2ceb6261823b588a3f1f4891b91f38d6cd16c14590a030bed716f4bbdfc0fabf59c51735cb9e8d8c06820a4542e284f569bb279b9bf4644184548b18b149ffd7ed16e31004c000000140000000700000046b5d464fad9033b2dacb44278aff58231f0a22999c4570f23bea362c815398498c312ff51001fea2b05161da8caeed68c1ac3acde4c7398cbf2e3dd90ea00007c00000010010000090000001c6e648f2c35a562cd4234d5ad9d8e43efa6927ff19f94b3f037dda923e0666e1d30c1159ba1635e42358e22c072565c17aac9d376ebc5540e75cd015e30dcd19f8a3fe07c594af35360bce5807c704198d2e6f48e287b7d84cd4280316696d11307c0ed1147fac03b21881daa68a88e240000000f010000070000008dbd7ef48c535858b705bbd7c162b5e5fb2bef46dd57f9b94c0100001100000001000000da27f0c0ddd3b2815f7d402aac8eefc94b9bfd645e0dd206552e3b359759422a9da11da1ecda9b528399742d3430fc834244a5a114cee28832abce8d0468c74730a88b2b0a26506282e0a649fa29e3bf7d150cc223bcb5bb2d04bd0000000000000000000000c496089257155dd1c52a36a48a28f951b6c5d3298fcc90dc9f2b670000000000000006ad014051d4f09460eb6267b243455b79126b36aea8bcab55775026de84e00fa8c7f8eb91acb5f75e7a93de3154d60279d132b3f132695d4c96f0736fe0d04a99d9dc20b12bc0277e55111201da50923d02bb09709f16b360af3ca920c61e39f934c78518d70d977d5b6a3b9be47674619ac027f83d4d123d814d7d26a30b3d46e58d5f68eb6f901d537c9274b5b486725e937a195a51aa55cf61466c5f1a5cff577e48d0a4c8090d695f4418f084cc7d04807b88099a7ddd9e01c91bc64a68879e01e04cb6cdf1af74f248619e70b9f07d47448430c842da3305394dc5ec952be8e758e36719717a82446db69aff41bfe7eb8fb8bdbe7cd37277ee536d8436"], 0x189}, 0x404c090)
socket$inet6(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.849456545s ago: executing program 1 (id=178):
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000b00000000040000", @ANYRES32, @ANYBLOB="00000000000000008ff2ce4878c81800000012000000c971855c1baf00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r0 = socket(0x1, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x2c0, 0x30, 0x1, 0x0, 0x0, {}, [{0x2ac, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xfffffffffffffec1, 0x1, {0x9d, 0x11e41e7a, 0x10000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200}}}]}, {0x4}, {0xc}, {0xc}}}, @m_sample={0x148, 0x14, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xfffffe00, 0x1, 0x6, 0x8e71}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9763}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0xeb, 0x6, "12783f3c931816d2b24cf2be829e991bc7829c4148afae519a93f56c5829de9069e87120083263a27e4ba3b2fedc6c3b52be7db42546801d781dcb31df54357dcb27f32fad579b6d62d2b594269839911808f8bbdabf1f2c02ddcbf9303655e8d8d07b64849cb0c773acc3d7f8ccbbcf1518008c925295168a37883657b94c685e62eb4ccfe12a76c579ef68fbe057c0d86a0855bea0433f994b45268641a9927ed34e80112d0da1082aff8b1c12e4ba7ca36d958da6ce9faf1c0a6809e19b618d3714cc0403f5759581ce35afe2ff7be4094d9e2c6688f5a53b07f6421a61a5349fa8c3434c1f"}, {0xc, 0x7, {0xfe0595842f77c0dd, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0xd4, 0x10, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x10001, 0x2, 0x3ff, 0x8}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8, 0x7, 0x5, 0xe}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xffffffff, 0xffffffffffffffff, 0x2, 0x63}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x10000000, 0x1, 0xc3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x10000000, 0x400000, 0xfb25}, 0x2}}]}, {0x6, 0x6, "5ca5"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
getpid() (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r4, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {0xfffffffc}, 0x0, 0x0, 0x0, 0x0, 0x6b90bd9ce08735ac, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) (async)
r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r6, r5}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={'sha1-generic\x00'}})
socket$nl_rdma(0x10, 0x3, 0x14) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x6, 0x5, 0x1000}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x4}, 0x10) (async, rerun: 64)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807001200b800000000000000080008000d000000", 0x24)

2.849310375s ago: executing program 1 (id=179):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x40000, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x8040)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (fail_nth: 5)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000400)={0x40, 0xa, 0x2e, "ef1d913a420deae55063f7a4e30bb5004f5eda533be52e64c623a065f6c2aa2eba3b2431275a8725bb5678ad5b19"}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f00000005c0)={0x20, 0x82, 0x1, "b1"}, &(0x7f0000000680)={0x20, 0x83, 0x1, "fe"}, 0x0, 0x0})
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r8, &(0x7f00000001c0)='1\x00', 0x1)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x9, 0x0, 0x0, 0x6, 0x8, 0x48, 0xf, 0x7e})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0x400c881}, 0x800)

2.360015472s ago: executing program 3 (id=180):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@deltfilter={0xb8, 0x2d, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xb635282bdc33becf}, {0x3, 0x3}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0xf}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff000000, 0xff, 0xffffffff]}, @TCA_FLOWER_INDEV={0x14, 0x2, 'caif0\x00'}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040000}, 0x8400)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x4, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0xe1, 0x2, 0x0, 0x6, 0x25, 0xfffffff8, 0x10001, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000280)=@hopopts={0x2f, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x71}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}, @generic={0x7, 0x13, "32f7c402903d004b1cbf4d87a1f549e2182a14"}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}]}, 0x58)

2.35975223s ago: executing program 2 (id=181):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902"], 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4)
shutdown(r0, 0x1)

2.139450503s ago: executing program 3 (id=182):
r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x49d4, 0x80, 0x4, 0x803cc}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x9, 0x2)
readv(r3, &(0x7f0000000e00)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000840)=""/167, 0xa7}, {&(0x7f0000000900)=""/135, 0x87}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f00000006c0)=""/209, 0xd1}, {0x0}, {0x0}], 0x7) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$pptp(0x18, 0x1, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) (async)
unshare(0x8000400) (async)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000003d00)={'NETMAP\x00'}, &(0x7f0000003d40)=0x1e)
openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5c000000020605000000000000000000f8ffff001600030068617381582472921451e03b3152b6234e06b7abc8792d683a6e65742c706f72742c6e020073797a320000000005000400010000000c000780050015de6d0000000000000000007c3d20f027fdf2181f0c5f52d81c7b73f9737dd8dd1312ae104eecd4ecff981df1c9b7"], 0x5c}}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
vmsplice(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d68cf0ca6318fc2999981ea9a9a1d63e0e3a6eae313a35533f6e3e744bfd237cd0616e86fbf52fbfa461008169ecb60d89faa1f8d285e34a5924d0fdbb4e940b3673c6ed9909eb8ee5960899c3d7eb53cff522549fe319a03920535f3ee31c63e2e6961c825e17ee05e56e4ca505c860e1c4d96e4e5d5dcfca87cc0aaf2b78cdf6b286b6a88a06115f5cee632a76a23a1b2f23e64ba29a534c14c94e91e2ad69338d8d8bb3b1cc156da2718bd872c6d3064539051d2b5e614069ec022aba32fd10d52e4e5cb4", 0xc6}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f00000004c0)="c5b8adfd67578abe6bab71e536aacc27ead12ac7c57f067d3a1b0797262c511ab6df823a64b6f3215eeb5bc2fb276d38436c72a640", 0x35}, {&(0x7f0000000c40)="6a43cf5d680962df0e10ee24261f27e4b4614f9198ac073ec257ae7917883f9c605d512fd27d51a3055c9fa7bc674e6d6891f0decc5b968d1dcb7be4fa23835a446c01b66e15d353facb64e792429b3b823d460b2a404ba1a53016d322f13cb2f0813733ff733a4b2f0ad3748beffce3e90c83fa35e8e87aa8795c28adc97b9175bf29cbc5b8a96597262f3cf1c702bd33fc075751fc4ed93613917a1160387e8803ca3b108d7f42", 0xa8}, {&(0x7f0000000500)="70b97af2bf24fcdc81392b58560479541237b9c6fdd8459783d66969f6c2233abea6b8d29d42c408a36052c62d", 0x2d}, {&(0x7f00000007c0)="06b5f46e8e0ffb40a6d6aa4f06847dd6c969955fe8a2d48b272761af0a16dfb07ba4e02459d63f1cefeadc232781fbf2fd2c25412597451e11ace2e1aab941c2a51677348ba44171106b53d4990164d24019539b9830e81acf347234d1246a444be06465aa2397ccba3849e44d4b6248e09fcfb6320295edc165671fedb073e1", 0x80}], 0x6, 0xc)
sendmsg$NFT_MSG_GETGEN(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x8, 0x1, '{)-\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000c80) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r10) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newlink={0x90, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8400}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'batadv_slave_1\x00'}, {0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}]}, @IFLA_GROUP={0x8}]}, 0x90}}, 0xc004) (async)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000501000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000008000000100000800c00018006000100d10300001400000030b8846400000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x240) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r2], 0x180}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000)

2.075230122s ago: executing program 3 (id=183):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x48, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x38, r6, 0x1, 0x4070bd26, 0x25dedbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "e2193c3c"}]}]}, 0x38}}, 0x8080)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', r2, 0x80, 0x10, 0x1, 0xf, {{0x35, 0x4, 0x0, 0x9, 0xd4, 0x68, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0x44, 0x65, 0x1, 0x2, [{@empty, 0x2}, {@empty, 0x5}, {@multicast2, 0x1000}, {@multicast2, 0x3770}, {@multicast1, 0xd7b3}, {@remote, 0x9}, {@remote, 0x1}, {@broadcast, 0xd}]}, @noop, @timestamp={0x44, 0x1c, 0x2b, 0x0, 0xc, [0x5, 0x0, 0x5, 0x5, 0xf, 0x20]}, @rr={0x7, 0x13, 0xea, [@rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0x6, "97fa1779"}, @end, @ssrr={0x89, 0x7, 0xd7, [@multicast2]}, @timestamp_prespec={0x44, 0x34, 0x74, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x6}, {@private=0xa010102, 0xc}, {@multicast1, 0xfffffff7}, {@private=0xa010102, 0x2}, {@rand_addr=0x64010101, 0x9}]}, @lsrr={0x83, 0x7, 0x83, [@remote]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', r2, 0x2f, 0x4, 0x0, 0x401, 0x2, @local, @private2, 0x700, 0x40, 0xfffffff9, 0x8}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x24}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r13, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r14 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

1.88057364s ago: executing program 3 (id=184):
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006800e97800000400ffdbdf250a0000000000000008000500", @ANYRES32=r4, @ANYBLOB="308b1a760be1974f8a706f053c3ae783c242bf9899d7d37163d7b2228ff5cf683275588e0e26df87e605993ad9787545453568b91c7a05000000000000001f79174ec4c61b73d4af9127bac5737644eb6ebbdee0f9b88faf293f8b1e13cb44415893311f2f97cb62beeeb1691aa56462b4b7bfad2e59f387fe98aed3c403d8ec812a61d3b2ed9e7232d6d8aca754e99b4069cb701eb288dbb6c1e75525d32020a5988a89caa73b8a3b8536b8dd61bcae0a17eb82663ba37d605d9bb40e3847"], 0x20}}, 0x8040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000006800010003001000ffffff7f000000000000000008000500", @ANYRESDEC=0x0, @ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4004098}, 0x4000080)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
pselect6(0x40, &(0x7f0000000200)={0x8000, 0x0, 0x0, 0x400000000, 0x200, 0xa, 0x1000, 0x2}, 0x0, &(0x7f00000002c0)={0x3fd, 0x0, 0xc3ac, 0x2, 0x0, 0x80, 0x4}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r4, @ANYBLOB="1000000000000000"], 0x20}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r8, @ANYBLOB="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"], 0x1a8}}, 0x10000040)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="400a2e000000ef1d913a420de7e55063f7a4dd0bb5004f5eda533be52e64c623a065f6c2aa2eba3b2431275a875def5678ad5b19"], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="69d434e3f5139d37e956ac7d8078505dccaaf12ce4b841ef4db40e648ddbed055a6d4a77bc70da2942532d920616844d55127a7179463cbd360617dc9bb332e84d79e0996975fbf2b91a690080c1778751d5cdf853ab443887f4483ed662303853c38279f4181cf31a839879f03548508ccbcae56a6e7bea7dc1"], &(0x7f0000000280)=ANY=[@ANYBLOB="5d43e5985932475c72d9500e6145dc27ac5311ffd200"], 0x0, 0x0})
r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r10 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r10, &(0x7f00000001c0)='1\x00', 0x1)
ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000380)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})
r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0)

1.159372917s ago: executing program 2 (id=185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x48, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x38, r6, 0x1, 0x4070bd26, 0x25dedbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "e2193c3c"}]}]}, 0x38}}, 0x8080)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', r2, 0x80, 0x10, 0x1, 0xf, {{0x35, 0x4, 0x0, 0x9, 0xd4, 0x68, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_addr={0x44, 0x44, 0x65, 0x1, 0x2, [{@empty, 0x2}, {@empty, 0x5}, {@multicast2, 0x1000}, {@multicast2, 0x3770}, {@multicast1, 0xd7b3}, {@remote, 0x9}, {@remote, 0x1}, {@broadcast, 0xd}]}, @noop, @timestamp={0x44, 0x1c, 0x2b, 0x0, 0xc, [0x5, 0x0, 0x5, 0x5, 0xf, 0x20]}, @rr={0x7, 0x13, 0xea, [@rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0x6, "97fa1779"}, @end, @ssrr={0x89, 0x7, 0xd7, [@multicast2]}, @timestamp_prespec={0x44, 0x34, 0x74, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x6}, {@private=0xa010102, 0xc}, {@multicast1, 0xfffffff7}, {@private=0xa010102, 0x2}, {@rand_addr=0x64010101, 0x9}]}, @lsrr={0x83, 0x7, 0x83, [@remote]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', r2, 0x2f, 0x4, 0x0, 0x401, 0x2, @local, @private2, 0x700, 0x40, 0xfffffff9, 0x8}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x24}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r13, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r14 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

1.158648413s ago: executing program 1 (id=186):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2], 0x40}}, 0x200040b4)

1.050129917s ago: executing program 1 (id=187):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x100001, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1004, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x1, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0x6, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da7, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x49, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x8, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x2, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0xff, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x7fffffff, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, 0x0, 0x0, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (fail_nth: 9)

771.943435ms ago: executing program 1 (id=188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r3, 0x107, 0xa, 0x0, &(0x7f0000000b40))
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000020000080012000300000008001100ff070000080010000000020008000f"], 0x54}}, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)

737.816528ms ago: executing program 2 (id=189):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00010000100001002cbd7000fbdbdf25fc0200000000000000000000000000010a010102000000000000000000000000000008000000000000000080ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x400d0}, 0x0)

659.871885ms ago: executing program 2 (id=190):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="17000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0xa0000)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20200402}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYBLOB="00082abd7000fcdbdf250e000000080005000700000008000600eb3700003c00038014000600fe8000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="88000000", @ANYRES16=r7, @ANYBLOB="00012abd7000fcdbdf2510000000e69b34a9f9f058ebfab13807123c0002800800080007008d0f000006000e004e210000080004000900000006000b00488e00000800030001000000060002004e2000003800038005000800050000000600040003000000140002006261746164765f736c6176655f300000080003000100000008000100010000000c9ad90e"], 0x88}, 0x1, 0x0, 0x0, 0x44840}, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
lsm_set_self_attr(0x66, 0x0, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@hyper})

659.178889ms ago: executing program 0 (id=191):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000680)={0x2, 0x0, [{0x10, 0x0, 0x4}, {0x10, 0x0, 0x3fb}]})
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000dc0)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0x3, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x801, 0x54, 0x7ffbdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x2, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0x2, 0xb, 0x9, 0x80000040, 0x9, 0x9000, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0x5, 0x8, 0x8000, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x100, 0x10149, 0x1], [0x66ac, 0xfffffff9, 0x8b32, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x0, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0xfffffffe, 0x5, 0xb, 0x7, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d24, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x1, 0x5, 0xe66, 0x8, 0x2, 0x7, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xe0, 0x8d, 0x9, 0x4, 0x6, 0xade, 0x7f, 0xd], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0x200e, 0x8, 0x5, 0x0, 0x800, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x0, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x8001, 0x7e, 0x5, 0xb0f, 0x1e, 0x3, 0x7fe, 0x80008, 0x9, 0x3, 0x200, 0xd44e, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x7, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0x6, 0x9, 0x4, 0x40, 0x100, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0xc, 0x2, 0xa5e, 0xfe, 0xff, 0x7, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x8, 0x7, 0x1, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x8, 0x1, 0xff, 0x80000002, 0xff, 0x6, 0x4ab8, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0xc, 0x3, 0x5, 0x400]}, 0x45c)
r4 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000007700000a400000000c0a010400000000090000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
close(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

194.972883ms ago: executing program 0 (id=192):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000300)='%0\xa5\f\x7f\xef\xa9\xfd\xb5\xdc\xff\xfe', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x4}, 0x4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001002f8d3497000000000700000a48000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030800054000000000140000001100010000000000000000000100000a1763091a050c00b3fa3e2b146924cf9e3350ac0f9564a069e9882fa4b1b0c18c6b35822023042e265b6202d292fe624fd8f0be2f78c076fd951d75c57d7586"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001002f8d3497000000000700000a48000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030800054000000000140000001100010000000000000000000100000a1763091a050c00b3fa3e2b146924cf9e3350ac0f9564a069e9882fa4b1b0c18c6b35822023042e265b6202d292fe624fd8f0be2f78c076fd951d75c57d7586"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x480000, @value=0x7})
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) (async)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)

99.850319ms ago: executing program 3 (id=193):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
readv(r1, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}], 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000780)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xfffe, 0x0, 0x1000}}}}}}, 0x0)

0s ago: executing program 3 (id=194):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000001140)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x110}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30024' (ED25519) to the list of known hosts.
[   48.860231][ T5917] cgroup: Unknown subsys name 'net'
[   49.006343][ T5917] cgroup: Unknown subsys name 'cpuset'
[   49.012249][ T5917] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.010746][ T5917] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.141204][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.163747][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.167073][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.178490][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.181480][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.189744][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.192855][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   54.193413][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.196932][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.199278][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   54.202179][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.207398][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   54.208635][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.211037][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.216853][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.217149][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.219467][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   54.219466][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.220282][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   54.220272][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.583870][ T5940] chnl_net:caif_netlink_parms(): no params data found
[   54.657980][ T5942] chnl_net:caif_netlink_parms(): no params data found
[   54.665967][ T5934] chnl_net:caif_netlink_parms(): no params data found
[   54.679914][ T5937] chnl_net:caif_netlink_parms(): no params data found
[   54.794680][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.797459][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.800052][ T5940] bridge_slave_0: entered allmulticast mode
[   54.803037][ T5940] bridge_slave_0: entered promiscuous mode
[   54.868428][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.872098][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.875030][ T5940] bridge_slave_1: entered allmulticast mode
[   54.878820][ T5940] bridge_slave_1: entered promiscuous mode
[   54.958525][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.960952][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.963987][ T5934] bridge_slave_0: entered allmulticast mode
[   54.967091][ T5934] bridge_slave_0: entered promiscuous mode
[   54.979424][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.991212][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.993900][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.996265][ T5934] bridge_slave_1: entered allmulticast mode
[   54.998984][ T5934] bridge_slave_1: entered promiscuous mode
[   55.001717][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.004730][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.007420][ T5937] bridge_slave_0: entered allmulticast mode
[   55.010710][ T5937] bridge_slave_0: entered promiscuous mode
[   55.017510][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.021702][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.025191][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.028126][ T5942] bridge_slave_0: entered allmulticast mode
[   55.032049][ T5942] bridge_slave_0: entered promiscuous mode
[   55.041509][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.044730][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.047650][ T5937] bridge_slave_1: entered allmulticast mode
[   55.052162][ T5937] bridge_slave_1: entered promiscuous mode
[   55.062400][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.065469][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.068579][ T5942] bridge_slave_1: entered allmulticast mode
[   55.072720][ T5942] bridge_slave_1: entered promiscuous mode
[   55.106951][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.117804][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.122322][ T5940] team0: Port device team_slave_0 added
[   55.136996][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.147726][ T5940] team0: Port device team_slave_1 added
[   55.152450][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.157707][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.188490][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.194055][ T5934] team0: Port device team_slave_0 added
[   55.213549][ T5937] team0: Port device team_slave_0 added
[   55.228042][ T5934] team0: Port device team_slave_1 added
[   55.230994][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.233661][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.244204][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.250745][ T5937] team0: Port device team_slave_1 added
[   55.274494][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.276718][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.287347][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.294304][ T5942] team0: Port device team_slave_0 added
[   55.319347][ T5942] team0: Port device team_slave_1 added
[   55.322602][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.325364][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.334271][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.339473][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.342718][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.353611][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.365085][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.367665][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.375878][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.380011][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.383159][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.393858][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.419675][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.422734][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.433469][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.444947][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.447937][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.460183][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.485352][ T5940] hsr_slave_0: entered promiscuous mode
[   55.487668][ T5940] hsr_slave_1: entered promiscuous mode
[   55.514789][ T5937] hsr_slave_0: entered promiscuous mode
[   55.517384][ T5937] hsr_slave_1: entered promiscuous mode
[   55.519732][ T5937] debugfs: 'hsr0' already exists in 'hsr'
[   55.521600][ T5937] Cannot create hsr debugfs directory
[   55.553813][ T5934] hsr_slave_0: entered promiscuous mode
[   55.556122][ T5934] hsr_slave_1: entered promiscuous mode
[   55.558167][ T5934] debugfs: 'hsr0' already exists in 'hsr'
[   55.559941][ T5934] Cannot create hsr debugfs directory
[   55.592397][ T5942] hsr_slave_0: entered promiscuous mode
[   55.594875][ T5942] hsr_slave_1: entered promiscuous mode
[   55.596970][ T5942] debugfs: 'hsr0' already exists in 'hsr'
[   55.598865][ T5942] Cannot create hsr debugfs directory
[   55.853039][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.859785][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.866135][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.876429][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.926410][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.939274][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.945855][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.951384][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   56.015494][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.027242][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.034743][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.046579][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.117845][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.138199][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.140693][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.149375][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.158811][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.204204][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[   56.225779][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.228140][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.235442][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.243170][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.245554][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.272921][ T5953] Bluetooth: hci2: command tx timeout
[   56.274915][ T5936] Bluetooth: hci0: command tx timeout
[   56.276730][ T5946] Bluetooth: hci1: command tx timeout
[   56.283697][ T5946] Bluetooth: hci3: command tx timeout
[   56.288542][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   56.301860][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.304108][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.335077][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.339282][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.342360][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.354537][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.387243][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[   56.400385][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.403581][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.416344][ T5942] 8021q: adding VLAN 0 to HW filter on device team0
[   56.424105][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.427187][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.438549][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.441676][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.464180][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.467157][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.521294][ T5937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.530641][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.565631][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.600611][ T5940] veth0_vlan: entered promiscuous mode
[   56.606352][ T5940] veth1_vlan: entered promiscuous mode
[   56.623955][ T5940] veth0_macvtap: entered promiscuous mode
[   56.629055][ T5940] veth1_macvtap: entered promiscuous mode
[   56.639894][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.655086][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.660485][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.690694][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.700760][   T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.704425][   T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.718079][   T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.721456][   T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.765410][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.809980][ T5934] veth0_vlan: entered promiscuous mode
[   56.814158][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.815493][ T5937] veth0_vlan: entered promiscuous mode
[   56.816722][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.832346][ T5937] veth1_vlan: entered promiscuous mode
[   56.841333][ T5934] veth1_vlan: entered promiscuous mode
[   56.852047][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.854524][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.867264][ T5942] veth0_vlan: entered promiscuous mode
[   56.885527][ T5942] veth1_vlan: entered promiscuous mode
[   56.893378][ T5937] veth0_macvtap: entered promiscuous mode
[   56.894372][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.900160][ T5934] veth0_macvtap: entered promiscuous mode
[   56.904233][ T5937] veth1_macvtap: entered promiscuous mode
[   56.916728][ T5934] veth1_macvtap: entered promiscuous mode
[   56.924958][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.938630][ T5942] veth0_macvtap: entered promiscuous mode
[   56.944010][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.950725][ T5942] veth1_macvtap: entered promiscuous mode
[   56.965440][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.973756][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.980586][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.982159][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.984368][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.990263][ T1142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.002447][ T1142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.011277][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.016021][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.022304][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.024109][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.035380][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.039089][ T1142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.044883][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.064259][   T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.077949][   T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.082803][   T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.085526][   T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.104045][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.115621][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.118088][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.158757][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.161576][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.179449][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.190574][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.199273][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.209413][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.233624][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.236783][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.248428][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.250953][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.286219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   57.403042][ T6026] binder: 6025:6026 ioctl 0 80000040 returned -22
[   57.731985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   57.970535][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.975323][ T6035] evm: overlay not supported
[   58.002124][ T6005] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   58.152867][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5'.
[   58.215738][ T6005] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   58.220688][ T6005] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   58.238332][ T6005] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   58.250831][ T6005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   58.261800][ T6005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   58.279193][ T6005] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   58.282151][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   58.284727][ T6005] usb 8-1: Product: syz
[   58.286104][ T6005] usb 8-1: Manufacturer: syz
[   58.293240][ T6005] cdc_wdm 8-1:1.0: skipping garbage
[   58.295088][ T6005] cdc_wdm 8-1:1.0: skipping garbage
[   58.318340][ T6005] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   58.326745][ T6005] cdc_wdm 8-1:1.0: Unknown control protocol
[   58.407886][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5'.
[   58.486847][ T5946] Bluetooth: hci1: command tx timeout
[   58.486915][ T5953] Bluetooth: hci2: command tx timeout
[   58.486933][ T5950] Bluetooth: hci3: command tx timeout
[   58.493578][ T5936] Bluetooth: hci0: command tx timeout
[   58.510138][ T6005] usb 8-1: USB disconnect, device number 2
[   58.562399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   58.570854][ T6049] IPVS: starting estimator thread 0...
[   58.662141][ T6056] IPVS: using max 44 ests per chain, 105600 per kthread
[   58.924243][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   58.929375][ T6047] binder: 6045:6047 ioctl 0 80000040 returned -22
[   59.026555][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   59.128985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   59.257119][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   59.276283][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   59.313017][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   59.365951][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   59.371552][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   59.375324][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   59.379093][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   59.449358][ T6071] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   59.497697][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.501282][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.577568][ T6076] syz_tun: entered promiscuous mode
[   59.579745][ T6076] syz_tun: entered allmulticast mode
[   59.676582][ T6068] binder: 6063:6068 ioctl 0 80000040 returned -22
[   59.735535][ T6081] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   59.738271][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   59.852843][ T6081] vhci_hcd vhci_hcd.0: Device attached
[   59.990985][ T6081] =======================================================
[   59.990985][ T6081] WARNING: The mand mount option has been deprecated and
[   59.990985][ T6081]          and is ignored by this kernel. Remove the mand
[   59.990985][ T6081]          option from the mount to silence this warning.
[   59.990985][ T6081] =======================================================
[   60.017044][ T6086] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   60.152054][   T59] usb 44-1: SetAddress Request (2) to port 0
[   60.155191][   T59] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[   60.239422][ T6081] bond1: Unable to set peer notification delay as MII monitoring is disabled
[   60.250211][ T6081] bond1 (unregistering): Released all slaves
[   60.512048][ T5936] Bluetooth: hci0: command tx timeout
[   60.512146][ T5953] Bluetooth: hci2: command tx timeout
[   60.521888][ T5953] Bluetooth: hci1: command tx timeout
[   60.771935][   T62] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   61.412307][   T62] usb 5-1: Using ep0 maxpacket: 16
[   61.424039][   T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.454438][   T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.457407][   T62] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   61.463228][   T62] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   61.466572][   T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.491595][   T62] usb 5-1: config 0 descriptor??
[   61.711305][ T6114] netlink: 'syz.2.16': attribute type 1 has an invalid length.
[   61.726528][ T6114] batman_adv: batadv0: Adding interface: veth0_to_bond
[   61.731160][ T6114] batman_adv: batadv0: The MTU of interface veth0_to_bond is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   61.739337][ T6114] batman_adv: batadv0: Not using interface veth0_to_bond (retrying later): interface not active
[   61.860485][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.863062][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.999980][ T6117] batadv0: entered promiscuous mode
[   62.047892][ T6117] batadv0: entered allmulticast mode
[   62.127571][   T62] input: HID 0955:7214 Haptics as /devices/virtual/input/input5
[   62.222438][   T62] shield 0003:0955:7214.0002: Registered Thunderstrike controller
[   62.226847][   T62] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[   62.238823][ T6093] random: crng reseeded on system resumption
[   62.309352][ T6049] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   62.315932][ T6082] vhci_hcd: connection reset by peer
[   62.319617][ T1142] vhci_hcd vhci_hcd.3: stop threads
[   62.323729][ T1142] vhci_hcd vhci_hcd.3: release socket
[   62.334870][ T1142] vhci_hcd vhci_hcd.3: disconnect device
[   62.340823][ T6049] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   62.363962][   T62] usb 5-1: USB disconnect, device number 2
[   62.367303][ T6049] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   62.373457][ T6049] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   62.603292][ T5936] Bluetooth: hci1: command tx timeout
[   62.603455][ T5946] Bluetooth: hci2: command tx timeout
[   62.605112][ T5953] Bluetooth: hci0: command tx timeout
[   62.660325][ T6131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19'.
[   63.718471][ T5946] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   63.719372][ T6142] netlink: 7 bytes leftover after parsing attributes in process `syz.0.22'.
[   63.721231][ T5946] Bluetooth: hci3: Injecting HCI hardware error event
[   63.727652][ T5946] Bluetooth: hci3: hardware error 0x00
[   63.852623][ T6146] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET)
[   64.045770][ T6140] binder: 6130:6140 ioctl 0 80000040 returned -22
[   64.375101][ T6151] netlink: 'syz.2.23': attribute type 1 has an invalid length.
[   64.378569][ T6151] batman_adv: batadv0: Removing interface: veth0_to_bond
[   64.547991][ T6154] veth0_to_bridge: entered promiscuous mode
[   64.551996][ T6154] veth0_to_bridge: entered allmulticast mode
[   64.607018][ T6160] input: syz0 as /devices/virtual/input/input6
[   64.673438][ T6162] binder: BC_ATTEMPT_ACQUIRE not supported
[   64.676502][ T6162] binder: 6161:6162 ioctl c0306201 800001c0 returned -22
[   64.684408][ T6160] syz_tun: entered allmulticast mode
[   64.934343][   T40] audit: type=1800 audit(1766279314.700:2): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.27" name="file0" dev="9p" ino=71827653 res=0 errno=0
[   65.004344][   T40] audit: type=1804 audit(1766279314.770:3): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.27" name="/newroot/6/file0/file0" dev="9p" ino=71827653 res=1 errno=0
[   65.242035][   T59] usb 44-1: device descriptor read/8, error -110
[   65.611569][ T6179] netlink: 'syz.2.29': attribute type 1 has an invalid length.
[   65.614146][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   65.644558][   T59] usb usb44-port1: attempt power cycle
[   65.791973][ T5946] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   65.862405][ T6181] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[   65.864459][ T6181] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   65.867323][ T6181] vhci_hcd vhci_hcd.0: Device attached
[   66.141937][   T10] usb 40-1: SetAddress Request (2) to port 0
[   66.144116][   T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[   66.392641][   T59] usb usb44-port1: unable to enumerate USB device
[   66.402089][ T6188] nbd0: detected capacity change from 0 to 8589934655
[   66.880644][ T6187] vhci_hcd: connection reset by peer
[   66.891728][ T6052] vhci_hcd vhci_hcd.1: stop threads
[   66.894893][ T6052] vhci_hcd vhci_hcd.1: release socket
[   66.897445][ T6052] vhci_hcd vhci_hcd.1: disconnect device
[   67.023554][ T5946] block nbd0: Receive control failed (result -104)
[   67.823939][ T6213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.980397][ T6159] syz_tun: left allmulticast mode
[   68.126833][ T6218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.38'.
[   68.154281][ T6221] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   68.259480][ T6233] veth1_to_team: entered promiscuous mode
[   68.261354][ T6233] veth1_to_team: entered allmulticast mode
[   68.672741][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.951916][   T62] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   69.121932][   T62] usb 5-1: Using ep0 maxpacket: 8
[   69.124995][   T62] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   69.128055][   T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.140040][   T62] pvrusb2: Hardware description: Terratec Grabster AV400
[   69.142550][   T62] pvrusb2: **********
[   69.143897][   T62] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   69.147082][   T62] pvrusb2: Important functionality might not be entirely working.
[   69.149652][   T62] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   69.153682][   T62] pvrusb2: **********
[   69.445398][ T2484] pvrusb2: Invalid write control endpoint
[   69.469951][ T2484] pvrusb2: Invalid write control endpoint
[   69.473775][ T2484] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   69.476714][ T2484] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   69.479171][ T2484] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   69.482636][ T2484] pvrusb2: Device being rendered inoperable
[   69.485184][ T2484] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[   69.487493][ T2484] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   69.492350][ T2484] pvrusb2: Attached sub-driver cx25840
[   69.494194][ T2484] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   69.497319][ T2484] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   69.671879][   T59] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   70.426180][ T6256] tipc: Started in network mode
[   70.428397][ T6256] tipc: Node identity 26d8868ca37f, cluster identity 4711
[   70.431530][ T6256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.436132][ T6256] syzkaller0: entered promiscuous mode
[   70.438349][ T6256] syzkaller0: entered allmulticast mode
[   70.442597][   T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.446853][   T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.450869][   T59] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   70.475517][   T59] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   70.479249][   T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.484142][   T59] usb 7-1: config 0 descriptor??
[   70.895122][ T6248] pim6reg: entered allmulticast mode
[   70.941725][ T6248] pim6reg: left allmulticast mode
[   70.959342][ T6260] netlink: 'syz.3.43': attribute type 1 has an invalid length.
[   70.961783][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'.
[   71.005829][   T59] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   71.242178][   T10] usb 40-1: device descriptor read/8, error -110
[   71.268083][ T6255] tipc: Resetting bearer <eth:syzkaller0>
[   71.276999][ T6255] tipc: Disabling bearer <eth:syzkaller0>
[   71.286063][   T59] usb 7-1: USB disconnect, device number 2
[   71.427490][ T6268] netlink: 'syz.1.45': attribute type 1 has an invalid length.
[   71.443096][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.446499][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.653339][   T10] usb usb40-port1: attempt power cycle
[   71.853193][   T60] cfg80211: failed to load regulatory.db
[   72.012890][ T6005] usb 5-1: USB disconnect, device number 3
[   72.328502][ T6286] xt_CT: You must specify a L4 protocol and not use inversions on it
[   72.355763][   T10] usb usb40-port1: unable to enumerate USB device
[   73.439342][ T6298] netlink: 'syz.1.51': attribute type 21 has an invalid length.
[   73.456033][   T40] audit: type=1326 audit(1766279323.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000
[   73.464790][   T40] audit: type=1326 audit(1766279323.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000
[   73.472226][   T40] audit: type=1326 audit(1766279323.230:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000
[   73.483160][   T40] audit: type=1326 audit(1766279323.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4598 code=0x7ffc0000
[   73.489794][   T40] audit: type=1326 audit(1766279323.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000
[   73.506941][   T40] audit: type=1326 audit(1766279323.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4598 code=0x7ffc0000
[   73.521871][   T40] audit: type=1326 audit(1766279323.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000
[   73.528606][   T40] audit: type=1326 audit(1766279323.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4598 code=0x7ffc0000
[   73.538657][   T40] audit: type=1326 audit(1766279323.230:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000
[   73.548731][   T40] audit: type=1326 audit(1766279323.230:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.2.53" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4598 code=0x7ffc0000
[   73.643167][ T6005] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   73.835296][ T6307] fuse: Bad value for 'user_id'
[   73.837490][ T6307] fuse: Bad value for 'user_id'
[   73.931981][ T6005] usb 8-1: Using ep0 maxpacket: 32
[   73.943644][ T6005] usb 8-1: config 0 interface 0 has no altsetting 0
[   73.961156][ T6005] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   73.978595][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.991663][ T6005] usb 8-1: Product: syz
[   73.998064][ T6005] usb 8-1: Manufacturer: syz
[   74.006010][ T6005] usb 8-1: SerialNumber: syz
[   74.022964][ T6005] usb 8-1: config 0 descriptor??
[   74.031440][ T6005] gs_usb 8-1:0.0: Required endpoints not found
[   74.499882][ T6310] xt_CT: You must specify a L4 protocol and not use inversions on it
[   74.765120][ T6313] Zero length message leads to an empty skb
[   75.083650][ T6318] fuse: Bad value for 'group_id'
[   75.085305][ T6318] fuse: Bad value for 'group_id'
[   75.102965][ T6317] usb usb7: usbfs: process 6317 (syz.0.59) did not claim interface 0 before use
[   75.359112][ T6327] fuse: Unknown parameter 'fdWÑù‘5¶	þ8]Ñ›ÄÇ6q4\°-Jß«Vé.û}NèÚî5&ÿ‰^£á€dPIÞ±ÄÞÎÁ”RÂó!K'
[   75.634406][ T6334] netlink: 'syz.0.65': attribute type 1 has an invalid length.
[   75.700200][ T6005] libceph: connect (1)[c::]:6789 error -101
[   75.702646][ T6005] libceph: mon0 (1)[c::]:6789 connect error
[   75.712969][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[   75.746497][ T6337] ceph: No mds server is up or the cluster is laggy
[   75.765138][ T6334] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[   75.767625][ T6334] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   75.888927][ T6346] FAULT_INJECTION: forcing a failure.
[   75.888927][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   75.893488][ T6346] CPU: 2 UID: 0 PID: 6346 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(full) 
[   75.893501][ T6346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.893507][ T6346] Call Trace:
[   75.893511][ T6346]  <TASK>
[   75.893514][ T6346]  dump_stack_lvl+0x16c/0x1f0
[   75.893546][ T6346]  should_fail_ex+0x512/0x640
[   75.893561][ T6346]  _copy_to_user+0x32/0xd0
[   75.893573][ T6346]  simple_read_from_buffer+0xcb/0x170
[   75.893588][ T6346]  proc_fail_nth_read+0x197/0x240
[   75.893605][ T6346]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   75.893622][ T6346]  ? rw_verify_area+0xcf/0x6c0
[   75.893635][ T6346]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   75.893651][ T6346]  vfs_read+0x1e4/0xcf0
[   75.893668][ T6346]  ? __pfx_vfs_read+0x10/0x10
[   75.893683][ T6346]  ? vhost_vsock_dev_ioctl+0x15b/0xb30
[   75.893698][ T6346]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[   75.893711][ T6346]  ? hook_file_ioctl_common+0x144/0x410
[   75.893727][ T6346]  ksys_read+0x12a/0x250
[   75.893741][ T6346]  ? __pfx_ksys_read+0x10/0x10
[   75.893754][ T6346]  ? compat_ptr_ioctl+0x76/0xa0
[   75.893769][ T6346]  __do_fast_syscall_32+0xe8/0x680
[   75.893786][ T6346]  do_fast_syscall_32+0x32/0x80
[   75.893795][ T6346]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   75.893808][ T6346] RIP: 0023:0xf7fe4579
[   75.893816][ T6346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   75.893825][ T6346] RSP: 002b:00000000f54d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[   75.893835][ T6346] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54d6620
[   75.893841][ T6346] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000
[   75.893847][ T6346] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[   75.893853][ T6346] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[   75.893858][ T6346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   75.893871][ T6346]  </TASK>
[   75.955178][ T1415] ieee802154 phy0 wpan0: encryption failed: -22
[   75.977685][ T1415] ieee802154 phy1 wpan1: encryption failed: -22
[   76.155545][ T6351] overlayfs: failed to resolve './file0': -2
[   76.206085][ T6357] netlink: 'syz.2.70': attribute type 1 has an invalid length.
[   76.206116][ T6356] netlink: 'syz.2.70': attribute type 1 has an invalid length.
[   76.218978][ T6357] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.221612][ T6357] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[   76.226943][ T6357] bond1: entered allmulticast mode
[   76.229171][ T6355] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[   76.242955][ T6356] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   76.559676][   T34] usb 8-1: USB disconnect, device number 3
[   77.238802][ T6380] Driver unsupported XDP return value 0 on prog  (id 26) dev N/A, expect packet loss!
[   77.284028][ T1330] IPVS: starting estimator thread 0...
[   77.371988][ T6382] IPVS: using max 21 ests per chain, 50400 per kthread
[   77.588953][ T6385] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.604603][ T6385] Cannot find add_set index 0 as target
[   78.162910][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'.
[   78.201609][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'.
[   78.241621][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'.
[   78.323110][ T6393] binder: 6392:6393 ioctl 0 80000040 returned -22
[   78.418478][ T6407] netlink: 'syz.1.85': attribute type 1 has an invalid length.
[   78.431191][ T6410] mmap: syz.3.86 (6410) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   78.455090][ T6407] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.483325][ T6407] bond1: (slave veth0_to_bond): making interface the new active one
[   78.489867][ T6407] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   78.581587][ T6407] bond1: entered promiscuous mode
[   78.585253][ T6407] veth0_to_bond: entered promiscuous mode
[   78.587206][ T6407] bond1: entered allmulticast mode
[   78.588850][ T6407] veth0_to_bond: entered allmulticast mode
[   79.637059][ T6440] tmpfs: Bad value for 'mpol'
[   79.823985][ T6444] vlan2: entered promiscuous mode
[   79.824006][ T6444] bridge0: entered promiscuous mode
[   79.824078][ T6444] vlan2: entered allmulticast mode
[   79.824086][ T6444] bridge0: entered allmulticast mode
[   79.859297][ T6442] fuse: root generation should be zero
[   79.862316][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'.
[   80.101890][ T1330] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   80.201989][ T6094] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   80.233447][ T1330] usb 7-1: device descriptor read/64, error -71
[   80.363323][ T6094] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[   80.369458][ T6094] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   80.373162][ T6094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.376030][ T6094] usb 6-1: Product: syz
[   80.377781][ T6094] usb 6-1: Manufacturer: syz
[   80.382941][ T6094] usb 6-1: SerialNumber: syz
[   80.388784][ T6447] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   80.433585][ T6466] FAULT_INJECTION: forcing a failure.
[   80.433585][ T6466] name failslab, interval 1, probability 0, space 0, times 1
[   80.440586][ T6466] CPU: 3 UID: 0 PID: 6466 Comm: syz.0.101 Not tainted syzkaller #0 PREEMPT(full) 
[   80.440601][ T6466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   80.440607][ T6466] Call Trace:
[   80.440610][ T6466]  <TASK>
[   80.440615][ T6466]  dump_stack_lvl+0x16c/0x1f0
[   80.440633][ T6466]  should_fail_ex+0x512/0x640
[   80.440645][ T6466]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   80.440659][ T6466]  should_failslab+0xc2/0x120
[   80.440676][ T6466]  kmem_cache_alloc_noprof+0x83/0x770
[   80.440688][ T6466]  ? skb_clone+0x190/0x3f0
[   80.440704][ T6466]  ? skb_clone+0x190/0x3f0
[   80.440716][ T6466]  skb_clone+0x190/0x3f0
[   80.440730][ T6466]  netlink_deliver_tap+0xabd/0xd30
[   80.440748][ T6466]  netlink_unicast+0x71f/0x870
[   80.440764][ T6466]  ? __pfx_netlink_unicast+0x10/0x10
[   80.440778][ T6466]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   80.440793][ T6466]  netlink_ack+0x696/0xb80
[   80.440811][ T6466]  netlink_rcv_skb+0x332/0x420
[   80.440826][ T6466]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   80.440842][ T6466]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   80.440861][ T6466]  ? netlink_deliver_tap+0x1ae/0xd30
[   80.440877][ T6466]  netlink_unicast+0x5aa/0x870
[   80.440894][ T6466]  ? __pfx_netlink_unicast+0x10/0x10
[   80.440913][ T6466]  netlink_sendmsg+0x8c8/0xdd0
[   80.440930][ T6466]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.440947][ T6466]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[   80.440967][ T6466]  ____sys_sendmsg+0xa5d/0xc30
[   80.440984][ T6466]  ? __pfx_____sys_sendmsg+0x10/0x10
[   80.440999][ T6466]  ? get_compat_msghdr+0x11a/0x170
[   80.441018][ T6466]  ___sys_sendmsg+0x134/0x1d0
[   80.441032][ T6466]  ? __pfx____sys_sendmsg+0x10/0x10
[   80.441052][ T6466]  ? find_held_lock+0x2b/0x80
[   80.441073][ T6466]  __sys_sendmsg+0x16d/0x220
[   80.441086][ T6466]  ? __pfx___sys_sendmsg+0x10/0x10
[   80.441105][ T6466]  ? do_user_addr_fault+0x843/0x1370
[   80.441120][ T6466]  __do_fast_syscall_32+0xe8/0x680
[   80.441137][ T6466]  do_fast_syscall_32+0x32/0x80
[   80.441146][ T6466]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   80.441164][ T6466] RIP: 0023:0xf7fd5579
[   80.441172][ T6466] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   80.441181][ T6466] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   80.441191][ T6466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[   80.441197][ T6466] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[   80.441203][ T6466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   80.441208][ T6466] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   80.441214][ T6466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   80.441227][ T6466]  </TASK>
[   80.471943][ T1330] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   80.588688][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'.
[   80.600289][ T6094] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[   80.613881][ T6094] usb 6-1: USB disconnect, device number 2
[   80.659852][ T6477] netlink: 'syz.3.105': attribute type 1 has an invalid length.
[   80.663897][ T1330] usb 7-1: device descriptor read/64, error -71
[   80.743350][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.745875][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.772181][ T1330] usb usb7-port1: attempt power cycle
[   80.789548][ T6477] geneve1: entered promiscuous mode
[   80.791433][ T6477] geneve1: entered allmulticast mode
[   80.856860][ T6499] FAULT_INJECTION: forcing a failure.
[   80.856860][ T6499] name failslab, interval 1, probability 0, space 0, times 0
[   80.861695][ T6499] CPU: 3 UID: 0 PID: 6499 Comm: syz.3.109 Not tainted syzkaller #0 PREEMPT(full) 
[   80.861717][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   80.861727][ T6499] Call Trace:
[   80.861734][ T6499]  <TASK>
[   80.861740][ T6499]  dump_stack_lvl+0x16c/0x1f0
[   80.861770][ T6499]  should_fail_ex+0x512/0x640
[   80.861788][ T6499]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   80.861825][ T6499]  should_failslab+0xc2/0x120
[   80.861852][ T6499]  kmem_cache_alloc_noprof+0x83/0x770
[   80.861871][ T6499]  ? skb_clone+0x190/0x3f0
[   80.861896][ T6499]  ? skb_clone+0x190/0x3f0
[   80.861915][ T6499]  skb_clone+0x190/0x3f0
[   80.861936][ T6499]  netlink_deliver_tap+0xabd/0xd30
[   80.861965][ T6499]  netlink_unicast+0x71f/0x870
[   80.861992][ T6499]  ? __pfx_netlink_unicast+0x10/0x10
[   80.862024][ T6499]  netlink_ack+0x696/0xb80
[   80.862051][ T6499]  netlink_rcv_skb+0x332/0x420
[   80.862073][ T6499]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   80.862092][ T6499]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   80.862148][ T6499]  ? ns_capable+0xd7/0x110
[   80.862177][ T6499]  nfnetlink_rcv+0x1b3/0x430
[   80.862195][ T6499]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   80.862211][ T6499]  ? netlink_deliver_tap+0x1ae/0xd30
[   80.862236][ T6499]  netlink_unicast+0x5aa/0x870
[   80.862261][ T6499]  ? __pfx_netlink_unicast+0x10/0x10
[   80.862291][ T6499]  netlink_sendmsg+0x8c8/0xdd0
[   80.862316][ T6499]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.862342][ T6499]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[   80.862372][ T6499]  ____sys_sendmsg+0xa5d/0xc30
[   80.862399][ T6499]  ? __pfx_____sys_sendmsg+0x10/0x10
[   80.862421][ T6499]  ? get_compat_msghdr+0x11a/0x170
[   80.862453][ T6499]  ___sys_sendmsg+0x134/0x1d0
[   80.862475][ T6499]  ? __pfx____sys_sendmsg+0x10/0x10
[   80.862507][ T6499]  ? find_held_lock+0x2b/0x80
[   80.862543][ T6499]  __sys_sendmsg+0x16d/0x220
[   80.862564][ T6499]  ? __pfx___sys_sendmsg+0x10/0x10
[   80.862601][ T6499]  __do_fast_syscall_32+0xe8/0x680
[   80.862629][ T6499]  do_fast_syscall_32+0x32/0x80
[   80.862645][ T6499]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   80.862665][ T6499] RIP: 0023:0xf7fc7579
[   80.862678][ T6499] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   80.862694][ T6499] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   80.862709][ T6499] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0
[   80.862719][ T6499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   80.862728][ T6499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   80.862737][ T6499] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   80.862746][ T6499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   80.862769][ T6499]  </TASK>
[   80.933135][ T6505] bond1: entered allmulticast mode
[   81.027236][ T6505] vlan2: entered promiscuous mode
[   81.028861][ T6505] bridge0: entered promiscuous mode
[   81.030623][ T6505] vlan2: entered allmulticast mode
[   81.032684][ T6505] bridge0: entered allmulticast mode
[   81.112083][ T1330] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   81.142734][ T1330] usb 7-1: device descriptor read/8, error -71
[   81.393410][ T1330] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   81.432645][ T1330] usb 7-1: device descriptor read/8, error -71
[   81.545342][ T1330] usb usb7-port1: unable to enumerate USB device
[   81.926365][ T6529] overlay: Unknown parameter 'pcr'
[   82.012846][ T6532] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[   82.025161][ T6532] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.062709][ T6532] bond2: (slave veth0_to_bond): making interface the new active one
[   82.065834][ T6532] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   82.185728][ T6532] bond2: entered promiscuous mode
[   82.187658][ T6532] veth0_to_bond: entered promiscuous mode
[   82.189755][ T6532] bond2: entered allmulticast mode
[   82.191519][ T6532] veth0_to_bond: entered allmulticast mode
[   82.806708][ T6546] process 'syz.0.119' launched '/dev/fd/13' with NULL argv: empty string added
[   82.865589][ T6549] tipc: Can't bind to reserved service type 2
[   82.868913][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'.
[   83.044975][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'.
[   83.069593][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'.
[   83.109653][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'.
[   83.447806][ T6556] binder: 6551:6556 ioctl 0 80000040 returned -22
[   83.685535][ T6567] netlink: 'syz.2.125': attribute type 1 has an invalid length.
[   83.872550][ T6572] /dev/nullb0: Can't open blockdev
[   83.916751][ T6567] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.921159][ T6571] bond2: (slave veth0_to_bond): making interface the new active one
[   83.925434][ T6571] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   84.000815][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'.
[   84.040911][ T6567] bond2: entered promiscuous mode
[   84.043003][ T6567] veth0_to_bond: entered promiscuous mode
[   84.044973][ T6567] bond2: entered allmulticast mode
[   84.046645][ T6567] veth0_to_bond: entered allmulticast mode
[   84.161654][ T6581] netlink: 180 bytes leftover after parsing attributes in process `syz.2.127'.
[   84.578654][ T6606] netlink: 'syz.3.135': attribute type 1 has an invalid length.
[   84.658284][ T6610] FAULT_INJECTION: forcing a failure.
[   84.658284][ T6610] name failslab, interval 1, probability 0, space 0, times 0
[   84.659186][ T6606] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.663260][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(full) 
[   84.663282][ T6610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   84.663291][ T6610] Call Trace:
[   84.663297][ T6610]  <TASK>
[   84.663304][ T6610]  dump_stack_lvl+0x16c/0x1f0
[   84.663333][ T6610]  should_fail_ex+0x512/0x640
[   84.663350][ T6610]  ? fs_reclaim_acquire+0xae/0x150
[   84.663377][ T6610]  should_failslab+0xc2/0x120
[   84.663400][ T6610]  __kmalloc_noprof+0xeb/0x910
[   84.663419][ T6610]  ? tomoyo_encode2+0x100/0x3e0
[   84.663446][ T6610]  ? tomoyo_encode2+0x100/0x3e0
[   84.663467][ T6610]  tomoyo_encode2+0x100/0x3e0
[   84.663491][ T6610]  tomoyo_encode+0x29/0x50
[   84.663509][ T6610]  tomoyo_realpath_from_path+0x18f/0x6e0
[   84.663539][ T6610]  tomoyo_path_number_perm+0x245/0x580
[   84.663556][ T6610]  ? tomoyo_path_number_perm+0x237/0x580
[   84.663577][ T6610]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   84.663622][ T6610]  ? find_held_lock+0x2b/0x80
[   84.663644][ T6610]  ? hook_file_ioctl_common+0x144/0x410
[   84.663668][ T6610]  ? __fget_files+0x20e/0x3c0
[   84.663690][ T6610]  ? __fput_deferred+0x460/0x480
[   84.663712][ T6610]  security_file_ioctl_compat+0x9b/0x240
[   84.663734][ T6610]  __ia32_compat_sys_ioctl+0xc3/0x370
[   84.663757][ T6610]  __do_fast_syscall_32+0xe8/0x680
[   84.663784][ T6610]  do_fast_syscall_32+0x32/0x80
[   84.663800][ T6610]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   84.663820][ T6610] RIP: 0023:0xf708d579
[   84.663833][ T6610] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   84.663848][ T6610] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[   84.663864][ T6610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0945662
[   84.663874][ T6610] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[   84.663883][ T6610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   84.663892][ T6610] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   84.663901][ T6610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   84.663925][ T6610]  </TASK>
[   84.663942][ T6610] ERROR: Out of memory at tomoyo_realpath_from_path.
[   84.678698][ T6606] bond1: (slave veth0_to_bond): making interface the new active one
[   84.730022][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'.
[   84.737146][ T6606] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   84.812972][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'.
[   84.857409][ T6622] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.140'.
[   84.859679][ T6606] bond1: entered promiscuous mode
[   84.862362][ T6606] veth0_to_bond: entered promiscuous mode
[   84.864291][ T6606] bond1: entered allmulticast mode
[   84.865941][ T6606] veth0_to_bond: entered allmulticast mode
[   84.992274][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   85.025636][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'.
[   85.161885][    T9] usb 7-1: Using ep0 maxpacket: 32
[   85.167876][    T9] usb 7-1: config 0 has no interfaces?
[   85.171448][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   85.175608][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.178205][    T9] usb 7-1: Product: syz
[   85.179599][    T9] usb 7-1: Manufacturer: syz
[   85.181116][    T9] usb 7-1: SerialNumber: syz
[   85.187174][    T9] usb 7-1: config 0 descriptor??
[   85.408880][    T9] usb 7-1: USB disconnect, device number 7
[   85.663126][ T6652] comedi comedi0: pcl711: I/O port conflict (0x3,16)
[   85.894611][ T6654] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   85.896796][ T6654] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   85.899566][ T6654] vhci_hcd vhci_hcd.0: Device attached
[   85.981365][ T6658] netlink: 'syz.2.151': attribute type 3 has an invalid length.
[   86.125467][ T6655] vhci_hcd: connection closed
[   86.125909][ T6305] vhci_hcd vhci_hcd.1: stop threads
[   86.129498][ T6305] vhci_hcd vhci_hcd.1: release socket
[   86.132173][ T6305] vhci_hcd vhci_hcd.1: disconnect device
[   86.837386][ T6677] block nbd0: NBD_DISCONNECT
[   86.839505][ T6677] block nbd0: Send disconnect failed -32
[   86.842922][ T6677] block nbd0: shutting down sockets
[   87.011936][  T838] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   87.042018][    C3] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.046203][    C3] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.050354][    C3] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.054271][    C3] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.057602][    C3] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.061505][    C3] Buffer I/O error on dev nbd0, logical block 2, async page read
[   87.064864][    C3] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.068740][    C3] Buffer I/O error on dev nbd0, logical block 3, async page read
[   87.072093][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.075963][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.078781][ T5945] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.093377][ T5945] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.095889][ T5945] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.098945][ T5945] Buffer I/O error on dev nbd0, logical block 2, async page read
[   87.101327][ T5945] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.112500][ T5945] Buffer I/O error on dev nbd0, logical block 3, async page read
[   87.115085][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.118247][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read
[   87.120796][ T5945] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   87.124766][ T5945] Buffer I/O error on dev nbd0, logical block 1, async page read
[   87.127661][ T5945] ldm_validate_partition_table(): Disk read failed.
[   87.130256][ T5945] Dev nbd0: unable to read RDB block 0
[   87.132517][ T5945]  nbd0: unable to read partition table
[   87.136143][ T6678] ldm_validate_partition_table(): Disk read failed.
[   87.139013][ T6678] Dev nbd0: unable to read RDB block 0
[   87.141456][ T6678]  nbd0: unable to read partition table
[   87.147388][ T5945] ldm_validate_partition_table(): Disk read failed.
[   87.151113][ T5945] Dev nbd0: unable to read RDB block 0
[   87.156129][ T5945]  nbd0: unable to read partition table
[   87.165836][ T6684] syzkaller0: entered promiscuous mode
[   87.167671][ T6684] syzkaller0: entered allmulticast mode
[   87.186124][  T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64
[   87.192998][  T838] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   87.196457][  T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.199317][  T838] usb 8-1: Product: syz
[   87.200646][  T838] usb 8-1: Manufacturer: syz
[   87.202706][  T838] usb 8-1: SerialNumber: syz
[   87.208547][  T838] usb 8-1: config 0 descriptor??
[   87.317842][ T6693] netlink: 'syz.1.164': attribute type 1 has an invalid length.
[   87.330986][ T6693] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.344101][ T6693] bond1: (slave veth0_to_bond): Releasing active interface
[   87.346368][ T6693] veth0_to_bond: left promiscuous mode
[   87.348222][ T6693] veth0_to_bond: left allmulticast mode
[   87.354660][ T6693] bond2: (slave veth0_to_bond): making interface the new active one
[   87.358474][ T6693] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   87.472368][ T1330] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   87.509296][ T6693] bond2: entered promiscuous mode
[   87.511030][ T6693] veth0_to_bond: entered promiscuous mode
[   87.513042][ T6693] bond2: entered allmulticast mode
[   87.514666][ T6693] veth0_to_bond: entered allmulticast mode
[   87.632049][ T1330] usb 7-1: Using ep0 maxpacket: 32
[   87.639402][    T9] usb 8-1: USB disconnect, device number 4
[   87.643664][ T1330] usb 7-1: config 0 has no interfaces?
[   87.647491][ T1330] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   87.650348][ T1330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.654500][ T6714] lo speed is unknown, defaulting to 1000
[   87.656598][ T1330] usb 7-1: Product: syz
[   87.657236][ T6714] lo speed is unknown, defaulting to 1000
[   87.658831][ T1330] usb 7-1: Manufacturer: syz
[   87.673342][ T1330] usb 7-1: SerialNumber: syz
[   87.683856][ T6714] lo speed is unknown, defaulting to 1000
[   87.684876][ T1330] usb 7-1: config 0 descriptor??
[   87.697307][ T6714] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   87.721113][ T6714] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   87.789275][ T6714] lo speed is unknown, defaulting to 1000
[   87.793275][ T6714] lo speed is unknown, defaulting to 1000
[   87.796520][ T6714] lo speed is unknown, defaulting to 1000
[   87.799153][ T6714] lo speed is unknown, defaulting to 1000
[   87.895329][ T1330] usb 7-1: USB disconnect, device number 8
[   87.931994][   T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   88.081922][   T60] usb 6-1: Using ep0 maxpacket: 16
[   88.085801][   T60] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   88.089931][   T60] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   88.094782][   T60] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[   88.098736][   T60] usb 6-1: config 0 interface 0 has no altsetting 0
[   88.104807][   T60] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   88.108946][   T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.111525][   T60] usb 6-1: Product: syz
[   88.114482][   T60] usb 6-1: Manufacturer: syz
[   88.115995][   T60] usb 6-1: SerialNumber: syz
[   88.119177][   T60] usb 6-1: config 0 descriptor??
[   88.161911][ T6257] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   88.291914][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   88.328194][   T60] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input9
[   88.333104][ T5331] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.337573][ T5331] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.342129][ T5331] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.346532][ T5331] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.346911][ T6257] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[   88.352305][ T6257] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.354947][ T6257] usb 8-1: Product: syz
[   88.356296][ T6257] usb 8-1: Manufacturer: syz
[   88.357917][ T6257] usb 8-1: SerialNumber: syz
[   88.367496][ T5941] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.369356][ T6257] usb 8-1: config 0 descriptor??
[   88.377541][ T5331] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.380679][ T6257] hub 8-1:0.0: bad descriptor, ignoring hub
[   88.384441][ T6257] hub 8-1:0.0: probe with driver hub failed with error -5
[   88.384932][ T5331] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.391410][ T5331] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.441938][    T9] usb 5-1: Using ep0 maxpacket: 16
[   88.444828][    T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   88.447850][    T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   88.451205][    T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[   88.455644][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[   88.459274][    T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   88.462246][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.464742][    T9] usb 5-1: Product: syz
[   88.466334][    T9] usb 5-1: Manufacturer: syz
[   88.467806][    T9] usb 5-1: SerialNumber: syz
[   88.472350][    T9] usb 5-1: config 0 descriptor??
[   88.504720][ T6732] netlink: 'syz.2.174': attribute type 1 has an invalid length.
[   88.521334][ T6732] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.526763][ T6717] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.531541][ T6005] usb 6-1: USB disconnect, device number 3
[   88.536396][ T6732] bond2: (slave veth0_to_bond): Releasing active interface
[   88.540382][ T6732] veth0_to_bond: left promiscuous mode
[   88.544069][ T6732] veth0_to_bond: left allmulticast mode
[   88.552342][ T6732] bond3: (slave veth0_to_bond): making interface the new active one
[   88.556209][ T6732] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   88.584059][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.587109][ T6724] batadv_slave_0: entered promiscuous mode
[   88.597944][ T6257] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[   88.603941][ T6257] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   88.607434][ T6257] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[   88.610352][ T6257] usb 8-1: media controller created
[   88.621510][ T6257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   88.663567][ T6257] DVB: Unable to find symbol dib7000p_attach()
[   88.666030][ T6257] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[   88.670564][ T6732] bond3: entered promiscuous mode
[   88.673202][ T6732] veth0_to_bond: entered promiscuous mode
[   88.675195][ T6732] bond3: entered allmulticast mode
[   88.676880][ T6732] veth0_to_bond: entered allmulticast mode
[   88.689398][    T9] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11
[   88.694655][ T5331] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.699784][ T5331] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.705888][ T5331] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.709842][ T5331] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.721981][ T6257] rc_core: IR keymap rc-dib0700-rc5 not found
[   88.724958][ T6257] Registered IR keymap rc-empty
[   88.727252][ T6257] dvb-usb: could not initialize remote control.
[   88.729698][ T6257] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[   88.742354][ T5941] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.747304][ T5331] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.752773][ T5331] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   88.762960][ T5331] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.004990][ T6257] usb 8-1: USB disconnect, device number 5
[   89.024693][ T6257] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[   89.060082][ T6726] bond0: Error: Cannot enslave bond to itself.
[   89.331911][ T6257] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   89.484984][ T6257] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[   89.488388][ T6257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.491388][ T6257] usb 6-1: Product: syz
[   89.493189][ T6257] usb 6-1: Manufacturer: syz
[   89.495073][ T6257] usb 6-1: SerialNumber: syz
[   89.498850][ T6257] usb 6-1: config 0 descriptor??
[   89.506302][ T6257] hub 6-1:0.0: bad descriptor, ignoring hub
[   89.508708][ T6257] hub 6-1:0.0: probe with driver hub failed with error -5
[   89.524963][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'.
[   89.532056][ T6757] nbd: must specify at least one socket
[   89.568314][ T6759] syzkaller0: entered promiscuous mode
[   89.570250][ T6759] syzkaller0: entered allmulticast mode
[   89.595490][ T6756] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0
[   89.598346][ T6756] PKCS7: Only support pkcs7_signedData type
[   89.606399][ T6756] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[   89.703690][ T6755] FAULT_INJECTION: forcing a failure.
[   89.703690][ T6755] name failslab, interval 1, probability 0, space 0, times 0
[   89.707500][ T6755] CPU: 3 UID: 0 PID: 6755 Comm: syz.1.179 Not tainted syzkaller #0 PREEMPT(full) 
[   89.707514][ T6755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   89.707520][ T6755] Call Trace:
[   89.707525][ T6755]  <TASK>
[   89.707529][ T6755]  dump_stack_lvl+0x16c/0x1f0
[   89.707561][ T6755]  should_fail_ex+0x512/0x640
[   89.707573][ T6755]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   89.707587][ T6755]  should_failslab+0xc2/0x120
[   89.707612][ T6755]  kmem_cache_alloc_noprof+0x83/0x770
[   89.707628][ T6755]  ? skb_clone+0x190/0x3f0
[   89.707644][ T6755]  ? skb_clone+0x190/0x3f0
[   89.707656][ T6755]  skb_clone+0x190/0x3f0
[   89.707669][ T6755]  netlink_deliver_tap+0xabd/0xd30
[   89.707687][ T6755]  netlink_unicast+0x64c/0x870
[   89.707704][ T6755]  ? __pfx_netlink_unicast+0x10/0x10
[   89.707724][ T6755]  netlink_sendmsg+0x8c8/0xdd0
[   89.707741][ T6755]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.707757][ T6755]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[   89.707777][ T6755]  ____sys_sendmsg+0xa5d/0xc30
[   89.707792][ T6755]  ? iterate_inodes_from_logical+0xe0/0x220
[   89.707808][ T6755]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.707823][ T6755]  ? get_compat_msghdr+0x11a/0x170
[   89.707842][ T6755]  ___sys_sendmsg+0x134/0x1d0
[   89.707856][ T6755]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.707875][ T6755]  ? find_held_lock+0x2b/0x80
[   89.707897][ T6755]  __sys_sendmsg+0x16d/0x220
[   89.707910][ T6755]  ? __pfx___sys_sendmsg+0x10/0x10
[   89.707932][ T6755]  __do_fast_syscall_32+0xe8/0x680
[   89.707950][ T6755]  do_fast_syscall_32+0x32/0x80
[   89.707959][ T6755]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   89.707972][ T6755] RIP: 0023:0xf708d579
[   89.707980][ T6755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   89.707990][ T6755] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   89.707999][ T6755] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000300
[   89.708006][ T6755] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000
[   89.708011][ T6755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   89.708017][ T6755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   89.708022][ T6755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   89.708036][ T6755]  </TASK>
[   89.816046][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.818860][ T6755] batadv_slave_0: entered promiscuous mode
[   89.821965][ T1330] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   89.829813][ T6257] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[   89.830515][ T6770] netlink: 'syz.3.183': attribute type 1 has an invalid length.
[   89.835907][ T6257] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   89.840112][ T6257] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[   89.843153][ T6257] usb 6-1: media controller created
[   89.850328][ T6257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   89.853639][ T6770] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.876241][ T6770] bond1: (slave veth0_to_bond): Releasing active interface
[   89.879129][ T6770] veth0_to_bond: left promiscuous mode
[   89.880101][ T6257] DVB: Unable to find symbol dib7000p_attach()
[   89.881255][ T6770] veth0_to_bond: left allmulticast mode
[   89.883154][ T6257] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[   89.890238][ T6770] bond2: (slave veth0_to_bond): making interface the new active one
[   89.894252][ T6770] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   89.932565][ T6257] rc_core: IR keymap rc-dib0700-rc5 not found
[   89.934571][ T6257] Registered IR keymap rc-empty
[   89.936181][ T6257] dvb-usb: could not initialize remote control.
[   89.938098][ T6257] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[   89.971930][ T1330] usb 7-1: Using ep0 maxpacket: 32
[   89.975589][ T1330] usb 7-1: config 0 has no interfaces?
[   89.979652][ T1330] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   89.983725][ T1330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.986899][ T1330] usb 7-1: Product: syz
[   89.989067][ T1330] usb 7-1: Manufacturer: syz
[   89.991091][ T1330] usb 7-1: SerialNumber: syz
[   89.995834][ T1330] usb 7-1: config 0 descriptor??
[   89.999524][ T6770] bond2: entered promiscuous mode
[   90.001429][ T6770] veth0_to_bond: entered promiscuous mode
[   90.003457][ T6770] bond2: entered allmulticast mode
[   90.005192][ T6770] veth0_to_bond: entered allmulticast mode
[   90.200448][ T1330] usb 7-1: USB disconnect, device number 9
[   90.242477][   T60] usb 6-1: USB disconnect, device number 4
[   90.261286][   T60] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[   90.301929][ T6257] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   90.456019][ T6257] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[   90.458960][ T6257] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.461450][ T6257] usb 8-1: Product: syz
[   90.462957][ T6257] usb 8-1: Manufacturer: syz
[   90.464808][ T6257] usb 8-1: SerialNumber: syz
[   90.467735][ T6257] usb 8-1: config 0 descriptor??
[   90.472096][ T6257] hub 8-1:0.0: bad descriptor, ignoring hub
[   90.474456][ T6257] hub 8-1:0.0: probe with driver hub failed with error -5
[   90.672402][ T6779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.184'.
[   90.677698][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.681066][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.776545][ T6781] netlink: 'syz.2.185': attribute type 1 has an invalid length.
[   90.798322][ T6781] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.814575][ T6785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.186'.
[   90.824983][ T6781] bond3: (slave veth0_to_bond): Releasing active interface
[   90.828028][ T6781] veth0_to_bond: left promiscuous mode
[   90.830326][ T6781] veth0_to_bond: left allmulticast mode
[   90.838788][ T6781] bond4: (slave veth0_to_bond): making interface the new active one
[   90.843203][ T6781] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   90.848931][ T6779] batadv_slave_0: left promiscuous mode
[   90.852524][ T6257] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[   90.862362][ T6257] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[   90.864917][ T6257] dib0700: firmware download failed at 7 with -22
[   90.872682][ T6787] syzkaller0: entered promiscuous mode
[   90.874537][ T6787] syzkaller0: entered allmulticast mode
[   90.886210][ T6787] FAULT_INJECTION: forcing a failure.
[   90.886210][ T6787] name failslab, interval 1, probability 0, space 0, times 0
[   90.890497][ T6787] CPU: 2 UID: 0 PID: 6787 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) 
[   90.890511][ T6787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   90.890517][ T6787] Call Trace:
[   90.890521][ T6787]  <TASK>
[   90.890525][ T6787]  dump_stack_lvl+0x16c/0x1f0
[   90.890545][ T6787]  should_fail_ex+0x512/0x640
[   90.890560][ T6787]  should_failslab+0xc2/0x120
[   90.890576][ T6787]  __kmalloc_cache_noprof+0x80/0x800
[   90.890587][ T6787]  ? net_generic+0xea/0x2a0
[   90.890599][ T6787]  ? tipc_enable_bearer+0x89e/0x11e0
[   90.890616][ T6787]  ? tipc_enable_bearer+0x89e/0x11e0
[   90.890628][ T6787]  tipc_enable_bearer+0x89e/0x11e0
[   90.890645][ T6787]  ? __pfx_tipc_enable_bearer+0x10/0x10
[   90.890659][ T6787]  ? __pfx___nla_validate_parse+0x10/0x10
[   90.890675][ T6787]  ? __pfx___might_resched+0x10/0x10
[   90.890691][ T6787]  ? __nla_parse+0x40/0x60
[   90.890708][ T6787]  __tipc_nl_bearer_enable+0x332/0x420
[   90.890724][ T6787]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[   90.890741][ T6787]  ? tipc_nl_compat_bearer_enable+0x362/0x5d0
[   90.890757][ T6787]  ? __nla_parse+0x40/0x60
[   90.890773][ T6787]  __tipc_nl_compat_doit+0x32e/0x3d0
[   90.890784][ T6787]  ? __dev_queue_xmit+0x6d7/0x4650
[   90.890794][ T6787]  ? netlink_deliver_tap+0xa87/0xd30
[   90.890808][ T6787]  ? __pfx___tipc_nl_compat_doit+0x10/0x10
[   90.890819][ T6787]  ? ___sys_sendmsg+0x134/0x1d0
[   90.890830][ T6787]  ? __sys_sendmsg+0x16d/0x220
[   90.890842][ T6787]  ? __do_fast_syscall_32+0xe8/0x680
[   90.890864][ T6787]  ? bpf_lsm_capable+0x9/0x10
[   90.890877][ T6787]  ? security_capable+0x7e/0x260
[   90.890895][ T6787]  tipc_nl_compat_doit+0x11e/0x290
[   90.890907][ T6787]  tipc_nl_compat_recv+0x95b/0xc50
[   90.890919][ T6787]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[   90.890931][ T6787]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[   90.890944][ T6787]  ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10
[   90.890958][ T6787]  ? __pfx___might_resched+0x10/0x10
[   90.890975][ T6787]  ? __mutex_lock+0x27b/0x1ca0
[   90.890990][ T6787]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[   90.891013][ T6787]  genl_family_rcv_msg_doit+0x209/0x2f0
[   90.891037][ T6787]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   90.891059][ T6787]  ? genl_get_cmd+0x194/0x580
[   90.891079][ T6787]  ? __radix_tree_lookup+0x21f/0x2c0
[   90.891095][ T6787]  genl_rcv_msg+0x55c/0x800
[   90.891107][ T6787]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.891117][ T6787]  ? __pfx_tipc_nl_compat_recv+0x10/0x10
[   90.891133][ T6787]  netlink_rcv_skb+0x158/0x420
[   90.891148][ T6787]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.891158][ T6787]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.891178][ T6787]  ? netlink_deliver_tap+0x1ae/0xd30
[   90.891194][ T6787]  genl_rcv+0x28/0x40
[   90.891208][ T6787]  netlink_unicast+0x5aa/0x870
[   90.891225][ T6787]  ? __pfx_netlink_unicast+0x10/0x10
[   90.891239][ T6787]  ? __pfx___might_resched+0x10/0x10
[   90.891257][ T6787]  netlink_sendmsg+0x8c8/0xdd0
[   90.891274][ T6787]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.891290][ T6787]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[   90.891314][ T6787]  ____sys_sendmsg+0xa5d/0xc30
[   90.891331][ T6787]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.891346][ T6787]  ? get_compat_msghdr+0x11a/0x170
[   90.891365][ T6787]  ___sys_sendmsg+0x134/0x1d0
[   90.891379][ T6787]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.891398][ T6787]  ? find_held_lock+0x2b/0x80
[   90.891429][ T6787]  __sys_sendmsg+0x16d/0x220
[   90.891448][ T6787]  ? __pfx___sys_sendmsg+0x10/0x10
[   90.891483][ T6787]  __do_fast_syscall_32+0xe8/0x680
[   90.891511][ T6787]  do_fast_syscall_32+0x32/0x80
[   90.891525][ T6787]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   90.891546][ T6787] RIP: 0023:0xf708d579
[   90.891558][ T6787] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   90.891569][ T6787] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[   90.891579][ T6787] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0
[   90.891585][ T6787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   90.891590][ T6787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   90.891596][ T6787] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[   90.891601][ T6787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   90.891615][ T6787]  </TASK>
[   90.916197][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   91.112274][ T6789] bond4: entered promiscuous mode
[   91.114460][ T6789] veth0_to_bond: entered promiscuous mode
[   91.117071][ T6789] bond4: entered allmulticast mode
[   91.119214][ T6789] veth0_to_bond: entered allmulticast mode
[   91.184969][ T6797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'.
[   91.185131][ T1330] usb 8-1: USB disconnect, device number 6
[   91.197675][ T6257] usb 5-1: USB disconnect, device number 4
[   91.322456][ T6802] kvm: user requested TSC rate below hardware speed
[   91.441946][ T1330] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   91.621935][ T1330] usb 6-1: Using ep0 maxpacket: 16
[   91.625822][ T1330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.630362][ T1330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.635060][ T1330] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   91.640283][ T1330] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   91.645899][ T1330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.658262][ T1330] usb 6-1: config 0 descriptor??
[   92.247735][ T1330] input: HID 0955:7214 Haptics as /devices/virtual/input/input14
[   92.282929][ T1330] shield 0003:0955:7214.0004: Registered Thunderstrike controller
[   92.288547][ T1330] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[   92.832153][   T40] kauditd_printk_skb: 700 callbacks suppressed
[   92.832164][   T40] audit: type=1326 audit(1766279342.600:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.2.190" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe4598 code=0x7ffc0000
[   92.841771][ T6795] random: crng reseeded on system resumption
[   92.848250][   T40] audit: type=1326 audit(1766279342.600:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.2.190" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000
[   92.858267][  T838] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   92.861888][  T838] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   92.866125][ T1330] usb 6-1: USB disconnect, device number 5
[   92.875516][  T838] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   92.879054][ T1330] ------------[ cut here ]------------
[   92.880859][ T1330] workqueue: work disable count underflowed
[   92.882812][ T1330] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#2: kworker/2:3/1330
[   92.885846][ T1330] Modules linked in:
[   92.887278][ T1330] CPU: 2 UID: 0 PID: 1330 Comm: kworker/2:3 Not tainted syzkaller #0 PREEMPT(full) 
[   92.890193][ T1330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   92.893524][ T1330] Workqueue: usb_hub_wq hub_event
[   92.895155][ T1330] RIP: 0010:enable_work+0x2ca/0x310
[   92.896804][ T1330] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 c7 f6 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d d6 6d 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 f4 cf a2 00 e9 f7 fd ff
[   92.902892][ T1330] RSP: 0018:ffffc90005a57348 EFLAGS: 00010093
[   92.904806][ T1330] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846933
[   92.907312][ T1330] RDX: ffff888022d8a4c0 RSI: ffffffff81846b03 RDI: ffffffff908bd8e0
[   92.909817][ T1330] RBP: ffff8880287ea738 R08: 0000000000000005 R09: 0000000000000000
[   92.912238][ T1330] R10: 0000000000000000 R11: ffff888022d8aff0 R12: 1ffff92000b4ae6a
[   92.914682][ T1330] R13: ffffffff8fc51c3f R14: ffff8880287ea698 R15: ffff8880287ea730
[   92.917138][ T1330] FS:  0000000000000000(0000) GS:ffff8880978fc000(0000) knlGS:0000000000000000
[   92.919810][ T1330] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.921844][ T1330] CR2: 000000002fb1fff8 CR3: 000000004b70f000 CR4: 0000000000352ef0
[   92.924366][ T1330] Call Trace:
[   92.925436][ T1330]  <TASK>
[   92.926406][ T1330]  ? __pfx_enable_work+0x10/0x10
[   92.927981][ T1330]  cancel_delayed_work_sync+0x96/0xf0
[   92.929680][ T1330]  thermal_zone_device_unregister+0x28e/0x4d0
[   92.931582][ T1330]  ? __pfx_shield_remove+0x10/0x10
[   92.933189][ T1330]  power_supply_unregister+0x10a/0x150
[   92.934913][ T1330]  shield_remove+0x75/0x130
[   92.936385][ T1330]  ? __pfx_shield_remove+0x10/0x10
[   92.938020][ T1330]  hid_device_remove+0xd1/0x260
[   92.939573][ T1330]  ? __pfx_hid_device_remove+0x10/0x10
[   92.941552][ T1330]  device_remove+0xcb/0x170
[   92.943126][ T1330]  device_release_driver_internal+0x44b/0x620
[   92.945193][ T1330]  bus_remove_device+0x22f/0x450
[   92.947168][ T1330]  device_del+0x396/0x9f0
[   92.948671][ T1330]  ? __pfx_device_del+0x10/0x10
[   92.950582][ T1330]  ? do_raw_spin_lock+0x12c/0x2b0
[   92.952549][ T1330]  hid_destroy_device+0x19c/0x240
[   92.954183][ T1330]  usbhid_disconnect+0xa0/0xe0
[   92.955897][ T1330]  usb_unbind_interface+0x1dd/0x9e0
[   92.957850][ T1330]  ? kernfs_remove_by_name_ns+0xbe/0x100
[   92.960092][ T1330]  ? __pfx_usb_unbind_interface+0x10/0x10
[   92.962181][ T1330]  device_remove+0x125/0x170
[   92.964031][ T1330]  device_release_driver_internal+0x44b/0x620
[   92.966342][ T1330]  bus_remove_device+0x22f/0x450
[   92.968332][ T1330]  device_del+0x396/0x9f0
[   92.970073][ T1330]  ? __pfx_device_del+0x10/0x10
[   92.972047][ T1330]  ? kobject_put+0x218/0x6f0
[   92.973896][ T1330]  usb_disable_device+0x355/0x820
[   92.975896][ T1330]  usb_disconnect+0x2e1/0x9e0
[   92.977629][ T1330]  hub_event+0x1d84/0x52f0
[   92.979492][ T1330]  ? __lock_acquire+0x436/0x2890
[   92.981464][ T1330]  ? do_raw_spin_unlock+0x172/0x230
[   92.983531][ T1330]  ? __pfx_hub_event+0x10/0x10
[   92.985280][ T1330]  ? interval_tree_iter_first+0x1c0/0x250
[   92.987501][ T1330]  ? finish_task_switch.isra.0+0x202/0xbd0
[   92.989881][ T1330]  ? rcu_is_watching+0x12/0xc0
[   92.991973][ T1330]  process_one_work+0x9ba/0x1b20
[   92.994077][ T1330]  ? __pfx_process_one_work+0x10/0x10
[   92.995962][ T1330]  ? assign_work+0x1a0/0x250
[   92.997524][ T1330]  worker_thread+0x6c8/0xf10
[   92.999086][ T1330]  ? __kthread_parkme+0x19e/0x250
[   93.000693][ T1330]  ? __pfx_worker_thread+0x10/0x10
[   93.002357][ T1330]  kthread+0x3c5/0x780
[   93.003643][ T1330]  ? __pfx_kthread+0x10/0x10
[   93.005289][ T1330]  ? rcu_is_watching+0x12/0xc0
[   93.007145][ T1330]  ? __pfx_kthread+0x10/0x10
[   93.008985][ T1330]  ret_from_fork+0x983/0xb10
[   93.010742][ T1330]  ? __pfx_ret_from_fork+0x10/0x10
[   93.012775][ T1330]  ? __switch_to+0x7af/0x10d0
[   93.014552][ T1330]  ? __pfx_kthread+0x10/0x10
[   93.016497][ T1330]  ret_from_fork_asm+0x1a/0x30
[   93.018580][ T1330]  </TASK>
[   93.019820][ T1330] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   93.022147][ T1330] CPU: 2 UID: 0 PID: 1330 Comm: kworker/2:3 Not tainted syzkaller #0 PREEMPT(full) 
[   93.025056][ T1330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   93.028821][ T1330] Workqueue: usb_hub_wq hub_event
[   93.030398][ T1330] Call Trace:
[   93.031440][ T1330]  <TASK>
[   93.032407][ T1330]  dump_stack_lvl+0x3d/0x1f0
[   93.033932][ T1330]  vpanic+0x640/0x6f0
[   93.035399][ T1330]  ? enable_work+0x2ca/0x310
[   93.037137][ T1330]  panic+0xca/0xd0
[   93.038573][ T1330]  ? __pfx_panic+0x10/0x10
[   93.040331][ T1330]  ? check_panic_on_warn+0x1f/0xb0
[   93.042515][ T1330]  check_panic_on_warn+0xab/0xb0
[   93.044608][ T1330]  __warn+0x108/0x3c0
[   93.046335][ T1330]  __report_bug+0x2a0/0x520
[   93.048223][ T1330]  ? enable_work+0x2ca/0x310
[   93.050022][ T1330]  ? __pfx___report_bug+0x10/0x10
[   93.051898][ T1330]  ? __wait_for_common+0x1e0/0x4e0
[   93.053624][ T1330]  ? enable_work+0x2c3/0x310
[   93.055065][ T1330]  ? enable_work+0xf3/0x310
[   93.056452][ T1330]  ? find_held_lock+0x2b/0x80
[   93.058125][ T1330]  report_bug_entry+0xe1/0x290
[   93.059663][ T1330]  ? enable_work+0x2ca/0x310
[   93.061215][ T1330]  handle_bug+0x18a/0x260
[   93.062615][ T1330]  exc_invalid_op+0x17/0x50
[   93.064139][ T1330]  asm_exc_invalid_op+0x1a/0x20
[   93.065987][ T1330] RIP: 0010:enable_work+0x2ca/0x310
[   93.068020][ T1330] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 c7 f6 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d d6 6d 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 f4 cf a2 00 e9 f7 fd ff
[   93.076049][ T1330] RSP: 0018:ffffc90005a57348 EFLAGS: 00010093
[   93.078599][ T1330] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846933
[   93.081439][ T1330] RDX: ffff888022d8a4c0 RSI: ffffffff81846b03 RDI: ffffffff908bd8e0
[   93.083928][ T1330] RBP: ffff8880287ea738 R08: 0000000000000005 R09: 0000000000000000
[   93.086437][ T1330] R10: 0000000000000000 R11: ffff888022d8aff0 R12: 1ffff92000b4ae6a
[   93.089026][ T1330] R13: ffffffff8fc51c3f R14: ffff8880287ea698 R15: ffff8880287ea730
[   93.091569][ T1330]  ? enable_work+0xf3/0x310
[   93.093039][ T1330]  ? enable_work+0x2c3/0x310
[   93.094542][ T1330]  ? enable_work+0x2c3/0x310
[   93.096037][ T1330]  ? __pfx_enable_work+0x10/0x10
[   93.097786][ T1330]  cancel_delayed_work_sync+0x96/0xf0
[   93.100093][ T1330]  thermal_zone_device_unregister+0x28e/0x4d0
[   93.102584][ T1330]  ? __pfx_shield_remove+0x10/0x10
[   93.104467][ T1330]  power_supply_unregister+0x10a/0x150
[   93.106266][ T1330]  shield_remove+0x75/0x130
[   93.107739][ T1330]  ? __pfx_shield_remove+0x10/0x10
[   93.109359][ T1330]  hid_device_remove+0xd1/0x260
[   93.110916][ T1330]  ? __pfx_hid_device_remove+0x10/0x10
[   93.112773][ T1330]  device_remove+0xcb/0x170
[   93.114535][ T1330]  device_release_driver_internal+0x44b/0x620
[   93.116760][ T1330]  bus_remove_device+0x22f/0x450
[   93.118696][ T1330]  device_del+0x396/0x9f0
[   93.120543][ T1330]  ? __pfx_device_del+0x10/0x10
[   93.122631][ T1330]  ? do_raw_spin_lock+0x12c/0x2b0
[   93.124580][ T1330]  hid_destroy_device+0x19c/0x240
[   93.126681][ T1330]  usbhid_disconnect+0xa0/0xe0
[   93.128764][ T1330]  usb_unbind_interface+0x1dd/0x9e0
[   93.130828][ T1330]  ? kernfs_remove_by_name_ns+0xbe/0x100
[   93.132693][ T1330]  ? __pfx_usb_unbind_interface+0x10/0x10
[   93.134537][ T1330]  device_remove+0x125/0x170
[   93.136016][ T1330]  device_release_driver_internal+0x44b/0x620
[   93.138100][ T1330]  bus_remove_device+0x22f/0x450
[   93.139720][ T1330]  device_del+0x396/0x9f0
[   93.141117][ T1330]  ? __pfx_device_del+0x10/0x10
[   93.142692][ T1330]  ? kobject_put+0x218/0x6f0
[   93.144178][ T1330]  usb_disable_device+0x355/0x820
[   93.145879][ T1330]  usb_disconnect+0x2e1/0x9e0
[   93.147654][ T1330]  hub_event+0x1d84/0x52f0
[   93.149565][ T1330]  ? __lock_acquire+0x436/0x2890
[   93.151700][ T1330]  ? do_raw_spin_unlock+0x172/0x230
[   93.153754][ T1330]  ? __pfx_hub_event+0x10/0x10
[   93.155523][ T1330]  ? interval_tree_iter_first+0x1c0/0x250
[   93.157492][ T1330]  ? finish_task_switch.isra.0+0x202/0xbd0
[   93.159366][ T1330]  ? rcu_is_watching+0x12/0xc0
[   93.160901][ T1330]  process_one_work+0x9ba/0x1b20
[   93.162481][ T1330]  ? __pfx_process_one_work+0x10/0x10
[   93.164180][ T1330]  ? assign_work+0x1a0/0x250
[   93.165634][ T1330]  worker_thread+0x6c8/0xf10
[   93.167184][ T1330]  ? __kthread_parkme+0x19e/0x250
[   93.168784][ T1330]  ? __pfx_worker_thread+0x10/0x10
[   93.170423][ T1330]  kthread+0x3c5/0x780
[   93.171710][ T1330]  ? __pfx_kthread+0x10/0x10
[   93.173162][ T1330]  ? rcu_is_watching+0x12/0xc0
[   93.174700][ T1330]  ? __pfx_kthread+0x10/0x10
[   93.176165][ T1330]  ret_from_fork+0x983/0xb10
[   93.177825][ T1330]  ? __pfx_ret_from_fork+0x10/0x10
[   93.179998][ T1330]  ? __switch_to+0x7af/0x10d0
[   93.182077][ T1330]  ? __pfx_kthread+0x10/0x10
[   93.184038][ T1330]  ret_from_fork_asm+0x1a/0x30
[   93.186113][ T1330]  </TASK>
[   93.188106][ T1330] Kernel Offset: disabled
[   93.189680][ T1330] Rebooting in 86400 seconds..