last executing test programs:

8m22.053576403s ago: executing program 32 (id=101):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
timer_create(0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0xa, 0x8000}}, 0x50)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf})
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffffff, 0x0, 0x4a801, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, 0x0)

7m44.467084105s ago: executing program 3 (id=180):
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000), 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
fsopen(&(0x7f0000000a40)='configfs\x00', 0x1)
syz_open_procfs(0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30, 0x2}, 0x80)
pipe(&(0x7f0000000000))
pipe(&(0x7f0000000000))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002700)={{r0}, &(0x7f0000002680), &(0x7f00000026c0)}, 0x20)

7m44.241600568s ago: executing program 3 (id=182):
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r2, r2, 0x0, 0x2000fb)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)

7m41.460216605s ago: executing program 3 (id=186):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

7m37.150403876s ago: executing program 3 (id=194):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001b000)=""/102384, 0x18ff0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000001f00), 0x0, 0x103, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x810, r0, 0x0)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x4)

7m34.689301635s ago: executing program 4 (id=197):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1201}}, 0x20}}, 0x0)

7m33.246477134s ago: executing program 3 (id=199):
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x8000}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = creat(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = inotify_init()
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
close_range(r2, 0xffffffffffffffff, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=<r5=>0x0)
process_vm_writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, &(0x7f0000000840), 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
dup(r6)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, 0x0)

7m32.899050419s ago: executing program 4 (id=203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff00000000080008007002"], 0x34}}, 0x0)

7m31.838871477s ago: executing program 4 (id=205):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

7m31.239584672s ago: executing program 0 (id=207):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x0})

7m30.101141322s ago: executing program 4 (id=209):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

7m30.100131084s ago: executing program 0 (id=210):
r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x8c, 0x41)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450800060000000005019078ac1e0001ac1414aa0300907803240000450000000000000000010000ac1414aaac1e0001867100000000000c00fcba8c599d2a81fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a02108475be675de6a70a05a0dc91e5c6010a6580a1e97612fe86001224001100030000000000000000000000000cc8f46976e79e56c7a95e860c0000000100067f36c525000000"], 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001c80)={&(0x7f0000000480)=[{0x9a8, 0x8000, 0x0, 0x0}, {0xfff, 0xb601, 0x0, 0x0}], 0x2})
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, &(0x7f00000000c0))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000058c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x1)
r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x2cb1, 0x1c080, 0xa, 0x20002f4})
io_uring_enter(r5, 0x2219, 0x7721, 0x10, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff})
fcntl$lock(r6, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17})
close_range(r2, 0xffffffffffffffff, 0x0)

7m28.821318177s ago: executing program 4 (id=211):
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000), 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
fsopen(&(0x7f0000000a40)='configfs\x00', 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00')
socket$inet_icmp(0x2, 0x2, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30, 0x2}, 0x80)
pipe(&(0x7f0000000000))
pipe(&(0x7f0000000000))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002700)={{r0}, &(0x7f0000002680), &(0x7f00000026c0)}, 0x20)

7m28.695203893s ago: executing program 3 (id=212):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

7m28.572454419s ago: executing program 0 (id=213):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33)

7m28.561289216s ago: executing program 4 (id=215):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

7m28.467649102s ago: executing program 0 (id=216):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f00000001c0)='ecryptfs\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fstat(r1, &(0x7f0000000640))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
listen(0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0, 0x0)
ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0)
bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6)

7m27.370728934s ago: executing program 0 (id=217):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0)
r1 = io_uring_setup(0x2c4e, &(0x7f00000000c0)={0x0, 0x8000002, 0x200, 0x1000001, 0x1a8})
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x2000000}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00"], 0xfc}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0)

7m25.666431904s ago: executing program 0 (id=219):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

7m13.493357332s ago: executing program 33 (id=212):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

7m13.419507281s ago: executing program 34 (id=215):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

7m10.285360794s ago: executing program 35 (id=219):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

6m29.239397113s ago: executing program 2 (id=279):
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x8000}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
inotify_init()
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
process_vm_writev(0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, &(0x7f0000000840), 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, 0x0)
shutdown(r2, 0x1)

6m28.687733992s ago: executing program 2 (id=280):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ecryptfs\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fstat(r1, &(0x7f0000000640))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
listen(0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0, 0x0)
bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6)

6m27.67785178s ago: executing program 2 (id=281):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
socket$kcm(0xa, 0x3, 0x11)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)

6m27.481742766s ago: executing program 2 (id=282):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x802, 0x0)
sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x1e, 0x8, 0x0, 0x3, @multicast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

6m25.630742496s ago: executing program 2 (id=283):
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x7}], 0x8})
setuid(0xee00)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
creat(0x0, 0x40)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

6m24.452118804s ago: executing program 2 (id=284):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x6c}}, 0x0)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

6m8.818688574s ago: executing program 36 (id=284):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000001fe8000000000000000000000017b70bb000000000d0001007564703a73797a3000000000d1f5832c3858dbf0641d0130afea60d3d45f0e556909c94c10470a0d0de9acd7295d0cfbd3fd039cdbd437b663876cf090b73fe5b1c7dcc4c977e92b869dcf8e810da81d65bac85fdf1f1ed161ed28d911eff6c0eaf8267ad800d9118cd596cbf24f3193b1aa9d806520b4e819573171543ded9a53bdebd3d140cdc89879236e5f476877943229126cd2e25844000e5e7a0ac1630544064fab33f9c2396c9c963c348b3f704ab52eba306ca58559c76364acbeeb4bc9fe12eff372956c056669ad8f1c6fb426a2d262bf431b60866a415b70"], 0x6c}}, 0x0)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

5m30.113650724s ago: executing program 8 (id=241):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(0x0, 0x0, 0x3)
syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r3, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x1000000)

5m29.024196919s ago: executing program 8 (id=287):
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x8000}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
inotify_init()
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)
process_vm_writev(0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, &(0x7f0000000840), 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, 0x0)
shutdown(r2, 0x1)

5m27.429944493s ago: executing program 8 (id=289):
eventfd(0xff)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mmap(&(0x7f00005a0000/0x1000)=nil, 0x1000, 0x4, 0x13, 0xffffffffffffffff, 0x7d0fd000)
clock_getres(0xfffffffffffffff1, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x82000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfa, 0x20}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb00014000"], 0xa8}}, 0x0)
rt_sigprocmask(0x0, 0x0, &(0x7f0000000040), 0x8)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)

5m23.641076357s ago: executing program 8 (id=295):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x6c}}, 0x0)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

5m8.379604986s ago: executing program 37 (id=295):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x6c}}, 0x0)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

15.535254276s ago: executing program 5 (id=1139):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.957933521s ago: executing program 7 (id=1149):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4008080)

11.829820847s ago: executing program 7 (id=1153):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff00000053", 0x48}], 0x1)

11.688772238s ago: executing program 7 (id=1154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)

11.480184637s ago: executing program 7 (id=1158):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c)
write(0xffffffffffffffff, &(0x7f0000000140)="84", 0x1)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000002c0)=0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

10.956261372s ago: executing program 5 (id=1159):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

10.866390606s ago: executing program 6 (id=1161):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x800)

10.849478941s ago: executing program 1 (id=1162):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb19dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {0x0}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x0)

10.665758208s ago: executing program 5 (id=1163):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r1, 0x207, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x4008080)

10.612263483s ago: executing program 6 (id=1164):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'bond0\x00', {0x2000000}, 0x2000})
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier')
syz_usb_connect(0x2, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0)

10.518038065s ago: executing program 1 (id=1165):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b000)=""/102384, 0x18ff0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x810, r0, 0x0)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x4)

10.511753599s ago: executing program 5 (id=1166):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'bond0\x00', {0x2000000}, 0x2000})
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier')
syz_usb_connect(0x2, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0)

6.928752095s ago: executing program 6 (id=1167):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1], 0x184}}, 0x14)

6.768290474s ago: executing program 5 (id=1168):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.767956345s ago: executing program 7 (id=1169):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)

6.61758795s ago: executing program 6 (id=1170):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x48801)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffc, 0x0, 0x8e, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0})

6.541509878s ago: executing program 9 (id=1171):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

5.815575736s ago: executing program 6 (id=1172):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

5.728741064s ago: executing program 1 (id=1173):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

5.727057757s ago: executing program 9 (id=1174):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

5.041774496s ago: executing program 1 (id=1175):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb19dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {0x0}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x0)

4.520660835s ago: executing program 9 (id=1176):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x800)

4.265669623s ago: executing program 9 (id=1177):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=<r4=>0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000003680))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0)

4.209442645s ago: executing program 6 (id=1178):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0})

4.121383388s ago: executing program 1 (id=1179):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'bond0\x00', {0x2000000}, 0x2000})
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier')
syz_usb_connect(0x2, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0)

2.962031879s ago: executing program 9 (id=1180):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB], 0x184}}, 0x14)

1.616584788s ago: executing program 5 (id=1181):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0})

1.256639508s ago: executing program 9 (id=1182):
creat(0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x7fe)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getegid()
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

993.145109ms ago: executing program 7 (id=1183):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180), 0x14)
r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1)

0s ago: executing program 1 (id=1184):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

kernel console output (not intermixed with test programs):

idge0: port 1(bridge_slave_0) entered blocking state
[  321.895275][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.895437][ T7246] bridge_slave_0: entered allmulticast mode
[  321.897402][ T7246] bridge_slave_0: entered promiscuous mode
[  321.926133][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.926247][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.926503][ T7238] bridge_slave_1: entered allmulticast mode
[  321.928961][ T7238] bridge_slave_1: entered promiscuous mode
[  322.024239][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.024380][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.024587][ T7246] bridge_slave_1: entered allmulticast mode
[  322.027095][ T7246] bridge_slave_1: entered promiscuous mode
[  322.081488][ T7256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.081862][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.081978][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.082171][ T7243] bridge_slave_0: entered allmulticast mode
[  322.085169][ T7243] bridge_slave_0: entered promiscuous mode
[  322.098131][ T7250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.156694][ T7256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.157223][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.157355][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.157557][ T7243] bridge_slave_1: entered allmulticast mode
[  322.169682][ T7243] bridge_slave_1: entered promiscuous mode
[  322.188143][ T7250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.232894][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.310024][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.324329][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.453325][ T5808] Bluetooth: hci5: command tx timeout
[  322.467663][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.488976][ T7256] team0: Port device team_slave_0 added
[  322.492757][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.497475][ T7250] team0: Port device team_slave_0 added
[  322.541753][ T7256] team0: Port device team_slave_1 added
[  322.546469][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.548869][ T7250] team0: Port device team_slave_1 added
[  322.573001][ T7238] team0: Port device team_slave_0 added
[  322.674604][ T7246] team0: Port device team_slave_0 added
[  322.677288][ T7238] team0: Port device team_slave_1 added
[  322.801434][ T7246] team0: Port device team_slave_1 added
[  322.812502][ T7243] team0: Port device team_slave_0 added
[  322.814851][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.814864][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  322.814887][ T7256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  322.825336][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.825353][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  322.825377][ T7250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.503391][ T5808] Bluetooth: hci9: command tx timeout
[  323.535092][ T7256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.535104][ T7256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.535118][ T7256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.536916][ T7243] team0: Port device team_slave_1 added
[  323.537559][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.537567][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.537581][ T7250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.538691][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.538700][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.538713][ T7238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.602272][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.602287][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.602310][ T7238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.605045][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.605058][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.605081][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.666312][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.666328][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.666352][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.669458][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.669472][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.669495][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.697158][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.697174][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.697198][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.826257][ T7256] hsr_slave_0: entered promiscuous mode
[  323.828498][ T7256] hsr_slave_1: entered promiscuous mode
[  323.829440][ T7256] debugfs: 'hsr0' already exists in 'hsr'
[  323.829462][ T7256] Cannot create hsr debugfs directory
[  323.890562][ T7250] hsr_slave_0: entered promiscuous mode
[  323.891882][ T7250] hsr_slave_1: entered promiscuous mode
[  323.892874][ T7250] debugfs: 'hsr0' already exists in 'hsr'
[  323.892896][ T7250] Cannot create hsr debugfs directory
[  323.908984][ T7238] hsr_slave_0: entered promiscuous mode
[  323.910363][ T7238] hsr_slave_1: entered promiscuous mode
[  323.911274][ T7238] debugfs: 'hsr0' already exists in 'hsr'
[  323.911295][ T7238] Cannot create hsr debugfs directory
[  324.067163][ T7246] hsr_slave_0: entered promiscuous mode
[  324.068000][ T7246] hsr_slave_1: entered promiscuous mode
[  324.068592][ T7246] debugfs: 'hsr0' already exists in 'hsr'
[  324.068606][ T7246] Cannot create hsr debugfs directory
[  324.076805][ T7243] hsr_slave_0: entered promiscuous mode
[  324.078056][ T7243] hsr_slave_1: entered promiscuous mode
[  324.078898][ T7243] debugfs: 'hsr0' already exists in 'hsr'
[  324.078918][ T7243] Cannot create hsr debugfs directory
[  324.480790][ T1017] IPVS: stop unused estimator thread 0...
[  324.533593][ T5808] Bluetooth: hci5: command tx timeout
[  325.573419][ T5808] Bluetooth: hci9: command tx timeout
[  326.440209][ T1017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.730182][ T1017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.016981][ T1017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.366160][ T1017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.186847][ T1017] bridge_slave_1: left allmulticast mode
[  330.186874][ T1017] bridge_slave_1: left promiscuous mode
[  330.187129][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.266620][ T1017] bridge_slave_0: left allmulticast mode
[  330.266648][ T1017] bridge_slave_0: left promiscuous mode
[  330.266882][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.366084][ T1017] bridge_slave_1: left allmulticast mode
[  330.366106][ T1017] bridge_slave_1: left promiscuous mode
[  330.366257][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.445300][ T1017] bridge_slave_0: left allmulticast mode
[  330.445321][ T1017] bridge_slave_0: left promiscuous mode
[  330.445490][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.505812][ T1017] bridge_slave_1: left allmulticast mode
[  330.505833][ T1017] bridge_slave_1: left promiscuous mode
[  330.505975][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.565277][ T1017] bridge_slave_0: left allmulticast mode
[  330.565297][ T1017] bridge_slave_0: left promiscuous mode
[  330.565471][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.635788][ T1017] bridge_slave_1: left allmulticast mode
[  330.635808][ T1017] bridge_slave_1: left promiscuous mode
[  330.635945][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.694286][ T1017] bridge_slave_0: left allmulticast mode
[  330.694306][ T1017] bridge_slave_0: left promiscuous mode
[  330.694458][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.765696][ T1017] bridge_slave_1: left allmulticast mode
[  330.765722][ T1017] bridge_slave_1: left promiscuous mode
[  330.765899][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.824279][ T1017] bridge_slave_0: left allmulticast mode
[  330.824300][ T1017] bridge_slave_0: left promiscuous mode
[  330.824466][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.254774][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.333975][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.355563][ T1017] bond0 (unregistering): Released all slaves
[  332.924102][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.003981][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.065077][ T1017] bond0 (unregistering): Released all slaves
[  333.924005][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.014058][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.075882][ T1017] bond0 (unregistering): Released all slaves
[  334.524085][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.584462][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.655506][ T1017] bond0 (unregistering): Released all slaves
[  335.553972][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.613966][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.675170][ T1017] bond0 (unregistering): Released all slaves
[  335.953615][ T1017] tipc: Left network mode
[  336.537782][ T7256] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  336.591433][ T7256] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  336.657728][ T7256] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  337.104438][ T7256] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  337.560636][ T7250] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  337.595285][ T7250] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  337.642035][ T7250] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  337.687521][ T7250] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  337.923451][ T1017] hsr_slave_0: left promiscuous mode
[  337.944591][ T1017] hsr_slave_1: left promiscuous mode
[  337.945330][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.945350][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.994107][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.994134][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.143466][ T1017] hsr_slave_0: left promiscuous mode
[  338.183562][ T1017] hsr_slave_1: left promiscuous mode
[  338.184231][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.206890][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.363510][ T1017] hsr_slave_0: left promiscuous mode
[  338.384149][ T1017] hsr_slave_1: left promiscuous mode
[  338.385049][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.434091][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.583445][ T1017] hsr_slave_0: left promiscuous mode
[  338.603464][ T1017] hsr_slave_1: left promiscuous mode
[  338.604501][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.654096][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.797084][ T1017] hsr_slave_0: left promiscuous mode
[  338.813454][ T1017] hsr_slave_1: left promiscuous mode
[  338.814218][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.865415][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.940295][ T1017] veth1_macvtap: left promiscuous mode
[  338.940367][ T1017] veth0_macvtap: left promiscuous mode
[  338.940502][ T1017] veth1_vlan: left promiscuous mode
[  338.940595][ T1017] veth0_vlan: left promiscuous mode
[  341.515110][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  341.713966][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  344.054483][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  344.186191][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  345.185114][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  345.323919][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  346.424451][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  346.573873][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  347.663956][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  347.783900][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  349.009398][ T7238] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  349.035473][ T7238] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  349.083108][ T7238] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  349.149112][ T7238] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  349.372061][ T7246] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  349.425211][ T7246] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  349.521150][ T7246] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  349.638436][ T7246] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  349.830245][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.841019][ T7243] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  349.876640][ T7243] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  349.914367][ T7243] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  349.965769][ T7243] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  350.039650][ T7256] 8021q: adding VLAN 0 to HW filter on device team0
[  350.087864][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.088010][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.097745][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.136933][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.137026][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.232472][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.246202][ T7250] 8021q: adding VLAN 0 to HW filter on device team0
[  350.341020][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.342122][ T6790] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.367250][ T7238] 8021q: adding VLAN 0 to HW filter on device team0
[  350.375499][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.375692][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.457007][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.457156][ T6790] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.522072][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.560102][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.560235][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.699458][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.710319][ T7246] 8021q: adding VLAN 0 to HW filter on device team0
[  350.832174][ T2095] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.846054][ T2095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.919105][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.919234][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.922112][ T7243] 8021q: adding VLAN 0 to HW filter on device team0
[  351.024942][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.025125][ T6790] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.055458][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.055618][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.320126][ T7256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.578641][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  351.642496][ T7238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.450883][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.471537][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.642161][ T7256] veth0_vlan: entered promiscuous mode
[  352.746262][ T7256] veth1_vlan: entered promiscuous mode
[  352.991642][ T7250] veth0_vlan: entered promiscuous mode
[  353.076874][ T7256] veth0_macvtap: entered promiscuous mode
[  353.092796][ T7256] veth1_macvtap: entered promiscuous mode
[  353.114720][ T7250] veth1_vlan: entered promiscuous mode
[  353.273846][ T7238] veth0_vlan: entered promiscuous mode
[  353.277041][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.319575][ T7256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.367376][ T6719] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.370115][ T7238] veth1_vlan: entered promiscuous mode
[  353.371069][ T6719] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.384964][ T6719] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.400533][ T6719] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.512325][ T7250] veth0_macvtap: entered promiscuous mode
[  353.622549][ T7250] veth1_macvtap: entered promiscuous mode
[  353.808295][ T7246] veth0_vlan: entered promiscuous mode
[  353.827062][ T7243] veth0_vlan: entered promiscuous mode
[  353.829134][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.829152][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.857277][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.885311][ T7238] veth0_macvtap: entered promiscuous mode
[  353.921656][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.950918][ T7238] veth1_macvtap: entered promiscuous mode
[  353.952677][ T7246] veth1_vlan: entered promiscuous mode
[  353.995497][ T7243] veth1_vlan: entered promiscuous mode
[  354.018241][   T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.021691][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.021707][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.027976][   T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.046950][   T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.065265][   T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.237097][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.380035][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.498451][   T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.531364][   T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.547650][ T7246] veth0_macvtap: entered promiscuous mode
[  354.551532][   T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.552566][ T7243] veth0_macvtap: entered promiscuous mode
[  354.559581][   T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.581633][ T7243] veth1_macvtap: entered promiscuous mode
[  354.640784][ T7246] veth1_macvtap: entered promiscuous mode
[  354.800823][   T37] kauditd_printk_skb: 2 callbacks suppressed
[  354.800840][   T37] audit: type=1326 audit(1770446150.612:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  354.801661][   T37] audit: type=1326 audit(1770446150.612:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  354.802152][   T37] audit: type=1326 audit(1770446150.612:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  354.803035][   T37] audit: type=1326 audit(1770446150.612:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  354.814196][   T37] audit: type=1326 audit(1770446150.632:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  354.913631][   T37] audit: type=1326 audit(1770446150.732:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  354.924867][   T37] audit: type=1326 audit(1770446150.742:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536d32c747 code=0x7ffc0000
[  354.934356][   T37] audit: type=1326 audit(1770446150.742:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f536d2eb78e code=0x7ffc0000
[  354.935135][   T37] audit: type=1326 audit(1770446150.752:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f536d2eb78e code=0x7ffc0000
[  354.935450][   T37] audit: type=1326 audit(1770446150.752:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.9.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f536d2eb78e code=0x7ffc0000
[  354.943824][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.943841][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.303513][ T7597] tipc: Started in network mode
[  355.303544][ T7597] tipc: Node identity 7f000001, cluster identity 4711
[  355.358560][ T7597] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  355.381112][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.439778][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.475539][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.475553][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.480302][ T1017] IPVS: stop unused estimator thread 0...
[  355.565681][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.620042][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.758841][ T6719] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.781850][ T6719] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.792278][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.792291][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.795877][ T6719] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.849431][ T6719] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.873373][ T6719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.904885][ T6719] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.912940][ T6719] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.493280][ T6719] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.680766][ T6719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.680788][ T6719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.718717][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.718731][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.727498][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.727518][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.958733][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.8.289'.
[  361.979923][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.979943][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.093897][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.293'.
[  362.113584][ T7644] ip6gre0: entered promiscuous mode
[  362.113610][ T7644] ip6gre0: entered allmulticast mode
[  362.129216][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.129235][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.567369][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.297'.
[  362.580015][ T7654] bridge0: entered promiscuous mode
[  362.580042][ T7654] bridge0: entered allmulticast mode
[  362.762155][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.768247][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.488940][ T7670] IPv4: Oversized IP packet from 127.202.26.0
[  366.516132][ T7687] Zero length message leads to an empty skb
[  366.589537][ T7693] Device name cannot be null; rc = [-22]
[  367.157005][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.306'.
[  367.157024][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.7.306'.
[  367.605998][   T37] kauditd_printk_skb: 6 callbacks suppressed
[  367.606023][   T37] audit: type=1326 audit(1770446163.412:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf8ffaeb9 code=0x7ffc0000
[  367.606063][   T37] audit: type=1326 audit(1770446163.412:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf8ffaeb9 code=0x7ffc0000
[  367.772398][   T37] audit: type=1326 audit(1770446163.422:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdf8ffaeb9 code=0x7ffc0000
[  367.772437][   T37] audit: type=1326 audit(1770446163.422:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf8ffaeb9 code=0x7ffc0000
[  367.772458][   T37] audit: type=1326 audit(1770446163.422:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf8ffaeb9 code=0x7ffc0000
[  367.793352][   T37] audit: type=1326 audit(1770446163.602:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdf8ffaeb9 code=0x7ffc0000
[  367.793401][   T37] audit: type=1326 audit(1770446163.602:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf8ffaeb9 code=0x7ffc0000
[  367.793437][   T37] audit: type=1326 audit(1770446163.602:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf8ffaeb9 code=0x7ffc0000
[  367.793472][   T37] audit: type=1326 audit(1770446163.602:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdf8ffc747 code=0x7ffc0000
[  367.793507][   T37] audit: type=1326 audit(1770446163.602:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.8.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efdf8fbb78e code=0x7ffc0000
[  368.278571][ T7699] tipc: Started in network mode
[  368.278611][ T7699] tipc: Node identity 7f000001, cluster identity 4711
[  368.279275][ T7699] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  368.842230][ T7699] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:017b:70bb
[  368.852383][ T7699] tipc: Enabled bearer <udp:syz0>, priority 10
[  369.964793][   T31] tipc: Node number set to 2130706433
[  371.167680][ T7734] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  373.659535][   T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  374.258940][   T31] usb 7-1: config 0 has no interfaces?
[  374.561268][   T31] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  374.561288][   T31] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  374.561298][   T31] usb 7-1: Product: syz
[  374.561305][   T31] usb 7-1: Manufacturer: syz
[  374.561313][   T31] usb 7-1: SerialNumber: syz
[  374.621056][   T31] usb 7-1: config 0 descriptor??
[  376.149614][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.9.324'.
[  376.149909][ T7775] vlan0: entered promiscuous mode
[  376.150050][ T7775] vlan0: entered allmulticast mode
[  376.150058][ T7775] veth0_vlan: entered allmulticast mode
[  377.074423][ T7781] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  377.288052][ T1239] usb 7-1: USB disconnect, device number 2
[  379.239542][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  379.239610][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  379.361385][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.329'.
[  379.361426][ T7793] veth0_to_bond: entered promiscuous mode
[  379.361444][ T7793] veth0_to_bond: entered allmulticast mode
[  379.375186][   T37] kauditd_printk_skb: 20 callbacks suppressed
[  379.375201][   T37] audit: type=1326 audit(1770446175.192:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  379.382558][   T37] audit: type=1326 audit(1770446175.192:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  379.392320][   T37] audit: type=1326 audit(1770446175.202:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  379.392882][   T37] audit: type=1326 audit(1770446175.202:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  379.392917][   T37] audit: type=1326 audit(1770446175.202:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  379.426713][   T37] audit: type=1326 audit(1770446175.212:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  379.426752][   T37] audit: type=1326 audit(1770446175.242:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  379.427461][   T37] audit: type=1326 audit(1770446175.242:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536d32c747 code=0x7ffc0000
[  379.428077][   T37] audit: type=1326 audit(1770446175.242:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f536d2eb78e code=0x7ffc0000
[  379.448395][   T37] audit: type=1326 audit(1770446175.262:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7792 comm="syz.9.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f536d2eb78e code=0x7ffc0000
[  382.044992][ T7799] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  382.255887][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.335'.
[  382.255929][ T7812] veth1_to_bond: entered promiscuous mode
[  382.255947][ T7812] veth1_to_bond: entered allmulticast mode
[  383.776792][ T7821] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  384.329113][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  384.359510][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  384.363405][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  384.404380][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  384.404840][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  386.463387][ T5805] Bluetooth: hci1: command tx timeout
[  386.831230][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.339'.
[  387.130106][ T7840] veth0_to_bond: entered promiscuous mode
[  387.130124][ T7840] veth0_to_bond: entered allmulticast mode
[  388.816026][ T5805] Bluetooth: hci1: command tx timeout
[  389.450844][   T37] kauditd_printk_skb: 5 callbacks suppressed
[  389.450862][   T37] audit: type=1326 audit(1770446185.262:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccafaeaeb9 code=0x7ffc0000
[  389.491240][   T37] audit: type=1326 audit(1770446185.302:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccafaeaeb9 code=0x7ffc0000
[  389.491803][   T37] audit: type=1326 audit(1770446185.302:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccafaeaeb9 code=0x7ffc0000
[  389.554911][   T37] audit: type=1326 audit(1770446185.362:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccafaeaeb9 code=0x7ffc0000
[  389.554963][   T37] audit: type=1326 audit(1770446185.372:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccafaeaeb9 code=0x7ffc0000
[  389.555000][   T37] audit: type=1326 audit(1770446185.372:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccafaeaeb9 code=0x7ffc0000
[  389.644901][   T37] audit: type=1326 audit(1770446185.372:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccafaec747 code=0x7ffc0000
[  389.644944][   T37] audit: type=1326 audit(1770446185.372:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fccafaab78e code=0x7ffc0000
[  389.644965][   T37] audit: type=1326 audit(1770446185.372:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccafaab78e code=0x7ffc0000
[  389.644985][   T37] audit: type=1326 audit(1770446185.372:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.6.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fccafaab78e code=0x7ffc0000
[  390.854348][ T5805] Bluetooth: hci1: command tx timeout
[  391.353419][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.348'.
[  391.674704][ T7888] ceph: No mds server is up or the cluster is laggy
[  391.743709][ T5905] libceph: connect (1)[c::]:6789 error -101
[  391.743904][ T5905] libceph: mon0 (1)[c::]:6789 connect error
[  392.225546][ T1017] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.652209][ T5805] Bluetooth: hci1: command tx timeout
[  395.785758][ T1017] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.955372][ T7820] chnl_net:caif_netlink_parms(): no params data found
[  396.381229][ T7674] libceph: connect (1)[c::]:6789 error -101
[  396.392067][ T7674] libceph: mon0 (1)[c::]:6789 connect error
[  396.394390][ T7927] ceph: No mds server is up or the cluster is laggy
[  397.242819][ T1017] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.090839][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.359'.
[  398.702740][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.702808][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.702978][ T7820] bridge_slave_0: entered allmulticast mode
[  398.705773][ T7820] bridge_slave_0: entered promiscuous mode
[  398.882638][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.883153][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.883458][ T7820] bridge_slave_1: entered allmulticast mode
[  398.914218][ T7820] bridge_slave_1: entered promiscuous mode
[  400.425493][ T1017] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.591620][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.615753][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.702869][ T7820] team0: Port device team_slave_0 added
[  400.719403][ T7820] team0: Port device team_slave_1 added
[  401.763313][ T7978] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  402.457751][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.457769][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.457792][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.481209][ T7997] netlink: 'syz.7.366': attribute type 10 has an invalid length.
[  402.674519][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.674531][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.674546][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.735512][ T7997] 8021q: adding VLAN 0 to HW filter on device team0
[  402.742186][ T7997] bond0: (slave team0): Enslaving as an active interface with an up link
[  402.832686][ T7997] netlink: 'syz.7.366': attribute type 10 has an invalid length.
[  403.299626][ T7997] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  404.887435][ T7999] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  404.898680][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.369'.
[  404.975344][ T7820] hsr_slave_0: entered promiscuous mode
[  404.976350][ T7820] hsr_slave_1: entered promiscuous mode
[  405.002397][ T7999] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  406.623471][ T1017] bridge_slave_1: left allmulticast mode
[  406.623499][ T1017] bridge_slave_1: left promiscuous mode
[  406.623766][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.744928][ T1017] bridge_slave_0: left allmulticast mode
[  406.744957][ T1017] bridge_slave_0: left promiscuous mode
[  406.745214][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.793354][ T5874] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  406.957888][ T5874] usb 10-1: Using ep0 maxpacket: 16
[  406.960825][ T5874] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  406.960881][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  406.960907][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024
[  406.960931][ T5874] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  406.960953][ T5874] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  407.034660][ T5874] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  407.034719][ T5874] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  407.034729][ T5874] usb 10-1: Manufacturer: syz
[  407.094480][ T5874] usb 10-1: config 0 descriptor??
[  407.482832][ T5874] rc_core: IR keymap rc-hauppauge not found
[  407.482852][ T5874] Registered IR keymap rc-empty
[  407.494800][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.513723][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.535003][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  407.559199][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input6
[  407.584111][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.603840][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.633522][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.653755][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.674971][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.693575][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.713636][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.733630][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.753959][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.774137][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  407.848057][ T5874] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  407.848082][ T5874] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  407.886574][ T5874] usb 10-1: USB disconnect, device number 2
[  409.325040][ T8046] netlink: 'syz.5.372': attribute type 39 has an invalid length.
[  410.449924][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.378'.
[  411.597710][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.9.380'.
[  411.943920][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  412.006525][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  412.029077][ T1017] bond0 (unregistering): Released all slaves
[  412.389205][ T8055] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode
[  412.389306][ T8055] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  412.412096][ T1017] tipc: Disabling bearer <udp:syz0>
[  412.418379][ T1017] tipc: Left network mode
[  416.956429][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.391'.
[  419.343859][ T8128] netlink: 88 bytes leftover after parsing attributes in process `syz.5.396'.
[  419.348755][   T37] kauditd_printk_skb: 20 callbacks suppressed
[  419.348772][   T37] audit: type=1326 audit(1770446215.122:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.348813][   T37] audit: type=1326 audit(1770446215.162:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.352780][   T37] audit: type=1326 audit(1770446215.162:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.352829][   T37] audit: type=1326 audit(1770446215.162:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.352869][   T37] audit: type=1326 audit(1770446215.162:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.403221][   T37] audit: type=1326 audit(1770446215.212:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.404511][   T37] audit: type=1326 audit(1770446215.222:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.405285][   T37] audit: type=1326 audit(1770446215.222:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.405554][   T37] audit: type=1326 audit(1770446215.222:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  419.708010][   T37] audit: type=1326 audit(1770446215.522:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.9.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536d32aeb9 code=0x7ffc0000
[  422.878264][ T1017] hsr_slave_0: left promiscuous mode
[  422.915317][ T1017] hsr_slave_1: left promiscuous mode
[  422.916216][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.916240][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.257157][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.257193][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.497380][ T1017] veth1_macvtap: left promiscuous mode
[  424.497485][ T1017] veth0_macvtap: left promiscuous mode
[  424.497737][ T1017] veth1_vlan: left promiscuous mode
[  424.497909][ T1017] veth0_vlan: left promiscuous mode
[  424.808265][ T8182] netlink: 'syz.7.407': attribute type 10 has an invalid length.
[  424.871926][ T8183] netlink: 'syz.7.407': attribute type 10 has an invalid length.
[  425.047492][ T8186] usb usb8: usbfs: process 8186 (syz.5.408) did not claim interface 0 before use
[  428.567211][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.415'.
[  428.991109][ T8211] netlink: 'syz.6.416': attribute type 10 has an invalid length.
[  429.045842][ T8212] siw: device registration error -23
[  429.658751][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.417'.
[  430.684832][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  430.874188][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  433.048873][ T8202] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  433.140513][ T8211] 8021q: adding VLAN 0 to HW filter on device team0
[  433.145812][ T8211] bond0: (slave team0): Enslaving as an active interface with an up link
[  433.198489][ T8214] team_slave_0: entered promiscuous mode
[  433.198546][ T8214] team_slave_1: entered promiscuous mode
[  433.198800][ T8214] macvtap1: entered promiscuous mode
[  433.198814][ T8214] team0: entered promiscuous mode
[  433.199435][ T8214] macvtap1: entered allmulticast mode
[  433.199449][ T8214] team0: entered allmulticast mode
[  433.199461][ T8214] team_slave_0: entered allmulticast mode
[  433.199479][ T8214] team_slave_1: entered allmulticast mode
[  433.201796][ T8214] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  434.114026][ T8215] team0: left allmulticast mode
[  434.114049][ T8215] team_slave_0: left allmulticast mode
[  434.114067][ T8215] team_slave_1: left allmulticast mode
[  434.114103][ T8215] team0: left promiscuous mode
[  434.114719][ T8215] team_slave_0: left promiscuous mode
[  434.114784][ T8215] team_slave_1: left promiscuous mode
[  437.807660][   T61] Bluetooth: hci4: command 0x0406 tx timeout
[  437.807703][   T61] Bluetooth: hci3: command 0x0406 tx timeout
[  440.621954][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  440.626207][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  440.627461][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  440.628533][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  440.629595][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  441.755571][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  441.755640][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  442.643413][ T5905] IPVS: starting estimator thread 0...
[  442.644855][   T31] IPVS: starting estimator thread 0...
[  442.693329][ T5805] Bluetooth: hci2: command tx timeout
[  442.733455][ T8297] IPVS: using max 9 ests per chain, 21600 per kthread
[  442.753503][ T8298] IPVS: using max 16 ests per chain, 38400 per kthread
[  443.387034][ T8269] chnl_net:caif_netlink_parms(): no params data found
[  443.481576][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.436'.
[  443.733946][ T5805] Bluetooth: hci9: command 0x0406 tx timeout
[  443.864212][ T8316] netlink: 'syz.7.440': attribute type 10 has an invalid length.
[  443.927712][ T8320] netlink: 'syz.7.440': attribute type 10 has an invalid length.
[  444.015219][ T8306] team_slave_0: entered promiscuous mode
[  444.015252][ T8306] team_slave_1: entered promiscuous mode
[  444.015398][ T8306] macvtap1: entered promiscuous mode
[  444.015406][ T8306] team0: entered promiscuous mode
[  444.015740][ T8306] macvtap1: entered allmulticast mode
[  444.015749][ T8306] team0: entered allmulticast mode
[  444.015755][ T8306] team_slave_0: entered allmulticast mode
[  444.015764][ T8306] team_slave_1: entered allmulticast mode
[  444.018579][ T8306] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  444.174072][ T8308] team0: left allmulticast mode
[  444.174094][ T8308] team_slave_0: left allmulticast mode
[  444.174112][ T8308] team_slave_1: left allmulticast mode
[  444.174149][ T8308] team0: left promiscuous mode
[  444.174843][ T8308] team_slave_0: left promiscuous mode
[  444.174908][ T8308] team_slave_1: left promiscuous mode
[  444.773287][ T5808] Bluetooth: hci2: command tx timeout
[  445.004639][ T1017] bridge_slave_1: left allmulticast mode
[  445.004665][ T1017] bridge_slave_1: left promiscuous mode
[  445.004911][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.616151][ T1017] bridge_slave_0: left allmulticast mode
[  446.616179][ T1017] bridge_slave_0: left promiscuous mode
[  446.616442][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.863336][ T5808] Bluetooth: hci2: command tx timeout
[  446.970046][ T8351] netlink: 'syz.5.450': attribute type 1 has an invalid length.
[  448.933257][ T5808] Bluetooth: hci2: command tx timeout
[  449.740709][  T807] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  449.779543][ T8369] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  450.075581][  T807] usb 10-1: Using ep0 maxpacket: 16
[  450.081518][  T807] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.081573][  T807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  450.081601][  T807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024
[  450.081624][  T807] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  450.081643][  T807] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  450.144233][  T807] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  450.144261][  T807] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  450.144272][  T807] usb 10-1: Manufacturer: syz
[  450.193372][  T807] usb 10-1: config 0 descriptor??
[  450.203829][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.347037][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  450.431484][ T1017] bond0 (unregistering): Released all slaves
[  450.583312][  T807] rc_core: IR keymap rc-hauppauge not found
[  450.583331][  T807] Registered IR keymap rc-empty
[  450.583902][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.613993][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.620746][ T8351] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.634203][  T807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  450.666124][  T807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input7
[  450.734654][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.753747][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.778893][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.798364][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.813613][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.833797][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.855438][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.857283][ T8356] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.857682][ T8356] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  450.858726][ T8356] bond1: (slave vxcan5): Error -95 calling set_mac_address
[  450.969345][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  450.989934][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  451.011639][  T807] mceusb 10-1:0.0: Error: mce write urb status = -71
[  451.071024][  T807] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  451.071051][  T807] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  451.235069][  T807] usb 10-1: USB disconnect, device number 3
[  451.391219][ T8359] gretap1: entered promiscuous mode
[  451.406731][ T8359] bond1: (slave gretap1): making interface the new active one
[  451.407692][ T8359] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  451.556127][ T8361] macvlan2: entered promiscuous mode
[  451.556154][ T8361] macvlan2: entered allmulticast mode
[  451.556947][ T8361] bond1: entered promiscuous mode
[  451.557864][ T8361] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  451.695498][ T8361] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  451.756116][ T8387] capability: warning: `syz.9.462' uses 32-bit capabilities (legacy support in use)
[  451.781800][ T8361] bond1: left promiscuous mode
[  452.235630][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.235770][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.236002][ T8269] bridge_slave_0: entered allmulticast mode
[  452.246268][ T8269] bridge_slave_0: entered promiscuous mode
[  452.476496][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.476636][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.476863][ T8269] bridge_slave_1: entered allmulticast mode
[  452.479332][ T8269] bridge_slave_1: entered promiscuous mode
[  453.376875][ T8410] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.467'.
[  455.096145][ T1017] hsr_slave_0: left promiscuous mode
[  455.269057][ T1017] hsr_slave_1: left promiscuous mode
[  455.269963][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.505514][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.603292][ T5874] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  455.783268][ T5874] usb 10-1: Using ep0 maxpacket: 16
[  455.787332][ T5874] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.787368][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  455.787384][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024
[  455.787398][ T5874] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  455.787410][ T5874] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  455.788607][ T5874] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  455.788623][ T5874] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  455.788668][ T5874] usb 10-1: Manufacturer: syz
[  455.822489][ T5874] usb 10-1: config 0 descriptor??
[  456.213277][ T5874] rc_core: IR keymap rc-hauppauge not found
[  456.213298][ T5874] Registered IR keymap rc-empty
[  456.213736][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.233659][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.254189][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  456.279513][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input8
[  456.375211][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.393587][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.413844][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.433697][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.453484][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.475223][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.493487][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.513643][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.534888][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.553458][ T5874] mceusb 10-1:0.0: Error: mce write urb status = -71
[  456.714245][ T5874] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  456.714262][ T5874] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  456.745967][ T5874] usb 10-1: USB disconnect, device number 4
[  458.959058][ T8453] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.478'.
[  458.995894][ T1017] team0 (unregistering): Port device team_slave_1 removed
[  459.346507][ T1017] team0 (unregistering): Port device team_slave_0 removed
[  459.830206][ T5874] IPVS: starting estimator thread 0...
[  459.913315][ T8464] IPVS: using max 16 ests per chain, 38400 per kthread
[  460.164205][ T8472] netlink: 'syz.5.484': attribute type 1 has an invalid length.
[  460.785776][ T8472] 8021q: adding VLAN 0 to HW filter on device bond2
[  460.898235][ T8473] 8021q: adding VLAN 0 to HW filter on device bond2
[  460.901439][ T8473] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[  460.909393][ T8473] bond2: (slave vxcan5): Error -95 calling set_mac_address
[  461.134480][ T8269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.138455][ T8269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.484269][ T8269] team0: Port device team_slave_0 added
[  461.486448][ T8269] team0: Port device team_slave_1 added
[  463.177602][ T8500] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.489'.
[  463.236550][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.236562][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.236577][ T8269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.293755][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.293772][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.293797][ T8269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.621714][ T8269] hsr_slave_0: entered promiscuous mode
[  463.623008][ T8269] hsr_slave_1: entered promiscuous mode
[  465.118154][ T8518] 9p: Bad value for 'rfdno'
[  466.991005][ T8269] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  467.050881][ T8269] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  467.185676][ T8269] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  467.260472][ T8269] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  469.289275][ T8269] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.434798][ T8269] 8021q: adding VLAN 0 to HW filter on device team0
[  469.465905][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.466050][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.619260][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.676300][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.920512][ T8269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  469.920528][ T8269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  470.026448][ T8560] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.499'.
[  470.933516][ T8580] netlink: 'syz.9.501': attribute type 4 has an invalid length.
[  470.933537][ T8580] netlink: 152 bytes leftover after parsing attributes in process `syz.9.501'.
[  470.977158][ T8580] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  471.076088][ T8269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  471.347918][ T8269] veth0_vlan: entered promiscuous mode
[  471.375911][ T8269] veth1_vlan: entered promiscuous mode
[  471.587278][ T8269] veth0_macvtap: entered promiscuous mode
[  471.638977][ T8269] veth1_macvtap: entered promiscuous mode
[  471.784114][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.827443][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.927199][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.953695][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.953896][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.953918][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.618654][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.618676][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.621155][ T8618] netlink: 'syz.7.508': attribute type 10 has an invalid length.
[  474.648558][ T8618] netlink: 'syz.7.508': attribute type 10 has an invalid length.
[  474.682045][ T8619] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.509'.
[  474.760925][ T8408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.760947][ T8408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.083428][ T8654] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  479.443022][ T8661] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.519'.
[  484.946873][ T8707] binder: 8698:8707 ioctl c0306201 0 returned -14
[  486.054024][ T8713] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.530'.
[  487.843421][ T8733] netlink: 44 bytes leftover after parsing attributes in process `syz.6.535'.
[  488.426792][ T8733] netlink: 40 bytes leftover after parsing attributes in process `syz.6.535'.
[  488.683954][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.903044][ T8760] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.542'.
[  490.159914][ T8763] binder: 8757:8763 ioctl c0306201 0 returned -14
[  495.023637][ T8794] Device name cannot be null; rc = [-22]
[  496.401202][ T8804] binder: 8796:8804 ioctl c0306201 0 returned -14
[  497.090180][ T8806] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.554'.
[  499.804173][ T8827] 9pnet_fd: Insufficient options for proto=fd
[  500.337236][ T8834] Device name cannot be null; rc = [-22]
[  503.847122][ T8854] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.566'.
[  503.876218][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.567'.
[  503.892507][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.567'.
[  506.581240][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.574'.
[  506.628568][ T8885] bond_slave_0: entered promiscuous mode
[  506.628627][ T8885] bond_slave_1: entered promiscuous mode
[  506.628822][ T8885] macvtap2: entered promiscuous mode
[  506.628833][ T8885] bond0: entered promiscuous mode
[  506.629328][ T8885] macvtap2: entered allmulticast mode
[  506.629342][ T8885] bond0: entered allmulticast mode
[  506.629352][ T8885] bond_slave_0: entered allmulticast mode
[  506.629366][ T8885] bond_slave_1: entered allmulticast mode
[  506.630649][ T8885] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  506.703087][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  506.705153][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  506.788711][ T8887] bond0: left allmulticast mode
[  506.788735][ T8887] bond_slave_0: left allmulticast mode
[  506.788753][ T8887] bond_slave_1: left allmulticast mode
[  506.788790][ T8887] bond0: left promiscuous mode
[  506.803927][ T8887] bond_slave_0: left promiscuous mode
[  506.803996][ T8887] bond_slave_1: left promiscuous mode
[  507.247540][ T8893] Device name cannot be null; rc = [-22]
[  508.031213][ T8897] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.578'.
[  509.349864][ T8911] netlink: 44 bytes leftover after parsing attributes in process `syz.5.580'.
[  511.508527][ T8922] netlink: 'syz.6.583': attribute type 1 has an invalid length.
[  511.657926][ T8922] 8021q: adding VLAN 0 to HW filter on device bond1
[  511.667849][ T8927] macvlan2: entered promiscuous mode
[  511.667874][ T8927] macvlan2: entered allmulticast mode
[  511.669145][ T8927] bond1: entered promiscuous mode
[  511.670045][ T8927] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  511.726618][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.584'.
[  511.855424][ T8927] bond1: left promiscuous mode
[  515.115410][ T8924] 8021q: adding VLAN 0 to HW filter on device bond1
[  515.115897][ T8924] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  515.116602][ T8924] bond1: (slave vxcan5): Error -95 calling set_mac_address
[  515.623402][ T8947] netlink: 'syz.5.589': attribute type 1 has an invalid length.
[  515.731983][ T8947] 8021q: adding VLAN 0 to HW filter on device bond3
[  515.740822][ T8954] macvlan2: entered promiscuous mode
[  515.740848][ T8954] macvlan2: entered allmulticast mode
[  515.742090][ T8954] bond3: entered promiscuous mode
[  515.742764][ T8954] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  517.038866][ T8954] bond3: left promiscuous mode
[  517.234004][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.587'.
[  518.334954][ T8952] 8021q: adding VLAN 0 to HW filter on device bond3
[  518.335443][ T8952] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  518.336167][ T8952] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  518.787151][ T8966] bond_slave_0: entered promiscuous mode
[  518.787202][ T8966] bond_slave_1: entered promiscuous mode
[  518.787440][ T8966] macvtap2: entered promiscuous mode
[  518.787453][ T8966] bond0: entered promiscuous mode
[  518.787947][ T8966] macvtap2: entered allmulticast mode
[  518.787961][ T8966] bond0: entered allmulticast mode
[  518.787973][ T8966] bond_slave_0: entered allmulticast mode
[  518.787990][ T8966] bond_slave_1: entered allmulticast mode
[  518.811325][ T8966] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  519.715697][ T8969] bond0: left allmulticast mode
[  519.715722][ T8969] bond_slave_0: left allmulticast mode
[  519.715741][ T8969] bond_slave_1: left allmulticast mode
[  519.715779][ T8969] bond0: left promiscuous mode
[  519.716370][ T8969] bond_slave_0: left promiscuous mode
[  519.716434][ T8969] bond_slave_1: left promiscuous mode
[  520.590316][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.599'.
[  520.867503][ T9005] Device name cannot be null; rc = [-22]
[  524.786269][ T7674] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  525.243291][ T7674] usb 10-1: device descriptor read/64, error -71
[  525.291344][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.607'.
[  525.391203][ T9041] bond_slave_0: entered promiscuous mode
[  525.391263][ T9041] bond_slave_1: entered promiscuous mode
[  525.391491][ T9041] macvtap3: entered promiscuous mode
[  525.391504][ T9041] bond0: entered promiscuous mode
[  525.392132][ T9041] macvtap3: entered allmulticast mode
[  525.392146][ T9041] bond0: entered allmulticast mode
[  525.392158][ T9041] bond_slave_0: entered allmulticast mode
[  525.392176][ T9041] bond_slave_1: entered allmulticast mode
[  525.400795][ T9041] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  525.479549][ T9043] bond0: left allmulticast mode
[  525.479572][ T9043] bond_slave_0: left allmulticast mode
[  525.479590][ T9043] bond_slave_1: left allmulticast mode
[  525.479630][ T9043] bond0: left promiscuous mode
[  525.481907][ T9043] bond_slave_0: left promiscuous mode
[  525.481979][ T9043] bond_slave_1: left promiscuous mode
[  525.513350][ T7674] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  525.653317][ T7674] usb 10-1: device descriptor read/64, error -71
[  525.763610][ T7674] usb usb10-port1: attempt power cycle
[  525.971769][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  526.847556][ T7674] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  526.864048][ T7674] usb 10-1: device descriptor read/8, error -71
[  527.812555][ T7674] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  528.145635][ T7674] usb 10-1: device descriptor read/8, error -71
[  528.273487][ T7674] usb usb10-port1: unable to enumerate USB device
[  528.780144][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.621'.
[  528.838852][ T9085] bond_slave_0: entered promiscuous mode
[  528.838933][ T9085] bond_slave_1: entered promiscuous mode
[  528.839664][ T9085] macvtap1: entered promiscuous mode
[  528.839680][ T9085] bond0: entered promiscuous mode
[  528.840066][ T9085] team0: entered promiscuous mode
[  528.840081][ T9085] team_slave_0: entered promiscuous mode
[  528.840294][ T9085] team_slave_1: entered promiscuous mode
[  528.840717][ T9085] syz_tun: entered promiscuous mode
[  528.841130][ T9085] macvtap1: entered allmulticast mode
[  528.841144][ T9085] bond0: entered allmulticast mode
[  528.841156][ T9085] bond_slave_0: entered allmulticast mode
[  528.841173][ T9085] bond_slave_1: entered allmulticast mode
[  528.841189][ T9085] team0: entered allmulticast mode
[  528.841202][ T9085] team_slave_0: entered allmulticast mode
[  528.841219][ T9085] team_slave_1: entered allmulticast mode
[  528.841238][ T9085] syz_tun: entered allmulticast mode
[  528.842937][ T9085] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  530.205547][ T9086] bond0: left allmulticast mode
[  530.205563][ T9086] bond_slave_0: left allmulticast mode
[  530.205573][ T9086] bond_slave_1: left allmulticast mode
[  530.205581][ T9086] team0: left allmulticast mode
[  530.205588][ T9086] team_slave_0: left allmulticast mode
[  530.205596][ T9086] team_slave_1: left allmulticast mode
[  530.205607][ T9086] syz_tun: left allmulticast mode
[  530.205767][ T9086] bond0: left promiscuous mode
[  530.206323][ T9086] team0: left promiscuous mode
[  530.206338][ T9086] team_slave_0: left promiscuous mode
[  530.206561][ T9086] team_slave_1: left promiscuous mode
[  530.206930][ T9086] syz_tun: left promiscuous mode
[  530.300550][ T9086] bond_slave_0: left promiscuous mode
[  530.300582][ T9086] bond_slave_1: left promiscuous mode
[  530.367260][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.623'.
[  530.750272][ T9107] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  534.749022][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.9.636'.
[  534.989419][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.7.637'.
[  535.090463][ T9153] bond_slave_0: entered promiscuous mode
[  535.090519][ T9153] bond_slave_1: entered promiscuous mode
[  535.090845][ T9153] macvtap2: entered promiscuous mode
[  535.090860][ T9153] bond0: entered promiscuous mode
[  535.091406][ T9153] team0: entered promiscuous mode
[  535.091422][ T9153] team_slave_0: entered promiscuous mode
[  535.091634][ T9153] team_slave_1: entered promiscuous mode
[  535.092004][ T9153] syz_tun: entered promiscuous mode
[  535.099364][ T9153] macvtap2: entered allmulticast mode
[  535.099384][ T9153] bond0: entered allmulticast mode
[  535.099396][ T9153] bond_slave_0: entered allmulticast mode
[  535.099414][ T9153] bond_slave_1: entered allmulticast mode
[  535.099431][ T9153] team0: entered allmulticast mode
[  535.099441][ T9153] team_slave_0: entered allmulticast mode
[  535.099458][ T9153] team_slave_1: entered allmulticast mode
[  535.099478][ T9153] syz_tun: entered allmulticast mode
[  535.126267][ T9153] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  535.434120][ T9158] bond0: left allmulticast mode
[  535.434142][ T9158] bond_slave_0: left allmulticast mode
[  535.434160][ T9158] bond_slave_1: left allmulticast mode
[  535.434176][ T9158] team0: left allmulticast mode
[  535.434188][ T9158] team_slave_0: left allmulticast mode
[  535.434205][ T9158] team_slave_1: left allmulticast mode
[  535.434224][ T9158] syz_tun: left allmulticast mode
[  535.434275][ T9158] bond0: left promiscuous mode
[  535.434747][ T9158] team0: left promiscuous mode
[  535.434764][ T9158] team_slave_0: left promiscuous mode
[  535.434982][ T9158] team_slave_1: left promiscuous mode
[  535.435369][ T9158] syz_tun: left promiscuous mode
[  535.435732][ T9158] bond_slave_0: left promiscuous mode
[  535.435776][ T9158] bond_slave_1: left promiscuous mode
[  536.130960][ T7674] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  537.078555][ T7674] usb 10-1: config 0 has no interfaces?
[  537.101939][ T7674] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  537.101970][ T7674] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  537.101990][ T7674] usb 10-1: Product: syz
[  537.102004][ T7674] usb 10-1: Manufacturer: syz
[  537.102019][ T7674] usb 10-1: SerialNumber: syz
[  537.112217][ T7674] usb 10-1: config 0 descriptor??
[  539.603888][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.649'.
[  539.613283][ T7674] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  539.745116][ T5906] usb 10-1: USB disconnect, device number 9
[  539.783021][ T7674] usb 6-1: config 0 has no interfaces?
[  539.796429][ T7674] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  539.796460][ T7674] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  539.796479][ T7674] usb 6-1: Product: syz
[  539.796492][ T7674] usb 6-1: Manufacturer: syz
[  539.796506][ T7674] usb 6-1: SerialNumber: syz
[  539.849473][ T7674] usb 6-1: config 0 descriptor??
[  541.192671][   T57] usb 6-1: USB disconnect, device number 2
[  541.354091][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.7.653'.
[  541.372987][ T9216] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  542.793311][   T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  542.956011][   T57] usb 7-1: config 0 has no interfaces?
[  542.962524][   T57] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  542.962547][   T57] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  542.962561][   T57] usb 7-1: Product: syz
[  542.962568][   T57] usb 7-1: Manufacturer: syz
[  542.962578][   T57] usb 7-1: SerialNumber: syz
[  543.109078][   T57] usb 7-1: config 0 descriptor??
[  545.332713][ T5866] usb 7-1: USB disconnect, device number 3
[  545.721212][ T9247] netlink: 44 bytes leftover after parsing attributes in process `syz.5.662'.
[  545.721228][ T9247] netlink: 52 bytes leftover after parsing attributes in process `syz.5.662'.
[  547.666762][ T9272] 9pnet_fd: Insufficient options for proto=fd
[  554.747825][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.686'.
[  554.821283][ T9337] bond_slave_0: entered promiscuous mode
[  554.821341][ T9337] bond_slave_1: entered promiscuous mode
[  554.821699][ T9337] macvtap3: entered promiscuous mode
[  554.821715][ T9337] bond0: entered promiscuous mode
[  554.822134][ T9337] team0: entered promiscuous mode
[  554.848784][ T9337] team_slave_0: entered promiscuous mode
[  554.849028][ T9337] team_slave_1: entered promiscuous mode
[  554.849408][ T9337] syz_tun: entered promiscuous mode
[  554.849820][ T9337] macvtap3: entered allmulticast mode
[  554.849835][ T9337] bond0: entered allmulticast mode
[  554.849847][ T9337] bond_slave_0: entered allmulticast mode
[  554.849864][ T9337] bond_slave_1: entered allmulticast mode
[  554.849879][ T9337] team0: entered allmulticast mode
[  554.849891][ T9337] team_slave_0: entered allmulticast mode
[  554.849907][ T9337] team_slave_1: entered allmulticast mode
[  554.849926][ T9337] syz_tun: entered allmulticast mode
[  554.854803][ T9337] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  555.088567][ T9343] bond0: left allmulticast mode
[  555.088591][ T9343] bond_slave_0: left allmulticast mode
[  555.088609][ T9343] bond_slave_1: left allmulticast mode
[  555.088626][ T9343] team0: left allmulticast mode
[  555.088638][ T9343] team_slave_0: left allmulticast mode
[  555.088654][ T9343] team_slave_1: left allmulticast mode
[  555.088675][ T9343] syz_tun: left allmulticast mode
[  555.088727][ T9343] bond0: left promiscuous mode
[  555.089198][ T9343] team0: left promiscuous mode
[  555.089212][ T9343] team_slave_0: left promiscuous mode
[  555.089422][ T9343] team_slave_1: left promiscuous mode
[  555.089851][ T9343] syz_tun: left promiscuous mode
[  555.090239][ T9343] bond_slave_0: left promiscuous mode
[  555.090282][ T9343] bond_slave_1: left promiscuous mode
[  556.494772][ T9360] netlink: 28 bytes leftover after parsing attributes in process `syz.7.692'.
[  556.515555][ T9356] bond1: entered promiscuous mode
[  556.515581][ T9356] bond1: entered allmulticast mode
[  556.557786][ T9358] ip6gretap1: entered promiscuous mode
[  556.557931][ T9358] ip6gretap1: entered allmulticast mode
[  556.558259][ T9358] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  556.674583][ T9362] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  558.349058][ T9408] netlink: 'syz.7.703': attribute type 4 has an invalid length.
[  558.349080][ T9408] netlink: 152 bytes leftover after parsing attributes in process `syz.7.703'.
[  558.517679][ T9408] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  558.976156][ T9412] netlink: 'syz.6.705': attribute type 1 has an invalid length.
[  559.174056][ T9415] gretap1: entered promiscuous mode
[  559.910670][ T9424] netlink: 'syz.6.709': attribute type 10 has an invalid length.
[  559.932663][ T9424] netlink: 'syz.6.709': attribute type 10 has an invalid length.
[  560.053768][ T9427] siw: device registration error -23
[  560.065934][ T9424] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  560.719142][ T9448] netlink: 'syz.9.715': attribute type 4 has an invalid length.
[  560.719165][ T9448] netlink: 152 bytes leftover after parsing attributes in process `syz.9.715'.
[  560.719197][ T9448] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  561.782444][ T9459] 8021q: adding VLAN 0 to HW filter on device bond1
[  562.736419][ T5866] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  562.965080][ T5866] usb 7-1: Using ep0 maxpacket: 16
[  562.969420][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  562.969446][ T5866] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  562.972069][ T5866] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  562.972100][ T5866] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  562.972120][ T5866] usb 7-1: Manufacturer: syz
[  564.465072][ T5866] usb 7-1: config 0 descriptor??
[  564.564736][ T9500] netlink: 'syz.9.732': attribute type 4 has an invalid length.
[  564.564761][ T9500] netlink: 152 bytes leftover after parsing attributes in process `syz.9.732'.
[  564.564793][ T9500] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  565.097249][ T5808] Bluetooth: hci2: command 0x0406 tx timeout
[  566.326022][ T5874] usb 7-1: USB disconnect, device number 4
[  568.142075][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  568.142143][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  570.740996][ T9570] Device name cannot be null; rc = [-22]
[  574.163203][ T9618] Device name cannot be null; rc = [-22]
[  576.155545][ T9644] netlink: 'syz.9.777': attribute type 4 has an invalid length.
[  576.155568][ T9644] netlink: 152 bytes leftover after parsing attributes in process `syz.9.777'.
[  576.399783][ T9644] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  578.507592][ T9690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.872256][ T9690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.010562][ T9721] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  580.418952][ T9690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.022662][ T9690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.922293][ T7633] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.119288][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.287875][ T7633] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.448716][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.429607][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.9.832'.
[  586.066077][ T9849] netlink: 'syz.9.844': attribute type 4 has an invalid length.
[  586.066092][ T9849] netlink: 152 bytes leftover after parsing attributes in process `syz.9.844'.
[  586.066113][ T9849] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  590.800349][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.862'.
[  593.753222][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  593.913240][   T10] usb 2-1: Using ep0 maxpacket: 16
[  593.915269][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  593.915327][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  593.916495][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  593.916522][   T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  593.916541][   T10] usb 2-1: Manufacturer: syz
[  593.989249][   T10] usb 2-1: config 0 descriptor??
[  594.037543][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.7.873'.
[  596.461957][   T10] usb 2-1: USB disconnect, device number 2
[  597.153219][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.885'.
[  598.343993][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.895'.
[  600.806913][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.897'.
[  602.512064][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.9.904'.
[  602.648944][T10058] 8021q: adding VLAN 0 to HW filter on device bond2
[  603.331352][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.7.898'.
[  603.362252][T10066] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  608.503279][   T31] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  608.697838][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  608.697871][   T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.697909][   T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  608.697932][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.705308][   T31] usb 7-1: config 0 descriptor??
[  608.788787][   T31] hub 7-1:0.0: USB hub found
[  608.912405][   T31] hub 7-1:0.0: 1 port detected
[  609.609051][T10126] netlink: 28 bytes leftover after parsing attributes in process `syz.9.911'.
[  609.758717][   T31] hub 7-1:0.0: activate --> -90
[  610.408759][   T31] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  610.408786][   T31] hub_port_connect: 15 callbacks suppressed
[  610.408797][   T31] usb 7-1-port1: connect-debounce failed
[  610.409496][   T31] usb 7-1-port1: cannot disable (err = -71)
[  610.493547][  T807] usb 7-1: USB disconnect, device number 5
[  610.498420][T10142] gretap1: entered promiscuous mode
[  610.525248][   T43] usb 7-1: Failed to suspend device, error -71
[  611.865447][ T7674] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  612.043212][ T7674] usb 2-1: Using ep0 maxpacket: 16
[  612.049134][ T7674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.049167][ T7674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.049190][ T7674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  612.049215][ T7674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  612.049251][ T7674] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  612.049273][ T7674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.178373][ T7674] usb 2-1: config 0 descriptor??
[  612.483753][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.929'.
[  613.543227][ T5867] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  613.612479][ T7674] usbhid 2-1:0.0: can't add hid device: -71
[  613.612651][ T7674] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  613.682612][ T7674] usb 2-1: USB disconnect, device number 3
[  614.026160][ T5867] usb 6-1: Using ep0 maxpacket: 8
[  614.029766][ T5867] usb 6-1: unable to get BOS descriptor or descriptor too short
[  614.032318][ T5867] usb 6-1: config 7 has an invalid interface number: 67 but max is 0
[  614.032344][ T5867] usb 6-1: config 7 has no interface number 0
[  614.058415][ T5867] usb 6-1: string descriptor 0 read error: -22
[  614.058561][ T5867] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  614.058584][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.366783][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'.
[  614.463003][ T5867] usb 6-1: USB disconnect, device number 3
[  615.211769][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.940'.
[  616.753237][  T807] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  616.904042][  T807] usb 7-1: Using ep0 maxpacket: 32
[  616.906781][  T807] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[  616.906808][  T807] usb 7-1: config 0 has no interface number 0
[  616.906855][  T807] usb 7-1: config 0 interface 89 has no altsetting 0
[  616.964421][  T807] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  616.964452][  T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.964472][  T807] usb 7-1: Product: syz
[  616.964487][  T807] usb 7-1: Manufacturer: syz
[  616.964501][  T807] usb 7-1: SerialNumber: syz
[  617.054956][  T807] usb 7-1: config 0 descriptor??
[  617.091568][  T807] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  617.091592][  T807] em28xx 7-1:0.89: Video interface 89 found: bulk
[  617.721603][  T807] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[  618.782322][ T6023] bond0: (slave bond_slave_0): interface is now down
[  618.782344][ T6023] bond0: (slave bond_slave_1): interface is now down
[  618.782363][ T6023] bond0: (slave team0): interface is now down
[  618.782374][ T6023] bond0: (slave syz_tun): interface is now down
[  618.902001][ T6023] bond0: now running without any active interface!
[  619.156434][  T807] em28xx 7-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=128)
[  619.156457][  T807] em28xx 7-1:0.89: board has no eeprom
[  619.403187][  T807] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[  619.403227][  T807] em28xx 7-1:0.89: analog set to bulk mode.
[  619.454282][ T1239] em28xx 7-1:0.89: Registering V4L2 extension
[  619.492134][  T807] usb 7-1: USB disconnect, device number 6
[  619.534622][  T807] em28xx 7-1:0.89: Disconnecting em28xx
[  619.762229][T10278] debugfs: 'ttyS3' already exists in 'caif_serial'
[  619.803566][ T1239] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[  619.803589][ T1239] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[  619.803609][ T1239] em28xx 7-1:0.89: No AC97 audio processor
[  619.868387][ T1239] usb 7-1: Decoder not found
[  619.868408][ T1239] em28xx 7-1:0.89: failed to create media graph
[  619.868455][ T1239] em28xx 7-1:0.89: V4L2 device video103 deregistered
[  619.909347][ T1239] em28xx 7-1:0.89: Registering snapshot button...
[  619.946821][ T1239] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input9
[  619.999061][ T1239] em28xx 7-1:0.89: Remote control support is not available for this card.
[  619.999921][  T807] em28xx 7-1:0.89: Closing input extension
[  620.000865][  T807] em28xx 7-1:0.89: Deregistering snapshot button
[  620.204324][T10286] netlink: 'syz.6.954': attribute type 1 has an invalid length.
[  620.260091][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.954'.
[  620.260113][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.954'.
[  620.376774][  T807] em28xx 7-1:0.89: Freeing device
[  620.549635][T10286] bond2: entered promiscuous mode
[  620.549662][T10286] bond2: entered allmulticast mode
[  625.692158][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'.
[  625.789759][T10359] bond_slave_0: entered promiscuous mode
[  625.789812][T10359] bond_slave_1: entered promiscuous mode
[  625.790052][T10359] macvtap1: entered promiscuous mode
[  625.790066][T10359] bond0: entered promiscuous mode
[  625.790685][T10359] macvtap1: entered allmulticast mode
[  625.790699][T10359] bond0: entered allmulticast mode
[  625.790710][T10359] bond_slave_0: entered allmulticast mode
[  625.790727][T10359] bond_slave_1: entered allmulticast mode
[  625.792734][T10359] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  625.907287][T10361] bond0: left allmulticast mode
[  625.907312][T10361] bond_slave_0: left allmulticast mode
[  625.907329][T10361] bond_slave_1: left allmulticast mode
[  625.907366][T10361] bond0: left promiscuous mode
[  625.908004][T10361] bond_slave_0: left promiscuous mode
[  625.908071][T10361] bond_slave_1: left promiscuous mode
[  625.982772][T10364] netlink: 'syz.6.974': attribute type 1 has an invalid length.
[  626.085226][ T5867] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  626.242854][ T5867] usb 10-1: Using ep0 maxpacket: 32
[  626.249180][ T5867] usb 10-1: config 0 has an invalid interface number: 228 but max is 0
[  626.249208][ T5867] usb 10-1: config 0 has no interface number 0
[  626.249240][ T5867] usb 10-1: config 0 interface 228 has no altsetting 0
[  626.256211][ T5867] usb 10-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=22.db
[  626.256239][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.256258][ T5867] usb 10-1: Product: syz
[  626.256271][ T5867] usb 10-1: Manufacturer: syz
[  626.256284][ T5867] usb 10-1: SerialNumber: syz
[  626.293351][ T5867] usb 10-1: config 0 descriptor??
[  626.300279][ T5867] ums-datafab 10-1:0.228: USB Mass Storage device detected
[  626.357910][ T5867] ums-datafab 10-1:0.228: Quirks match for vid 0c0b pid a109: 1
[  626.470767][ T5867] ums-sddr55 10-1:0.228: USB Mass Storage device detected
[  627.519031][ T5867] usb 10-1: USB disconnect, device number 10
[  629.767586][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  629.767655][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  630.083253][   T10] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  630.247044][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  630.247080][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  630.247116][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  630.247139][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.298384][   T10] usb 7-1: config 0 descriptor??
[  630.421333][   T10] hub 7-1:0.0: USB hub found
[  630.549345][   T10] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  630.643316][ T1239] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  631.043191][ T1239] usb 6-1: Using ep0 maxpacket: 32
[  631.067953][   T10] usbhid 7-1:0.0: can't add hid device: -32
[  631.068118][   T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[  631.093252][ T1239] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  631.093281][ T1239] usb 6-1: config 0 has no interface number 0
[  631.093329][ T1239] usb 6-1: config 0 interface 89 has no altsetting 0
[  631.310863][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.9.998'.
[  632.001126][ T1239] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  632.001156][ T1239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.001175][ T1239] usb 6-1: Product: syz
[  632.001189][ T1239] usb 6-1: Manufacturer: syz
[  632.001202][ T1239] usb 6-1: SerialNumber: syz
[  632.052539][ T1239] usb 6-1: config 0 descriptor??
[  632.102255][   T10] usb 7-1: USB disconnect, device number 7
[  632.128759][ T1239] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  632.128797][ T1239] em28xx 6-1:0.89: Video interface 89 found: bulk
[  632.631174][T10485] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1002'.
[  632.783408][ T1239] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  633.683338][ T1239] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  633.683368][ T1239] em28xx 6-1:0.89: board has no eeprom
[  633.963187][ T1239] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  633.963298][ T1239] em28xx 6-1:0.89: analog set to bulk mode.
[  633.975876][ T5929] em28xx 6-1:0.89: Registering V4L2 extension
[  634.114042][ T5867] usb 6-1: USB disconnect, device number 4
[  634.115171][ T5867] em28xx 6-1:0.89: Disconnecting em28xx
[  634.218183][ T5929] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  634.218198][ T5929] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  634.218206][ T5929] em28xx 6-1:0.89: No AC97 audio processor
[  634.221307][ T5929] usb 6-1: Decoder not found
[  634.221319][ T5929] em28xx 6-1:0.89: failed to create media graph
[  634.221336][ T5929] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  634.249105][ T5929] em28xx 6-1:0.89: Registering snapshot button...
[  634.269570][ T5929] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input10
[  634.347092][ T5929] em28xx 6-1:0.89: Remote control support is not available for this card.
[  634.347156][ T5867] em28xx 6-1:0.89: Closing input extension
[  634.347178][ T5867] em28xx 6-1:0.89: Deregistering snapshot button
[  635.742883][ T5867] em28xx 6-1:0.89: Freeing device
[  636.342566][T10551] netlink: 'syz.1.1021': attribute type 10 has an invalid length.
[  636.417187][ T1239] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  636.497314][T10551] syz_tun: entered promiscuous mode
[  636.603490][ T1239] usb 6-1: Using ep0 maxpacket: 32
[  636.606971][ T1239] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  636.607001][ T1239] usb 6-1: config 0 has no interface number 0
[  636.607046][ T1239] usb 6-1: config 0 interface 89 has no altsetting 0
[  636.613026][ T1239] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  636.653308][ T1239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.653333][ T1239] usb 6-1: Product: syz
[  636.653347][ T1239] usb 6-1: Manufacturer: syz
[  636.653361][ T1239] usb 6-1: SerialNumber: syz
[  636.745685][ T1239] usb 6-1: config 0 descriptor??
[  636.758294][T10551] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  636.779562][ T1239] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  636.779599][ T1239] em28xx 6-1:0.89: Video interface 89 found: bulk
[  637.337601][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'.
[  637.425310][T10565] bond_slave_0: entered promiscuous mode
[  637.425358][T10565] bond_slave_1: entered promiscuous mode
[  637.425861][T10565] macvtap2: entered promiscuous mode
[  637.425872][T10565] bond0: entered promiscuous mode
[  637.426499][T10565] macvtap2: entered allmulticast mode
[  637.426512][T10565] bond0: entered allmulticast mode
[  637.426519][T10565] bond_slave_0: entered allmulticast mode
[  637.426528][T10565] bond_slave_1: entered allmulticast mode
[  637.426536][T10565] syz_tun: entered allmulticast mode
[  637.427797][T10565] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  637.494950][ T1239] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  637.623249][T10566] bond0: left allmulticast mode
[  637.623328][T10566] bond_slave_0: left allmulticast mode
[  637.623348][T10566] bond_slave_1: left allmulticast mode
[  637.623364][T10566] syz_tun: left allmulticast mode
[  637.626786][T10566] bond0: left promiscuous mode
[  637.686460][T10566] bond_slave_0: left promiscuous mode
[  637.686575][T10566] bond_slave_1: left promiscuous mode
[  637.805490][T10566] syz.1.1022 (10566) used greatest stack depth: 17424 bytes left
[  638.534013][ T1239] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  638.534045][ T1239] em28xx 6-1:0.89: board has no eeprom
[  639.155032][ T1239] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  639.155127][ T1239] em28xx 6-1:0.89: analog set to bulk mode.
[  639.255605][ T5929] em28xx 6-1:0.89: Registering V4L2 extension
[  639.662985][ T5929] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  639.676713][ T1239] usb 6-1: USB disconnect, device number 5
[  639.677392][ T5929] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-19)
[  639.677519][ T5929] em28xx 6-1:0.89: reading from i2c device at 0x42 failed (error=-19)
[  639.677625][ T5929] em28xx 6-1:0.89: reading from i2c device at 0x40 failed (error=-19)
[  639.678131][ T5929] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  639.680169][ T1239] em28xx 6-1:0.89: Disconnecting em28xx
[  639.682997][ T5929] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  639.683013][ T5929] em28xx 6-1:0.89: No AC97 audio processor
[  639.782333][ T5929] usb 6-1: Decoder not found
[  639.782351][ T5929] em28xx 6-1:0.89: failed to create media graph
[  639.782378][ T5929] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  639.809372][ T5929] em28xx 6-1:0.89: Registering snapshot button...
[  639.811800][ T5929] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input11
[  639.859203][ T5929] em28xx 6-1:0.89: Remote control support is not available for this card.
[  639.859262][ T1239] em28xx 6-1:0.89: Closing input extension
[  639.859282][ T1239] em28xx 6-1:0.89: Deregistering snapshot button
[  639.923635][T10593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  640.006319][ T1239] em28xx 6-1:0.89: Freeing device
[  641.202362][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1038'.
[  641.228059][T10607] bond_slave_0: entered promiscuous mode
[  641.228475][T10607] bond_slave_1: entered promiscuous mode
[  641.228756][T10607] macvtap4: entered promiscuous mode
[  641.228771][T10607] bond0: entered promiscuous mode
[  641.229533][T10607] macvtap4: entered allmulticast mode
[  641.229548][T10607] bond0: entered allmulticast mode
[  641.229561][T10607] bond_slave_0: entered allmulticast mode
[  641.229579][T10607] bond_slave_1: entered allmulticast mode
[  641.303932][T10607] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  641.662225][T10612] bond0: left allmulticast mode
[  641.662248][T10612] bond_slave_0: left allmulticast mode
[  641.662266][T10612] bond_slave_1: left allmulticast mode
[  641.662305][T10612] bond0: left promiscuous mode
[  641.672205][T10612] bond_slave_0: left promiscuous mode
[  641.672282][T10612] bond_slave_1: left promiscuous mode
[  643.559875][T10644] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1048'.
[  648.933429][T10694] ntfs3(nullb0): Primary boot signature is not NTFS.
[  648.934380][T10694] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  649.765243][T10693] 9pnet_fd: p9_fd_create_unix (10693): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  650.569585][ T5906] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  651.101779][T10701] 9pnet_fd: p9_fd_create_unix (10701): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  651.132294][T10696] ntfs3(nullb0): Primary boot signature is not NTFS.
[  651.132477][T10696] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  651.541787][ T5906] usb 7-1: Using ep0 maxpacket: 32
[  651.554001][ T5906] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[  651.554028][ T5906] usb 7-1: config 0 has no interface number 0
[  651.554074][ T5906] usb 7-1: config 0 interface 89 has no altsetting 0
[  651.557384][ T5906] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  651.557411][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.557430][ T5906] usb 7-1: Product: syz
[  651.557443][ T5906] usb 7-1: Manufacturer: syz
[  651.557457][ T5906] usb 7-1: SerialNumber: syz
[  651.564990][ T5906] usb 7-1: config 0 descriptor??
[  651.576200][ T5906] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  651.576234][ T5906] em28xx 7-1:0.89: Video interface 89 found: bulk
[  651.903617][ T5906] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[  652.163251][ T5906] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  652.163282][ T5906] em28xx 7-1:0.89: board has no eeprom
[  652.244473][ T5906] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[  652.244543][ T5906] em28xx 7-1:0.89: analog set to bulk mode.
[  652.260065][T10728] 9pnet_fd: p9_fd_create_unix (10728): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  652.341495][T10728] ntfs3(nullb0): Primary boot signature is not NTFS.
[  652.359015][T10728] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  652.386768][  T807] em28xx 7-1:0.89: Registering V4L2 extension
[  652.790214][T10731] misc userio: The device must be registered before sending interrupts
[  652.907128][ T5906] usb 7-1: USB disconnect, device number 8
[  652.912717][ T5906] em28xx 7-1:0.89: Disconnecting em28xx
[  653.235266][  T807] em28xx 7-1:0.89: Config register raw data: 0xffffffed
[  653.235290][  T807] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[  653.235303][  T807] em28xx 7-1:0.89: No AC97 audio processor
[  653.245258][  T807] usb 7-1: Decoder not found
[  653.245276][  T807] em28xx 7-1:0.89: failed to create media graph
[  653.245305][  T807] em28xx 7-1:0.89: V4L2 device video103 deregistered
[  653.276868][  T807] em28xx 7-1:0.89: Registering snapshot button...
[  653.279496][  T807] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input13
[  654.173468][  T807] em28xx 7-1:0.89: Remote control support is not available for this card.
[  654.185618][ T5906] em28xx 7-1:0.89: Closing input extension
[  654.185645][ T5906] em28xx 7-1:0.89: Deregistering snapshot button
[  654.959340][ T5906] em28xx 7-1:0.89: Freeing device
[  654.965154][T10746] process 'syz.6.1080' launched '/dev/fd/5' with NULL argv: empty string added
[  657.663504][T10787] misc userio: The device must be registered before sending interrupts
[  658.773238][  T808] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  658.853763][T10791] 9pnet_fd: p9_fd_create_unix (10791): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  658.858459][T10791] ntfs3(nullb0): Primary boot signature is not NTFS.
[  658.858640][T10791] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  659.044995][  T808] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  659.045029][  T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.152936][  T808] usb 2-1: config 0 descriptor??
[  659.431171][  T808] cp210x 2-1:0.0: cp210x converter detected
[  660.439628][  T808] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  661.107123][  T808] usb 2-1: cp210x converter now attached to ttyUSB0
[  661.132543][  T808] usb 2-1: USB disconnect, device number 4
[  661.172590][  T808] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  661.681407][  T808] cp210x 2-1:0.0: device disconnected
[  663.085058][T10854] binder: BINDER_SET_CONTEXT_MGR already set
[  663.085073][T10854] binder: 10853:10854 ioctl 4018620d 200000004a80 returned -16
[  663.734237][T10863] 9pnet_fd: p9_fd_create_unix (10863): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  664.121027][T10855] ntfs3(nullb0): Primary boot signature is not NTFS.
[  664.121188][T10855] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  665.893258][ T5859] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  666.023312][ T5859] usb 6-1: device descriptor read/64, error -71
[  666.113206][T10885] misc userio: No port type given on /dev/userio
[  666.193418][T10888] misc userio: The device must be registered before sending interrupts
[  666.273246][ T5859] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  666.403370][ T5859] usb 6-1: device descriptor read/64, error -71
[  666.517355][ T5859] usb usb6-port1: attempt power cycle
[  666.823254][ T1239] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  666.883265][ T5859] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  666.905864][ T5859] usb 6-1: device descriptor read/8, error -71
[  666.936704][   T31] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[  666.983214][ T1239] usb 7-1: Using ep0 maxpacket: 32
[  666.985088][ T1239] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[  666.985121][ T1239] usb 7-1: config 0 has no interface number 0
[  666.985171][ T1239] usb 7-1: config 0 interface 89 has no altsetting 0
[  666.988093][ T1239] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  666.988128][ T1239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.988148][ T1239] usb 7-1: Product: syz
[  666.988162][ T1239] usb 7-1: Manufacturer: syz
[  666.988175][ T1239] usb 7-1: SerialNumber: syz
[  667.014122][ T1239] usb 7-1: config 0 descriptor??
[  667.019788][ T1239] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  667.019820][ T1239] em28xx 7-1:0.89: Video interface 89 found: bulk
[  667.169748][   T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.169801][   T31] usb 10-1: config 0 has no interfaces?
[  667.169847][   T31] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  667.169898][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.204036][ T5859] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  667.267808][ T5859] usb 6-1: device descriptor read/8, error -71
[  667.275317][   T31] usb 10-1: config 0 descriptor??
[  667.374613][ T5859] usb usb6-port1: unable to enumerate USB device
[  667.758947][ T1239] em28xx 7-1:0.89: unknown em28xx chip ID (0)
[  669.694804][ T1239] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  669.694835][ T1239] em28xx 7-1:0.89: board has no eeprom
[  669.783147][ T1239] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67)
[  669.783176][ T1239] em28xx 7-1:0.89: analog set to bulk mode.
[  669.788991][ T7674] em28xx 7-1:0.89: Registering V4L2 extension
[  669.789509][ T5867] usb 10-1: USB disconnect, device number 11
[  669.829377][ T7674] em28xx 7-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  669.829807][ T7674] em28xx 7-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  669.830189][ T7674] em28xx 7-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  669.830552][ T7674] em28xx 7-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[  669.840835][ T7674] em28xx 7-1:0.89: Config register raw data: 0xfffffffb
[  669.841934][ T7674] em28xx 7-1:0.89: AC97 chip type couldn't be determined
[  669.841951][ T7674] em28xx 7-1:0.89: No AC97 audio processor
[  669.959144][ T1239] usb 7-1: USB disconnect, device number 9
[  669.961516][ T1239] em28xx 7-1:0.89: Disconnecting em28xx
[  669.961884][ T7674] usb 7-1: Decoder not found
[  669.961898][ T7674] em28xx 7-1:0.89: failed to create media graph
[  669.961926][ T7674] em28xx 7-1:0.89: V4L2 device video103 deregistered
[  669.989370][ T7674] em28xx 7-1:0.89: Registering snapshot button...
[  669.992428][ T7674] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input14
[  670.093499][ T7674] em28xx 7-1:0.89: Remote control support is not available for this card.
[  670.113318][ T1239] em28xx 7-1:0.89: Closing input extension
[  670.113345][ T1239] em28xx 7-1:0.89: Deregistering snapshot button
[  671.083862][   T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  671.390146][   T31] usb 6-1: Using ep0 maxpacket: 16
[  671.480740][   T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  671.480772][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  671.503492][   T31] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  671.503521][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.503540][   T31] usb 6-1: Product: syz
[  671.503554][   T31] usb 6-1: Manufacturer: syz
[  671.503568][   T31] usb 6-1: SerialNumber: syz
[  671.620314][   T31] usb 6-1: config 0 descriptor??
[  671.627915][   T31] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  671.627956][   T31] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  671.687864][ T1239] em28xx 7-1:0.89: Freeing device
[  672.530893][   T31] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  672.532442][   T31] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  673.106662][T10957] 9pnet_fd: p9_fd_create_unix (10957): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  673.146828][T10957] ntfs3(nullb0): Primary boot signature is not NTFS.
[  673.155310][T10957] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  673.667468][   T31] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  673.871806][   T31] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  673.872198][   T31] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  673.872550][   T31] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  673.873520][   T31] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  673.876397][   T31] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  673.950771][   T31] usb 6-1: USB disconnect, device number 10
[  674.831335][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'.
[  675.277428][T10990] kvm: MONITOR instruction emulated as NOP!
[  678.414087][  T808] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  680.015153][ T5859] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  680.207019][ T5859] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  680.207040][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.209815][ T5859] usb 6-1: config 0 descriptor??
[  680.248463][ T5859] cp210x 6-1:0.0: cp210x converter detected
[  681.253131][ T5859] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121
[  681.253197][ T5859] cp210x 6-1:0.0: querying part number failed
[  681.492884][ T5859] usb 6-1: cp210x converter now attached to ttyUSB0
[  682.069648][T11043] 9pnet_fd: p9_fd_create_unix (11043): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  682.096906][T11043] ntfs3(nullb0): Primary boot signature is not NTFS.
[  682.099988][T11043] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  682.874289][ T5859] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  683.124474][ T5859] usb 7-1: Using ep0 maxpacket: 16
[  684.145865][ T5867] usb 6-1: USB disconnect, device number 11
[  684.162100][ T5859] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  684.162120][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  684.188203][ T5859] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  684.188222][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.188233][ T5859] usb 7-1: Product: syz
[  684.188240][ T5859] usb 7-1: Manufacturer: syz
[  684.188247][ T5859] usb 7-1: SerialNumber: syz
[  684.255255][ T5859] usb 7-1: config 0 descriptor??
[  684.261320][ T5867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  684.261740][ T5867] cp210x 6-1:0.0: device disconnected
[  684.399985][ T5859] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  684.400021][ T5859] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  684.413147][  T808] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  684.543450][  T808] usb 2-1: device descriptor read/64, error -71
[  684.632052][ T7246] bond0: (slave syz_tun): Releasing backup interface
[  684.793556][  T808] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  684.834205][ T5867] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  684.923943][  T808] usb 2-1: device descriptor read/64, error -71
[  684.966183][ T5859] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  684.980519][ T5859] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  685.023250][ T5867] usb 6-1: Using ep0 maxpacket: 32
[  685.039991][ T5867] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  685.040042][ T5867] usb 6-1: config 0 has no interface number 0
[  685.040071][ T5867] usb 6-1: config 0 interface 89 has no altsetting 0
[  685.081619][  T808] usb usb2-port1: attempt power cycle
[  685.105648][ T5867] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  685.105680][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.105751][ T5867] usb 6-1: Product: syz
[  685.105764][ T5867] usb 6-1: Manufacturer: syz
[  685.105778][ T5867] usb 6-1: SerialNumber: syz
[  685.201823][ T5867] usb 6-1: config 0 descriptor??
[  685.430004][ T5867] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  685.430042][ T5867] em28xx 6-1:0.89: Video interface 89 found: bulk
[  685.593766][ T5859] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  685.682301][ T5859] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  685.683566][ T5859] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  685.684547][ T5859] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  685.882037][   T68] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  685.979877][ T5867] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  686.055806][  T808] ==================================================================
[  686.055822][  T808] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  686.055851][  T808] Read of size 8 at addr ffffc90015274008 by task kworker/1:2/808
[  686.055868][  T808] 
[  686.055893][  T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  686.055919][  T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  686.055932][  T808] Workqueue: usb_hub_wq hub_event
[  686.055958][  T808] Call Trace:
[  686.055965][  T808]  <TASK>
[  686.055978][  T808]  dump_stack_lvl+0xe8/0x150
[  686.056002][  T808]  print_report+0xba/0x230
[  686.056022][  T808]  ? __list_add_valid_or_report+0x4e/0x130
[  686.056038][  T808]  kasan_report+0x117/0x150
[  686.056064][  T808]  ? __list_add_valid_or_report+0x4e/0x130
[  686.056085][  T808]  __list_add_valid_or_report+0x4e/0x130
[  686.056104][  T808]  kcov_remote_stop+0x457/0x680
[  686.056129][  T808]  hub_event+0x49d8/0x4f60
[  686.056167][  T808]  ? __pfx_hub_event+0x10/0x10
[  686.056184][  T808]  ? process_scheduled_works+0xa0f/0x17a0
[  686.056205][  T808]  ? process_scheduled_works+0xa0f/0x17a0
[  686.056222][  T808]  ? process_scheduled_works+0xa0f/0x17a0
[  686.056240][  T808]  process_scheduled_works+0xaec/0x17a0
[  686.056270][  T808]  ? __pfx_process_scheduled_works+0x10/0x10
[  686.056286][  T808]  ? do_raw_spin_lock+0x12b/0x2f0
[  686.056311][  T808]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  686.056333][  T808]  ? schedule+0x90/0x360
[  686.056358][  T808]  worker_thread+0xda6/0x1360
[  686.056383][  T808]  ? __kthread_parkme+0x19c/0x1f0
[  686.056410][  T808]  kthread+0x726/0x8b0
[  686.056431][  T808]  ? __pfx_worker_thread+0x10/0x10
[  686.056448][  T808]  ? __pfx_kthread+0x10/0x10
[  686.056467][  T808]  ? rt_spin_unlock+0x14f/0x200
[  686.056486][  T808]  ? rt_spin_unlock+0x160/0x200
[  686.056503][  T808]  ? __pfx_kthread+0x10/0x10
[  686.056523][  T808]  ret_from_fork+0x51b/0xa40
[  686.056543][  T808]  ? __pfx_ret_from_fork+0x10/0x10
[  686.056560][  T808]  ? __switch_to+0xc82/0x1410
[  686.056586][  T808]  ? __pfx_kthread+0x10/0x10
[  686.056606][  T808]  ret_from_fork_asm+0x1a/0x30
[  686.056636][  T808]  </TASK>
[  686.056643][  T808] 
[  686.056647][  T808] The buggy address belongs to a vmalloc virtual mapping
[  686.056664][  T808] Memory state around the buggy address:
[  686.056674][  T808]  ffffc90015273f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  686.056686][  T808]  ffffc90015273f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  686.056698][  T808] >ffffc90015274000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  686.056711][  T808]                       ^
[  686.056720][  T808]  ffffc90015274080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  686.056732][  T808]  ffffc90015274100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  686.056741][  T808] ==================================================================
[  686.056806][  T808] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  686.056822][  T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  686.056843][  T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  686.056854][  T808] Workqueue: usb_hub_wq hub_event
[  686.056870][  T808] Call Trace:
[  686.056877][  T808]  <TASK>
[  686.056884][  T808]  vpanic+0x1e0/0x670
[  686.056912][  T808]  panic+0xc5/0xd0
[  686.056932][  T808]  ? __pfx_panic+0x10/0x10
[  686.056955][  T808]  ? preempt_schedule_thunk+0x16/0x30
[  686.056975][  T808]  ? __list_add_valid_or_report+0x4e/0x130
[  686.056991][  T808]  ? preempt_schedule_thunk+0x16/0x30
[  686.057010][  T808]  ? __list_add_valid_or_report+0x4e/0x130
[  686.057027][  T808]  check_panic_on_warn+0x89/0xb0
[  686.057050][  T808]  ? __list_add_valid_or_report+0x4e/0x130
[  686.057066][  T808]  end_report+0x6f/0x140
[  686.057088][  T808]  kasan_report+0x128/0x150
[  686.057111][  T808]  ? __list_add_valid_or_report+0x4e/0x130
[  686.057132][  T808]  __list_add_valid_or_report+0x4e/0x130
[  686.057150][  T808]  kcov_remote_stop+0x457/0x680
[  686.057175][  T808]  hub_event+0x49d8/0x4f60
[  686.057214][  T808]  ? __pfx_hub_event+0x10/0x10
[  686.057231][  T808]  ? process_scheduled_works+0xa0f/0x17a0
[  686.057252][  T808]  ? process_scheduled_works+0xa0f/0x17a0
[  686.057269][  T808]  ? process_scheduled_works+0xa0f/0x17a0
[  686.057286][  T808]  process_scheduled_works+0xaec/0x17a0
[  686.057316][  T808]  ? __pfx_process_scheduled_works+0x10/0x10
[  686.057332][  T808]  ? do_raw_spin_lock+0x12b/0x2f0
[  686.057357][  T808]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  686.057379][  T808]  ? schedule+0x90/0x360
[  686.057408][  T808]  worker_thread+0xda6/0x1360
[  686.057432][  T808]  ? __kthread_parkme+0x19c/0x1f0
[  686.057453][  T808]  kthread+0x726/0x8b0
[  686.057475][  T808]  ? __pfx_worker_thread+0x10/0x10
[  686.057492][  T808]  ? __pfx_kthread+0x10/0x10
[  686.057510][  T808]  ? rt_spin_unlock+0x14f/0x200
[  686.057530][  T808]  ? rt_spin_unlock+0x160/0x200
[  686.057547][  T808]  ? __pfx_kthread+0x10/0x10
[  686.057567][  T808]  ret_from_fork+0x51b/0xa40
[  686.057586][  T808]  ? __pfx_ret_from_fork+0x10/0x10
[  686.057604][  T808]  ? __switch_to+0xc82/0x1410
[  686.057627][  T808]  ? __pfx_kthread+0x10/0x10
[  686.057647][  T808]  ret_from_fork_asm+0x1a/0x30
[  686.057677][  T808]  </TASK>
[  686.058030][  T808] Kernel Offset: disabled