last executing test programs:

7m19.87620058s ago: executing program 0 (id=821):
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = getpid()
prlimit64(r1, 0xf, &(0x7f0000000000)={0x10000, 0x3ff}, &(0x7f0000000040))
read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44040)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r3=>0xffffffffffffffff])
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
keyctl$chown(0x4, r2, 0xee01, r3)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000180))

7m16.220116302s ago: executing program 0 (id=825):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7m14.564829064s ago: executing program 0 (id=829):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60044084)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x6800)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_open_dev$dvb_demux(0x0, 0x401, 0x8000)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000100)=0x7)
fanotify_init(0x6400, 0x101000)
connect$rose(r1, 0x0, 0x0)

7m14.199958522s ago: executing program 0 (id=832):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f0", 0x82}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d", 0xd7}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32", 0xc7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60", 0xb0}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7m12.662576978s ago: executing program 0 (id=834):
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = getpid()
prlimit64(r1, 0xf, &(0x7f0000000000)={0x10000, 0x3ff}, &(0x7f0000000040))
read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44040)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r3=>0xffffffffffffffff])
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
keyctl$chown(0x4, r2, 0xee01, r3)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, &(0x7f0000000180))

7m7.691558815s ago: executing program 0 (id=842):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

6m52.178197974s ago: executing program 32 (id=842):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

3m44.280060934s ago: executing program 2 (id=1160):
socket(0xa, 0x3, 0x3a)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0)
r4 = gettid()
r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00')
write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETA(r3, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"})
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0)
fsopen(0x0, 0x1)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

3m41.365893239s ago: executing program 2 (id=1164):
keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44040)
getgroups(0x1, &(0x7f0000001080)=[<r1=>0xffffffffffffffff])
setgroups(0x0, &(0x7f0000000140))
keyctl$chown(0x4, 0x0, 0xee01, r1)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

3m40.170518998s ago: executing program 2 (id=1166):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x11c}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x28}}, 0x0)
dup(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
getpid()
r4 = open(0x0, 0x4c27e, 0x53)
close(r4)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000000c0))
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0xd, @local, 0x9}, 0x1c)

3m38.92182598s ago: executing program 2 (id=1169):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000000000000000000000b7080000000000007b8af8ff00000000b70800006c3200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES64=r0, @ANYBLOB="00000000000f0000b7112000080000008500000076000000950000000000c3f3"], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
fsmount(r4, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='rpc_pipefs\x00', 0x3000008, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))

3m35.368182476s ago: executing program 2 (id=1172):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
ioprio_get$pid(0x2, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)

3m34.063887791s ago: executing program 2 (id=1175):
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
memfd_create(0x0, 0x1)
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x120}}, 0x0)
msgrcv(0x0, &(0x7f0000000040)={0x0, ""/175}, 0xb7, 0x3, 0x800)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)=""/203)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa1c0}, [@jmp={0x5, 0x0, 0x5, 0x7, 0x3, 0x20, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x4e, &(0x7f0000000300)=""/78, 0x41000, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x3, 0x5}, 0x10, 0x6150, r2, 0x5, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0xb, 0x1d}, {0x2, 0x1, 0xb, 0x7}, {0x0, 0x3, 0xfffffc01}, {0x4, 0x4, 0xf, 0x8}, {0x0, 0x1, 0x8, 0x10}], 0x10, 0x4}, 0x94)

3m18.9631348s ago: executing program 33 (id=1175):
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
memfd_create(0x0, 0x1)
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x120}}, 0x0)
msgrcv(0x0, &(0x7f0000000040)={0x0, ""/175}, 0xb7, 0x3, 0x800)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)=""/203)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa1c0}, [@jmp={0x5, 0x0, 0x5, 0x7, 0x3, 0x20, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x4e, &(0x7f0000000300)=""/78, 0x41000, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x3, 0x5}, 0x10, 0x6150, r2, 0x5, 0x0, &(0x7f00000005c0)=[{0x2, 0x4, 0xb, 0x1d}, {0x2, 0x1, 0xb, 0x7}, {0x0, 0x3, 0xfffffc01}, {0x4, 0x4, 0xf, 0x8}, {0x0, 0x1, 0x8, 0x10}], 0x10, 0x4}, 0x94)

2m40.874435299s ago: executing program 4 (id=1258):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f0", 0x82}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356", 0x21}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d", 0xd7}, {&(0x7f00000010c0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32", 0xc7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60", 0xb0}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m39.509170107s ago: executing program 4 (id=1261):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r1, 0x82000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6800)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = syz_open_dev$dvb_demux(0x0, 0x401, 0x8000)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000100)=0x7)
fanotify_init(0x6400, 0x101000)
connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)

2m38.522252106s ago: executing program 4 (id=1262):
socket(0xa, 0x3, 0x3a)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0)
r4 = gettid()
r5 = syz_open_procfs(r4, &(0x7f0000000280)='timerslack_ns\x00')
write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETA(r3, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"})
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0)
fsopen(0x0, 0x1)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

2m36.436577269s ago: executing program 4 (id=1265):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x14, 0x0, 0x200, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4", 0x8f}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286d", 0x3d}], 0x5}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m33.120717804s ago: executing program 4 (id=1268):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x80000000, @empty, 0xe}, 0x1c)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000180)=0x7, 0x4)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffeffff}, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r8, 0x0)
io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r9, 0x400455c8, 0x0)
fanotify_init(0xf00, 0x1)
recvfrom$inet6(r0, &(0x7f00000003c0)=""/201, 0xc9, 0x0, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x20, 0xffffffffffffffff, 0x0)

2m29.58290448s ago: executing program 4 (id=1273):
r0 = socket(0xa, 0x3, 0x3a)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r3 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x2)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETA(r5, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"})
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0)
fsopen(0x0, 0x1)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x802000, @loopback}, {0xa, 0x4, 0xfffffffd, @mcast2}, 0x3, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400, 0xdfffffff]}}, 0x5c)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

2m14.404379222s ago: executing program 34 (id=1273):
r0 = socket(0xa, 0x3, 0x3a)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r3 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x2)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETA(r5, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"})
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0)
fsopen(0x0, 0x1)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x802000, @loopback}, {0xa, 0x4, 0xfffffffd, @mcast2}, 0x3, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400, 0xdfffffff]}}, 0x5c)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

32.168941814s ago: executing program 6 (id=1456):
gettid()
socket$packet(0x11, 0x1, 0x300)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)

31.990369793s ago: executing program 6 (id=1457):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffff2, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={r4, r5, 0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000080)=[0x0], 0x1, r4})
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)

30.059784539s ago: executing program 6 (id=1458):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x200002, 0x1, 0x3c789a})

23.475111645s ago: executing program 3 (id=1465):
gettid()
socket$packet(0x11, 0x1, 0x300)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)

22.495424294s ago: executing program 3 (id=1467):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

19.999456428s ago: executing program 6 (id=1469):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18070000000000000000", @ANYRES32, @ANYBLOB], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x16, &(0x7f0000000880)=""/22, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, r2], 0x0, 0x10, 0x2}, 0x94)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x40000, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000800)={'\x00', 0x9, 0xe, 0x1, 0x2b})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x26, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @jmp={0x5, 0x1, 0x2, 0x5, 0x3, 0x40, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x1000, &(0x7f0000001680)=""/4096, 0x100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x10, 0x3, 0x3}, 0x10, 0x1298d, r3, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, r4, r5, 0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x10}, 0x94)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

19.989182668s ago: executing program 3 (id=1470):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

17.291168012s ago: executing program 3 (id=1471):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"])
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000200)={0x12, {{0x29, 0x0, 0x3b000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x88)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r6=>0x0, 0x49, 0x8, 0x10, 0x0, {{0x16, 0x4, 0x2, 0x5, 0x58, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}, {[@generic={0x7, 0x5, "79c56a"}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x7, [0x5742, 0x2, 0x7]}, @end, @rr={0x7, 0xf, 0x2b, [@multicast2, @rand_addr=0x64010102, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x4, [{@local}, {@local, 0x2}]}, @generic={0x83, 0xb, "3dfc733b7c7b15a2d2"}]}}}}})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf250f0000005000018014000200767863616e31000000c4413a9fb6408508000100e5c140c304a2ce85d8d33d64170c0fbc18be9ed1d90647ac985226a2ec6a03d90e0649900cdef320e51c4b03b3b40cb391327301c9674517", @ANYRES32=r6, @ANYBLOB="1400020076657468315f766c616e0000000000000800030003000000140002007866726d30000000000000000000000028000180140002006d616376746170300000000000000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="58000180", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200766574683100000000000000000000001400020077673100000000000000000000000000080003000300000014000200626f6e645f736c6176655f31000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8d4}, 0x40004)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r5, @ANYBLOB="01000000e8ffffffffff0b00000048000580080001"], 0x5c}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0c0500c476c755", @ANYRES16=r5, @ANYBLOB="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"], 0x50c}, 0x1, 0x0, 0x0, 0x811}, 0x4000004)

16.833483275s ago: executing program 6 (id=1472):
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r1 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='*\x8b', 0xfffffffffffffffe)
keyctl$revoke(0x3, r1)
syz_open_dev$vim2m(&(0x7f0000002100), 0x8002, 0x2)
r2 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "bd6c3039", {0x3, 0x1, 0x0, 0x3, 0x0, 0x60, 0x5}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x4, 0x0)
waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket$unix(0x1, 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000080)={[{@subsystem='memory'}, {@subsystem='memory'}]})
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x40)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

15.891491342s ago: executing program 3 (id=1474):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0)
r5 = gettid()
r6 = syz_open_procfs(r5, &(0x7f0000000280)='timerslack_ns\x00')
write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"})
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

11.69991386s ago: executing program 6 (id=1477):
r0 = creat(0x0, 0x12e)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_clone3(&(0x7f00000000c0)={0x20006400, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58)
setitimer(0x2, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0)
write$char_usb(r4, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r6=>0x0})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = syz_open_procfs(0xffffffffffffffff, 0x0)
r9 = ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece)
accept$inet6(r0, 0x0, &(0x7f0000000280))
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000200)=@rnullb, 0x0, &(0x7f00000003c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000020000000700000007", @ANYBLOB="018000000000000079053e39870000000000", @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="01000000050000000300"/28], 0x50)
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

11.588738725s ago: executing program 3 (id=1479):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

9.841935712s ago: executing program 1 (id=1483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getown(r0, 0x9)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="38010000100001002dbd7000fedbdf25fe80000000000000000000000000000aff0100000000000000000000000000014e22ecdf4e2300000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d232000000ffffffff000000000000000000000000fefffffffffffffffeffffffffffffff0300000000000000000000000000000000000000e0000000feffffffffffffffffffffffffffffff0900000000000000fdffffffffffffff040840000000000009000000000000000002000000000000000000000000000000000000f1ffffffffffffff020002002c00000000000000480002006362632863616d656c6c69612900"/240], 0x138}}, 0x10044050)
socket(0x10, 0x3, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r6, r5, &(0x7f00000000c0)=0x8b, 0x100000500)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x6000)
setresuid(0xee01, r7, r7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f0000000b80)={0x2, 0x200, @status={[0x1, 0xf, 0x1, 0x6, 0x8, 0xa00000000]}, [0x3, 0x7f, 0x9, 0x100000001, 0x9, 0x9525, 0x2, 0x9, 0xe5, 0x0, 0x3, 0x7, 0x7, 0x0, 0x1, 0x6, 0x2, 0x0, 0x40, 0xb, 0x4, 0xffffffffffffffff, 0x6, 0x8, 0x2, 0x6, 0x2, 0x5, 0x4, 0x5, 0x800, 0x5, 0x4, 0x7ff, 0x8000000000000001, 0xb, 0x9, 0x8, 0xcf0b, 0x2, 0x3, 0x6b4b, 0xc22, 0x80, 0x9, 0xffffffff, 0xffffffffffffffbd, 0x7fffffff, 0x1ff, 0x100000000, 0x9, 0xb, 0x6, 0x10001, 0x80000001, 0x0, 0x9, 0x80000001, 0x7, 0x6, 0x7, 0xfffffffffffffff9]})
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="da3300002700090025bd7000ffd3df250100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0)

7.897055838s ago: executing program 1 (id=1484):
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6)
r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB], 0x33}, 0x1, 0x0, 0x0, 0xc13d988464ab0c39}, 0x20040041)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f00000000c0)=0x40, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c})
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000280)='-1\x00', 0x3)
openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48)
mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe)

7.441273831s ago: executing program 5 (id=1485):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x2, 0x0, &(0x7f00000001c0))
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
socket$alg(0x26, 0x5, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000500)={0x9, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1)
r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, 0x0, 0x0)
getsockopt(r8, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6)

6.319627057s ago: executing program 5 (id=1486):
r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2})
r1 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1)

6.06018431s ago: executing program 5 (id=1487):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='cpuset\x00', 0x820000, 0x0)
r5 = gettid()
r6 = syz_open_procfs(r5, &(0x7f0000000280)='timerslack_ns\x00')
write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"})
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x92103, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04000f08"], 0x7)

4.893911077s ago: executing program 1 (id=1488):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r0, &(0x7f00000012c0)="a5", 0x1)

3.969329613s ago: executing program 5 (id=1489):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpid()
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)

3.918142786s ago: executing program 1 (id=1490):
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
membarrier(0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7edad9ca3", 0x5}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/97, 0x61}], 0x2}, 0x10150)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0)

2.379557152s ago: executing program 1 (id=1491):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000200)=""/80, 0xfffffff1, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f0000000940)=""/224, 0xe0, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xb8, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000740)={0x2, 0x0, {&(0x7f0000000300)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)

2.119393105s ago: executing program 5 (id=1492):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x6, 0x4)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

693.590855ms ago: executing program 5 (id=1493):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x14, 0x0, 0x200, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4", 0x8f}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c", 0x18}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc", 0x41}], 0x5}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 1 (id=1494):
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000300), 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.206' (ED25519) to the list of known hosts.
syzkaller login: [   81.200978][ T5757] cgroup: Unknown subsys name 'net'
[   81.315048][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.042847][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.574570][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.583285][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.591170][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.626842][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.634741][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.642259][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.723362][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.732770][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.740598][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.748958][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.757009][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.764543][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.787095][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.795248][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.805901][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.814621][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.823555][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.831718][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.840143][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.848448][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.855890][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.893481][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.901413][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.917114][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.244608][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   85.434495][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   85.454612][ T5773] chnl_net:caif_netlink_parms(): no params data found
[   85.467061][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.474269][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.482370][ T5769] bridge_slave_0: entered allmulticast mode
[   85.489859][ T5769] bridge_slave_0: entered promiscuous mode
[   85.533627][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.540987][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.549012][ T5769] bridge_slave_1: entered allmulticast mode
[   85.556008][ T5769] bridge_slave_1: entered promiscuous mode
[   85.573583][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   85.646427][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.684698][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.742882][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.751923][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.759528][ T5774] bridge_slave_0: entered allmulticast mode
[   85.766531][ T5774] bridge_slave_0: entered promiscuous mode
[   85.808663][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.815953][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.825731][ T5774] bridge_slave_1: entered allmulticast mode
[   85.833480][ T5774] bridge_slave_1: entered promiscuous mode
[   85.845958][ T5769] team0: Port device team_slave_0 added
[   85.871854][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.879297][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.887051][ T5773] bridge_slave_0: entered allmulticast mode
[   85.894507][ T5773] bridge_slave_0: entered promiscuous mode
[   85.912463][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.919773][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.927408][ T5773] bridge_slave_1: entered allmulticast mode
[   85.935815][ T5773] bridge_slave_1: entered promiscuous mode
[   85.944168][ T5769] team0: Port device team_slave_1 added
[   86.026973][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.036369][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.043991][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.051453][ T5772] bridge_slave_0: entered allmulticast mode
[   86.058892][ T5772] bridge_slave_0: entered promiscuous mode
[   86.070353][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.077474][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.103669][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.118837][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.133466][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.142898][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.150523][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.157908][ T5772] bridge_slave_1: entered allmulticast mode
[   86.164926][ T5772] bridge_slave_1: entered promiscuous mode
[   86.173208][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.180423][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.208931][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.227593][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.308038][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.320085][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.332408][ T5773] team0: Port device team_slave_0 added
[   86.352806][ T5774] team0: Port device team_slave_0 added
[   86.380883][ T5773] team0: Port device team_slave_1 added
[   86.413638][ T5772] team0: Port device team_slave_0 added
[   86.421883][ T5774] team0: Port device team_slave_1 added
[   86.454966][ T5769] hsr_slave_0: entered promiscuous mode
[   86.461923][ T5769] hsr_slave_1: entered promiscuous mode
[   86.480893][ T5772] team0: Port device team_slave_1 added
[   86.512175][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.519525][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.545604][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.558548][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.565550][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.595195][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.608915][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.615926][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.642343][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.675780][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.680324][ T5083] Bluetooth: hci0: command tx timeout
[   86.690472][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.717004][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.743440][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.750681][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.777340][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.790437][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.797814][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.823867][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.836985][ T5083] Bluetooth: hci1: command tx timeout
[   86.916940][ T5083] Bluetooth: hci3: command tx timeout
[   86.930384][ T5774] hsr_slave_0: entered promiscuous mode
[   86.937279][ T5774] hsr_slave_1: entered promiscuous mode
[   86.943740][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.952111][ T5774] Cannot create hsr debugfs directory
[   86.964339][ T5773] hsr_slave_0: entered promiscuous mode
[   86.972437][ T5773] hsr_slave_1: entered promiscuous mode
[   86.979266][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.987052][ T5773] Cannot create hsr debugfs directory
[   87.006853][ T5083] Bluetooth: hci2: command tx timeout
[   87.134644][ T5772] hsr_slave_0: entered promiscuous mode
[   87.145340][ T5772] hsr_slave_1: entered promiscuous mode
[   87.153287][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.168568][ T5772] Cannot create hsr debugfs directory
[   87.673996][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.702774][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.714137][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.725456][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.803503][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.823745][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.862173][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.892411][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.941918][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.970697][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.981404][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.013410][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.059632][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.091603][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.104871][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.124623][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   88.134221][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.145547][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.171893][  T988] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.179317][  T988] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.217317][  T988] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.224488][  T988] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.382596][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.401773][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.474825][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   88.521161][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.540218][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.547448][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.565774][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.573013][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.604067][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.647949][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   88.694534][  T988] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.701757][  T988] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.720226][ T5773] 8021q: adding VLAN 0 to HW filter on device team0
[   88.741387][  T988] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.748618][  T988] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.756915][ T5083] Bluetooth: hci0: command tx timeout
[   88.801541][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.808784][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.866035][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.873232][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.899576][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.917644][ T5083] Bluetooth: hci1: command tx timeout
[   89.007147][ T5083] Bluetooth: hci3: command tx timeout
[   89.077573][ T5083] Bluetooth: hci2: command tx timeout
[   89.124406][ T5769] veth0_vlan: entered promiscuous mode
[   89.189545][ T5769] veth1_vlan: entered promiscuous mode
[   89.336192][ T5769] veth0_macvtap: entered promiscuous mode
[   89.369054][ T5769] veth1_macvtap: entered promiscuous mode
[   89.441729][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.462001][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.493574][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.513869][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.523216][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.532496][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.541689][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.595464][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.654570][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.672840][ T5774] veth0_vlan: entered promiscuous mode
[   89.718076][ T5774] veth1_vlan: entered promiscuous mode
[   89.823030][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.848546][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.861825][ T5774] veth0_macvtap: entered promiscuous mode
[   89.880092][ T5774] veth1_macvtap: entered promiscuous mode
[   89.904484][ T5772] veth0_vlan: entered promiscuous mode
[   89.914189][ T5773] veth0_vlan: entered promiscuous mode
[   89.946837][  T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.954839][  T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.971499][ T5772] veth1_vlan: entered promiscuous mode
[   89.981663][ T5773] veth1_vlan: entered promiscuous mode
[   90.009129][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.026026][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.050130][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.090330][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.102640][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.114557][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.145193][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.158679][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.169281][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.178480][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.203133][ T5773] veth0_macvtap: entered promiscuous mode
[   90.262074][ T5773] veth1_macvtap: entered promiscuous mode
[   90.291531][ T5772] veth0_macvtap: entered promiscuous mode
[   90.354226][ T5772] veth1_macvtap: entered promiscuous mode
[   90.389319][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.428192][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.439992][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.450876][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.462909][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.484017][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.496258][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.508075][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.519851][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.532337][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.545144][ T5834] warning: `syz.0.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   90.604449][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.614906][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.626168][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.636192][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.649742][  T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.658165][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.671189][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.687443][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.689828][  T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.727450][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.744741][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.755311][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.769664][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.815403][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.832966][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.843443][ T5083] Bluetooth: hci0: command tx timeout
[   90.850046][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.861256][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.871432][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.882319][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.894236][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.906144][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.915075][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.925858][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.934938][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.987456][ T5838] syz.0.6[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   90.996773][ T5083] Bluetooth: hci1: command tx timeout
[   91.022911][  T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.065901][  T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.077158][ T5083] Bluetooth: hci3: command tx timeout
[   91.135168][  T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.159295][ T5083] Bluetooth: hci2: command tx timeout
[   91.165276][  T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.232347][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.272933][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.302364][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.325239][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.370680][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.396949][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.354832][    T9] cfg80211: failed to load regulatory.db
[   92.857737][ T5853] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.916894][ T5083] Bluetooth: hci0: command tx timeout
[   93.077766][ T5083] Bluetooth: hci1: command tx timeout
[   93.157356][ T5083] Bluetooth: hci3: command tx timeout
[   93.236888][ T5083] Bluetooth: hci2: command tx timeout
[   94.407043][ T5860] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   95.527083][   T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   95.736727][   T27] usb 3-1: Using ep0 maxpacket: 8
[   95.745376][   T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   95.770607][   T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   95.787217][   T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   95.797530][   T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   95.810987][   T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   95.820688][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.059414][   T27] usb 3-1: GET_CAPABILITIES returned 0
[   96.086719][   T27] usbtmc 3-1:16.0: can't read capabilities
[   96.378343][  T787] usb 3-1: USB disconnect, device number 2
[  104.763585][ T5911] syzkaller0: entered promiscuous mode
[  104.796726][ T5911] syzkaller0: entered allmulticast mode
[  106.526910][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  124.290501][  T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  124.668716][  T787] usb 3-1: Using ep0 maxpacket: 32
[  124.738705][  T787] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  124.849027][  T787] usb 3-1: config 0 has no interface number 0
[  124.860434][  T787] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  124.875333][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.893858][  T787] usb 3-1: Product: syz
[  124.899897][  T787] usb 3-1: Manufacturer: syz
[  124.914805][  T787] usb 3-1: SerialNumber: syz
[  124.983795][  T787] usb 3-1: config 0 descriptor??
[  125.018802][  T787] smsc95xx v2.0.0
[  125.433031][  T787] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  125.490383][  T787] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  125.606816][   T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  125.796691][   T27] usb 4-1: Using ep0 maxpacket: 32
[  125.804161][   T27] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  125.966731][   T27] usb 4-1: config 0 has no interface number 0
[  125.986035][   T27] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  126.016730][   T27] usb 4-1: config 0 interface 85 has no altsetting 0
[  126.220848][  T787] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  126.399285][  T787] smsc95xx: probe of 3-1:0.67 failed with error -71
[  126.431720][  T787] usb 3-1: USB disconnect, device number 3
[  126.896813][   T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  126.912652][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.930806][   T27] usb 4-1: Product: syz
[  126.935148][   T27] usb 4-1: Manufacturer: syz
[  127.186693][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  128.665131][   T27] usb 4-1: SerialNumber: syz
[  128.777217][   T27] usb 4-1: config 0 descriptor??
[  128.851139][   T27] usb 4-1: can't set config #0, error -71
[  128.931512][   T27] usb 4-1: USB disconnect, device number 2
[  132.126834][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.796829][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  132.986633][    T9] usb 2-1: Using ep0 maxpacket: 32
[  133.008841][    T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  133.046607][    T9] usb 2-1: config 0 has no interface number 0
[  133.078933][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  133.094730][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.104648][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.136712][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.144879][    T9] usb 2-1: Product: syz
[  133.149694][    T9] usb 2-1: Manufacturer: syz
[  133.155052][    T9] usb 2-1: SerialNumber: syz
[  133.170545][    T9] usb 2-1: config 0 descriptor??
[  133.241494][    T9] smsc95xx v2.0.0
[  133.317231][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'.
[  133.466025][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.474288][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.652202][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  133.679004][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  134.254218][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  134.282319][    T9] smsc95xx: probe of 2-1:0.67 failed with error -71
[  134.307039][    T9] usb 2-1: USB disconnect, device number 2
[  138.476559][ T6161] mkiss: ax0: crc mode is auto.
[  144.926914][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  157.027238][ T6265] syzkaller0: entered promiscuous mode
[  157.032787][ T6265] syzkaller0: entered allmulticast mode
[  158.679109][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  158.684710][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[  160.202892][ T6288] syzkaller0: entered promiscuous mode
[  160.208611][ T6288] syzkaller0: entered allmulticast mode
[  162.615568][ T6306] mkiss: ax0: crc mode is auto.
[  162.846864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  164.244128][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'.
[  168.146881][ T6330] process 'syz.1.150' launched './file1' with NULL argv: empty string added
[  170.011808][ T6339] mkiss: ax0: crc mode is auto.
[  170.526860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[  171.675004][ T6343] Device name cannot be null; rc = [-22]
[  172.116575][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.124750][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.154640][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'.
[  172.526052][ T6351] syzkaller0: entered promiscuous mode
[  172.556814][ T6351] syzkaller0: entered allmulticast mode
[  174.969331][ T6377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.768743][ T6377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.791409][ T6385] Falling back ldisc for ttyprintk.
[  177.122789][ T6377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.478996][ T6377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.871213][ T6377] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.004196][ T6377] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.064380][ T6377] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.161655][ T6377] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.552068][ T6395] syzkaller0: entered promiscuous mode
[  178.629545][ T6395] syzkaller0: entered allmulticast mode
[  181.511192][ T6406] sched: RT throttling activated
[  184.328696][ T6431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.707037][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.750138][ T6434] xt_hashlimit: size too large, truncated to 1048576
[  184.860175][ T6436] syzkaller0: entered promiscuous mode
[  184.890032][ T6436] syzkaller0: entered allmulticast mode
[  186.573288][ T6447] netlink: 'syz.3.176': attribute type 1 has an invalid length.
[  186.736778][ T3384] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  186.748860][ T6447] 8021q: adding VLAN 0 to HW filter on device bond1
[  186.803928][ T6448] bond1: (slave gretap1): making interface the new active one
[  186.890896][ T6448] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  187.205474][ T3384] usb 4-1: unable to get BOS descriptor or descriptor too short
[  187.226634][ T3384] usb 4-1: no configurations
[  187.231351][ T3384] usb 4-1: can't read configurations, error -22
[  187.810074][ T6448] syz.3.176 (6448) used greatest stack depth: 19824 bytes left
[  189.015941][ T6465] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.180'.
[  192.134066][ T6479] syzkaller0: entered promiscuous mode
[  192.156946][ T6479] syzkaller0: entered allmulticast mode
[  194.525148][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.531529][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  196.126779][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  198.878865][ T6520] syzkaller0: entered promiscuous mode
[  198.884411][ T6520] syzkaller0: entered allmulticast mode
[  200.538399][ T6540] random: crng reseeded on system resumption
[  200.897703][ T6541] syz.0.201: attempt to access beyond end of device
[  200.897703][ T6541] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[  201.497713][ T6541] FAT-fs (nbd0): unable to read boot sector
[  206.261475][ T6564] hfs: can't find a HFS filesystem on dev nullb0
[  207.057413][ T5779] Bluetooth: hci0: command 0x0406 tx timeout
[  207.803379][ T6569] hfs: can't find a HFS filesystem on dev nullb0
[  211.329044][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  211.449032][ T6597] affs: No valid root block on device nullb0
[  211.470252][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'.
[  211.985665][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  211.993962][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  212.178750][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  212.444274][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[  212.964846][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[  214.046846][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!!
[  214.456680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  215.278332][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'.
[  217.837986][ T6622] mkiss: ax0: crc mode is auto.
[  219.396676][ T5083] Bluetooth: hci0: command 0x0406 tx timeout
[  219.682096][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'.
[  222.476598][ T3384] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  222.706542][ T3384] usb 4-1: Using ep0 maxpacket: 32
[  222.732232][ T3384] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  222.764584][ T3384] usb 4-1: config 0 has no interface number 0
[  222.784049][ T3384] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  222.797329][ T3384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.805558][ T3384] usb 4-1: Product: syz
[  222.810678][ T3384] usb 4-1: Manufacturer: syz
[  222.823958][ T3384] usb 4-1: SerialNumber: syz
[  222.889077][ T3384] usb 4-1: config 0 descriptor??
[  222.927519][ T3384] smsc95xx v2.0.0
[  223.673895][ T6660] mkiss: ax0: crc mode is auto.
[  223.726519][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  225.068896][ T3384] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  225.103355][ T3384] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  225.150167][ T3384] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  225.186927][ T3384] smsc95xx: probe of 4-1:0.67 failed with error -71
[  225.217871][ T3384] usb 4-1: USB disconnect, device number 5
[  225.396642][ T5083] Bluetooth: hci0: command 0x0406 tx timeout
[  228.811575][ T6690] mkiss: ax0: crc mode is auto.
[  235.154174][ T6730] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  235.161158][ T6730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  235.185765][ T6730] vhci_hcd vhci_hcd.0: Device attached
[  235.466923][   T23] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  235.497319][ T6735] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13)
[  235.503990][ T6735] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  235.782067][ T6735] vhci_hcd vhci_hcd.0: Device attached
[  235.854451][ T6730] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16)
[  235.861137][ T6730] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  235.890708][ T6730] vhci_hcd vhci_hcd.0: Device attached
[  235.999049][ T6735] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15)
[  236.005733][ T6735] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  236.015810][ T6730] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18)
[  236.022488][ T6730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  236.118633][ T6747] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24)
[  236.118655][ T6735] vhci_hcd vhci_hcd.0: Device attached
[  236.125299][ T6747] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  236.526616][ T6730] vhci_hcd vhci_hcd.0: Device attached
[  236.537742][ T6730] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  236.586529][ T6747] vhci_hcd vhci_hcd.0: Device attached
[  236.870136][ T6735] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(20)
[  236.876844][ T6735] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  236.895792][ T6735] vhci_hcd vhci_hcd.0: Device attached
[  238.276838][ T6754] vhci_hcd: connection closed
[  238.289526][ T6737] vhci_hcd: connection closed
[  238.294509][ T6740] vhci_hcd: connection closed
[  238.299545][ T6732] vhci_hcd: connection reset by peer
[  238.306717][ T6750] vhci_hcd: connection closed
[  238.319871][ T6745] vhci_hcd: connection closed
[  238.324826][ T6743] vhci_hcd: connection closed
[  238.329788][ T1006] vhci_hcd: stop threads
[  238.372023][ T1006] vhci_hcd: release socket
[  238.413697][ T1006] vhci_hcd: disconnect device
[  238.447776][ T1006] vhci_hcd: stop threads
[  238.452150][ T1006] vhci_hcd: release socket
[  238.481813][ T1006] vhci_hcd: disconnect device
[  238.543331][ T1006] vhci_hcd: stop threads
[  238.556584][ T1006] vhci_hcd: release socket
[  238.571103][ T1006] vhci_hcd: disconnect device
[  238.577665][ T1006] vhci_hcd: stop threads
[  238.592242][ T1006] vhci_hcd: release socket
[  238.597015][ T1006] vhci_hcd: disconnect device
[  238.616734][ T1006] vhci_hcd: stop threads
[  238.623520][ T1006] vhci_hcd: release socket
[  239.796602][ T1006] vhci_hcd: disconnect device
[  239.828121][ T1006] vhci_hcd: stop threads
[  239.832634][ T1006] vhci_hcd: release socket
[  239.854022][ T1006] vhci_hcd: disconnect device
[  239.872358][ T1006] vhci_hcd: stop threads
[  239.886753][ T1006] vhci_hcd: release socket
[  239.907108][ T1006] vhci_hcd: disconnect device
[  240.621482][   T23] vhci_hcd: vhci_device speed not set
[  247.968136][ T6804] autofs4:pid:6804:autofs_fill_super: called with bogus options
[  253.601335][ T6840] syzkaller0: entered promiscuous mode
[  253.629749][ T6840] syzkaller0: entered allmulticast mode
[  253.666679][ T6608] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  253.895650][ T6608] usb 3-1: Using ep0 maxpacket: 32
[  253.919989][ T6608] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  253.959787][ T6608] usb 3-1: config 0 has no interface number 0
[  254.006636][ T6608] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  254.054191][ T6608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.080455][ T6608] usb 3-1: Product: syz
[  254.101804][ T6608] usb 3-1: Manufacturer: syz
[  254.116661][ T6608] usb 3-1: SerialNumber: syz
[  254.147925][ T6608] usb 3-1: config 0 descriptor??
[  254.191458][ T6608] smsc95xx v2.0.0
[  255.041628][ T6608] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  255.085031][ T6608] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  255.242149][ T6608] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  255.339847][ T6608] smsc95xx: probe of 3-1:0.67 failed with error -71
[  255.370445][ T6608] usb 3-1: USB disconnect, device number 4
[  256.936337][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  256.942833][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  262.080656][ T5829] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  262.497642][ T6889] binder: 6884:6889 ioctl 4018620d 0 returned -22
[  262.568147][ T6889] binder: 6884:6889 ioctl c0306201 0 returned -14
[  262.576776][ T5829] usb 1-1: Using ep0 maxpacket: 8
[  262.588783][ T5829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  262.612589][ T5829] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  262.636736][ T5829] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  262.655364][ T5829] usb 1-1: Product: syz
[  262.675405][ T5829] usb 1-1: Manufacturer: syz
[  262.746943][ T5829] usb 1-1: SerialNumber: syz
[  262.989306][ T5829] usb 1-1: Handspring Visor / Palm OS: No valid connect info available
[  263.021832][ T5829] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  263.064472][ T5829] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  263.102762][ T5829] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  263.190533][ T5829] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  263.271059][ T5829] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  263.407842][ T5829] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  263.467572][ T5829] usb 1-1: USB disconnect, device number 2
[  263.625402][ T5829] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  263.669474][ T5829] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  263.681528][ T5829] visor 1-1:1.0: device disconnected
[  267.824329][ T6916] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.303'.
[  269.748819][   T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  269.958213][   T27] usb 2-1: Using ep0 maxpacket: 8
[  269.973668][   T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  269.986420][   T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  270.001038][   T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  270.011829][   T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  270.025473][   T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  270.035081][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.146607][    T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  270.346603][    T8] usb 1-1: Using ep0 maxpacket: 32
[  270.361870][    T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  270.393736][    T8] usb 1-1: config 0 has no interface number 0
[  270.416805][    T8] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  270.434293][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.444787][    T8] usb 1-1: Product: syz
[  270.450440][    T8] usb 1-1: Manufacturer: syz
[  270.463711][    T8] usb 1-1: SerialNumber: syz
[  270.485181][    T8] usb 1-1: config 0 descriptor??
[  270.511356][    T8] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  270.535481][   T27] usb 2-1: GET_CAPABILITIES returned 0
[  270.545115][   T27] usbtmc 2-1:16.0: can't read capabilities
[  270.561639][    T8] usb 1-1: selecting invalid altsetting 1
[  270.584398][    T8] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  270.659595][    T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  270.683887][    T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  270.693971][    T8] usb 1-1: media controller created
[  270.731322][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  272.588126][ T6932] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  272.639463][    T8] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  272.665096][    T8] zl10353_read_register: readreg error (reg=127, ret==-71)
[  272.687344][   T27] usb 2-1: USB disconnect, device number 3
[  272.750909][    T8] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  272.870649][ T6943] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.312'.
[  273.000708][    T8] usb 1-1: USB disconnect, device number 3
[  282.928767][ T7002] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  283.086560][ T7005] Device name cannot be null; rc = [-22]
[  285.456744][ T5759] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  285.685210][ T7026] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  285.867212][  T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  285.913581][ T5759] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  285.955224][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.016066][ T5759] usb 3-1: Product: syz
[  286.050366][ T5759] usb 3-1: Manufacturer: syz
[  286.103052][ T5759] usb 3-1: SerialNumber: syz
[  286.191684][  T787] usb 2-1: Using ep0 maxpacket: 32
[  286.221473][  T787] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  286.232069][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.244201][  T787] usb 2-1: Product: syz
[  286.251901][  T787] usb 2-1: Manufacturer: syz
[  286.260808][ T5759] usb 3-1: config 0 descriptor??
[  286.275759][  T787] usb 2-1: SerialNumber: syz
[  286.308729][  T787] usb 2-1: config 0 descriptor??
[  286.331535][  T787] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  288.560744][ T5759] usb 3-1: Firmware version (0.0) predates our first public release.
[  288.576870][  T787] gspca_ov534_9: reg_w failed -110
[  288.586328][ T5759] usb 3-1: Please update to version 0.2 or newer
[  288.800137][ T5759] usb 3-1: USB disconnect, device number 5
[  289.855241][  T787] gspca_ov534_9: Unknown sensor 0000
[  289.855336][  T787] ov534_9: probe of 2-1:0.0 failed with error -22
[  289.872736][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'.
[  290.035702][  T787] usb 2-1: USB disconnect, device number 4
[  294.934625][ T7077] comedi comedi3: pcmda12: I/O port conflict (0x3,16)
[  295.328770][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'.
[  302.426607][ T5759] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  302.626584][ T5759] usb 4-1: Using ep0 maxpacket: 32
[  302.637942][ T5759] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.648444][ T5759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  302.668838][ T5759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  302.685459][ T5759] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  302.712056][ T5759] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  302.725216][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  302.740340][ T5759] usb 4-1: Product: syz
[  302.745473][ T5759] usb 4-1: Manufacturer: syz
[  302.750820][ T5759] usb 4-1: SerialNumber: syz
[  302.760092][ T5759] usb 4-1: config 0 descriptor??
[  302.774331][ T5759] usb 4-1: no audio or video endpoints found
[  302.975124][ T5759] usb 4-1: USB disconnect, device number 6
[  304.487372][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'.
[  309.136675][ T6608] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  309.336733][ T6608] usb 3-1: Using ep0 maxpacket: 32
[  309.354528][ T6608] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  309.385801][ T6608] usb 3-1: config 0 has no interface number 0
[  309.402921][ T6608] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  309.412563][ T6608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.421119][ T6608] usb 3-1: Product: syz
[  309.425591][ T6608] usb 3-1: Manufacturer: syz
[  309.430691][ T6608] usb 3-1: SerialNumber: syz
[  309.454590][ T6608] usb 3-1: config 0 descriptor??
[  309.465145][ T6608] smsc95xx v2.0.0
[  311.620161][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  311.626705][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[  312.399862][ T6608] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  312.421466][ T6608] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  312.614316][ T6608] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  312.639303][ T6608] smsc95xx: probe of 3-1:0.67 failed with error -71
[  312.662118][ T6608] usb 3-1: USB disconnect, device number 6
[  313.862292][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'.
[  318.078002][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  318.084361][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  320.257966][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  325.476600][ T6930] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  325.687586][ T6930] usb 1-1: Using ep0 maxpacket: 32
[  325.717852][ T6930] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  325.730178][ T6930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.738993][ T6930] usb 1-1: Product: syz
[  325.743408][ T6930] usb 1-1: Manufacturer: syz
[  325.749410][ T6930] usb 1-1: SerialNumber: syz
[  325.806977][ T6930] usb 1-1: config 0 descriptor??
[  325.831508][ T6930] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  325.865738][ T6930] dvb-usb: bulk message failed: -22 (4/0)
[  325.893756][ T6930] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  325.927205][ T6930] dvb-usb: bulk message failed: -22 (5/0)
[  325.933039][ T6930] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  325.998627][ T6930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  326.039250][ T6930] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  326.057419][ T6930] usb 1-1: media controller created
[  326.161108][ T6930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  326.236301][ T6930] usb 1-1: selecting invalid altsetting 3
[  326.252765][ T6930] ttusb2: set interface to alts=3 failed
[  326.405669][ T6930] DVB: Unable to find symbol tda10086_attach()
[  326.424066][ T6930] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  326.454217][ T6930] dvb-usb: bulk message failed: -22 (4/0)
[  326.475157][ T6930] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  326.513766][ T6930] dvb-usb: bulk message failed: -22 (5/0)
[  326.523800][ T6930] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  326.535418][ T6930] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  326.604659][ T6930] usb 1-1: USB disconnect, device number 4
[  326.782271][ T6930] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  330.677289][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  332.266653][ T6608] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  332.470821][ T6608] usb 4-1: Using ep0 maxpacket: 32
[  332.491348][ T6608] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  332.512651][ T6608] usb 4-1: config 0 has no interface number 0
[  332.546844][ T6608] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  332.566557][ T6608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.576254][ T6608] usb 4-1: Product: syz
[  332.591013][ T6608] usb 4-1: Manufacturer: syz
[  332.595693][ T6608] usb 4-1: SerialNumber: syz
[  332.628732][ T6608] usb 4-1: config 0 descriptor??
[  332.645618][ T6608] smsc95xx v2.0.0
[  333.059464][ T6608] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  333.096143][ T6608] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  335.092514][ T6608] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  335.128657][ T6608] smsc95xx: probe of 4-1:0.67 failed with error -71
[  335.160785][ T6608] usb 4-1: USB disconnect, device number 7
[  341.047211][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  342.746624][   T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  342.957270][   T27] usb 4-1: Using ep0 maxpacket: 16
[  342.965696][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.988927][   T27] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  343.026515][   T27] usb 4-1: config 1 has no interface number 1
[  343.033740][   T27] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  343.055835][   T27] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  343.094226][   T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  343.119102][   T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  343.156787][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.178820][   T27] usb 4-1: Product: syz
[  343.183279][   T27] usb 4-1: Manufacturer: syz
[  343.209568][   T27] usb 4-1: SerialNumber: syz
[  343.458922][   T27] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  343.790314][   T27] usb 4-1: USB disconnect, device number 8
[  345.335083][ T7375] Zero length message leads to an empty skb
[  351.031349][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  351.038626][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  358.091289][   T36] Bluetooth: hci4: Frame reassembly failed (-84)
[  360.037525][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  360.044955][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  371.476617][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  371.477051][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  378.841169][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.849494][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  380.785905][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  380.793167][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  389.926570][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  389.935290][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  391.731194][ T7605] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  397.561348][ T5779] Bluetooth: hci4: command 0x1003 tx timeout
[  397.569039][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  397.737856][   T27] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  398.181007][   T27] usb 3-1: unable to get BOS descriptor or descriptor too short
[  398.210665][   T27] usb 3-1: not running at top speed; connect to a high speed hub
[  398.227521][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  398.263343][   T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  398.301957][   T27] usb 3-1: string descriptor 0 read error: -22
[  398.315299][   T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  398.339849][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.381066][   T27] usb 3-1: 0:2 : does not exist
[  399.296277][   T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  399.352396][   T27] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  399.395002][   T27] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  399.465061][   T27] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  399.534784][   T27] usb 3-1: USB disconnect, device number 7
[  401.205703][ T7659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.424316][ T7659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.639863][ T7659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.842552][ T7659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.540465][ T7659] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.692564][ T7659] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.723905][ T7659] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.773380][ T7659] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.104765][ T5777] Bluetooth: hci3: unexpected event for opcode 0x080f
[  408.876688][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  409.154643][ T5779] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  409.164181][ T5779] Bluetooth: hci3: Injecting HCI hardware error event
[  409.173926][ T5779] Bluetooth: hci3: hardware error 0x00
[  411.455779][ T7712] mkiss: ax0: crc mode is auto.
[  412.011955][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  417.262038][ T7735] mkiss: ax0: crc mode is auto.
[  426.732019][ T7771] mkiss: ax0: crc mode is auto.
[  427.582249][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[  427.583181][ T5083] Bluetooth: hci2: unexpected event for opcode 0x080f
[  427.591653][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  432.797240][ T5779] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  432.806061][ T5779] Bluetooth: hci2: Injecting HCI hardware error event
[  432.822561][ T5779] Bluetooth: hci2: hardware error 0x00
[  436.579744][ T5779] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  438.440982][ T7813] mkiss: ax0: crc mode is auto.
[  439.666394][ T5779] Bluetooth: hci1: unexpected event for opcode 0x080f
[  440.401676][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.415503][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  444.628215][ T5779] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  444.638499][ T5779] Bluetooth: hci1: Injecting HCI hardware error event
[  444.646871][ T5083] Bluetooth: hci1: hardware error 0x00
[  444.682393][ T1330] Bluetooth: hci4: Frame reassembly failed (-84)
[  446.654525][ T5779] Bluetooth: hci4: command 0x1003 tx timeout
[  446.654603][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  448.682875][ T5083] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  453.045434][ T7873] mkiss: ax0: crc mode is auto.
[  464.166869][ T7923] mkiss: ax0: crc mode is auto.
[  466.105261][ T7932] mkiss: ax0: crc mode is auto.
[  476.004870][ T7964] mkiss: ax0: crc mode is auto.
[  477.571541][ T7972] mkiss: ax0: crc mode is auto.
[  488.234206][ T8014] mkiss: ax0: crc mode is auto.
[  490.355506][ T8018] mkiss: ax0: crc mode is auto.
[  501.300941][ T8066] mkiss: ax0: crc mode is auto.
[  502.136605][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  502.143019][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  503.040704][ T8069] mkiss: ax0: crc mode is auto.
[  510.848183][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  513.127758][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  513.181982][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  515.021970][ T8115] mkiss: ax0: crc mode is auto.
[  516.658527][ T8125] mkiss: ax0: crc mode is auto.
[  524.217279][ T8166] mkiss: ax0: crc mode is auto.
[  525.179612][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  525.185250][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  529.871990][ T8183] mkiss: ax0: crc mode is auto.
[  533.299486][ T8208] mkiss: ax0: crc mode is auto.
[  536.284492][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  538.060024][ T8229] mkiss: ax0: crc mode is auto.
[  538.968732][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  542.754927][ T8237] mkiss: ax0: crc mode is auto.
[  549.686551][ T8276] random: crng reseeded on system resumption
[  549.722655][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  552.855577][ T8287] mkiss: ax0: crc mode is auto.
[  557.286447][ T8322] mkiss: ax0: crc mode is auto.
[  561.815989][ T8340] random: crng reseeded on system resumption
[  563.817881][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  563.829646][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.836758][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  566.754018][  T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  566.975265][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.057283][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.167559][  T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  567.290951][  T787] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  567.314863][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.360159][  T787] usb 2-1: config 0 descriptor??
[  570.042182][  T787] usbhid 2-1:0.0: can't add hid device: -71
[  571.652569][  T787] usbhid: probe of 2-1:0.0 failed with error -71
[  571.811802][  T787] usb 2-1: USB disconnect, device number 5
[  572.349898][ T8390] random: crng reseeded on system resumption
[  575.649655][ T1006] Bluetooth: hci4: Frame reassembly failed (-84)
[  577.688112][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  579.459639][ T8427] libceph: resolve '96.' (ret=-3): failed
[  582.579333][ T8450] random: crng reseeded on system resumption
[  583.846219][ T1006] Bluetooth: hci4: Frame reassembly failed (-84)
[  585.864884][ T5777] Bluetooth: hci4: command 0x1003 tx timeout
[  585.872975][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  586.143675][ T8461] 9pnet_fd: Insufficient options for proto=fd
[  586.764108][ T8466] Failed to get privilege flags for destination (handle=0x2:0x0)
[  586.806731][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.914995][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  591.722027][ T8431] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.744031][ T8431] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.761462][ T8431] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.770113][ T8431] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.951052][ T8517] binder: 8513:8517 ioctl c0306201 0 returned -14
[  592.994941][ T8517] binder: 8513:8517 ioctl c0306201 0 returned -14
[  593.298675][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  594.078792][ T8523] random: crng reseeded on system resumption
[  596.193001][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  598.098409][    T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  598.278183][    T8] usb 2-1: Using ep0 maxpacket: 16
[  598.291107][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  599.487331][ T8556] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  599.516461][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  599.653475][    T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  599.682314][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.814334][ T8562] Device name cannot be null; rc = [-22]
[  599.950526][    T8] usb 2-1: Product: syz
[  599.991017][    T8] usb 2-1: Manufacturer: syz
[  600.079282][    T8] usb 2-1: SerialNumber: syz
[  600.369025][    T8] usb 2-1: 0:2 : does not exist
[  600.377266][    T8] usb 2-1: unit 0 not found!
[  600.447349][    T8] usb 2-1: USB disconnect, device number 6
[  600.506373][ T8540] udevd[8540]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  601.950621][ T8485] Bluetooth: hci4: Frame reassembly failed (-84)
[  603.937021][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  603.943897][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  604.612172][ T8595] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  604.730387][ T8597] Device name cannot be null; rc = [-22]
[  605.798908][ T8598] mkiss: ax0: crc mode is auto.
[  607.019917][ T8601] random: crng reseeded on system resumption
[  612.658012][ T8631] mkiss: ax0: crc mode is auto.
[  612.985111][ T8641] autofs4:pid:8641:autofs_fill_super: called with bogus options
[  613.412343][ T8638] syzkaller0: entered promiscuous mode
[  613.420389][ T8638] syzkaller0: entered allmulticast mode
[  613.627301][ T8648] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  613.850390][ T8649] Device name cannot be null; rc = [-22]
[  615.495837][ T8658] 9pnet_fd: Insufficient options for proto=fd
[  616.702639][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'.
[  617.247799][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'.
[  622.633541][ T8697] 9pnet_fd: Insufficient options for proto=fd
[  625.308620][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  625.334738][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  628.916698][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'.
[  629.666847][ T8738] 9pnet_fd: Insufficient options for proto=fd
[  634.287303][ T8754] mkiss: ax0: crc mode is auto.
[  640.101917][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'.
[  641.490665][ T8808] mkiss: ax0: crc mode is auto.
[  647.214986][  T988] Bluetooth: hci4: Frame reassembly failed (-84)
[  648.324267][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.331813][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.524279][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'.
[  649.572262][ T8858] mkiss: ax0: crc mode is auto.
[  650.564978][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  650.572417][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  651.787879][ T8865] syzkaller0: entered promiscuous mode
[  651.801677][ T8865] syzkaller0: entered allmulticast mode
[  655.904857][ T1347] Bluetooth: hci4: Frame reassembly failed (-84)
[  657.658680][ T8898] Falling back ldisc for ttyprintk.
[  658.371115][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  660.047793][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'.
[  665.489710][ T8932] mkiss: ax0: crc mode is auto.
[  667.840470][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  667.850635][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  667.863006][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  667.874707][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  667.882570][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  667.890414][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  668.283766][ T1006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.491761][ T1006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.859102][ T1006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.821185][ T1006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.858674][ T8940] chnl_net:caif_netlink_parms(): no params data found
[  669.995521][ T5777] Bluetooth: hci0: command tx timeout
[  670.176809][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.221417][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.402520][ T8940] bridge_slave_0: entered allmulticast mode
[  671.434158][ T8940] bridge_slave_0: entered promiscuous mode
[  671.503183][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.510415][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.535091][ T8940] bridge_slave_1: entered allmulticast mode
[  671.546791][ T8940] bridge_slave_1: entered promiscuous mode
[  671.626340][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  671.800130][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.071318][ T5777] Bluetooth: hci0: command tx timeout
[  672.224607][ T8940] team0: Port device team_slave_0 added
[  672.247504][ T8940] team0: Port device team_slave_1 added
[  672.622056][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.659596][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.775967][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  672.951697][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  672.958836][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.056872][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.316024][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'.
[  673.489391][ T8940] hsr_slave_0: entered promiscuous mode
[  673.535709][ T8940] hsr_slave_1: entered promiscuous mode
[  673.549835][ T8940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  673.560043][ T8940] Cannot create hsr debugfs directory
[  674.151735][ T5777] Bluetooth: hci0: command tx timeout
[  675.833696][ T1006] hsr_slave_0: left promiscuous mode
[  675.860857][ T1006] hsr_slave_1: left promiscuous mode
[  675.883525][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  675.897401][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.915137][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  675.923247][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.932684][ T1006] bridge_slave_1: left allmulticast mode
[  675.944852][ T1006] bridge_slave_1: left promiscuous mode
[  675.967441][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.991397][ T1006] bridge_slave_0: left allmulticast mode
[  676.011417][ T1006] bridge_slave_0: left promiscuous mode
[  676.028657][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.201739][ T1006] veth1_macvtap: left promiscuous mode
[  676.208473][ T1006] veth0_macvtap: left promiscuous mode
[  676.219544][ T5777] Bluetooth: hci0: command tx timeout
[  676.246940][ T1006] veth1_vlan: left promiscuous mode
[  676.254388][ T1006] veth0_vlan: left promiscuous mode
[  682.120170][ T1006] team0 (unregistering): Port device team_slave_1 removed
[  682.202011][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'.
[  682.212246][ T1006] team0 (unregistering): Port device team_slave_0 removed
[  682.324350][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  682.501949][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  683.281477][ T1006] bond0 (unregistering): Released all slaves
[  684.298150][ T8940] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  684.324724][ T9044] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  684.342669][ T8940] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  684.462309][ T9046] Device name cannot be null; rc = [-22]
[  684.581608][ T8940] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  684.628539][ T8940] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  686.375814][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.382789][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  686.607326][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.667928][ T8940] 8021q: adding VLAN 0 to HW filter on device team0
[  686.712126][  T988] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.721172][  T988] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.823765][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.831345][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  690.236502][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  691.272851][ T9093] netlink: 'syz.2.891': attribute type 72 has an invalid length.
[  691.576147][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'.
[  692.172180][ T8940] veth0_vlan: entered promiscuous mode
[  692.254076][ T8940] veth1_vlan: entered promiscuous mode
[  692.400361][ T8940] veth0_macvtap: entered promiscuous mode
[  692.436805][ T8940] veth1_macvtap: entered promiscuous mode
[  692.552784][ T8940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  692.602495][ T8940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  692.650622][ T8940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  692.702428][ T8940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  692.767073][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  692.861506][ T8940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  692.889850][ T8940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  692.906285][ T8940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  692.921912][ T8940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  692.939456][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  692.994713][ T8940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  693.101138][ T8940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  693.116506][ T8940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  693.134120][ T8940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  693.504127][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  693.536430][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  693.618363][  T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  693.638227][  T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.064367][ T1006] Bluetooth: hci4: Frame reassembly failed (-84)
[  697.088879][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  701.300944][ T9168] netlink: 'syz.2.899': attribute type 72 has an invalid length.
[  702.676572][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'.
[  702.819275][ T9186] Device name cannot be null; rc = [-22]
[  704.740249][ T9193] mkiss: ax0: crc mode is auto.
[  706.519386][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  707.244780][ T9224] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.909'.
[  708.523184][ T5083] Bluetooth: hci4: command 0x1003 tx timeout
[  708.523221][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  714.401850][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'.
[  716.806977][ T9300] mkiss: ax0: crc mode is auto.
[  718.704353][ T9307] mkiss: ax0: crc mode is auto.
[  723.437524][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'.
[  723.786794][ T9360] mkiss: ax0: crc mode is auto.
[  729.295637][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'.
[  731.905045][ T9459] comedi comedi3: pcmda12: I/O port conflict (0x3,16)
[  738.726418][ T9509] Device name cannot be null; rc = [-22]
[  739.043094][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'.
[  744.635198][ T5807] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  744.844238][ T5807] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  744.896146][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.906139][ T5807] usb 3-1: Product: syz
[  744.910366][ T5807] usb 3-1: Manufacturer: syz
[  745.070746][ T9579] Device name cannot be null; rc = [-22]
[  745.437247][ T5807] usb 3-1: SerialNumber: syz
[  745.474842][ T5807] usb 3-1: config 0 descriptor??
[  745.887590][ T5807] usb 3-1: Firmware version (0.0) predates our first public release.
[  745.914448][ T5807] usb 3-1: Please update to version 0.2 or newer
[  746.486811][ T5807] usb 3-1: USB disconnect, device number 8
[  747.296324][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.980'.
[  747.321938][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.328930][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  750.430355][ T9626] Device name cannot be null; rc = [-22]
[  753.896413][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'.
[  753.912684][ T9677] Device name cannot be null; rc = [-22]
[  759.937584][ T9711] Device name cannot be null; rc = [-22]
[  761.872697][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1009'.
[  765.787234][ T9747] random: crng reseeded on system resumption
[  765.947371][ T9748] syz.2.1012: attempt to access beyond end of device
[  765.947371][ T9748] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  766.186641][ T9748] FAT-fs (nbd2): unable to read boot sector
[  771.042130][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'.
[  771.383461][ T9789] Device name cannot be null; rc = [-22]
[  773.781276][ T9808] random: crng reseeded on system resumption
[  773.885035][ T9810] syz.2.1028: attempt to access beyond end of device
[  773.885035][ T9810] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  773.898554][ T9810] FAT-fs (nbd2): unable to read boot sector
[  778.169268][ T9833] mkiss: ax0: crc mode is auto.
[  779.627624][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'.
[  781.856616][ T5829] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  782.346169][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short
[  782.354592][ T5829] usb 3-1: not running at top speed; connect to a high speed hub
[  782.376319][ T5829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  782.405803][ T5829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  782.429513][ T5829] usb 3-1: string descriptor 0 read error: -22
[  782.435935][ T5829] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  782.476095][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.528653][ T5829] usb 3-1: 0:2 : does not exist
[  783.666541][ T5829] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  783.793757][ T5829] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  783.860876][ T5829] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  783.959712][ T5829] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  784.010582][ T5829] usb 3-1: USB disconnect, device number 9
[  785.195147][  T962] Bluetooth: hci4: Frame reassembly failed (-84)
[  785.308203][  T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  785.809865][ T9871] autofs4:pid:9871:autofs_fill_super: called with bogus options
[  786.085128][  T787] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  786.104306][  T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.124237][  T787] usb 5-1: Product: syz
[  786.153293][  T787] usb 5-1: Manufacturer: syz
[  786.173694][  T787] usb 5-1: SerialNumber: syz
[  786.203230][  T787] usb 5-1: config 0 descriptor??
[  786.900198][  T787] usb 5-1: Firmware version (0.0) predates our first public release.
[  786.955837][  T787] usb 5-1: Please update to version 0.2 or newer
[  787.052889][  T787] usb 5-1: USB disconnect, device number 2
[  787.204436][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  787.287582][ T5777] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  787.296792][ T5777] Bluetooth: hci0: Injecting HCI hardware error event
[  787.305407][ T5777] Bluetooth: hci0: hardware error 0x00
[  789.480590][ T5777] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  791.652302][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'.
[  793.289776][ T9737] Bluetooth: hci4: Frame reassembly failed (-84)
[  795.279854][ T9867] Bluetooth: hci4: command 0x1003 tx timeout
[  795.287834][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  795.663142][ T9933] mkiss: ax0: crc mode is auto.
[  801.509123][ T9950] mkiss: ax0: crc mode is auto.
[  802.497464][ T9975] mkiss: ax0: crc mode is auto.
[  808.746769][T10001] mkiss: ax0: crc mode is auto.
[  808.811376][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.817977][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  809.316217][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'.
[  810.882427][T10018] random: crng reseeded on system resumption
[  811.195357][T10022] syz.3.1088: attempt to access beyond end of device
[  811.195357][T10022] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  811.221930][T10022] FAT-fs (nbd3): unable to read boot sector
[  811.633998][T10027] mkiss: ax0: crc mode is auto.
[  816.855236][T10042] mkiss: ax0: crc mode is auto.
[  819.234201][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'.
[  820.807012][T10070] autofs4:pid:10070:autofs_fill_super: called with bogus options
[  822.831819][T10074] mkiss: ax0: crc mode is auto.
[  825.154310][T10085] random: crng reseeded on system resumption
[  825.234092][T10086] syz.1.1106: attempt to access beyond end of device
[  825.234092][T10086] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  825.418599][T10086] FAT-fs (nbd1): unable to read boot sector
[  829.869121][T10114] mkiss: ax0: crc mode is auto.
[  832.541212][ T6608] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  832.753018][ T6608] usb 3-1: Using ep0 maxpacket: 32
[  832.775807][ T6608] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  832.814274][ T6608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.835495][ T6608] usb 3-1: Product: syz
[  832.847839][ T6608] usb 3-1: Manufacturer: syz
[  832.858864][ T6608] usb 3-1: SerialNumber: syz
[  832.885710][ T6608] usb 3-1: config 0 descriptor??
[  832.922308][ T6608] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  834.930712][ T6608] gspca_ov534_9: reg_r err -110
[  835.206742][T10138] Device name cannot be null; rc = [-22]
[  835.281684][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'.
[  835.300171][ T6608] gspca_ov534_9: Unknown sensor 0000
[  835.300276][ T6608] ov534_9: probe of 3-1:0.0 failed with error -22
[  836.468411][T10147] random: crng reseeded on system resumption
[  836.532693][   T27] usb 3-1: USB disconnect, device number 10
[  836.639516][T10148] syz.3.1120: attempt to access beyond end of device
[  836.639516][T10148] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  836.670457][T10148] FAT-fs (nbd3): unable to read boot sector
[  837.409020][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'.
[  838.415648][T10159] mkiss: ax0: crc mode is auto.
[  840.587941][T10167] Device name cannot be null; rc = [-22]
[  844.654021][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1136'.
[  844.830702][T10202] Device name cannot be null; rc = [-22]
[  845.566083][T10208] random: crng reseeded on system resumption
[  845.652615][T10209] syz.4.1139: attempt to access beyond end of device
[  845.652615][T10209] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  845.667976][T10209] FAT-fs (nbd4): unable to read boot sector
[  850.017680][T10238] Device name cannot be null; rc = [-22]
[  853.433760][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'.
[  856.316856][T10277] mkiss: ax0: crc mode is auto.
[  860.636918][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1163'.
[  860.674564][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'.
[  866.597063][T10347] autofs4:pid:10347:autofs_fill_super: called with bogus options
[  869.923547][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1184'.
[  869.945413][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'.
[  870.735574][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.746019][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  873.487195][T10383] mkiss: ax0: crc mode is auto.
[  879.759353][ T5809] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  879.778683][ T1347] Bluetooth: hci4: Frame reassembly failed (-84)
[  880.037365][ T5809] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  880.089572][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.190972][ T5809] usb 4-1: Product: syz
[  880.236699][ T5809] usb 4-1: Manufacturer: syz
[  880.272843][ T5809] usb 4-1: SerialNumber: syz
[  880.308404][ T5809] usb 4-1: config 0 descriptor??
[  880.995453][ T5809] usb 4-1: Firmware version (0.0) predates our first public release.
[  881.026917][ T5809] usb 4-1: Please update to version 0.2 or newer
[  881.113272][T10430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  881.148262][T10430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  881.165666][ T5809] usb 4-1: USB disconnect, device number 9
[  881.175080][T10430] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  881.192930][T10430] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  881.201380][T10430] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  881.209836][T10430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  881.796489][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  882.360486][ T1347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  882.413983][T10426] chnl_net:caif_netlink_parms(): no params data found
[  883.047008][ T1347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.315787][T10430] Bluetooth: hci5: command tx timeout
[  885.394560][T10430] Bluetooth: hci5: command tx timeout
[  885.878667][ T1347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  886.350333][ T1347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  886.405372][T10426] bridge0: port 1(bridge_slave_0) entered blocking state
[  886.455615][T10426] bridge0: port 1(bridge_slave_0) entered disabled state
[  886.520767][T10426] bridge_slave_0: entered allmulticast mode
[  886.559593][T10426] bridge_slave_0: entered promiscuous mode
[  886.611401][T10426] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.639719][T10426] bridge0: port 2(bridge_slave_1) entered disabled state
[  886.657308][T10426] bridge_slave_1: entered allmulticast mode
[  886.707610][T10426] bridge_slave_1: entered promiscuous mode
[  887.011153][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'.
[  887.068242][T10426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  887.099368][T10426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  887.164556][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'.
[  887.475790][T10430] Bluetooth: hci5: command tx timeout
[  887.701950][T10426] team0: Port device team_slave_0 added
[  887.741270][T10426] team0: Port device team_slave_1 added
[  887.978072][T10426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  888.003381][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  888.098525][T10426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  888.111373][ T5808] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  888.179174][T10426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  888.220648][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  888.281342][T10426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  888.318186][ T5808] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  888.327857][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.336895][ T5808] usb 2-1: Product: syz
[  888.341358][ T5808] usb 2-1: Manufacturer: syz
[  888.347110][ T5808] usb 2-1: SerialNumber: syz
[  888.365594][ T5808] usb 2-1: config 0 descriptor??
[  888.592141][T10426] hsr_slave_0: entered promiscuous mode
[  888.610483][T10426] hsr_slave_1: entered promiscuous mode
[  890.241710][T10430] Bluetooth: hci5: command tx timeout
[  890.257552][ T5808] usb 2-1: Firmware version (0.0) predates our first public release.
[  890.281765][   T49] Bluetooth: hci1: Frame reassembly failed (-84)
[  890.297157][ T5808] usb 2-1: Please update to version 0.2 or newer
[  890.429755][ T5808] usb 2-1: USB disconnect, device number 7
[  890.772258][T10426] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  890.812974][T10426] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  890.891875][ T1347] hsr_slave_0: left promiscuous mode
[  890.901398][ T1347] hsr_slave_1: left promiscuous mode
[  890.931342][ T1347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  890.943081][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_0
[  890.993158][ T1347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  891.051703][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_1
[  891.206144][ T1347] bridge_slave_1: left allmulticast mode
[  891.245138][ T1347] bridge_slave_1: left promiscuous mode
[  891.287075][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.476671][ T1347] bridge_slave_0: left allmulticast mode
[  891.514952][ T1347] bridge_slave_0: left promiscuous mode
[  891.539066][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.589987][T10492] autofs4:pid:10492:autofs_fill_super: called with bogus options
[  891.639597][ T1347] veth1_macvtap: left promiscuous mode
[  891.651696][ T1347] veth0_macvtap: left promiscuous mode
[  891.658746][ T1347] veth1_vlan: left promiscuous mode
[  891.667608][ T1347] veth0_vlan: left promiscuous mode
[  892.372065][T10430] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  895.469818][    T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  895.662359][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  895.671859][    T8] usb 5-1: not running at top speed; connect to a high speed hub
[  895.697480][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  895.719212][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  895.764523][    T8] usb 5-1: string descriptor 0 read error: -22
[  895.773048][    T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  895.790084][ T1347] team0 (unregistering): Port device team_slave_1 removed
[  895.797808][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.843481][    T8] usb 5-1: 0:2 : does not exist
[  895.906254][ T1347] team0 (unregistering): Port device team_slave_0 removed
[  895.998443][ T1347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  896.096646][ T1347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  896.478027][    T8] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  896.515685][    T8] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  896.557721][    T8] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  896.617685][    T8] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  896.653183][    T8] usb 5-1: USB disconnect, device number 3
[  896.695583][T10479] udevd[10479]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  896.774009][ T1347] bond0 (unregistering): Released all slaves
[  896.912514][T10426] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  896.955056][T10426] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  897.588058][T10527] autofs4:pid:10527:autofs_fill_super: called with bogus options
[  897.994580][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'.
[  898.396099][T10526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1222'.
[  898.491590][T10426] 8021q: adding VLAN 0 to HW filter on device bond0
[  898.601705][T10426] 8021q: adding VLAN 0 to HW filter on device team0
[  898.640029][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.647329][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  898.684012][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  898.691325][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  899.430852][T10426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  899.516271][T10557] random: crng reseeded on system resumption
[  899.683770][T10558] syz.4.1227: attempt to access beyond end of device
[  899.683770][T10558] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  899.706110][T10558] FAT-fs (nbd4): unable to read boot sector
[  902.717016][T10426] veth0_vlan: entered promiscuous mode
[  902.848517][T10426] veth1_vlan: entered promiscuous mode
[  903.108299][T10587] autofs4:pid:10587:autofs_fill_super: called with bogus options
[  903.485676][T10426] veth0_macvtap: entered promiscuous mode
[  903.576166][T10426] veth1_macvtap: entered promiscuous mode
[  903.792631][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  903.839112][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  903.923978][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  903.971543][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  904.024381][T10426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  904.099866][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  904.158660][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  904.286676][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  904.323503][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  904.353075][T10426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  904.414480][T10426] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  904.504940][T10426] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  904.514458][T10426] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  904.529840][T10426] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  904.954363][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  904.992662][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.042982][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.064419][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.327123][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'.
[  905.405303][ T5829] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  905.415165][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1237'.
[  905.791143][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short
[  905.805513][ T5829] usb 5-1: not running at top speed; connect to a high speed hub
[  905.827926][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  905.841427][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  905.855852][ T5829] usb 5-1: string descriptor 0 read error: -22
[  905.862574][ T5829] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  905.878500][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.087159][ T5829] usb 5-1: 0:2 : does not exist
[  906.737574][T10616] mkiss: ax0: crc mode is auto.
[  907.080218][ T5829] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  907.101814][ T5829] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  907.169706][ T5829] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  907.277413][ T5829] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  907.392621][T10634] autofs4:pid:10634:autofs_fill_super: called with bogus options
[  910.282125][ T5829] usb 5-1: USB disconnect, device number 4
[  910.822534][ T9867] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  910.837174][ T9867] Bluetooth: hci5: Injecting HCI hardware error event
[  910.847178][T10430] Bluetooth: hci5: hardware error 0x00
[  910.872372][T10653] random: crng reseeded on system resumption
[  910.953754][T10656] syz.3.1244: attempt to access beyond end of device
[  910.953754][T10656] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  910.980593][T10656] FAT-fs (nbd3): unable to read boot sector
[  911.876638][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'.
[  912.981245][T10430] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  916.936661][  T988] Bluetooth: hci1: Frame reassembly failed (-84)
[  917.997835][T10718] mkiss: ax0: crc mode is auto.
[  918.327272][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1259'.
[  918.338666][T10736] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.346208][T10736] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.414305][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1259'.
[  918.978374][T10430] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  921.168136][T10755] mkiss: ax0: crc mode is auto.
[  927.036005][ T1347] Bluetooth: hci1: Frame reassembly failed (-84)
[  929.052737][ T9867] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  929.052926][T10430] Bluetooth: hci1: command 0x1003 tx timeout
[  929.313597][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'.
[  929.346192][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'.
[  930.737613][T10834] mkiss: ax0: crc mode is auto.
[  931.917626][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.924053][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  937.211162][T10876] random: crng reseeded on system resumption
[  939.353413][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'.
[  944.421798][T10904] mkiss: ax0: crc mode is auto.
[  945.640584][T10430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  945.649699][T10430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  945.768678][T10430] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  945.777352][T10430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  945.786315][T10430] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  945.793887][T10430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  948.393341][T10430] Bluetooth: hci1: command tx timeout
[  949.007785][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1298'.
[  949.017641][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1298'.
[  950.787672][T10430] Bluetooth: hci1: command tx timeout
[  950.809010][T10946] chnl_net:caif_netlink_parms(): no params data found
[  951.335819][T10946] bridge0: port 1(bridge_slave_0) entered blocking state
[  951.359465][T10946] bridge0: port 1(bridge_slave_0) entered disabled state
[  951.384607][T10946] bridge_slave_0: entered allmulticast mode
[  951.414030][T10946] bridge_slave_0: entered promiscuous mode
[  951.442575][T10946] bridge0: port 2(bridge_slave_1) entered blocking state
[  951.467208][T10946] bridge0: port 2(bridge_slave_1) entered disabled state
[  951.490274][T10946] bridge_slave_1: entered allmulticast mode
[  951.515793][T10946] bridge_slave_1: entered promiscuous mode
[  951.784295][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  951.886149][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  952.073778][  T988] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.281981][  T988] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.449865][T10946] team0: Port device team_slave_0 added
[  952.801965][T10430] Bluetooth: hci1: command tx timeout
[  953.114160][  T988] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.409359][T11000] random: crng reseeded on system resumption
[  955.449532][T10430] Bluetooth: hci1: command tx timeout
[  955.482777][T10946] team0: Port device team_slave_1 added
[  955.526014][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  955.539507][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  955.566731][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  955.580914][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  955.588361][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  955.649561][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  955.685642][  T988] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.821432][T10946] hsr_slave_0: entered promiscuous mode
[  955.828745][T10946] hsr_slave_1: entered promiscuous mode
[  955.850701][T10946] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  955.862664][T10946] Cannot create hsr debugfs directory
[  957.784045][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'.
[  958.203843][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'.
[  958.291719][T11021] mkiss: ax0: crc mode is auto.
[  960.290552][T10946] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  960.316560][T10946] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  960.333466][T10946] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  960.498172][T10946] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  963.822884][T10946] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.119020][T10946] 8021q: adding VLAN 0 to HW filter on device team0
[  964.245508][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.252721][ T9737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.957960][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.965233][ T9737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.073240][  T988] hsr_slave_0: left promiscuous mode
[  965.080856][  T988] hsr_slave_1: left promiscuous mode
[  965.096436][  T988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  965.104137][  T988] batman_adv: batadv0: Removing interface: batadv_slave_0
[  965.149035][  T988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  965.168424][  T988] batman_adv: batadv0: Removing interface: batadv_slave_1
[  965.191033][  T988] bridge_slave_1: left allmulticast mode
[  965.204674][  T988] bridge_slave_1: left promiscuous mode
[  965.220837][  T988] bridge0: port 2(bridge_slave_1) entered disabled state
[  965.245550][  T988] bridge_slave_0: left allmulticast mode
[  965.264985][  T988] bridge_slave_0: left promiscuous mode
[  965.270850][  T988] bridge0: port 1(bridge_slave_0) entered disabled state
[  965.386752][  T988] veth1_macvtap: left promiscuous mode
[  965.392410][  T988] veth0_macvtap: left promiscuous mode
[  965.415140][  T988] veth1_vlan: left promiscuous mode
[  965.421964][  T988] veth0_vlan: left promiscuous mode
[  965.738688][T11094] random: crng reseeded on system resumption
[  966.191411][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1317'.
[  969.367139][  T988] team0 (unregistering): Port device team_slave_1 removed
[  969.509312][  T988] team0 (unregistering): Port device team_slave_0 removed
[  969.622038][  T988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  969.715143][  T988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  972.054908][  T988] bond0 (unregistering): Released all slaves
[  972.452455][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'.
[  972.967738][T10946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  973.020381][T10946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  974.061607][T11128] mkiss: ax0: crc mode is auto.
[  975.420818][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  977.875162][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1328'.
[  978.350027][T10946] veth0_vlan: entered promiscuous mode
[  978.376841][T10946] veth1_vlan: entered promiscuous mode
[  978.475413][T10946] veth0_macvtap: entered promiscuous mode
[  978.513323][T10946] veth1_macvtap: entered promiscuous mode
[  978.565743][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  978.593477][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.614167][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  978.638799][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.666711][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  978.703983][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  978.736758][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.773271][T10946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  978.804008][T10946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  978.833970][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  978.866328][T10946] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  978.885864][T10946] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  978.906384][T10946] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  978.941432][T10946] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  979.183983][  T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.223990][  T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  979.306366][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.330744][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  983.327689][T11214] random: crng reseeded on system resumption
[  983.526909][T11220] syz.5.1332: attempt to access beyond end of device
[  983.526909][T11220] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  983.772155][T11220] FAT-fs (nbd5): unable to read boot sector
[  986.014904][T11239] mkiss: ax0: crc mode is auto.
[  986.997533][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'.
[  990.782546][T10430] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  990.792600][T10430] Bluetooth: hci1: Injecting HCI hardware error event
[  990.801401][T10430] Bluetooth: hci1: hardware error 0x00
[  992.882135][T10430] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  992.954257][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  992.960833][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  997.818617][T11311] random: crng reseeded on system resumption
[  997.864216][T11313] syz.6.1351: attempt to access beyond end of device
[  997.864216][T11313] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[  997.886365][T11313] FAT-fs (nbd6): unable to read boot sector
[  998.676328][T11321] mkiss: ax0: crc mode is auto.
[  999.556640][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1350'.
[ 1010.668320][T11477] random: crng reseeded on system resumption
[ 1010.952788][T11481] syz.5.1384: attempt to access beyond end of device
[ 1010.952788][T11481] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1010.996300][T11481] FAT-fs (nbd5): unable to read boot sector
[ 1011.744376][T11486] mkiss: ax0: crc mode is auto.
[ 1014.708642][   T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1014.975615][   T27] usb 2-1: device descriptor read/64, error -71
[ 1016.958734][   T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1017.458650][   T27] usb 2-1: device descriptor read/64, error -71
[ 1017.629632][   T27] usb usb2-port1: attempt power cycle
[ 1017.881797][T11538] autofs4:pid:11538:autofs_fill_super: called with bogus options
[ 1018.482970][T11549] libceph: resolve '96.' (ret=-3): failed
[ 1019.079624][T11565] random: crng reseeded on system resumption
[ 1019.163751][T11567] syz.5.1401: attempt to access beyond end of device
[ 1019.163751][T11567] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1019.300293][T11567] FAT-fs (nbd5): unable to read boot sector
[ 1020.848193][    T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1021.160835][T11594] autofs4:pid:11594:autofs_fill_super: called with bogus options
[ 1021.191781][    T8] usb 2-1: device descriptor read/64, error -71
[ 1021.597561][    T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1023.140765][    T8] usb 2-1: device descriptor read/64, error -71
[ 1024.215258][    T8] usb usb2-port1: attempt power cycle
[ 1024.276595][T11613] libceph: resolve '96.' (ret=-3): failed
[ 1025.813533][T11640] random: crng reseeded on system resumption
[ 1025.873741][T11643] syz.5.1417: attempt to access beyond end of device
[ 1025.873741][T11643] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1025.891131][T11643] FAT-fs (nbd5): unable to read boot sector
[ 1026.034781][T11644] autofs4:pid:11644:autofs_fill_super: called with bogus options
[ 1029.772503][   T27] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1029.772521][    T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1029.997046][    T8] usb 7-1: device descriptor read/64, error -71
[ 1030.053158][T11668] libceph: resolve '96.' (ret=-3): failed
[ 1030.192822][   T27] usb 2-1: device not accepting address 14, error -71
[ 1030.821951][T10871] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 1030.981866][T10871] usb 4-1: device descriptor read/64, error -71
[ 1031.110912][T11679] syzkaller0: entered promiscuous mode
[ 1031.117841][T11679] syzkaller0: entered allmulticast mode
[ 1031.251590][T10871] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[ 1031.413161][T10871] usb 4-1: device descriptor read/64, error -71
[ 1031.531731][T10871] usb usb4-port1: attempt power cycle
[ 1031.820254][T11692] autofs4:pid:11692:autofs_fill_super: called with bogus options
[ 1031.941345][T10871] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[ 1031.997172][T10871] usb 4-1: device descriptor read/8, error -71
[ 1032.291194][T10871] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[ 1032.346933][T10871] usb 4-1: device descriptor read/8, error -71
[ 1032.564193][T10871] usb usb4-port1: unable to enumerate USB device
[ 1032.865813][T11706] random: crng reseeded on system resumption
[ 1032.946784][T11707] syz.6.1432: attempt to access beyond end of device
[ 1032.946784][T11707] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1032.974629][T11707] FAT-fs (nbd6): unable to read boot sector
[ 1038.662395][T11739] mkiss: ax0: crc mode is auto.
[ 1040.557322][  T787] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[ 1040.660524][T11756] netlink: 'syz.6.1442': attribute type 33 has an invalid length.
[ 1040.669135][T11756] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1442'.
[ 1040.683772][T11756] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1442'.
[ 1040.721694][  T787] usb 2-1: device descriptor read/64, error -71
[ 1040.801702][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'.
[ 1040.810888][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'.
[ 1040.886916][T10871] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 1041.006801][  T787] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[ 1041.099404][T10871] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1042.770601][T10871] usb 6-1: not running at top speed; connect to a high speed hub
[ 1043.329090][T10871] usb 6-1: config 5 has an invalid interface number: 154 but max is 0
[ 1043.337986][T10871] usb 6-1: config 5 has no interface number 0
[ 1043.344208][T10871] usb 6-1: config 5 interface 154 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 1043.355796][T10871] usb 6-1: config 5 interface 154 has no altsetting 0
[ 1043.380941][T10871] usb 6-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=70.82
[ 1043.397814][T10871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.415607][T10871] usb 6-1: Product: syz
[ 1043.420115][T10871] usb 6-1: Manufacturer: syz
[ 1043.424793][T10871] usb 6-1: SerialNumber: syz
[ 1043.648735][T10871] usb 6-1: USB disconnect, device number 2
[ 1046.330986][T11797] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1454'.
[ 1052.456302][T11831] mkiss: ax0: crc mode is auto.
[ 1054.356633][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.363892][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.799264][T11862] affs: No valid root block on device nullb0
[ 1056.845528][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'.
[ 1062.651553][T11899] =======================================================
[ 1062.651553][T11899] WARNING: The mand mount option has been deprecated and
[ 1062.651553][T11899]          and is ignored by this kernel. Remove the mand
[ 1062.651553][T11899]          option from the mount to silence this warning.
[ 1062.651553][T11899] =======================================================
[ 1067.813650][ T5808] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1068.317685][ T5808] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1068.578063][ T5808] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1068.612893][ T5808] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1068.622324][ T5808] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1068.673324][ T5808] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1068.700004][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1068.720358][ T5808] usb 7-1: Product: syz
[ 1068.755080][ T5808] usb 7-1: Manufacturer: syz
[ 1068.789231][T11930] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1068.803913][ T5808] cdc_wdm 7-1:1.0: skipping garbage
[ 1068.837633][ T5808] cdc_wdm 7-1:1.0: skipping garbage
[ 1068.843090][ T5808] cdc_wdm: probe of 7-1:1.0 failed with error -22
[ 1068.940293][T11940] syzkaller0: entered promiscuous mode
[ 1068.946838][T11940] syzkaller0: entered allmulticast mode
[ 1070.997403][ T8479] usb 7-1: USB disconnect, device number 4
[ 1078.823110][T12010] ==================================================================
[ 1078.831265][T12010] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370
[ 1078.839250][T12010] Read of size 8 at addr ffff888026ce2c18 by task syz.1.1494/12010
[ 1078.847716][T12010] 
[ 1078.850105][T12010] CPU: 1 PID: 12010 Comm: syz.1.1494 Not tainted syzkaller #0
[ 1078.857613][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1078.867741][T12010] Call Trace:
[ 1078.871054][T12010]  <TASK>
[ 1078.874087][T12010]  dump_stack_lvl+0x18c/0x250
[ 1078.878839][T12010]  ? __lock_acquire+0x7d40/0x7d40
[ 1078.883878][T12010]  ? show_regs_print_info+0x20/0x20
[ 1078.889112][T12010]  ? load_image+0x400/0x400
[ 1078.893647][T12010]  ? _raw_spin_lock_irqsave+0xc0/0x100
[ 1078.899174][T12010]  ? __virt_addr_valid+0x18c/0x540
[ 1078.904319][T12010]  ? __virt_addr_valid+0x469/0x540
[ 1078.909444][T12010]  print_report+0xa8/0x210
[ 1078.913877][T12010]  ? dvb_device_open+0xca/0x370
[ 1078.918761][T12010]  kasan_report+0x117/0x150
[ 1078.923273][T12010]  ? chrdev_open+0x3e3/0x6a0
[ 1078.927891][T12010]  ? dvb_device_open+0xca/0x370
[ 1078.932871][T12010]  dvb_device_open+0xca/0x370
[ 1078.937743][T12010]  ? do_raw_spin_unlock+0x121/0x230
[ 1078.942977][T12010]  chrdev_open+0x5cc/0x6a0
[ 1078.947407][T12010]  ? cd_forget+0x160/0x160
[ 1078.951836][T12010]  ? fsnotify_perm+0x3ed/0x5e0
[ 1078.956625][T12010]  ? cd_forget+0x160/0x160
[ 1078.961080][T12010]  do_dentry_open+0x8c6/0x1500
[ 1078.966139][T12010]  path_openat+0x27f1/0x3230
[ 1078.970749][T12010]  ? do_sys_openat2+0xda/0x1d0
[ 1078.975529][T12010]  ? verify_lock_unused+0x140/0x140
[ 1078.980748][T12010]  ? do_filp_open+0x430/0x430
[ 1078.985437][T12010]  ? __virt_addr_valid+0x18c/0x540
[ 1078.990596][T12010]  do_filp_open+0x1f5/0x430
[ 1078.995116][T12010]  ? vfs_tmpfile+0x490/0x490
[ 1078.999722][T12010]  ? _raw_spin_unlock+0x28/0x40
[ 1079.004584][T12010]  ? alloc_fd+0x58f/0x630
[ 1079.008926][T12010]  do_sys_openat2+0x134/0x1d0
[ 1079.013653][T12010]  ? do_sys_open+0xe0/0xe0
[ 1079.018249][T12010]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1079.024239][T12010]  ? lock_chain_count+0x20/0x20
[ 1079.029189][T12010]  ? lock_chain_count+0x20/0x20
[ 1079.034161][T12010]  __x64_sys_openat+0x139/0x160
[ 1079.039154][T12010]  do_syscall_64+0x55/0xa0
[ 1079.043684][T12010]  ? clear_bhb_loop+0x40/0x90
[ 1079.048466][T12010]  ? clear_bhb_loop+0x40/0x90
[ 1079.053178][T12010]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1079.059197][T12010] RIP: 0033:0x7fe2a675cfce
[ 1079.063638][T12010] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1079.083362][T12010] RSP: 002b:00007fe2a7702b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1079.091919][T12010] RAX: ffffffffffffffda RBX: 00007fe2a77036c0 RCX: 00007fe2a675cfce
[ 1079.100171][T12010] RDX: 0000000000040002 RSI: 00007fe2a7702c00 RDI: ffffffffffffff9c
[ 1079.108416][T12010] RBP: 00007fe2a7702c00 R08: 0000000000000000 R09: 0000000000000000
[ 1079.116486][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1079.124599][T12010] R13: 00007fe2a6a16038 R14: 00007fe2a6a15fa0 R15: 00007ffeeb4ab268
[ 1079.132621][T12010]  </TASK>
[ 1079.135650][T12010] 
[ 1079.138087][T12010] Allocated by task 1:
[ 1079.142155][T12010]  kasan_set_track+0x4e/0x70
[ 1079.146775][T12010]  __kasan_kmalloc+0x8f/0xa0
[ 1079.151375][T12010]  dvb_register_device+0x2fd/0x2210
[ 1079.156578][T12010]  dvb_register_frontend+0x649/0x930
[ 1079.161959][T12010]  vidtv_bridge_probe+0x9ab/0xf80
[ 1079.166991][T12010]  platform_probe+0x13b/0x1c0
[ 1079.171675][T12010]  really_probe+0x25b/0xb20
[ 1079.176183][T12010]  __driver_probe_device+0x18c/0x330
[ 1079.181486][T12010]  driver_probe_device+0x4f/0x420
[ 1079.186532][T12010]  __driver_attach+0x44e/0x6e0
[ 1079.191309][T12010]  bus_for_each_dev+0x235/0x2b0
[ 1079.196193][T12010]  bus_add_driver+0x340/0x630
[ 1079.200901][T12010]  driver_register+0x23a/0x310
[ 1079.205684][T12010]  vidtv_bridge_init+0x3d/0x70
[ 1079.210523][T12010]  do_one_initcall+0x242/0x790
[ 1079.215312][T12010]  do_initcall_level+0x137/0x1f0
[ 1079.220275][T12010]  do_initcalls+0x69/0xd0
[ 1079.224629][T12010]  kernel_init_freeable+0x3ed/0x580
[ 1079.229840][T12010]  kernel_init+0x1d/0x1c0
[ 1079.234278][T12010]  ret_from_fork+0x48/0x80
[ 1079.238711][T12010]  ret_from_fork_asm+0x11/0x20
[ 1079.243510][T12010] 
[ 1079.245849][T12010] The buggy address belongs to the object at ffff888026ce2c00
[ 1079.245849][T12010]  which belongs to the cache kmalloc-256 of size 256
[ 1079.259928][T12010] The buggy address is located 24 bytes inside of
[ 1079.259928][T12010]  freed 256-byte region [ffff888026ce2c00, ffff888026ce2d00)
[ 1079.273749][T12010] 
[ 1079.276078][T12010] The buggy address belongs to the physical page:
[ 1079.282504][T12010] page:ffffea00009b3880 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888026ce2c00 pfn:0x26ce2
[ 1079.293967][T12010] head:ffffea00009b3880 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1079.302907][T12010] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1079.310907][T12010] page_type: 0xffffffff()
[ 1079.315238][T12010] raw: 00fff00000000840 ffff888017c41b40 ffffea0001f0d780 0000000000000006
[ 1079.323824][T12010] raw: ffff888026ce2c00 000000008010000f 00000001ffffffff 0000000000000000
[ 1079.332419][T12010] page dumped because: kasan: bad access detected
[ 1079.338842][T12010] page_owner tracks the page as allocated
[ 1079.344585][T12010] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17107274548, free_ts 0
[ 1079.364399][T12010]  post_alloc_hook+0x1c1/0x200
[ 1079.369179][T12010]  get_page_from_freelist+0x1951/0x19e0
[ 1079.374726][T12010]  __alloc_pages+0x1f0/0x460
[ 1079.379315][T12010]  alloc_page_interleave+0x24/0x1e0
[ 1079.384512][T12010]  alloc_slab_page+0x5d/0x160
[ 1079.389368][T12010]  new_slab+0x87/0x2d0
[ 1079.393458][T12010]  ___slab_alloc+0xc5d/0x12f0
[ 1079.398149][T12010]  __kmem_cache_alloc_node+0x19e/0x250
[ 1079.403837][T12010]  kmalloc_trace+0x2a/0xe0
[ 1079.408289][T12010]  bus_add_driver+0x162/0x630
[ 1079.413300][T12010]  driver_register+0x23a/0x310
[ 1079.418165][T12010]  usb_register_driver+0x206/0x3d0
[ 1079.423474][T12010]  au0828_init+0x139/0x170
[ 1079.427901][T12010]  do_one_initcall+0x242/0x790
[ 1079.432690][T12010]  do_initcall_level+0x137/0x1f0
[ 1079.437681][T12010]  do_initcalls+0x69/0xd0
[ 1079.442030][T12010] page_owner free stack trace missing
[ 1079.447550][T12010] 
[ 1079.449889][T12010] Memory state around the buggy address:
[ 1079.455531][T12010]  ffff888026ce2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1079.463598][T12010]  ffff888026ce2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1079.471678][T12010] >ffff888026ce2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1079.480008][T12010]                             ^
[ 1079.486383][T12010]  ffff888026ce2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1079.494450][T12010]  ffff888026ce2d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1079.502525][T12010] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1079.705498][T12010] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1079.712794][T12010] CPU: 0 PID: 12010 Comm: syz.1.1494 Not tainted syzkaller #0
[ 1079.720309][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1079.731457][T12010] Call Trace:
[ 1079.734955][T12010]  <TASK>
[ 1079.738093][T12010]  dump_stack_lvl+0x18c/0x250
[ 1079.742820][T12010]  ? show_regs_print_info+0x20/0x20
[ 1079.748052][T12010]  ? load_image+0x400/0x400
[ 1079.753104][T12010]  panic+0x2dc/0x730
[ 1079.757241][T12010]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1079.763481][T12010]  ? bpf_jit_dump+0xd0/0xd0
[ 1079.768211][T12010]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 1079.774569][T12010]  ? _raw_spin_unlock+0x40/0x40
[ 1079.780072][T12010]  ? dvb_device_open+0xca/0x370
[ 1079.785634][T12010]  check_panic_on_warn+0x84/0xa0
[ 1079.790800][T12010]  ? dvb_device_open+0xca/0x370
[ 1079.795990][T12010]  end_report+0x6f/0x130
[ 1079.800563][T12010]  kasan_report+0x128/0x150
[ 1079.805133][T12010]  ? chrdev_open+0x3e3/0x6a0
[ 1079.809780][T12010]  ? dvb_device_open+0xca/0x370
[ 1079.814692][T12010]  dvb_device_open+0xca/0x370
[ 1079.819419][T12010]  ? do_raw_spin_unlock+0x121/0x230
[ 1079.824689][T12010]  chrdev_open+0x5cc/0x6a0
[ 1079.829159][T12010]  ? cd_forget+0x160/0x160
[ 1079.833613][T12010]  ? fsnotify_perm+0x3ed/0x5e0
[ 1079.838455][T12010]  ? cd_forget+0x160/0x160
[ 1079.842917][T12010]  do_dentry_open+0x8c6/0x1500
[ 1079.847729][T12010]  path_openat+0x27f1/0x3230
[ 1079.852373][T12010]  ? do_sys_openat2+0xda/0x1d0
[ 1079.857174][T12010]  ? verify_lock_unused+0x140/0x140
[ 1079.862413][T12010]  ? do_filp_open+0x430/0x430
[ 1079.867136][T12010]  ? __virt_addr_valid+0x18c/0x540
[ 1079.872296][T12010]  do_filp_open+0x1f5/0x430
[ 1079.876841][T12010]  ? vfs_tmpfile+0x490/0x490
[ 1079.881485][T12010]  ? _raw_spin_unlock+0x28/0x40
[ 1079.886376][T12010]  ? alloc_fd+0x58f/0x630
[ 1079.890839][T12010]  do_sys_openat2+0x134/0x1d0
[ 1079.895534][T12010]  ? do_sys_open+0xe0/0xe0
[ 1079.899961][T12010]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1079.905951][T12010]  ? lock_chain_count+0x20/0x20
[ 1079.910823][T12010]  ? lock_chain_count+0x20/0x20
[ 1079.915709][T12010]  __x64_sys_openat+0x139/0x160
[ 1079.920573][T12010]  do_syscall_64+0x55/0xa0
[ 1079.925017][T12010]  ? clear_bhb_loop+0x40/0x90
[ 1079.929725][T12010]  ? clear_bhb_loop+0x40/0x90
[ 1079.934412][T12010]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1079.940330][T12010] RIP: 0033:0x7fe2a675cfce
[ 1079.944779][T12010] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1079.964400][T12010] RSP: 002b:00007fe2a7702b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1079.972833][T12010] RAX: ffffffffffffffda RBX: 00007fe2a77036c0 RCX: 00007fe2a675cfce
[ 1079.980809][T12010] RDX: 0000000000040002 RSI: 00007fe2a7702c00 RDI: ffffffffffffff9c
[ 1079.988888][T12010] RBP: 00007fe2a7702c00 R08: 0000000000000000 R09: 0000000000000000
[ 1079.996886][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1080.004874][T12010] R13: 00007fe2a6a16038 R14: 00007fe2a6a15fa0 R15: 00007ffeeb4ab268
[ 1080.012912][T12010]  </TASK>
[ 1080.016547][T12010] Kernel Offset: disabled
[ 1080.020883][T12010] Rebooting in 86400 seconds..