last executing test programs:

29m49.249081681s ago: executing program 32 (id=71):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ac1400aa0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x17b}, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r9 = dup(r5)
write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000040, 0x0, 0x0, 0x200000000070, 0x2000000000a0], 0x0, 0x0, 0x0}, 0x108)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)

29m12.269561341s ago: executing program 33 (id=132):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000004c0))
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0)

24m32.230515563s ago: executing program 34 (id=711):
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0xb, 0x34325842, 0x500, 0x2d0, 0x3, @discrete={0x7, 0x4}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={[&(0x7f00000001c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000d00)={[&(0x7f00000002c0)='(N,\x04\xca\xf3\xbf\x95\x92\xd9\x86\x1e\xa9\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\x02\x06']})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000580)={0x1, 0x40, "1f14dcbf2f27ec39797b4896095e2c8b70d402d52071b470", {0x8, 0x9}, 0x6})

9m59.808125538s ago: executing program 5 (id=2804):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="67d890a4", 0x4}], 0x1, 0x0, 0x0, 0x20040040}, 0x0)

9m59.520423962s ago: executing program 5 (id=2807):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

9m56.143721303s ago: executing program 6 (id=2818):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card2/oss_mixer\x00', 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r4 = dup(r3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="24fd70dad6e91de2debd7000ffdbdf250900020073797a32000000000800010001000000b787"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r6, 0x0, 0x0, 0x80000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITO'], 0x86)
socket(0xa, 0x1, 0x0)
setregid(0x0, 0x0)
socket(0x10, 0x3, 0x0)

9m55.225332037s ago: executing program 5 (id=2821):
r0 = socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10)
r6 = dup(0xffffffffffffffff)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180), &(0x7f00000001c0))
landlock_restrict_self(r6, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000300)={0x0})
r10 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff)
add_key$user(&(0x7f0000000280), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000002c0)={r10, r10}, &(0x7f0000003780)=""/194, 0xc2, &(0x7f0000000240)={&(0x7f0000003880)={'poly1305-generic\x00'}, 0x0, 0x4f})
ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8, @value=0x3})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9e2d4413e532f9d7a6f3bf460f2a878ba4d26e549d4e3ddcc3a6fcc26d7ec4210dd2db3120e0941ffa0783b4e3cb354c6278d9", @ANYRESDEC=r9], 0x24}}, 0x40000)

9m53.595830922s ago: executing program 5 (id=2822):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r6}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x14010, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

9m53.204877167s ago: executing program 6 (id=2824):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$urandom(0xffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x48, &(0x7f0000000c40)={0x2f}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ptrace$getsig(0x4202, r2, 0x6, &(0x7f0000000400))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendfile(r0, r0, &(0x7f00000001c0)=0xc38, 0x4000000080)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)

9m53.166863528s ago: executing program 2 (id=2825):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x57e4)
recvmsg(r1, 0x0, 0x20000253)

9m53.01982898s ago: executing program 2 (id=2826):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/187, 0xcc}], 0x35)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)

9m52.790005804s ago: executing program 5 (id=2827):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x19010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @value=r3}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000380)={0x2a, 0x4, 0x0, {0x0, 0x3ff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

9m51.393977804s ago: executing program 2 (id=2830):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000400)="577f2f2031df941a722903822507c7b1874e292ca445893fdefab65558aa76156da9b27c0375c23b4ec1f03174cd16f09957a881553f5a3c854d2540ff35ce188a86f2189525abafeb781a7fa398c6b3a21ebe4372adc92c85a383381888b4a4728206bc5c82d6af8d002819680bedb63b8dad261b3ddfd23023177fd29b5afa800eee8ef690b896c91e7d371ce54902c6ff4cea36844830ff86dc70ce6bd0cb0cd5f64fe2cab9d1a7cd74e703a268246a71dc0366756b52deb51a27465c0136b957b30cddbe08e8803c0124bb0d2db6496e7121c9624417a4621d9d841a8d2e9d0f803a", 0xe4, r2)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
setresuid(0x0, 0xee01, 0xffffffffffffffff)

9m51.02093753s ago: executing program 5 (id=2832):
r0 = socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10)
r6 = dup(0xffffffffffffffff)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, 0x0, &(0x7f00000001c0))
landlock_restrict_self(r6, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000300)={0x0})
r10 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff)
add_key$user(&(0x7f0000000280), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000002c0)={r10, r10}, &(0x7f0000003780)=""/194, 0xc2, &(0x7f0000000240)={&(0x7f0000003880)={'poly1305-generic\x00'}, 0x0, 0x4f})
ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8, @value=0x3})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9e2d4413e532f9d7a6f3bf460f2a878ba4d26e549d4e3ddcc3a6fcc26d7ec4210dd2db3120e0941ffa0783b4e3cb354c6278d9", @ANYRESDEC=r9], 0x24}}, 0x40000)

9m48.570586087s ago: executing program 35 (id=2832):
r0 = socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10)
r6 = dup(0xffffffffffffffff)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, 0x0, &(0x7f00000001c0))
landlock_restrict_self(r6, 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000300)={0x0})
r10 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff)
add_key$user(&(0x7f0000000280), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000002c0)={r10, r10}, &(0x7f0000003780)=""/194, 0xc2, &(0x7f0000000240)={&(0x7f0000003880)={'poly1305-generic\x00'}, 0x0, 0x4f})
ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8, @value=0x3})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9e2d4413e532f9d7a6f3bf460f2a878ba4d26e549d4e3ddcc3a6fcc26d7ec4210dd2db3120e0941ffa0783b4e3cb354c6278d9", @ANYRESDEC=r9], 0x24}}, 0x40000)

9m48.548269437s ago: executing program 2 (id=2837):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r6}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x14010, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

9m48.536020937s ago: executing program 6 (id=2838):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)="21c7d8b2ea3bdf7ba5784778f0b2fb2909167079dc4c61a65e11b3ab38419b44", 0x20, 0xfffffffffffffffc)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x22)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x1fe, 0x40000004, 0x10})
unlinkat(r4, 0x0, 0x200)
ioctl$BLKTRACESETUP(r5, 0x1276, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
lseek(r7, 0x2, 0x1)
getdents64(r7, 0x0, 0x25)
syz_io_uring_setup(0x31c7, 0x0, 0x0, &(0x7f00000005c0))
socket$alg(0x26, 0x5, 0x0)

9m48.192362593s ago: executing program 2 (id=2841):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0016041b00c400bc3f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1, {0x947}}, './file0\x00'})
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000028130000080a03000000000000000000010000000c00064000000000000000041c0005800800014091475d9b08000140000000880800014000008917240005800800024000000003080001400000f08b0800014000000033080001400000001608000a40000000037c120480280001800d00010073796e70726f7879000000001400028006000140000200000800034000000011f41101800e000100696d6d656469617465000000e0110280dc11028046000100da5db5ce4e0a45f4921569e11574de52bc3ce0145c7e3143a0780711e9fc3bf2eaaa5fd8be663ed93a5ec0d2e6e12b082c4029df70e406458df0793278cf21f26fb40000041001005668f7dd214fe2d72f089a1c3716b117ed0ffd432d50735faa1879c217dbd31c654c836cd985504e8584fabbffffa29741f2ce93fcab57e00e326922050c07f2387b35386126e78f4d5a583fddbdf0d377b973974c424884c459d1fc231e96df53c2859b8510f6b3e8573641d5108982f3a40095114868aaf78d20d7aaa189c51b9eb497258b57ca333113ce7a36cb6d00d905dce2a017e3d7f985345d5a5543402d10d7e9745b35d60b01dec187c0185213aeb5e99697f91fda039fcb8aa12fdb178e3bb3f2ab6c7d09e8aad99d4b3d2c53fba334baaa3d9516953e0710b771102b88552eb8b991205272ef80069f1af525f8932afac4878160c78f2206a34751b4999554c543c06eef5c7c2fab26a82846da1ac68f87282a5c1c39d52e853ff4cb396e788ed1f031dd6b9053d34e6883efba5edb1a56e56472baf312873906991c60eb9aeff60106a221dc31d3895a046980275996c203d09d1f6485f2ea8333683345d2c57055dcd608f97d4f7ae6391cee048acdc70848684f028e31fb684c3f659ffc60c9d905c38740a421f6fc6885396f95e12cfb91dcdbb4dff5288ece0f838ab91d63287cb50345cff77d0db358d69db28877c898c741bc07284ceb62e3f8f961588247a223b51ffe5490fdfb8be20764269089ca1516e40a044f984acd05a4add31e97f280a7a64af424a5ea9cddd540c1afc23220225ada63b445986b9a94cf3823bf2df819cb5320faa74344baec1a74081e1e24beaa8675a0b8be9228ef8ea5e143650b7078b7077125b86bdd226ab380bb9a90b52af691ac89c644c1a140072282258e512bd819ccc7f6124fd9babce165b6f255d0584587dfc2fb47a1772b6ef10b6aba577a3609d89230ab609645251a6d55981fd5506bdf32bc88c88ada1c4d8d43244e0131c83d5b1bd3624a5341d80b6fe68c4cac142e779ebe9a967d717956ea1cb971d0c89f4741a7cfcd02a127824db1266466d6d1cf39f35caea93b601fcf0917cd91ab3f9063790942c9027ad4c2fa60c1871aab9baf230793bbf0c3bbdde3911bd57150724fa9e844c4b7f59178b40500a03764d2fb73c6499bf686ce33fee4e29b7c07584621832b6632439a3097e555f54fd5bed2806edec5e1862706ce9848d1b2cd0cba355caa39e37759fb4978886f79825140c10bdb2445a00d0d80353195aca1aebfd7eb9c058ea3e2ed1d73317b601d7c90a8a49ffd7c5055126f847c7eeeb0259d150e30fe64984e28a48f86ff766da3cc9f23ef673656f8d9e5ecf224b9efcfec1b64e2e0c081c0483736d53a37625abb076d524155487a2d4b1760d5061897f8c5173058804117764fa1ac5c54fc087a8779953d577dfe8a472f76de4c0fedbe3e7e2a76b184c86fd19848c8f9f87ff60275690ca3073e5c029f81b7848231d51fb8e9c0b782a09792c38643643f60f5da6306a8ed33ab94be84fc7eaeebbda999264fc1648f4e0ff0060d2e86dfeb514082dbadadd4664f509539e6f24b61a1dae4946e4fab9b3eebd89c986afc9b125ee22fc8d1d6f701a1946cad14631e2e1501cd8be677c130685a99e6db450d4954a624bfc4bc9bfcb971942c22a462367cc219a71b9a7414bdf5f91d37ad424d8ca4b31241c9a3bfa05c97f8252ed980ee0ad76f22d1e7ad04dc7e9fad8033918d5b6b0563e60f12730f50a2012e74aa95c22933a60b3bd0fea45de8b5c913df993c539e4a8bacd1cdc9d8b535e62db4db1dbfba58c4d296aa1d80e1be7fcc7686c85846c43fc8ecbdd2c91106541452584dc9abe4af7624e84f4b95e5fb21f06fb5355a390d6dbc5003944fe2ac8107c5a865a7d070815dbb22ead34f7d24b10547d08b21845e5726bd98b86d1742645b824cde27829660af121d53928efa84a86da085310b897fd006ae0ee8dd4c44faa3a7e6be624eac07a235a312e75f92f55f9dc311b5aabf154af515ed348c2ecc7f0c56025eed33e20e66e401e176e3a45a88fa2d43a143ac06c7acea436778aa36dd97899bc4ed3729cb107a766f9b8cca2e1c1030de67e335722b415c400a7c2a61f9a846d32c86a58bb0c07ebe1c4e34bfa684fb1eaa557a234b99db6628edca3bb73799b3506153c94e23d8b3ccd8cb85f511509eb8839c413ad18d6be7da69a919c78487ff23930d017360101bbfaa8e1ff35fdcc23b492552ae7df4e708a00eb59b5183bc5dfc60e84beb2709815ae5bd25cefbc88d310137e33d3b622f2fbe810fe9f330f06f8691b0ec0d45dac48eefe665de980031c9a1d6c4631a3c922e5707d1a21b42574a134e49d327a8004b941a69f60d310321e38fcf90f8b9442002535fc49bc622787cf4d986ccb1a82dba2a69ae3ec91cf5582f638251c839c8d8a5c9828c1c499e32a98555c55ad9ffae6d819d6682a3d7e07499a5859d59551593d16146c27c1b4d704ea594b1a0e926b544428d9e1ad1ad5522b43adf67dcdb40f90fdca04e975af8db29f3cca1dc7c81db5854adf84cef7dfd59a2d7af3ba7c7f8fda294023cefbb041ef943456e0cffd696fb0e73350f2fe80aa5dde8de352b2e2fdb669932da1cc15c8d245b3f59414822518636b296cf799f032640153e82f865a5e60d13bfb6afb4c22b887682c1d8d6b002b9818ce6c43e6693a470739e5d89c7e84bc7af9df8b4d3d072ec6765748ef31fd6a72cbfd05198cf0ea81b059bc6b22f1cd77061b481954089cf4186b1b7eb585edae593373de14ffd86553dc0ca5e50e66f87e72ae72bbe68befae32e485293cb58870ff6ca506802c0bd11bc2ea409b747e9c7d32b9ae43b1d66ca3e917691b8910982fc7d7214bef7ec85a377259c04ffd38fcc0659956862091fe23dbce268fb819e5f53d32aaa38661846c98f7e7909c666ed98e56c06cc4bd8a560e0d7062d7d4cfb0f9b23a43f1752d3031da19a24f58dee0558da9d8f623049d8845589e4cbb583e94a575f1377f2f59884a54f85d66e824577ceab36268e20b1e8412747e44d22978e2cd4a13d0748d7f94410bbf5ecf7e0fe1122c363d27b1fc5110d9e752d91dfbd73de2888b9e831ebf07fbff318e6d9d2f3b5cbcee9006453e33153baae9d16b0c5fe0bdf2b79e2a75bdef08bd2a17c18a6ddec6dba1c59ca901988464c4a4523bdecc0c6cc86498baadddea7d0e21d7251b397db2708c95fa82b9bd6b957cce5df043d70c58fda5898093586e208c82e1b4278215533e14041915d2f36111dce935e4007d2a26f5905819aa507f325aead2959a6e8b6ad4b3255597e5f0b72353fc11c601d39ec225df3549dccf190c03c0dcbf55b9560a137734879184128e4c0b679cf5c402679d3ede4dda6de76b6eb34dc94524a49467cf13f03d3c8241d270953fd1f8cc245ea7e1603e86c1bdad49ae0a1149d44e66c791febddf69dbde7ef57ee910156865e43e8ba37891f0318b33769d0db39b722a3168e6cb7e9001309f34ec74ea54a61f6f00a6a625f42393c80ccb7012ae561dd6ad64f11070fbc16508bca44e3411658c9263e001d1595a954253b5a7a6862510a9d77217bed81facf9c76eebaf97c809bfc8a3aed0c6eaf46c3227d7a32b673efc8bd20e9182ba297b6e120923127b119445a1e3ddc37515824361bf402245e08aa9bd1448eb06de76a62165ab6037a3f21528ba656705d27e79fafb07edbeefdd69a4964a57e33f95098d3bafca63746d7451e9bbe4c22c098b299fd08e1cf6f823dfab2a060249bf4da1cdac8bf86b7a5f06cae9024f3552ba37f6d9a4c18fb62fef7083f7f13b2337417bae580916fadd9e24f775b765288386a85ac10430e9d3d20d477632b2a2a5f6960de07a7798510b22eb8ac4a2f826e7837e772a9da3e2c01f08c16db7987158ffa6ef51cd257cd2f0f18317f792306e90af54fb5cdf6b81ebe91f4be320d0e6d466ae82144228451f46fa24dc9b89cdb419d2acf3a4a99a1ebb30a7a8e713d0424d611a6fec26a39388ff5180f52d23bea224bb0f7658f9f41fac9f71824aa80a69fe00305d98db944954148490e732c7603e19e51f8791e71855baecded76790748871074e0df63787fe7f7554f847913fb8e04677de962ed2e1c8d2a933a21f203897b74767663a85fcabaca83aa87670c1e190417b062a1ed514054726590a2ca8ea0b5c7548eb8444c4a090dc8d5b9f258c80a88ef02c7102ed446aec95ee35999f421b57cb4d7bfab3fc07d74a9afdcd046aa4d4d35cf55c100484f0e31be226588acc3aa48dcc526f77c8d25597567e81407b04d6aedf608896d0b245d6f6938376f0580d722d7452b2702e94724680dfeafb0d96e520878969b90074226a3941bd9a5acf9e324ef8b46467267e985b37c7d4ed37149f4a546a3d997b57d017b14d63666acb5d7a41d1d537f24e908f0eaa17dfb08a7c68f11e4bffc2d25f2837d9bdb33672ae034a271f06af1acbdbc77d93100c87ba3217fad377016aa3aaca749c19b263e248074b161ae2f23176192261047baf159cdb1252c9a053e6a875d3a56a357b9124a7928f321150e7db98c775011b9343778469aa1e083d1602a9fa04fa78ac01433ee6df847c667c52809775faf2f5537e346349a994e716e6387ec9bb9fbc6f449162cecce7ccc0b3a60ebaabbb2875cd9d82af0a5e03ef6f858c1e1939de2486d5a11a575aa0980ad47d5ad25544f85037055866b4a262c0f8784c0620826fe52a8180a093e29984c6f5906a69d86faff69135cd66dd6dfa286d34b7de38a7b741f69aac3a2abccb6490a8f55243ea996d62b2bc0c58fd129350d25cfef77491358c9819b3ecb50c2bec7357d1e1b355ac314aff58fc8bd64ba39436b395870bc30d17f725a39f5eaa40cd861dd21071c98995ce155cf041b676cb3c98c4f33a216bf985810092009d856b37515dd15c018679f6d295e968d2d6c56b389381b2ecd961f1af47e5f64911d89b294b9dca15e81a8193ac9f1409d7fedc2588e1ff2adcadf22015b8f87679f9dfd5be918359d89917c70465aacf028403974f7d4a7e2e6f3c65ed397bf03e0b0e35bad101db309da045903a374cffd5262fc13fac5c3edca2f1a27f673bad5d1f5325ee8fe9af7273bc7608e21f933044e8362acf17bf639b54cd5bff4aa3721b66bda9204e22a8e08330be303264e8a6777fb83d5bdd91573e52d9dd0d9e5e79421f7efe0afe9d0c3c1e1606b9b63742f61420ac1a10a8716df157b39e2080db5b52efdb75f0a6835ef5bb40ac1db728416b5c6253aec1981cb5dbfeebce467bb7052df4486d6bbc57e038c9ea4b4891ba0f511b73209d19119e61a0d665f6d1f2e2d5a9adc040635c52f2b06ad53b8b0f0b9395153bf30d83d522a8366adc7a7b4b25bd017da64e5616ce2edc2be43f4b76d34915d91aba78bedffe623403af96dab701b4283c77697bffe375f52873ba46fe1ff8bab51a06b1e2caceb2ead81b734f741fa5e8719a1898a7e5f558fcdbb26a7ff2a86c6a307d29bef0ca4eeb7d5df3c851c6c9b1af442ce17b68ccabe98b447ed1688a03812b3b92bd8d373deb6fcfef32b44445f9a123d25549948efbb1f4a98f8b9f20fed592ecfc5a10911b55b4174d4fde1f4edbeb7020d2d86f03f31a21c210acd0ae0bb12fd14503096c3c04b9d5165adde109d87f5fce2b35733ba66380e0871f991cec54a66da31a736d54fd5cbe1fe6159d64bd547a9cba6779fea8b6c5b77616fbb1ad01385b496d2f8d5d2ebafa185a7416d91ef1a7653f7e7547290af3375ee8175bb43763458d1cc2e4df8fcfed405227b2d537af3c4321400028008000180fffffffc08000180fffffffccd0001002cd9f1060fd626a50cd98089753110f21efd53eab7d35b4588bc0337ea627e8b184ddd62afaa861e6c1032faed8c01d1f8676f266ca9d2faf6f08cf93cb52788282a3670f2b1c2c2e1f6745f869185f8fa268f7a4da41ee48f20f4b9707c7a2703caf08d74624dbd6a0eb22dcaacb262392ee3f2cbd1358547af120016c4be384b9fb7a8924695097667d9930cad6d61dae376d44f239a1521dfcc32dbf13a61adda0993e94197f0e052f8de76d5102dde545e80d575574995d59166bd23c5dbac850acb4c991e0fbf000000680002800900020073797a30000000000900020073797a320000000008000340000000040900020073797a3200000000080001800000000008000340000000040900020073797a300000000008000180000000000900020073797a310000000008000180fffffffd400002800900020073797a31000000000900020073797a3100000000080003400000000108000180fffffffd08000340000000040900020073797a310000000030000180080001006669620024000280080001400000000b080003400000000808000240000000030800034000000013100001800c0001006e6f747261636b00100001800900010068617368000000000c000180070001006374000008000b40000000020900010073797a31000000002400058008000140000000890800024000000002080001400000003b08000140000000040c0003400000000000000004140000001000010000000000000000000000000a"], 0x1370}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0xffd, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x11)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000740)={0x0, @default, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @null, 0x2, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5, 0x0, 0x5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x9ea22000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x80)
socket$inet(0x2, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r9 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9m46.267092711s ago: executing program 2 (id=2844):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x496, &(0x7f0000000180)={0x0, 0x707b, 0x0, 0x3, 0x2288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010125})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SYMLINKAT={0x26, 0x181f1fd487d35bdf, 0x0, r6, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x186d, 0x0, 0x4, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x2c, 0x18, 0x1, 0x3, 0x25dedbfe, {0xa}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0)
bind$ax25(r0, &(0x7f0000000040)={{0x3, @bcast, 0x401}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @default]}, 0x48)

9m44.513954958s ago: executing program 36 (id=2844):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x496, &(0x7f0000000180)={0x0, 0x707b, 0x0, 0x3, 0x2288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000240)=<r5=>0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010125})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SYMLINKAT={0x26, 0x181f1fd487d35bdf, 0x0, r6, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x186d, 0x0, 0x4, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x2c, 0x18, 0x1, 0x3, 0x25dedbfe, {0xa}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0)
bind$ax25(r0, &(0x7f0000000040)={{0x3, @bcast, 0x401}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @default]}, 0x48)

9m36.101846985s ago: executing program 6 (id=2850):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r6}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x14010, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

9m34.840955544s ago: executing program 6 (id=2854):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x128, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd"}]}, @nested={0xc4, 0x6, 0x0, 0x1, [@nested={0xc0, 0x75, 0x0, 0x1, [@nested={0xc, 0x105, 0x0, 0x1, [@typed={0x4, 0x22}, @typed={0x4, 0x98}]}, @nested={0x4, 0x8}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r0}, @generic="897a22072687e1d29eb84b27bdf276e0", @nested={0x94, 0x425, 0x0, 0x1, [@nested={0x8d, 0xc7, 0x0, 0x1, [@generic="0e8a1ba9d0d1c3c46f11f097dd31b5ac0d84d4d2b2f914e4192e9f5e09954309143035825e421199ef3742a5289e741571d2ac7ef6550f8c0454460c177a12d8c5", @typed={0x41, 0xe4, 0x0, 0x0, @binary="6423d7fbd06565c156e976ea2705ead6f599a9ab0d0f0b42f23c719ad59cbf301b5dfa5c580b1cc4643e60b078837a9e0bbd915ec517e815e3d158c99e"}, @nested={0x4, 0xc6}]}]}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x0)

9m34.311210252s ago: executing program 6 (id=2855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r2, &(0x7f0000000400), 0x20000000}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)

9m34.081765745s ago: executing program 37 (id=2855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r2, &(0x7f0000000400), 0x20000000}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)

8m50.016973168s ago: executing program 8 (id=2922):
r0 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2b971e195bcb209ec186f06b100d36d0181488e179f185b83f0a938258acf8fff35e223528dbea6c927bdd2819de9c0c30529a2248be2db9953a90461455b1d1f1b1b7e7b70a68705c29d5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
tgkill(r0, r0, 0x26)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_timedsend(0xffffffffffffffff, 0x0, 0x2000, 0x0, 0x0)
kexec_load(0xf5, 0x0, 0x0, 0x0)
pipe2(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
socket(0x10, 0x3, 0x0)
capset(0x0, &(0x7f0000000080))
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "00000000ade82a8017000000000000000100"})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8)

8m48.852884946s ago: executing program 8 (id=2924):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
r1 = socket(0x2b, 0x80000, 0x6)
write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000080)=0x6)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(0x0, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0x7, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2})
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f00000005c0)=@ethtool_ts_info})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x0, 0x0, 0x50323234}, 0x0, 0x0, 0x0, 0x0, 0x0}})

8m43.074180582s ago: executing program 8 (id=2932):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800"], 0x68}}, 0x0)
syz_io_uring_setup(0xc6d, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040), &(0x7f0000000280))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r3, 0x47bc, 0xeffd, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')

8m39.400221717s ago: executing program 8 (id=2940):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r6}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x14010, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

8m39.042286883s ago: executing program 8 (id=2941):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
r1 = socket(0x2b, 0x80000, 0x6)
write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15)
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000080)=0x6)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(0x0, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f00000005c0)=@ethtool_ts_info})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x0, 0x0, 0x50323234}, 0x0, 0x0, 0x0, 0x0, 0x0}})

8m38.904483565s ago: executing program 9 (id=2942):
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0)
r5 = io_uring_setup(0x2a2e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setresgid(0xee00, 0xee01, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
setgroups(0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)

8m38.56775438s ago: executing program 8 (id=2943):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card2/oss_mixer\x00', 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, 0x0, 0x40)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r6, 0x0, 0x0, 0x80000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITO'], 0x86)
socket(0xa, 0x1, 0x0)
setregid(0x0, 0x0)
socket(0x10, 0x3, 0x0)

8m37.191788791s ago: executing program 38 (id=2943):
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card2/oss_mixer\x00', 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, 0x0, 0x40)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r6, 0x0, 0x0, 0x80000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITO'], 0x86)
socket(0xa, 0x1, 0x0)
setregid(0x0, 0x0)
socket(0x10, 0x3, 0x0)

8m37.181520601s ago: executing program 9 (id=2945):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
close(0xffffffffffffffff)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

8m36.808242386s ago: executing program 9 (id=2947):
r0 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2b971e195bcb209ec186f06b100d36d0181488e179f185b83f0a938258acf8fff35e223528dbea6c927bdd2819de9c0c30529a2248be2db9953a90461455b1d1f1b1b7e7b70a68705c29d563cef8992af0236dd850c5b1b240894f7b4c57ef7b2e0830d1640a38dd47df723a4865884f7f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
tgkill(r0, r0, 0x26)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_timedsend(0xffffffffffffffff, 0x0, 0x2000, 0x0, 0x0)
kexec_load(0xf5, 0x0, 0x0, 0x0)
pipe2(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
socket(0x10, 0x3, 0x0)
capset(0x0, &(0x7f0000000080))
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "00000000ade82a8017000000000000000100"})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8)

8m34.525766621s ago: executing program 9 (id=2950):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r6}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x14010, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

8m34.003532688s ago: executing program 9 (id=2953):
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0)
r5 = io_uring_setup(0x2a2e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
setresgid(0xee00, 0xee01, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
setgroups(0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)

8m31.875681361s ago: executing program 9 (id=2957):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0016041b00c400bc3f6e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1, {0x947}}, './file0\x00'})
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0xffd, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x11)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000740)={0x0, @default, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @null, 0x2, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5, 0x0, 0x5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x9ea22000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x80)
socket$inet(0x2, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r9 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m31.510018636s ago: executing program 39 (id=2957):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0016041b00c400bc3f6e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r1, {0x947}}, './file0\x00'})
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0xffd, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x11)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000740)={0x0, @default, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @null, 0x2, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5, 0x0, 0x5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x9ea22000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x80)
socket$inet(0x2, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r9 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15.394673627s ago: executing program 4 (id=4430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x2008000, &(0x7f00000000c0)={[{@name={'name', 0x3d, '+$!&%]-[('}}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000000002)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffbfffc0)

14.43565842s ago: executing program 7 (id=4433):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@default, @default, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]})
ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

14.231239743s ago: executing program 7 (id=4435):
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff0200"/52], 0x0)

14.014082867s ago: executing program 7 (id=4437):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000024e00000000000000000001050000001002006af7a0baca8f043930fb0000"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(r3)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_int(r5, 0x1, 0x10, 0x0, &(0x7f0000001880))
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r6, 0x4)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r7, 0x0, 0x0, 0x1000f4)
read$FUSE(r7, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000241000/0x2000)=nil, 0x2000, 0x0)

8.506852036s ago: executing program 3 (id=4447):
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff0200000000000000000000000000010000"], 0x0)

8.241806881s ago: executing program 3 (id=4448):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r2, &(0x7f0000000400), 0x20000000}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)

8.096090243s ago: executing program 4 (id=4449):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)}}], 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000160a030200000000000000000200000014000380080002400000001008000140000000001400000011000100"/79], 0x50}}, 0x0)
ftruncate(0xffffffffffffffff, 0x80079a0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

7.117336747s ago: executing program 3 (id=4451):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x4004)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r3 = gettid()
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, 0x0, 0x38, 0x0, @val=@iter={0x0}}, 0x20)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvmsg(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000002)
write$binfmt_register(r4, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x24f3, 0x3a, ']\x01{:\xb6%*{!+', 0x3a, 'syz1\xc9\x84\xc6>C\x04\xdaG3\x13\x9f\xb9\xe6e\xc8\x03-r\x80nw\x06\xa0U:\x94', 0x3a, './file0'}, 0x4f)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080))
read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_delete(0x0)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)

7.071823667s ago: executing program 7 (id=4452):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r1, 0x8, 0x799b61029718467}, &(0x7f0000000100)=0xc)

5.283824553s ago: executing program 7 (id=4458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x80)

5.262981873s ago: executing program 3 (id=4459):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a300000000014000380080002400000000008000140"], 0x68}}, 0x0)
syz_io_uring_setup(0xc6d, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040), &(0x7f0000000280))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r2, 0x47bc, 0xeffd, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')

5.190424234s ago: executing program 7 (id=4460):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x2008000, &(0x7f00000000c0)={[{@name={'name', 0x3d, '+$!&%]-[('}}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000000002)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffbfffc0)

5.159653535s ago: executing program 1 (id=4461):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r2, &(0x7f0000000400), 0x20000000}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)

5.071818087s ago: executing program 3 (id=4462):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000400)="577f2f2031df941a722903822507c7b1874e292ca445893fdefab65558aa76156da9b27c0375c23b4ec1f03174cd16f09957a881553f5a3c854d2540ff35ce188a86f2189525abafeb781a7fa398c6b3a21ebe4372adc92c85a383381888b4a4728206bc5c82d6af8d002819680bedb63b8dad261b3ddfd23023177fd29b5afa800eee8ef690b896c91e7d371ce54902c6ff4cea36844830ff86dc70ce6bd0cb0cd5f64fe2cab9d1a7cd74e703a268246a71dc0366756b52deb51a27465c0136b957b30cddbe08e8803c0124bb0d2db6496e7121c962", 0xd6, r2)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
setresuid(0x0, 0xee01, 0xffffffffffffffff)

4.11377717s ago: executing program 1 (id=4463):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

3.43924806s ago: executing program 3 (id=4465):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x4, 0x11, {0x11, 0x11, "083881b9557a9dd2eb251eddb7bf4a"}}, 0x0}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000340)="133b2659b1b14ca156595f2cf6f579aa6a1af186318e1388fc48b03eb3e848d18b843fe9af82252ad490dc720c44bb3c012a0de69e4338bb7118131b25bd0d33ae2af467d1553b72727b963a3eca0280eaf71320947ccaa3a7badda2cbbf3411b52975ced353abfb6fbc70402caa75f2cf05c5a7b8ef317c8d7926398dccb74e8c68baa41619a0", 0x87}], 0x1}}], 0x1, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x810)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

3.311586342s ago: executing program 0 (id=4466):
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

3.239088073s ago: executing program 1 (id=4467):
fsopen(&(0x7f0000000040)='jffs2\x00', 0x0)
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(r0)
syz_emit_ethernet(0x37, &(0x7f0000000280)={@link_local, @link_local, @void, {@x25={0x805, {0x3, 0x1b, 0xfd, "72fc9aa7d1a21e031e2389c64ef5b4d6c40a93d7888b9c67bcf13b52f7bff024c601a6d359b5"}}}}, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32], 0x30}, 0x40084)

3.141399244s ago: executing program 0 (id=4468):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x8, 0x799b61029718467}, &(0x7f0000000100)=0xc)

2.234050168s ago: executing program 1 (id=4469):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, 0x0, 0x0)

2.122892449s ago: executing program 4 (id=4470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x80)

2.015678801s ago: executing program 0 (id=4471):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
shutdown(r1, 0x0)
sendfile(r1, r2, 0x0, 0xdc)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r4 = getpid()
r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r5, &(0x7f0000032140)=""/102344, 0x18fc8, 0x56)
syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/mnt\x00')
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000010401a100000000000000000200000606000640000300000500010002f5ff00fb6147b660ad2d06bcc7c76fb715877c2dae3d6fcd99f2b912fc45cfe0820029c8456ccb3f30ced90760db0301a78c0e71315a01cb1331b14c8d07efa3c44517e70178b2fd7f01d766f4511227e18ac56416ec186f594e852f1c3a82eff901c49601582a"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x54)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r9, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x1, [<r11=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r11, 0x0, <r12=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r12})
close_range(r0, 0xffffffffffffffff, 0x0)

2.01531889s ago: executing program 1 (id=4472):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a300000000014000380080002400000000008000140"], 0x68}}, 0x0)
syz_io_uring_setup(0xc6d, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040), &(0x7f0000000280))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r2, 0x47bc, 0xeffd, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')

1.882555792s ago: executing program 4 (id=4473):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r2, &(0x7f0000000400), 0x20000000}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)

1.781809624s ago: executing program 1 (id=4474):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

1.610271666s ago: executing program 0 (id=4475):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000400)="577f2f2031df941a722903822507c7b1874e292ca445893fdefab65558aa76156da9b27c0375c23b4ec1f03174cd16f09957a881553f5a3c854d2540ff35ce188a86f2189525abafeb781a7fa398c6b3a21ebe4372adc92c85a383381888b4a4728206bc5c82d6af8d002819680bedb63b8dad261b3ddfd23023177fd29b5afa800eee8ef690b896c91e7d371ce54902c6ff4cea36844830ff86dc70ce6bd0cb0cd5f64fe2cab9d1a7cd74e703a268246a71dc0366756b52deb51a27465c0136b957b30cddbe08e8803c0124bb0d2db6496e7121c962", 0xd6, r2)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
setresuid(0x0, 0xee01, 0xffffffffffffffff)

838.071028ms ago: executing program 4 (id=4476):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x4}, {0x0}, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)}}], 0x90}, 0x0)

250.854296ms ago: executing program 0 (id=4477):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001440)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9254}]}]}]}}]}, 0xac}, 0x1, 0x7a00, 0x0, 0x1}, 0x0)

93.648818ms ago: executing program 4 (id=4478):
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))

0s ago: executing program 0 (id=4479):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000380)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x187}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

d HFS+ superblock
[ 1355.499701][T13927] team0 (unregistering): Port device team_slave_1 removed
[ 1356.139055][T13927] team0 (unregistering): Port device team_slave_0 removed
[ 1356.148501][ T4595] smc: removing ib device syz!
[ 1356.244592][T13927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1356.317947][T13927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1357.086928][T13927] bond0 (unregistering): Released all slaves
[ 1357.218446][T14473] device veth0_macvtap entered promiscuous mode
[ 1357.253883][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1357.274851][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1357.292006][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1357.316104][T14473] device veth1_macvtap entered promiscuous mode
[ 1357.335789][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1357.349457][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1357.369376][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1357.382127][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1357.393178][T14442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1357.404514][T14442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1357.424069][T14442] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1357.518818][ T7414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1357.564277][ T7414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1357.643677][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1357.652573][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1357.811325][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1357.919775][T14442] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1357.985484][T14442] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.024056][ T4351] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[ 1358.090900][T14442] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.178563][T14442] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.223941][ T4351] usb 2-1: device descriptor read/64, error -71
[ 1358.373231][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1358.386000][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1358.397225][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1358.412289][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1358.422610][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1358.433693][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1358.444203][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1358.463391][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1358.485149][T14473] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1358.493122][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1358.503832][ T4351] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[ 1358.531244][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1358.558843][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1358.583492][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1358.593999][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1358.604762][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1358.615136][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1358.626319][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1358.636293][T14473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1358.655828][T14473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1358.690573][ T4351] usb 2-1: device descriptor read/64, error -71
[ 1358.695007][T14473] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1358.714564][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1358.755576][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1358.814346][ T4351] usb usb2-port1: attempt power cycle
[ 1358.842229][T14473] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.934481][T14473] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.003557][T14473] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.061052][T14473] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.283909][ T4351] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[ 1359.335914][ T4351] usb 2-1: device descriptor read/8, error -71
[ 1359.664251][ T4351] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[ 1359.726197][ T4351] usb 2-1: device descriptor read/8, error -71
[ 1359.766182][ T7061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1359.778540][ T7061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1359.794880][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1359.832648][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1359.843877][ T4351] usb usb2-port1: unable to enumerate USB device
[ 1359.893513][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1359.912898][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1359.949744][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1359.960449][ T4454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1359.970694][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1360.004074][ T4454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1360.005374][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1360.076107][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1360.960317][T14610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1361.053612][T14610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1361.526300][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.532720][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.823541][T14610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1361.935705][T14610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1361.946688][T14610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1361.957673][T14610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1361.975288][T14610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1362.243528][T14610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1364.187841][T14412] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1364.337907][T14412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1364.346714][T14412] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1364.354591][T14412] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1364.364464][T14412] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1364.371849][T14412] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1364.604254][T14631] lo speed is unknown, defaulting to 1000
[ 1364.953547][ T9404] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[ 1365.790845][T13927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1365.804981][ T9404] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1365.816627][ T9404] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1365.828157][ T9404] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.843106][ T9404] usb 10-1: config 0 descriptor??
[ 1365.851433][T14642] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1366.484172][T14412] Bluetooth: hci4: command 0x0409 tx timeout
[ 1366.690257][T13927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1367.193987][ T9404] usbhid 10-1:0.0: can't add hid device: -71
[ 1367.200243][ T9404] usbhid: probe of 10-1:0.0 failed with error -71
[ 1367.254530][ T9404] usb 10-1: USB disconnect, device number 2
[ 1367.307946][T13927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1367.485312][T13927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1368.971958][T14412] Bluetooth: hci4: command 0x041b tx timeout
[ 1369.343492][T14673] sd 0:0:1:0: device reset
[ 1370.128348][T14631] chnl_net:caif_netlink_parms(): no params data found
[ 1370.310714][T14678] fuseblk: Unknown parameter '0x0000000000000003'
[ 1371.075890][T14412] Bluetooth: hci4: command 0x040f tx timeout
[ 1371.423002][T13927] tipc: Left network mode
[ 1371.546247][T14631] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1371.711128][T14631] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1371.742270][T14631] device bridge_slave_0 entered promiscuous mode
[ 1372.092788][T14631] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1372.112124][T14631] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1372.190911][T14631] device bridge_slave_1 entered promiscuous mode
[ 1373.135340][T14412] Bluetooth: hci4: command 0x0419 tx timeout
[ 1373.860565][T14631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1374.012269][T14720] hfsplus: unable to find HFS+ superblock
[ 1374.704808][T14631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1374.789222][T14631] team0: Port device team_slave_0 added
[ 1375.054265][T14723] UBIFS error (pid: 14723): cannot open "./file0", error -22
[ 1375.074385][T14631] team0: Port device team_slave_1 added
[ 1375.334446][T14725] fuseblk: Unknown parameter '0x0000000000000003'
[ 1375.587290][T14631] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1375.617545][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1375.658779][T14631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1376.507062][ T4352] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[ 1377.031004][T14631] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1377.053808][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1377.096622][T14631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1377.187681][ T4352] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1377.251741][ T4352] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[ 1377.341865][ T4352] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1377.484766][ T4352] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1377.550036][ T4352] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1377.616101][ T4352] usb 10-1: Product: syz
[ 1377.644225][ T4352] usb 10-1: Manufacturer: syz
[ 1377.679220][ T4352] usb 10-1: SerialNumber: syz
[ 1377.753811][ T4352] usb 10-1: config 0 descriptor??
[ 1377.861160][ T4352] radio-si470x 10-1:0.0: could not find interrupt in endpoint
[ 1377.919039][ T4352] radio-si470x: probe of 10-1:0.0 failed with error -5
[ 1377.965561][ T4352] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1378.153045][T14631] device hsr_slave_0 entered promiscuous mode
[ 1378.174471][T14631] device hsr_slave_1 entered promiscuous mode
[ 1380.980658][T13927] device hsr_slave_0 left promiscuous mode
[ 1381.000131][T13927] device hsr_slave_1 left promiscuous mode
[ 1381.023988][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1381.031482][T13927] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1381.069038][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1381.108561][T13927] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1381.121172][T11471] usb 10-1: USB disconnect, device number 3
[ 1381.168614][T13927] device bridge_slave_1 left promiscuous mode
[ 1381.183709][T13927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1381.225168][T13927] device bridge_slave_0 left promiscuous mode
[ 1381.231482][T13927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1381.251495][T14773] fuseblk: Unknown parameter '0x0000000000000003'
[ 1381.592853][T13927] device veth1_macvtap left promiscuous mode
[ 1382.438174][T13927] device veth0_macvtap left promiscuous mode
[ 1382.778699][T13927] device veth1_vlan left promiscuous mode
[ 1382.865787][T13927] device veth0_vlan left promiscuous mode
[ 1384.951978][T13927] team0 (unregistering): Port device team_slave_1 removed
[ 1385.025804][T13927] team0 (unregistering): Port device team_slave_0 removed
[ 1385.087437][T13927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1385.155447][T13927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1386.080272][T13927] bond0 (unregistering): Released all slaves
[ 1386.715936][T11471] lo speed is unknown, defaulting to 1000
[ 1387.182011][T14814] fuseblk: Unknown parameter 'fd0x0000000000000003'
[ 1388.905404][T14818] lo speed is unknown, defaulting to 1000
[ 1388.913518][T14818] lo speed is unknown, defaulting to 1000
[ 1388.930987][T14818] lo speed is unknown, defaulting to 1000
[ 1389.090112][T14818] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1389.379825][T14818] lo speed is unknown, defaulting to 1000
[ 1390.229997][T14818] lo speed is unknown, defaulting to 1000
[ 1390.244476][T14818] lo speed is unknown, defaulting to 1000
[ 1390.286927][T14818] lo speed is unknown, defaulting to 1000
[ 1390.300452][T14818] lo speed is unknown, defaulting to 1000
[ 1390.326039][ T4324] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[ 1390.540160][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1390.558577][ T4324] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[ 1390.607060][T14631] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1390.613899][ T4324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1390.629666][ T4324] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1390.641699][T14631] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1390.657997][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1390.679661][ T4324] usb 5-1: Product: syz
[ 1390.684088][ T4324] usb 5-1: Manufacturer: syz
[ 1390.688887][ T4324] usb 5-1: SerialNumber: syz
[ 1390.704724][T14631] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1390.718702][ T4324] usb 5-1: config 0 descriptor??
[ 1390.752810][T14631] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1390.776018][ T4324] radio-si470x 5-1:0.0: could not find interrupt in endpoint
[ 1390.811692][ T4324] radio-si470x: probe of 5-1:0.0 failed with error -5
[ 1390.832730][ T4324] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1391.230117][T14631] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1391.247427][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1391.264905][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1391.945929][T14631] 8021q: adding VLAN 0 to HW filter on device team0
[ 1392.218581][T13927] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1392.517584][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1392.565678][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1392.574427][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1392.581668][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1392.590144][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1392.671453][T13927] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1392.714511][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1392.734387][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1392.761033][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1392.768368][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1392.796458][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1392.919874][T13927] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1392.988945][T14861] fuseblk: Unknown parameter 'fd0x0000000000000003'
[ 1393.120687][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1393.452272][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1393.610734][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1393.767920][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1394.046412][ T4352] usb 5-1: USB disconnect, device number 3
[ 1394.212882][T13927] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1394.562545][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1394.629847][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1394.643710][T14412] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1394.652650][T14412] Bluetooth: hci1: Injecting HCI hardware error event
[ 1394.680017][ T4269] Bluetooth: hci1: hardware error 0x00
[ 1394.768224][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1394.836697][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1394.892526][T14631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1394.951010][T14876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1394.965213][T14876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1394.982258][T14876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1394.998451][T14876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1395.017152][T14412] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1395.028382][T14412] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1395.125698][T14631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1395.233225][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1395.314637][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1395.529257][T14875] lo speed is unknown, defaulting to 1000
[ 1395.546818][T14885] hfsplus: unable to find HFS+ superblock
[ 1396.300191][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1396.318211][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1396.341858][T14631] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1396.672054][T14875] chnl_net:caif_netlink_parms(): no params data found
[ 1397.354004][ T4270] Bluetooth: hci0: command 0x0409 tx timeout
[ 1397.363891][ T4269] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1397.750353][T14910] fuseblk: Unknown parameter 'fd0x0000000000000003'
[ 1397.924187][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1397.940582][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1398.077665][T14875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1398.089033][T14875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1398.121816][T14875] device bridge_slave_0 entered promiscuous mode
[ 1398.147548][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1398.165628][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1398.228015][T14875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1398.237928][T14875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1398.258684][T14875] device bridge_slave_1 entered promiscuous mode
[ 1398.271728][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1398.287076][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1398.462587][T14631] device veth0_vlan entered promiscuous mode
[ 1398.554992][T14875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1398.570141][T14875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1398.779709][T14875] team0: Port device team_slave_0 added
[ 1398.804766][T14631] device veth1_vlan entered promiscuous mode
[ 1398.818943][T13927] device hsr_slave_0 left promiscuous mode
[ 1398.841884][T13927] device hsr_slave_1 left promiscuous mode
[ 1398.866036][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1398.890296][T13927] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1398.906486][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1398.927425][T13927] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1398.941266][T13927] device bridge_slave_1 left promiscuous mode
[ 1398.949102][T13927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1398.958558][T13927] device bridge_slave_0 left promiscuous mode
[ 1398.966296][T13927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1399.025418][T13927] device veth1_macvtap left promiscuous mode
[ 1399.034246][T13927] device veth0_macvtap left promiscuous mode
[ 1399.040442][T13927] device veth1_vlan left promiscuous mode
[ 1399.065121][T13927] device veth0_vlan left promiscuous mode
[ 1399.364013][ T4270] Bluetooth: hci0: command 0x041b tx timeout
[ 1399.421433][T14412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1399.433689][T14412] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1399.444473][T14412] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1399.459089][T14412] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1399.471014][T14412] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1399.480322][T14412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1399.927283][T14412] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1399.936654][T14412] Bluetooth: hci2: Injecting HCI hardware error event
[ 1399.946600][ T4269] Bluetooth: hci2: hardware error 0x00
[ 1401.172035][T13927] team0 (unregistering): Port device team_slave_1 removed
[ 1401.253265][T13927] team0 (unregistering): Port device team_slave_0 removed
[ 1401.311941][T13927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1401.372907][T13927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1401.448801][T14412] Bluetooth: hci0: command 0x040f tx timeout
[ 1401.529094][ T4270] Bluetooth: hci1: command 0x0409 tx timeout
[ 1402.023684][ T4269] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1402.631020][T14940] hfsplus: unable to find HFS+ superblock
[ 1403.531182][T13927] bond0 (unregistering): Released all slaves
[ 1403.544750][ T4269] Bluetooth: hci0: command 0x0419 tx timeout
[ 1403.606140][ T4269] Bluetooth: hci1: command 0x041b tx timeout
[ 1404.268413][T14875] team0: Port device team_slave_1 added
[ 1404.454475][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1404.538634][ T9404] lo speed is unknown, defaulting to 1000
[ 1405.140228][T14875] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1405.182886][T14875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1405.413429][T14875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1405.435130][T14875] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1405.443109][T14875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1405.957934][ T4269] Bluetooth: hci1: command 0x040f tx timeout
[ 1406.433847][T14875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1406.488613][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1406.527401][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1406.545671][T14631] device veth0_macvtap entered promiscuous mode
[ 1406.577794][T14631] device veth1_macvtap entered promiscuous mode
[ 1406.636287][T14875] device hsr_slave_0 entered promiscuous mode
[ 1406.644341][T14875] device hsr_slave_1 entered promiscuous mode
[ 1406.652803][T14875] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1406.660527][T14875] Cannot create hsr debugfs directory
[ 1406.701964][ T9404] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[ 1406.728674][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1406.739708][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1406.752368][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1406.770564][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1406.786274][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1406.799346][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1406.818002][T14631] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1406.853001][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1406.869447][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1406.889911][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1406.901173][ T9404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1406.913276][ T9404] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1406.919703][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1406.922987][ T9404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1406.941327][ T9404] usb 5-1: config 0 descriptor??
[ 1406.942541][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1406.948397][T14958] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1406.963440][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1406.977672][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1406.988202][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.002676][T14631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1407.017982][T14631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1407.029758][T14631] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1407.093855][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1407.103071][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1407.114281][T14631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.123051][T14631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.137141][T14631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.147019][T14631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1407.372495][T14919] chnl_net:caif_netlink_parms(): no params data found
[ 1407.464346][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1407.485599][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1407.540297][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1407.717065][T13927] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1407.732161][ T9404] usbhid 5-1:0.0: can't add hid device: -71
[ 1407.738909][ T9404] usbhid: probe of 5-1:0.0 failed with error -71
[ 1407.747465][ T9404] usb 5-1: USB disconnect, device number 4
[ 1407.778381][ T4502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1407.802209][ T4502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1407.837579][T13927] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1407.852348][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1407.939017][T13927] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1407.955986][T14919] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1407.963962][T14919] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1407.972010][T14919] device bridge_slave_0 entered promiscuous mode
[ 1408.003565][ T4269] Bluetooth: hci1: command 0x0419 tx timeout
[ 1408.004682][T13927] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.032762][T14919] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1408.050701][T14919] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1408.079006][T14919] device bridge_slave_1 entered promiscuous mode
[ 1408.192273][T14919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1408.232742][T14919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1408.435367][T14919] team0: Port device team_slave_0 added
[ 1408.476578][T14919] team0: Port device team_slave_1 added
[ 1408.482573][T14875] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1408.555713][T14875] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1408.566614][T14875] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1409.330796][T14919] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1409.340077][T14919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1409.369508][T14919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1409.404194][T14875] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1410.925197][T14919] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1410.942518][T14919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1411.057457][T14919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1411.810825][T14919] device hsr_slave_0 entered promiscuous mode
[ 1411.837514][T14919] device hsr_slave_1 entered promiscuous mode
[ 1411.851737][T14919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1411.872080][T14919] Cannot create hsr debugfs directory
[ 1411.908663][T15005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2979'.
[ 1413.360890][T14875] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1413.629330][T14875] 8021q: adding VLAN 0 to HW filter on device team0
[ 1413.636770][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1413.645763][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1414.111838][T14875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1414.123118][T14875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1414.454002][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1414.473836][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1414.503932][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1414.511080][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1414.530627][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1414.551517][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1414.562571][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1414.569777][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1414.597946][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1414.610578][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1414.623198][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1414.694255][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1414.734914][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1415.393254][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1415.414734][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1415.472767][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1415.540545][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1415.576120][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1415.979801][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1415.996973][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1416.010067][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1416.021022][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1416.032116][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1416.047153][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1416.058829][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1416.254034][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1416.343997][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1416.756242][T13927] device hsr_slave_0 left promiscuous mode
[ 1416.775137][T13927] device hsr_slave_1 left promiscuous mode
[ 1417.001966][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1417.671694][T13927] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1417.710654][T13927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1417.832885][T13927] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1417.870542][T13927] device bridge_slave_1 left promiscuous mode
[ 1417.889447][T13927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1417.902816][T13927] device bridge_slave_0 left promiscuous mode
[ 1417.913191][T13927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1417.979643][T13927] device veth1_macvtap left promiscuous mode
[ 1417.992359][T13927] device veth0_macvtap left promiscuous mode
[ 1417.999390][T13927] device veth1_vlan left promiscuous mode
[ 1418.012078][T13927] device veth0_vlan left promiscuous mode
[ 1419.816833][T13927] team0 (unregistering): Port device team_slave_1 removed
[ 1420.718633][T13927] team0 (unregistering): Port device team_slave_0 removed
[ 1420.949482][T13927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1421.271955][T13927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1422.508251][T13927] bond0 (unregistering): Released all slaves
[ 1422.615789][T14875] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1422.623808][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1422.635221][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1422.654158][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1422.669882][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1422.680464][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1422.693861][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1422.966507][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.970599][T15080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1422.972841][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.997157][T15080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1423.016461][T15080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1423.032251][T15080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1423.082876][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1423.100104][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1423.182423][T14919] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1424.641627][T14875] device veth0_vlan entered promiscuous mode
[ 1424.706340][T14919] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1424.792007][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1424.989701][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1425.132107][T14875] device veth1_vlan entered promiscuous mode
[ 1425.162327][T14919] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1425.523080][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1425.813705][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1425.827531][T14919] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1425.931908][T14875] device veth0_macvtap entered promiscuous mode
[ 1426.071561][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1426.204944][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1426.262566][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1426.430627][T14875] device veth1_macvtap entered promiscuous mode
[ 1426.658209][T14875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1426.705895][T14875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1426.775419][T14875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1426.799536][T14875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1426.983491][T14875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.019015][T14875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.030853][T14875] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1427.046079][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1427.063955][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1427.302260][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1427.666083][T14875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1427.729454][T14875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.759983][T14875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1427.791257][T14875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.858540][T14875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1427.879737][T14875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.891833][T14875] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1427.914413][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1427.925727][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1427.966234][T14875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1427.995510][T14875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.043506][T14875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1428.052479][T14875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1429.104129][ T4630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1429.121144][ T4630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1429.168870][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1429.218172][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1429.233832][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1429.250779][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1429.263441][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1429.280925][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1429.292822][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1429.320635][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1430.174304][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1430.205278][T14919] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1430.250069][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1430.837440][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1430.868571][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1430.920331][T14919] 8021q: adding VLAN 0 to HW filter on device team0
[ 1430.985010][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1431.004624][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1431.187646][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1431.194956][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1431.668015][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1432.149917][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1432.168131][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1432.208007][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1432.215236][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1432.253884][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1432.269969][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1432.395085][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1432.964615][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1432.990964][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1433.006971][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1433.022684][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1433.140138][T14919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1433.152231][T14919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1433.168896][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1433.214808][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1433.233893][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1433.250756][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1433.328028][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1433.402629][T15167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1433.455555][T15167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1433.505908][T15167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1433.563570][T15167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1433.645313][T15167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1433.724803][T15167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1435.731431][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1435.756705][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1435.798320][T14919] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1435.846708][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1435.864336][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1435.936773][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1435.966136][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1436.051368][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1436.061442][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1436.478832][T15197] sd 0:0:1:0: device reset
[ 1437.087816][T14919] device veth0_vlan entered promiscuous mode
[ 1437.204869][T14919] device veth1_vlan entered promiscuous mode
[ 1437.671664][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1438.104162][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1438.116436][T14919] device veth0_macvtap entered promiscuous mode
[ 1438.162153][T14919] device veth1_macvtap entered promiscuous mode
[ 1438.245869][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1438.260955][T15207] Bluetooth: MGMT ver 1.22
[ 1438.263858][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1438.479943][T15208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1438.490845][T15208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1438.501195][T15208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1438.511763][T15207] can0: slcan on ptm0.
[ 1439.442888][T15208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1439.545533][T15208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1439.559996][T15208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1439.606012][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1439.916756][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1439.927110][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1439.947513][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1439.973356][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1439.990976][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.002880][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1440.013857][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1440.045147][T14919] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1440.073649][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1440.925918][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1441.069632][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1441.080230][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1441.434332][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1441.972894][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.002168][T14919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1442.045438][T14919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.071040][T14919] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1442.171063][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1442.183377][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1442.197309][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1442.207711][T15206] can0 (unregistered): slcan off ptm0.
[ 1442.284108][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1442.667823][T14919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1442.712827][T14919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1442.884111][T14919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1442.892867][T14919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.048610][T15252] sd 0:0:1:0: device reset
[ 1445.055169][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1445.088371][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.104164][ T7061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1445.112348][ T7061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.163114][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1445.218884][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1445.268283][T15260] lo speed is unknown, defaulting to 1000
[ 1445.297005][T15260] lo speed is unknown, defaulting to 1000
[ 1445.338630][T15260] lo speed is unknown, defaulting to 1000
[ 1445.509779][T15260] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1445.588446][T15260] lo speed is unknown, defaulting to 1000
[ 1445.600999][T15260] lo speed is unknown, defaulting to 1000
[ 1445.613257][T15260] lo speed is unknown, defaulting to 1000
[ 1445.625671][T15260] lo speed is unknown, defaulting to 1000
[ 1445.639127][T15260] lo speed is unknown, defaulting to 1000
[ 1449.789647][T15300] sd 0:0:1:0: device reset
[ 1450.447724][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3055'.
[ 1451.406396][T15317] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1454.771989][    C0] Unknown status report in ack skb
[ 1455.065331][T15343] sd 0:0:1:0: device reset
[ 1455.997600][T15359] can0: slcan on ptm0.
[ 1460.235442][T15385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3078'.
[ 1460.293622][T15359] can0 (unregistered): slcan off ptm0.
[ 1461.733115][T15406] sd 0:0:1:0: device reset
[ 1466.593671][T15431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3092'.
[ 1476.018930][T15517] syz.4.3116 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1476.091982][T15517] netlink: 'syz.4.3116': attribute type 21 has an invalid length.
[ 1476.100582][T15517] netlink: 'syz.4.3116': attribute type 1 has an invalid length.
[ 1476.108993][T15517] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3116'.
[ 1481.473540][T10030] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1481.673452][T10030] usb 4-1: Using ep0 maxpacket: 16
[ 1482.502781][T10030] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1482.514262][T10030] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1482.524602][T10030] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1482.531797][T10030] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1482.541437][T10030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.565120][T10030] usb 4-1: config 0 descriptor??
[ 1483.035035][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3133'.
[ 1483.078043][T10030] hid (null): global environment stack underflow
[ 1483.122093][T10030] hid (null): invalid report_size -556062501
[ 1483.130565][T10030] hid (null): report_id 64169 is invalid
[ 1483.343228][T10030] usb 4-1: USB disconnect, device number 3
[ 1484.356048][T15587] siw: device registration error -23
[ 1484.424857][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.471864][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.209134][T15594] hfsplus: unable to find HFS+ superblock
[ 1486.509675][T15599] sd 0:0:1:0: PR command failed: 1026
[ 1486.579748][T15599] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1486.624655][T15599] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1491.603987][ T4270] Bluetooth: hci4: command 0x0406 tx timeout
[ 1492.200331][T15651] netlink: 'syz.7.3154': attribute type 1 has an invalid length.
[ 1492.210236][T15651] netlink: 'syz.7.3154': attribute type 2 has an invalid length.
[ 1492.323702][ T4263] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1492.524237][ T4263] usb 4-1: Using ep0 maxpacket: 16
[ 1492.559070][ T4263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1492.839901][ T4263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1492.892349][ T4263] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[ 1493.723860][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.846713][ T4263] usb 4-1: config 0 descriptor??
[ 1494.436658][ T4263] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0016/input/input18
[ 1494.735625][ T4263] appleir 0003:05AC:8241.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[ 1495.056353][ T4263] usb 4-1: USB disconnect, device number 4
[ 1495.146963][T15661] random: crng reseeded on system resumption
[ 1497.031978][T15678] siw: device registration error -23
[ 1499.553641][T15705] lo speed is unknown, defaulting to 1000
[ 1499.560925][T15705] lo speed is unknown, defaulting to 1000
[ 1499.577312][T15705] lo speed is unknown, defaulting to 1000
[ 1499.780020][T15705] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1500.883809][T15705] lo speed is unknown, defaulting to 1000
[ 1500.890612][T15705] lo speed is unknown, defaulting to 1000
[ 1500.897381][T15705] lo speed is unknown, defaulting to 1000
[ 1500.905802][T15705] lo speed is unknown, defaulting to 1000
[ 1500.912553][T15705] lo speed is unknown, defaulting to 1000
[ 1506.163196][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3177'.
[ 1507.150876][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1507.187130][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.294247][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1507.305781][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.317336][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1507.328963][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1507.392140][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1507.470086][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1510.232390][T15781] can0: slcan on ptm1.
[ 1510.438236][T15783] random: crng reseeded on system resumption
[ 1511.013555][T15780] can0 (unregistered): slcan off ptm1.
[ 1511.185661][T15786] device bridge0 entered promiscuous mode
[ 1511.268346][T15786] device macvlan2 entered promiscuous mode
[ 1511.322573][T15786] bridge0: port 3(macvlan2) entered blocking state
[ 1511.343741][T15786] bridge0: port 3(macvlan2) entered disabled state
[ 1511.452828][T15786] device bridge0 left promiscuous mode
[ 1513.215854][T15787] netlink: 'syz.3.3187': attribute type 10 has an invalid length.
[ 1513.291891][T15787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3187'.
[ 1513.381021][T15787] device batadv0 entered promiscuous mode
[ 1513.419144][T15787] bridge0: port 3(batadv0) entered blocking state
[ 1513.454566][T15787] bridge0: port 3(batadv0) entered disabled state
[ 1513.520251][T15787] bridge0: port 3(batadv0) entered blocking state
[ 1513.526941][T15787] bridge0: port 3(batadv0) entered forwarding state
[ 1513.888609][ T4502] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1513.899018][ T4502] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1515.138264][T15820] siw: device registration error -23
[ 1517.033550][T15832] hfsplus: unable to find HFS+ superblock
[ 1517.203576][ T4270] Bluetooth: hci0: command 0x0406 tx timeout
[ 1518.897427][T15841] random: crng reseeded on system resumption
[ 1520.319709][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1520.380334][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.409199][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1520.433534][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.450238][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1520.461103][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.995786][T15277] Bluetooth: (null): Invalid header checksum
[ 1521.012572][T15855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1521.031536][T15855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1521.031635][T15277] Bluetooth: (null): Invalid header checksum
[ 1521.071094][T15277] Bluetooth: (null): Invalid header checksum
[ 1521.112916][T15277] Bluetooth: (null): Invalid header checksum
[ 1522.323406][ T4269] Bluetooth: hci1: command 0x0406 tx timeout
[ 1525.068573][T15889] hfsplus: unable to find HFS+ superblock
[ 1525.362914][T11471] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[ 1526.435285][T11471] usb 1-1: config 0 has no interfaces?
[ 1526.447114][T11471] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1526.471032][T11471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1526.480669][T11471] usb 1-1: SerialNumber: syz
[ 1526.519052][T11471] usb 1-1: config 0 descriptor??
[ 1527.441905][T11471] usb 1-1: USB disconnect, device number 6
[ 1527.587361][T15906] fuse: Unknown parameter 'fd0x0000000000000004'
[ 1533.186118][T15957] 9pnet_fd: Insufficient options for proto=fd
[ 1533.196017][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1533.226838][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1533.249464][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1533.274263][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1533.300294][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1533.367402][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1533.407582][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1533.418259][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1533.421019][T11471] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[ 1534.590774][T11471] usb 1-1: config 0 has no interfaces?
[ 1534.608006][T11471] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1535.545255][T11471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1535.553402][T11471] usb 1-1: SerialNumber: syz
[ 1535.565718][T11471] usb 1-1: config 0 descriptor??
[ 1535.717303][T15973] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 1535.929731][T11471] usb 1-1: USB disconnect, device number 7
[ 1536.808895][T15985] siw: device registration error -23
[ 1537.830266][T15990] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3247'.
[ 1538.705142][T15996] 9pnet_fd: Insufficient options for proto=fd
[ 1541.635832][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1541.648411][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.701148][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1541.737521][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.753819][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1541.782125][T16039] siw: device registration error -23
[ 1541.788395][T16041] 9pnet_fd: Insufficient options for proto=fd
[ 1541.795050][ T4298] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[ 1541.804763][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1541.816593][T16034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1541.999656][ T4298] usb 4-1: config 0 has no interfaces?
[ 1542.619670][T16034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1542.655986][ T4298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1542.707233][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1542.762183][ T4298] usb 4-1: SerialNumber: syz
[ 1542.786450][ T4298] usb 4-1: config 0 descriptor??
[ 1543.064424][ T4298] usb 4-1: USB disconnect, device number 5
[ 1545.847375][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.853797][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.828594][T16084] 9pnet_fd: Insufficient options for proto=fd
[ 1546.906861][T16081] siw: device registration error -23
[ 1547.593776][T10030] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[ 1547.821591][T10030] usb 1-1: config 0 has no interfaces?
[ 1547.911058][T10030] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1548.121579][T10030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1548.166012][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3280'.
[ 1548.195719][T10030] usb 1-1: SerialNumber: syz
[ 1548.235042][T10030] usb 1-1: config 0 descriptor??
[ 1548.784383][ T4803] usb 1-1: USB disconnect, device number 8
[ 1549.900393][T16120] 9pnet_fd: Insufficient options for proto=fd
[ 1549.985926][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'.
[ 1550.219595][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.230704][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.241295][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.314882][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.397166][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.519450][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1550.633808][T16129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1550.810522][T16129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1551.079021][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3293'.
[ 1552.617327][T16164] 9pnet_fd: Insufficient options for proto=fd
[ 1552.804281][T16161] device wireguard0 entered promiscuous mode
[ 1554.447786][T16177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.488695][T16177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1554.515512][T16177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.556482][T16177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1554.576887][T16177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.587956][T16177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1554.599356][T16177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1554.610329][T16177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1555.718683][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3307'.
[ 1556.258760][T16209] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1556.297990][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'.
[ 1557.195581][T16220] hfsplus: unable to find HFS+ superblock
[ 1557.660953][T16230] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3320'.
[ 1558.048758][ T4595] Bluetooth: (null): Invalid header checksum
[ 1558.514773][ T4595] Bluetooth: (null): Invalid header checksum
[ 1558.927268][T16236] lo speed is unknown, defaulting to 1000
[ 1558.982093][T16236] lo speed is unknown, defaulting to 1000
[ 1560.348947][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3323'.
[ 1562.158978][T16266] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3329'.
[ 1562.225435][T16266] netlink: zone id is out of range
[ 1562.250755][T16266] netlink: del zone limit has 4 unknown bytes
[ 1562.934344][ T4630] Bluetooth: (null): Invalid header checksum
[ 1563.084771][ T4630] Bluetooth: (null): Invalid header checksum
[ 1563.112180][ T4630] Bluetooth: (null): Invalid header checksum
[ 1563.140947][   T11] Bluetooth: (null): Invalid header checksum
[ 1564.693193][T16294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1564.745355][T16294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.755561][T16294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1564.769153][T16294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.781005][T16294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1564.792334][T16294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.811583][T16294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1564.822312][T16294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.849618][T16296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1564.864648][T16296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.894486][T16296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1564.906632][T16301] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.3341'.
[ 1564.919185][T16296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1564.942121][T16296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1565.073348][T16296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1565.084119][T16301] netlink: zone id is out of range
[ 1565.219794][T16301] netlink: del zone limit has 4 unknown bytes
[ 1565.541685][T16296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1565.554199][T16296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1566.577722][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3344'.
[ 1566.613187][T16320] hfsplus: unable to find HFS+ superblock
[ 1567.306278][ T4585] Bluetooth: (null): Invalid header checksum
[ 1567.325264][ T4585] Bluetooth: (null): Invalid header checksum
[ 1567.352232][ T4585] Bluetooth: (null): Invalid header checksum
[ 1567.401535][ T4585] Bluetooth: (null): Invalid header checksum
[ 1569.729326][T16344] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3353'.
[ 1569.759866][T16344] netlink: zone id is out of range
[ 1569.789727][T16344] netlink: del zone limit has 4 unknown bytes
[ 1574.260075][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1574.287119][T16375] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3364'.
[ 1574.315802][T16378] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3366'.
[ 1574.331159][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1574.364259][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1574.383485][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1574.409044][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1574.422131][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1574.442277][T16376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1574.459455][T16376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1574.477290][T16381] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1575.691247][T16394] 9pnet_fd: Insufficient options for proto=fd
[ 1576.487391][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3375'.
[ 1581.271180][T16435] 9pnet_fd: Insufficient options for proto=fd
[ 1582.062926][T16453] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1584.682388][T16484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1584.694860][T16484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1585.464349][T16484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1585.523608][T16484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1585.534901][T16484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1585.568238][T16484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1585.579789][T16484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1585.590586][T16484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1585.994696][T16493] 9pnet_fd: Insufficient options for proto=fd
[ 1586.211303][T16499] device vlan2 entered promiscuous mode
[ 1586.229844][T16499] device bond0 entered promiscuous mode
[ 1586.251396][T16499] device bond_slave_0 entered promiscuous mode
[ 1586.261519][T16499] device bond_slave_1 entered promiscuous mode
[ 1594.082004][T16579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1594.108777][T16579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1594.120614][T16579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1594.131824][T16579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1595.045177][T16579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1595.070183][T16579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1595.084275][T16579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1595.269735][T16579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1595.573608][T16598] fuse: Bad value for 'fd'
[ 1605.189591][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1605.276754][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1605.363382][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1605.479893][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1605.489881][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1605.505191][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1606.799336][T16676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1606.810297][T16676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1607.285697][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.292103][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1611.486256][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1611.516927][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1611.548253][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1612.069202][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1612.086840][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1612.098825][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1612.109210][T16730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1612.119788][T16730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1616.804747][ T4269] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1616.814754][ T4269] Bluetooth: hci1: Injecting HCI hardware error event
[ 1616.824980][ T4270] Bluetooth: hci1: hardware error 0x00
[ 1617.545952][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1617.568330][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1617.584029][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1617.595735][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1617.605732][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1617.616518][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1617.628971][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1617.640126][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1618.963579][ T4270] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1620.680362][T16806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1620.736840][T16806] device bridge_slave_0 left promiscuous mode
[ 1620.776537][T16806] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1620.797200][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3499'.
[ 1620.917170][T16806] device bridge_slave_1 left promiscuous mode
[ 1620.970012][T16806] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1621.087960][T16806] bond0: (slave bond_slave_0): Releasing backup interface
[ 1621.265959][T16806] bond0: (slave bond_slave_1): Releasing backup interface
[ 1621.763838][ T4270] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1621.774201][ T4270] Bluetooth: hci4: Injecting HCI hardware error event
[ 1621.783796][ T4269] Bluetooth: hci4: hardware error 0x00
[ 1622.920801][T16806] team0: Port device team_slave_0 removed
[ 1623.598704][T16806] team0: Port device team_slave_1 removed
[ 1623.659349][T16806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1623.682616][T16806] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1623.701387][T16806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1623.709066][T16806] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1624.217034][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1624.347252][ T4269] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1625.005761][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.452346][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.462918][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.473073][T16847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1625.682404][T16847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1625.853645][T16858] hfsplus: unable to find HFS+ superblock
[ 1626.348029][T16856] device syzkaller1 entered promiscuous mode
[ 1626.675627][T16868] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3520'.
[ 1626.840963][ T4300] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1627.435522][ T4300] usb 4-1: Using ep0 maxpacket: 16
[ 1627.451275][ T4300] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1627.520039][ T4300] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1627.537104][ T4300] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1627.545883][ T4300] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1627.559170][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1627.589690][ T4300] usb 4-1: config 0 descriptor??
[ 1627.618244][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1627.662497][T16877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1627.720510][T16877] device bridge_slave_0 left promiscuous mode
[ 1627.748282][T16877] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1627.798142][T16877] device bridge_slave_1 left promiscuous mode
[ 1627.820902][T16877] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1627.854839][T16877] bond0: (slave bond_slave_0): Releasing backup interface
[ 1628.025957][ T4300] hid (null): global environment stack underflow
[ 1628.687764][ T4300] usb 4-1: USB disconnect, device number 6
[ 1628.777578][T16877] bond0: (slave bond_slave_1): Releasing backup interface
[ 1629.450840][T16877] team0: Port device team_slave_0 removed
[ 1629.521149][T16877] team0: Port device team_slave_1 removed
[ 1629.548941][T16877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1629.557230][T16877] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1629.576811][T16877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1629.577394][T16877] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1629.616404][T16895] hfsplus: unable to find HFS+ superblock
[ 1630.414492][T16898] can0: slcan on ptm0.
[ 1630.468252][T16898] fuse: Bad value for 'fd'
[ 1630.548821][T16901] random: crng reseeded on system resumption
[ 1630.957390][T16912] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3536'.
[ 1631.057037][T16897] can0 (unregistered): slcan off ptm0.
[ 1632.381099][T16922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1632.389286][T16922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1632.448206][T16929] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1634.541349][T16951] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3549'.
[ 1636.229804][T16964] can0: slcan on ptm1.
[ 1637.909327][T16964] random: crng reseeded on system resumption
[ 1638.358207][T16962] can0 (unregistered): slcan off ptm1.
[ 1639.723922][T16999] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3565'.
[ 1640.886196][T17006] hfsplus: unable to find HFS+ superblock
[ 1643.238387][T17019] Bluetooth: MGMT ver 1.22
[ 1644.087921][T17037] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1645.940478][T17053] can0: slcan on ptm0.
[ 1646.837363][T17063] random: crng reseeded on system resumption
[ 1647.554010][T17050] can0 (unregistered): slcan off ptm0.
[ 1648.195728][T17075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1648.386956][T17075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1648.426845][T17075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1648.470447][T17075] device bridge_slave_0 left promiscuous mode
[ 1648.491599][T17075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1649.155333][T17083] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1649.162887][T17075] device bridge_slave_1 left promiscuous mode
[ 1649.374900][T17075] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1649.407817][T17075] bond0: (slave bond_slave_0): Releasing backup interface
[ 1649.428944][T17075] bond0: (slave bond_slave_1): Releasing backup interface
[ 1649.554432][T17075] team0: Port device team_slave_0 removed
[ 1649.601366][T17075] team0: Port device team_slave_1 removed
[ 1649.609545][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1649.617353][T17075] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1649.633081][T17075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1649.645404][T17075] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1652.376559][T17123] can0: slcan on ptm0.
[ 1654.396594][T17134] ax25_connect(): syz.0.3606 uses autobind, please contact jreuter@yaina.de
[ 1654.425903][T17123] random: crng reseeded on system resumption
[ 1654.742899][T17122] can0 (unregistered): slcan off ptm0.
[ 1657.009957][T17169] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3616'.
[ 1657.096545][T17169] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1659.174312][T17194] can0: slcan on ptm0.
[ 1660.279696][T17194] random: crng reseeded on system resumption
[ 1660.963838][T17193] can0 (unregistered): slcan off ptm0.
[ 1664.153759][ T4351] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1664.393553][ T4351] usb 5-1: Using ep0 maxpacket: 16
[ 1664.406578][ T4351] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1664.525697][ T4351] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1664.583594][ T4351] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1664.616582][ T4351] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1664.629660][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.651675][ T4351] usb 5-1: config 0 descriptor??
[ 1665.230759][ T4351] usbhid 5-1:0.0: can't add hid device: -71
[ 1665.245039][ T4351] usbhid: probe of 5-1:0.0 failed with error -71
[ 1665.292852][ T4351] usb 5-1: USB disconnect, device number 5
[ 1665.525281][T17248] can0: slcan on ptm0.
[ 1667.507149][T17248] random: crng reseeded on system resumption
[ 1668.535346][T17246] can0 (unregistered): slcan off ptm0.
[ 1668.733589][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.739975][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1671.958023][T17297] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1677.407172][T17355] rdma_rxe: rxe_register_device failed with error -23
[ 1677.434370][T17355] rdma_rxe: failed to add ipvlan0
[ 1681.639538][T17388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1681.656530][T17387] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3689'.
[ 1681.670829][T17388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1685.356973][T17436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3704'.
[ 1686.181939][T17441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3707'.
[ 1686.657321][T17447] ax25_connect(): syz.1.3709 uses autobind, please contact jreuter@yaina.de
[ 1688.560582][T17468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3716'.
[ 1688.772470][T17472] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3718'.
[ 1690.750295][ T4366] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1691.281043][ T4366] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1691.512208][ T4366] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1691.607255][T17494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'.
[ 1692.211759][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1692.223487][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1692.236534][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1692.267319][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1692.278404][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1692.289311][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1692.319617][ T4366] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1692.398415][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3731'.
[ 1692.475637][T17500] lo speed is unknown, defaulting to 1000
[ 1692.501862][T17500] lo speed is unknown, defaulting to 1000
[ 1692.549760][T17513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3730'.
[ 1693.406094][T17500] chnl_net:caif_netlink_parms(): no params data found
[ 1693.961235][T17500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1693.989053][T17500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1694.016946][T17500] device bridge_slave_0 entered promiscuous mode
[ 1694.120119][T17500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1694.129646][T17500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1694.218096][T17500] device bridge_slave_1 entered promiscuous mode
[ 1694.387470][ T4269] Bluetooth: hci3: command 0x0409 tx timeout
[ 1695.098632][T17500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1695.941438][T17500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1696.043606][ T4366] device hsr_slave_0 left promiscuous mode
[ 1696.135898][ T4366] device hsr_slave_1 left promiscuous mode
[ 1696.403415][ T4269] Bluetooth: hci3: command 0x041b tx timeout
[ 1696.640274][ T4366] device veth1_macvtap left promiscuous mode
[ 1696.653358][ T4366] device veth0_macvtap left promiscuous mode
[ 1696.659570][ T4366] device veth1_vlan left promiscuous mode
[ 1696.703543][ T4366] device veth0_vlan left promiscuous mode
[ 1697.882448][T17551] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3742'.
[ 1698.484478][ T4269] Bluetooth: hci3: command 0x040f tx timeout
[ 1699.582122][T16824] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1699.858881][T16824] usb 4-1: device descriptor read/64, error -71
[ 1700.204256][T16824] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1700.364297][T16824] usb 4-1: device descriptor read/64, error -71
[ 1700.473631][T16824] usb usb4-port1: attempt power cycle
[ 1700.580637][ T4269] Bluetooth: hci3: command 0x0419 tx timeout
[ 1700.900298][ T4366] bond0 (unregistering): Released all slaves
[ 1700.906477][T16824] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1700.949032][T16824] usb 4-1: device descriptor read/8, error -71
[ 1701.005712][T17551] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1701.082549][T17500] team0: Port device team_slave_0 added
[ 1701.106612][T17500] team0: Port device team_slave_1 added
[ 1701.169884][T17500] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1701.184419][T17500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1701.223417][T16824] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1701.239211][T17500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1701.275278][T16824] usb 4-1: device descriptor read/8, error -71
[ 1701.310055][T17572] UBIFS error (pid: 17572): cannot open "./file0", error -22
[ 1701.333095][T17500] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1701.385731][T17500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1701.482181][T16824] usb usb4-port1: unable to enumerate USB device
[ 1702.462354][T17500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1703.379084][T17500] device hsr_slave_0 entered promiscuous mode
[ 1703.440002][T17500] device hsr_slave_1 entered promiscuous mode
[ 1703.456108][T17500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1703.465244][T17500] Cannot create hsr debugfs directory
[ 1705.300717][T17500] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1705.317449][T17500] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1705.331427][T17500] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1705.360904][T17500] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1705.516449][T17500] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1705.552423][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1705.583055][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1705.667191][T17500] 8021q: adding VLAN 0 to HW filter on device team0
[ 1705.694653][T17602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3756'.
[ 1705.718492][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1705.755017][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1705.789126][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1705.796313][ T7061] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1705.851128][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1705.890385][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1705.923813][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1705.983737][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1705.990964][ T7061] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1706.015838][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1706.041502][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1706.051692][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1706.066123][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1706.082043][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1706.096966][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1706.121538][T17500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1706.142300][T17500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1706.162282][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1706.182578][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1706.215056][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1706.240172][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1706.272669][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1706.330677][ T7061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1706.708501][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'.
[ 1707.687696][T17624] UBIFS error (pid: 17624): cannot open "./file0", error -22
[ 1709.358640][T17630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1709.379237][T17630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1709.450476][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'.
[ 1709.867604][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1709.914693][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1709.949750][T17500] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1710.322321][T17644] xt_hashlimit: max too large, truncated to 1048576
[ 1711.660696][T17664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3770'.
[ 1711.698905][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3771'.
[ 1711.915396][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1711.947347][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1711.994923][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1712.011267][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1712.032660][T17500] device veth0_vlan entered promiscuous mode
[ 1712.048985][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1712.069441][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1712.091339][T17500] device veth1_vlan entered promiscuous mode
[ 1712.175284][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1712.190146][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1712.200826][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1712.217708][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1712.244636][T17500] device veth0_macvtap entered promiscuous mode
[ 1712.274109][T17500] device veth1_macvtap entered promiscuous mode
[ 1712.349250][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1712.397221][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1712.417160][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1712.429534][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1712.453551][T17668] fuse: Bad value for 'group_id'
[ 1712.465281][T17500] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1712.491079][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1712.502172][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1712.521188][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1712.548244][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1712.586665][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1712.603815][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1712.626998][T17500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1712.637884][T17500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1712.670170][T17500] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1712.695493][T17670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1712.727232][T17670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1712.776217][T17670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1712.792303][T17670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1712.839193][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1712.897401][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1712.997150][T17500] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1713.034020][T17500] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1713.459846][T17500] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1713.487268][T17500] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1713.725263][ T4452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1713.745218][ T4452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1713.786199][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1713.812248][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1713.953429][T17682] UBIFS error (pid: 17682): cannot open "./file0", error -22
[ 1714.026395][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1714.908782][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1715.396957][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'.
[ 1715.433601][T17687] device syzkaller1 entered promiscuous mode
[ 1716.693853][T17700] fuse: Bad value for 'group_id'
[ 1716.887781][T17702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3781'.
[ 1717.507816][T17709] lo speed is unknown, defaulting to 1000
[ 1717.550039][T17709] lo speed is unknown, defaulting to 1000
[ 1718.980446][T17723] netlink: 'syz.7.3790': attribute type 1 has an invalid length.
[ 1719.170873][T17729] UBIFS error (pid: 17729): cannot open "./file0", error -22
[ 1720.241543][T17730] device veth3 entered promiscuous mode
[ 1720.558360][T17733] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3791'.
[ 1720.618107][T17733] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1720.784512][T17737] fuse: Bad value for 'group_id'
[ 1720.953531][T17743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1721.024760][T17743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1721.088138][T17743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1721.105271][T17743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1725.710820][T17775] UBIFS error (pid: 17775): cannot open "./file0", error -22
[ 1725.852093][T17777] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3805'.
[ 1726.287262][T17777] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1730.171602][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.178882][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.761915][T17812] device syzkaller1 entered promiscuous mode
[ 1733.352064][T17827] sctp: [Deprecated]: syz.0.3822 (pid 17827) Use of int in max_burst socket option.
[ 1733.352064][T17827] Use struct sctp_assoc_value instead
[ 1733.566395][T17833] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3822'.
[ 1733.758872][T17833] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3822'.
[ 1733.911651][T17833] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3822'.
[ 1734.428337][T17841] UBIFS error (pid: 17841): cannot open "./file0", error -22
[ 1737.419067][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1737.438137][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1737.469770][T17866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1737.534798][T17866] device bridge_slave_0 left promiscuous mode
[ 1737.559426][T17866] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1737.804955][T17866] device bridge_slave_1 left promiscuous mode
[ 1737.915718][T17866] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1737.967934][T17866] bond0: (slave bond_slave_0): Releasing backup interface
[ 1738.151124][T17866] bond0: (slave bond_slave_1): Releasing backup interface
[ 1738.802296][T17866] team0: Port device team_slave_0 removed
[ 1739.000025][T17866] team0: Port device team_slave_1 removed
[ 1739.044935][T17866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1739.167097][T17866] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1739.614496][T17866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1739.715736][T17866] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1740.478433][T17905] UBIFS error (pid: 17905): cannot open "./file0", error -22
[ 1747.572813][T17968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3865'.
[ 1750.983528][T18001] UBIFS error (pid: 18001): cannot open "./file0", error -22
[ 1752.593770][    T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1752.814095][    T7] usb 1-1: Using ep0 maxpacket: 16
[ 1752.821360][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1752.892354][    T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1752.922237][    T7] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1752.952706][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1753.015205][    T7] usb 1-1: config 0 descriptor??
[ 1755.410441][    T7] usb 1-1: USB disconnect, device number 9
[ 1757.294852][T18047] UBIFS error (pid: 18047): cannot open "./file0", error -22
[ 1761.773285][ T4298] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1761.993355][ T4298] usb 2-1: Using ep0 maxpacket: 16
[ 1762.490877][ T4298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1764.477221][ T4298] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1764.487534][ T4298] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1764.499530][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1764.542168][ T4298] usb 2-1: config 0 descriptor??
[ 1764.599013][ T4298] usb 2-1: can't set config #0, error -71
[ 1764.630422][ T4298] usb 2-1: USB disconnect, device number 63
[ 1771.302907][T18150] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3929'.
[ 1771.420765][T18150] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1772.770858][T18168] device bridge_slave_0 left promiscuous mode
[ 1772.796531][T18168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1773.049809][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3932'.
[ 1773.520939][T18168] device bridge_slave_1 left promiscuous mode
[ 1773.600413][T18168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1773.644460][T18168] bond0: (slave bond_slave_0): Releasing backup interface
[ 1773.653103][T18168] device bond_slave_0 left promiscuous mode
[ 1773.729481][T18168] bond0: (slave bond_slave_1): Releasing backup interface
[ 1773.790152][T18168] device bond_slave_1 left promiscuous mode
[ 1773.912861][T18168] team0: Port device team_slave_0 removed
[ 1773.949524][T18168] team0: Port device team_slave_1 removed
[ 1773.956753][T18168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1773.965427][T18168] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1773.974467][T18168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1773.982145][T18168] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1774.859680][T18199] xt_l2tp: wrong L2TP version: 0
[ 1775.867482][T18208] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3944'.
[ 1775.964895][T18208] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1779.652214][T18254] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3959'.
[ 1779.670709][T18254] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1783.496581][T18299] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3973'.
[ 1783.950285][T18299] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1785.603991][ T5975] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1785.807455][ T5975] usb 2-1: Using ep0 maxpacket: 16
[ 1785.860531][T18324] UBIFS error (pid: 18324): cannot open "(null)", error -22
[ 1785.968345][ T5975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1786.002704][ T5975] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1786.883982][ T5975] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1786.917138][ T5975] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1786.972518][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1787.042512][ T5975] usb 2-1: config 0 descriptor??
[ 1787.134314][ T5975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1787.424625][T18332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3983'.
[ 1788.241284][T18337] netlink: 'syz.0.3984': attribute type 1 has an invalid length.
[ 1788.377361][T18337] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1788.470778][T18339] bond1: (slave gretap1): making interface the new active one
[ 1788.513516][T18339] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1788.543617][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[ 1789.581928][T18339] syz.0.3984 (18339) used greatest stack depth: 20192 bytes left
[ 1789.608644][T11471] usb 2-1: USB disconnect, device number 64
[ 1790.506912][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3990'.
[ 1791.607957][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.673872][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.090287][T18378] UBIFS error (pid: 18378): cannot open "./file0", error -22
[ 1792.663018][T18395] device team0 entered promiscuous mode
[ 1792.729745][T18394] device team0 left promiscuous mode
[ 1794.986450][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4006'.
[ 1795.414552][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4009'.
[ 1795.460236][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4009'.
[ 1795.663247][T11471] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 1795.869029][T11471] usb 2-1: config 0 has no interfaces?
[ 1796.096410][T11471] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1796.154213][T11471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1796.173337][T11471] usb 2-1: SerialNumber: syz
[ 1796.213043][T11471] usb 2-1: config 0 descriptor??
[ 1796.498499][T11471] usb 2-1: USB disconnect, device number 65
[ 1797.858068][T18438] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1799.602732][T18452] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4021'.
[ 1799.974753][T18462] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1800.086841][T18449] UBIFS error (pid: 18449): cannot open "./file0", error -22
[ 1802.928876][T18496] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1803.760455][T18506] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4036'.
[ 1803.846203][T18506] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1806.808572][T18531] UBIFS error (pid: 18531): cannot open "./file0", error -22
[ 1807.704520][T18544] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1807.859446][T18548] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4050'.
[ 1807.900547][T18550] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4051'.
[ 1808.196816][T18550] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1811.164963][ T4298] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1811.393289][ T4298] usb 2-1: Using ep0 maxpacket: 16
[ 1811.400838][ T4298] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1811.427839][ T4298] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1811.441628][ T4298] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1811.452122][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1811.452832][T18585] UBIFS error (pid: 18585): cannot open "./file0", error -22
[ 1811.464705][ T4298] usb 2-1: config 0 descriptor??
[ 1811.481116][ T4298] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1811.665583][T18592] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4063'.
[ 1811.776925][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1811.829716][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1811.838703][T18591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1811.879064][T18592] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1813.214332][T18611] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1813.407307][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4070'.
[ 1814.500683][ T4298] usb 2-1: USB disconnect, device number 66
[ 1815.478162][T18642] netlink: 'syz.0.4078': attribute type 9 has an invalid length.
[ 1815.496398][T18642] netlink: 'syz.0.4078': attribute type 6 has an invalid length.
[ 1818.769996][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4093'.
[ 1818.809905][T18690] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1818.827982][T18685] device batadv0 entered promiscuous mode
[ 1818.847159][T18685] device macvtap1 entered promiscuous mode
[ 1818.862192][T18685] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1818.897258][T18692] device batadv0 left promiscuous mode
[ 1819.685474][T14412] Bluetooth: hci3: command 0x0406 tx timeout
[ 1824.329503][T18754] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1825.116219][T18770] device syzkaller1 entered promiscuous mode
[ 1830.055645][T18843] UBIFS error (pid: 18843): cannot open "./file0", error -22
[ 1830.340745][T18847] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[ 1832.135793][T18857] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1833.717010][T18886] fuse: Unknown parameter 'use00000000000000000000'
[ 1834.233323][T18330] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1834.433791][T18330] usb 2-1: Using ep0 maxpacket: 16
[ 1834.441154][T18330] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1834.545971][T18330] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1834.567882][T18330] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1834.611350][T18330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1834.672101][T18330] usb 2-1: config 0 descriptor??
[ 1834.702808][T18330] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1837.021459][ T4352] usb 2-1: USB disconnect, device number 67
[ 1837.291967][T18946] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1837.866983][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4182'.
[ 1838.335697][T18967] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4184'.
[ 1839.594352][T16824] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1840.213295][T16824] usb 5-1: Using ep0 maxpacket: 16
[ 1840.221065][T16824] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1840.316761][T16824] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1840.366914][T16824] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1840.377534][T16824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1840.447838][T16824] usb 5-1: config 0 descriptor??
[ 1840.474951][T16824] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1840.983852][T18999] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[ 1842.351380][T16824] usb 5-1: USB disconnect, device number 6
[ 1842.479856][T19016] Cannot find set identified by id 0 to match
[ 1842.748253][T19016] device syzkaller0 entered promiscuous mode
[ 1842.760882][T19018] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1843.596263][T14412] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1843.605602][T14412] Bluetooth: hci3: Injecting HCI hardware error event
[ 1843.616855][ T4269] Bluetooth: hci3: hardware error 0x00
[ 1843.744076][ T4398] Bluetooth: (null): Invalid header checksum
[ 1843.867840][ T4398] Bluetooth: (null): Invalid header checksum
[ 1843.874819][ T4398] Bluetooth: (null): Invalid header checksum
[ 1843.923598][T11340] Bluetooth: (null): Invalid header checksum
[ 1844.903303][T16824] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1845.158347][T16824] usb 4-1: Using ep0 maxpacket: 16
[ 1845.178305][T16824] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1845.192261][T16824] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1845.202640][T16824] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1845.210652][T16824] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1845.220991][T16824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1845.241411][T16824] usb 4-1: config 0 descriptor??
[ 1845.655245][T16824] hid (null): global environment stack underflow
[ 1845.764202][ T4269] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1845.871080][    T7] usb 4-1: USB disconnect, device number 11
[ 1851.436613][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4229'.
[ 1851.944263][T19113] netlink: 'syz.1.4233': attribute type 1 has an invalid length.
[ 1852.403819][T19113] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1853.050283][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.056690][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.126742][T19126] bridge0: port 3(batadv0) entered disabled state
[ 1853.130667][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'.
[ 1853.241420][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1853.347704][T19126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1853.471501][T19126] device bridge_slave_0 left promiscuous mode
[ 1853.504883][T19126] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1853.586952][T19126] device bridge_slave_1 left promiscuous mode
[ 1853.663915][T19126] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1853.769884][T19126] bond0: (slave bond_slave_0): Releasing backup interface
[ 1853.868809][T19126] bond0: (slave bond_slave_1): Releasing backup interface
[ 1854.173890][T19126] team0: Port device team_slave_0 removed
[ 1854.211449][T19126] team0: Port device team_slave_1 removed
[ 1854.236031][T19126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1854.250360][T19126] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1854.270499][T19126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1854.284216][T19126] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1854.573069][T19153] netlink: 'syz.3.4248': attribute type 1 has an invalid length.
[ 1854.618183][T19153] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1855.562005][T19166] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4251'.
[ 1855.634292][T19170] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1855.831566][T19180] netlink: 'syz.7.4257': attribute type 4 has an invalid length.
[ 1856.119587][T19194] netlink: 'syz.0.4261': attribute type 1 has an invalid length.
[ 1856.379060][T19194] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1857.899096][T19217] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4268'.
[ 1858.121668][T19217] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1859.678885][T19253] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4282'.
[ 1859.757457][T19253] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1860.091213][T19265] UBIFS error (pid: 19265): cannot open "./file0", error -22
[ 1864.883529][T19289] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[ 1864.931961][T19291] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4296'.
[ 1864.996026][T19291] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1865.043643][ T4351] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1865.100695][T19300] netlink: 'syz.0.4298': attribute type 39 has an invalid length.
[ 1865.165993][T19302] fuse: Bad value for 'fd'
[ 1865.233785][ T4351] usb 5-1: Using ep0 maxpacket: 16
[ 1865.240820][ T4351] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1865.263970][ T4351] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1865.286070][ T4351] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1865.292888][ T4351] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1865.307224][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1865.342151][ T4351] usb 5-1: config 0 descriptor??
[ 1865.528397][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'.
[ 1865.777618][ T4351] hid (null): global environment stack underflow
[ 1865.977115][ T4351] usb 5-1: USB disconnect, device number 7
[ 1866.213165][T19325] UBIFS error (pid: 19325): cannot open "./file0", error -22
[ 1868.137328][T19329] ieee802154 phy0 wpan0: encryption failed: -22
[ 1868.232485][T19329] ieee802154 phy0 wpan0: encryption failed: -22
[ 1868.321639][T19334] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4310'.
[ 1868.408039][T19334] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1868.582133][T19343] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1869.337134][T19356] device syzkaller1 entered promiscuous mode
[ 1869.441281][T19358] ieee802154 phy0 wpan0: encryption failed: -22
[ 1869.677230][T19358] ieee802154 phy0 wpan0: encryption failed: -22
[ 1870.057496][T19372] UBIFS error (pid: 19372): cannot open "./file0", error -22
[ 1870.101278][T19373] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4327'.
[ 1871.482954][T19373] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1871.784193][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4333'.
[ 1871.811806][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4332'.
[ 1871.846185][T19391] siw: device registration error -23
[ 1872.719695][T19402] device syzkaller1 entered promiscuous mode
[ 1873.373006][T19417] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4344'.
[ 1873.402571][T19417] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1873.502028][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1873.515907][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1873.529046][T19420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1873.550208][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4346'.
[ 1873.722244][T19426] UBIFS error (pid: 19426): cannot open "./file0", error -22
[ 1877.179268][T19433] fuse: Unknown parameter '0x0000000000000003'
[ 1877.736667][T19436] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1878.911022][T19446] device syzkaller1 entered promiscuous mode
[ 1879.665638][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4358'.
[ 1879.685391][T19460] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4359'.
[ 1879.860019][T19464] fuse: Unknown parameter '0x0000000000000003'
[ 1880.510033][T19474] UBIFS error (pid: 19474): cannot open "./file0", error -22
[ 1882.174210][T19494] device syzkaller1 entered promiscuous mode
[ 1882.404757][T19502] fuse: Unknown parameter '0x0000000000000003'
[ 1882.846230][T16824] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1883.534521][T16824] usb 1-1: Using ep0 maxpacket: 16
[ 1883.554369][T16824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1884.203064][T16824] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1884.234468][T16824] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1884.242321][T19517] siw: device registration error -23
[ 1884.248809][T16824] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1884.271589][T16824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1884.305048][T16824] usb 1-1: config 0 descriptor??
[ 1884.757880][T16824] hid (null): global environment stack underflow
[ 1884.959884][T18330] usb 1-1: USB disconnect, device number 10
[ 1885.114364][T19534] UBIFS error (pid: 19534): cannot open "./file0", error -22
[ 1887.458013][T19541] device syzkaller1 entered promiscuous mode
[ 1887.831676][T19544] fuse: Unknown parameter '0x0000000000000003'
[ 1888.358139][T19551] netlink: 'syz.1.4393': attribute type 1 has an invalid length.
[ 1888.492491][T19551] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1890.503233][ T5975] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1890.544651][T19584] fuse: Unknown parameter '0x0000000000000003'
[ 1890.628987][T19586] device syzkaller1 entered promiscuous mode
[ 1890.703945][ T5975] usb 2-1: Using ep0 maxpacket: 16
[ 1890.711703][ T5975] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1890.726691][ T5975] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1890.737753][ T5975] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1890.744832][ T5975] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1890.754347][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1890.765991][ T5975] usb 2-1: config 0 descriptor??
[ 1891.218349][ T5975] hid (null): global environment stack underflow
[ 1891.444402][ T4351] usb 2-1: USB disconnect, device number 68
[ 1892.702147][T19616] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1892.917299][T19627] device syzkaller1 entered promiscuous mode
[ 1895.056889][ T4502] Bluetooth: (null): Invalid header checksum
[ 1895.067391][ T4502] Bluetooth: (null): Invalid header checksum
[ 1895.086542][ T4502] Bluetooth: (null): Invalid header checksum
[ 1895.119695][ T4502] Bluetooth: (null): Invalid header checksum
[ 1895.133228][    T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1895.155158][ T4502] Bluetooth: (null): Invalid header checksum
[ 1895.194395][ T4502] Bluetooth: (null): Invalid header checksum
[ 1895.274792][ T4454] Bluetooth: (null): Invalid header checksum
[ 1895.324096][    T7] usb 1-1: Using ep0 maxpacket: 16
[ 1895.336030][    T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1895.358130][T19660] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1895.378382][    T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1895.418699][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1895.441284][    T7] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1895.475943][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1895.510981][    T7] usb 1-1: config 0 descriptor??
[ 1895.932306][    T7] hid (null): global environment stack underflow
[ 1896.884410][T19675] UBIFS error (pid: 19675): cannot open "./file0", error -22
[ 1896.909058][T11471] usb 1-1: USB disconnect, device number 11
[ 1901.209597][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4445'.
[ 1901.322446][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1901.481890][T19698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1903.548273][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'.
[ 1906.345626][T19757] netlink: 'syz.1.4463': attribute type 4 has an invalid length.
[ 1906.839931][T18330] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1907.823947][T18330] usb 4-1: Using ep0 maxpacket: 16
[ 1907.831727][T18330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1907.869736][T18330] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1907.882304][T18330] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1907.898455][T18330] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1907.973194][T18330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1908.230715][T18330] usb 4-1: config 0 descriptor??
[ 1909.524224][T18330] hid (null): global environment stack underflow
[ 1909.603851][T18330] usb 4-1: USB disconnect, device number 12
[ 1909.891576][T19795] IPv6: ADDRCONF(NETDEV_CHANGE): rose4: link becomes ready
[ 1910.919941][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4483'.
[ 1914.487337][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.493710][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1924.730755][ T4263] kworker/dying (4263) used greatest stack depth: 14784 bytes left
[ 1950.324509][    C0] ==================================================================
[ 1950.332605][    C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490
[ 1950.340164][    C0] Read of size 2 at addr ffff88805792902a by task swapper/0/0
[ 1950.347614][    C0] 
[ 1950.349947][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.137-syzkaller #0
[ 1950.357670][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1950.368092][    C0] Call Trace:
[ 1950.371379][    C0]  <IRQ>
[ 1950.374288][    C0]  dump_stack_lvl+0x168/0x22e
[ 1950.379010][    C0]  ? __lock_acquire+0x7c50/0x7c50
[ 1950.384071][    C0]  ? show_regs_print_info+0x12/0x12
[ 1950.389282][    C0]  ? load_image+0x3b0/0x3b0
[ 1950.393794][    C0]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 1950.399178][    C0]  ? __virt_addr_valid+0x188/0x540
[ 1950.404387][    C0]  ? __virt_addr_valid+0x465/0x540
[ 1950.409510][    C0]  ? rose_timer_expiry+0x470/0x490
[ 1950.414713][    C0]  print_report+0xa8/0x220
[ 1950.419145][    C0]  kasan_report+0x10b/0x140
[ 1950.423669][    C0]  ? rose_timer_expiry+0x470/0x490
[ 1950.428809][    C0]  rose_timer_expiry+0x470/0x490
[ 1950.433776][    C0]  call_timer_fn+0x1a0/0x670
[ 1950.438398][    C0]  ? rose_start_t1timer+0xd0/0xd0
[ 1950.443621][    C0]  ? call_timer_fn+0xc1/0x670
[ 1950.448502][    C0]  ? __run_timers+0x7c0/0x7c0
[ 1950.453186][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1950.458583][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1950.463910][    C0]  ? rose_start_t1timer+0xd0/0xd0
[ 1950.468950][    C0]  __run_timers+0x525/0x7c0
[ 1950.473464][    C0]  ? detach_timer+0x350/0x350
[ 1950.478145][    C0]  ? lock_chain_count+0x20/0x20
[ 1950.483003][    C0]  ? seqcount_lockdep_reader_access+0x15c/0x1c0
[ 1950.489344][    C0]  run_timer_softirq+0x63/0xf0
[ 1950.494147][    C0]  handle_softirqs+0x2a1/0x920
[ 1950.498931][    C0]  ? __irq_exit_rcu+0x12f/0x220
[ 1950.503827][    C0]  ? do_softirq+0x200/0x200
[ 1950.508356][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[ 1950.513568][    C0]  __irq_exit_rcu+0x12f/0x220
[ 1950.518261][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1950.522812][    C0]  irq_exit_rcu+0x5/0x20
[ 1950.527076][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1950.532730][    C0]  </IRQ>
[ 1950.535666][    C0]  <TASK>
[ 1950.538602][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1950.544766][    C0] RIP: 0010:default_idle+0xb/0x10
[ 1950.549823][    C0] Code: 48 89 df e8 67 3a b9 f7 e9 4c ff ff ff e8 4d 14 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d b7 a2 4d 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[ 1950.569453][    C0] RSP: 0018:ffffffff8c607d88 EFLAGS: 000002c6
[ 1950.575534][    C0] RAX: 787c5ae6485ecb00 RBX: ffffffff8a1900d7 RCX: 787c5ae6485ecb00
[ 1950.583517][    C0] RDX: 0000000000000001 RSI: ffffffff8a6bfe00 RDI: ffffffff8abf0da0
[ 1950.591587][    C0] RBP: ffffffff8c607ec0 R08: dffffc0000000000 R09: ffffed10171c6aee
[ 1950.599570][    C0] R10: ffffed10171c6aee R11: 1ffff110171c6aed R12: 0000000000000000
[ 1950.607644][    C0] R13: dffffc0000000000 R14: ffffffff8c6bc680 R15: 1ffffffff1bfd07e
[ 1950.615626][    C0]  ? default_idle_call+0x77/0xc0
[ 1950.620587][    C0]  default_idle_call+0x84/0xc0
[ 1950.625389][    C0]  do_idle+0x1fc/0x570
[ 1950.629563][    C0]  ? idle_inject_timer_fn+0x60/0x60
[ 1950.634769][    C0]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1950.640410][    C0]  ? schedule_idle+0x57/0x90
[ 1950.645009][    C0]  cpu_startup_entry+0x3f/0x60
[ 1950.649795][    C0]  rest_init+0x2dc/0x300
[ 1950.654045][    C0]  ? time_init+0x33/0x33
[ 1950.658305][    C0]  arch_call_rest_init+0xa/0xa
[ 1950.663087][    C0]  start_kernel+0x490/0x539
[ 1950.667606][    C0]  secondary_startup_64_no_verify+0xcf/0xdb
[ 1950.673535][    C0]  </TASK>
[ 1950.676556][    C0] 
[ 1950.678879][    C0] Allocated by task 7653:
[ 1950.683204][    C0]  kasan_set_track+0x4b/0x70
[ 1950.687808][    C0]  __kasan_kmalloc+0x8e/0xa0
[ 1950.692405][    C0]  __kmalloc_node_track_caller+0xae/0x230
[ 1950.698260][    C0]  __alloc_skb+0x22a/0x7e0
[ 1950.702778][    C0]  __netdev_alloc_skb+0x107/0x4d0
[ 1950.707812][    C0]  __ieee80211_beacon_get+0xc48/0x1f50
[ 1950.713452][    C0]  ieee80211_beacon_get_tim+0x5b/0x4d0
[ 1950.718915][    C0]  mac80211_hwsim_beacon_tx+0x21c/0xae0
[ 1950.724472][    C0]  __iterate_interfaces+0x243/0x500
[ 1950.729698][    C0]  ieee80211_iterate_active_interfaces_atomic+0xd7/0x170
[ 1950.736749][    C0]  mac80211_hwsim_beacon+0xb7/0x1b0
[ 1950.741958][    C0]  __hrtimer_run_queues+0x522/0xc80
[ 1950.747163][    C0]  hrtimer_run_softirq+0x176/0x240
[ 1950.752277][    C0]  handle_softirqs+0x2a1/0x920
[ 1950.757093][    C0]  __irq_exit_rcu+0x12f/0x220
[ 1950.761778][    C0]  irq_exit_rcu+0x5/0x20
[ 1950.766036][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1950.771690][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1950.777693][    C0] 
[ 1950.780030][    C0] Last potentially related work creation:
[ 1950.785758][    C0]  kasan_save_stack+0x3a/0x60
[ 1950.790452][    C0]  __kasan_record_aux_stack+0xb2/0xc0
[ 1950.795829][    C0]  call_rcu+0x14b/0x970
[ 1950.799999][    C0]  addrconf_permanent_addr+0x34d/0x980
[ 1950.805467][    C0]  addrconf_notify+0x986/0xf40
[ 1950.810256][    C0]  raw_notifier_call_chain+0xcb/0x160
[ 1950.815650][    C0]  __dev_notify_flags+0x178/0x2d0
[ 1950.820857][    C0]  dev_change_flags+0xe3/0x1a0
[ 1950.825630][    C0]  do_setlink+0xc31/0x3c40
[ 1950.830056][    C0]  rtnl_newlink+0x17d6/0x1ff0
[ 1950.834740][    C0]  rtnetlink_rcv_msg+0x79b/0xed0
[ 1950.839791][    C0]  netlink_rcv_skb+0x1de/0x420
[ 1950.844590][    C0]  netlink_unicast+0x74c/0x8c0
[ 1950.849362][    C0]  netlink_sendmsg+0x89e/0xbc0
[ 1950.854137][    C0]  __sys_sendto+0x44f/0x5c0
[ 1950.858649][    C0]  __x64_sys_sendto+0xda/0xf0
[ 1950.863335][    C0]  do_syscall_64+0x4c/0xa0
[ 1950.867756][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1950.873685][    C0] 
[ 1950.876010][    C0] Second to last potentially related work creation:
[ 1950.882596][    C0]  kasan_save_stack+0x3a/0x60
[ 1950.887321][    C0]  __kasan_record_aux_stack+0xb2/0xc0
[ 1950.892696][    C0]  call_rcu+0x14b/0x970
[ 1950.896858][    C0]  ip6_route_add+0xe0/0x130
[ 1950.901396][    C0]  addrconf_add_dev+0x253/0x330
[ 1950.906276][    C0]  inet6_addr_add+0x19a/0x9b0
[ 1950.910966][    C0]  inet6_rtm_newaddr+0x617/0x870
[ 1950.915906][    C0]  rtnetlink_rcv_msg+0x79b/0xed0
[ 1950.920854][    C0]  netlink_rcv_skb+0x1de/0x420
[ 1950.925627][    C0]  netlink_unicast+0x74c/0x8c0
[ 1950.930400][    C0]  netlink_sendmsg+0x89e/0xbc0
[ 1950.935171][    C0]  __sys_sendto+0x44f/0x5c0
[ 1950.939721][    C0]  __x64_sys_sendto+0xda/0xf0
[ 1950.944430][    C0]  do_syscall_64+0x4c/0xa0
[ 1950.948853][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1950.954755][    C0] 
[ 1950.957079][    C0] The buggy address belongs to the object at ffff888057929000
[ 1950.957079][    C0]  which belongs to the cache kmalloc-512 of size 512
[ 1950.971138][    C0] The buggy address is located 42 bytes inside of
[ 1950.971138][    C0]  512-byte region [ffff888057929000, ffff888057929200)
[ 1950.984331][    C0] 
[ 1950.986674][    C0] The buggy address belongs to the physical page:
[ 1950.993279][    C0] page:ffffea00015e4a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805792b800 pfn:0x57928
[ 1951.004737][    C0] head:ffffea00015e4a00 order:2 compound_mapcount:0 compound_pincount:0
[ 1951.013062][    C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1951.021065][    C0] raw: 00fff00000010200 ffffea000159aa08 ffffea0000bfa708 ffff888017441c80
[ 1951.029660][    C0] raw: ffff88805792b800 000000000010000c 00000001ffffffff 0000000000000000
[ 1951.038243][    C0] page dumped because: kasan: bad access detected
[ 1951.044666][    C0] page_owner tracks the page as allocated
[ 1951.050395][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4260, tgid 4260 (syz-executor), ts 72537052467, free_ts 21453181398
[ 1951.071773][    C0]  post_alloc_hook+0x173/0x1a0
[ 1951.076561][    C0]  get_page_from_freelist+0x1a26/0x1ac0
[ 1951.082120][    C0]  __alloc_pages+0x1df/0x4e0
[ 1951.086723][    C0]  alloc_slab_page+0x5d/0x160
[ 1951.091406][    C0]  new_slab+0x87/0x2c0
[ 1951.095479][    C0]  ___slab_alloc+0xbc6/0x1220
[ 1951.100159][    C0]  __kmem_cache_alloc_node+0x1a0/0x260
[ 1951.105623][    C0]  __kmalloc+0xa0/0x240
[ 1951.109782][    C0]  __register_sysctl_table+0x96c/0xe70
[ 1951.115362][    C0]  neigh_sysctl_register+0x993/0xa70
[ 1951.120670][    C0]  devinet_sysctl_register+0xa8/0x1f0
[ 1951.126181][    C0]  inetdev_init+0x2b4/0x4f0
[ 1951.130714][    C0]  inetdev_event+0x270/0x1410
[ 1951.135398][    C0]  raw_notifier_call_chain+0xcb/0x160
[ 1951.140777][    C0]  register_netdevice+0x1600/0x1aa0
[ 1951.145982][    C0]  veth_newlink+0x7a0/0xbe0
[ 1951.150498][    C0] page last free stack trace:
[ 1951.155230][    C0]  free_unref_page_prepare+0x8b4/0x9a0
[ 1951.160705][    C0]  free_unref_page+0x2e/0x3f0
[ 1951.165390][    C0]  free_contig_range+0x9d/0x150
[ 1951.170249][    C0]  destroy_args+0xef/0x8bf
[ 1951.174673][    C0]  debug_vm_pgtable+0x32a/0x37e
[ 1951.179543][    C0]  do_one_initcall+0x214/0x7a0
[ 1951.184328][    C0]  do_initcall_level+0x137/0x1e4
[ 1951.189289][    C0]  do_initcalls+0x4b/0x8a
[ 1951.193671][    C0]  kernel_init_freeable+0x3fa/0x5ac
[ 1951.198881][    C0]  kernel_init+0x19/0x1b0
[ 1951.203212][    C0]  ret_from_fork+0x1f/0x30
[ 1951.207641][    C0] 
[ 1951.209964][    C0] Memory state around the buggy address:
[ 1951.215596][    C0]  ffff888057928f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1951.223657][    C0]  ffff888057928f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1951.231716][    C0] >ffff888057929000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1951.239773][    C0]                                   ^
[ 1951.245142][    C0]  ffff888057929080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1951.253291][    C0]  ffff888057929100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1951.261358][    C0] ==================================================================
[ 1951.269587][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1951.276802][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.137-syzkaller #0
[ 1951.284528][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1951.294670][    C0] Call Trace:
[ 1951.297950][    C0]  <IRQ>
[ 1951.300807][    C0]  dump_stack_lvl+0x168/0x22e
[ 1951.305520][    C0]  ? memcpy+0x3c/0x60
[ 1951.309550][    C0]  ? show_regs_print_info+0x12/0x12
[ 1951.314766][    C0]  ? load_image+0x3b0/0x3b0
[ 1951.319288][    C0]  panic+0x2c9/0x710
[ 1951.323223][    C0]  ? asm_common_interrupt+0x22/0x40
[ 1951.328438][    C0]  ? bpf_jit_dump+0xd0/0xd0
[ 1951.332954][    C0]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[ 1951.338861][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1951.344762][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1951.349713][    C0]  check_panic_on_warn+0x80/0xa0
[ 1951.354661][    C0]  ? rose_timer_expiry+0x470/0x490
[ 1951.359861][    C0]  end_report+0x66/0x110
[ 1951.364289][    C0]  kasan_report+0x118/0x140
[ 1951.368802][    C0]  ? rose_timer_expiry+0x470/0x490
[ 1951.373920][    C0]  rose_timer_expiry+0x470/0x490
[ 1951.378866][    C0]  call_timer_fn+0x1a0/0x670
[ 1951.383460][    C0]  ? rose_start_t1timer+0xd0/0xd0
[ 1951.388515][    C0]  ? call_timer_fn+0xc1/0x670
[ 1951.393217][    C0]  ? __run_timers+0x7c0/0x7c0
[ 1951.397895][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1951.403104][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1951.408320][    C0]  ? rose_start_t1timer+0xd0/0xd0
[ 1951.413352][    C0]  __run_timers+0x525/0x7c0
[ 1951.417860][    C0]  ? detach_timer+0x350/0x350
[ 1951.422539][    C0]  ? lock_chain_count+0x20/0x20
[ 1951.427403][    C0]  ? seqcount_lockdep_reader_access+0x15c/0x1c0
[ 1951.433652][    C0]  run_timer_softirq+0x63/0xf0
[ 1951.438432][    C0]  handle_softirqs+0x2a1/0x920
[ 1951.443211][    C0]  ? __irq_exit_rcu+0x12f/0x220
[ 1951.448098][    C0]  ? do_softirq+0x200/0x200
[ 1951.452615][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[ 1951.457912][    C0]  __irq_exit_rcu+0x12f/0x220
[ 1951.462636][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1951.467158][    C0]  irq_exit_rcu+0x5/0x20
[ 1951.471414][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[ 1951.477060][    C0]  </IRQ>
[ 1951.479992][    C0]  <TASK>
[ 1951.482925][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1951.488914][    C0] RIP: 0010:default_idle+0xb/0x10
[ 1951.493963][    C0] Code: 48 89 df e8 67 3a b9 f7 e9 4c ff ff ff e8 4d 14 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d b7 a2 4d 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[ 1951.513578][    C0] RSP: 0018:ffffffff8c607d88 EFLAGS: 000002c6
[ 1951.519661][    C0] RAX: 787c5ae6485ecb00 RBX: ffffffff8a1900d7 RCX: 787c5ae6485ecb00
[ 1951.527746][    C0] RDX: 0000000000000001 RSI: ffffffff8a6bfe00 RDI: ffffffff8abf0da0
[ 1951.535722][    C0] RBP: ffffffff8c607ec0 R08: dffffc0000000000 R09: ffffed10171c6aee
[ 1951.543699][    C0] R10: ffffed10171c6aee R11: 1ffff110171c6aed R12: 0000000000000000
[ 1951.551693][    C0] R13: dffffc0000000000 R14: ffffffff8c6bc680 R15: 1ffffffff1bfd07e
[ 1951.559683][    C0]  ? default_idle_call+0x77/0xc0
[ 1951.564642][    C0]  default_idle_call+0x84/0xc0
[ 1951.569437][    C0]  do_idle+0x1fc/0x570
[ 1951.573518][    C0]  ? idle_inject_timer_fn+0x60/0x60
[ 1951.578728][    C0]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1951.584392][    C0]  ? schedule_idle+0x57/0x90
[ 1951.589078][    C0]  cpu_startup_entry+0x3f/0x60
[ 1951.593852][    C0]  rest_init+0x2dc/0x300
[ 1951.598097][    C0]  ? time_init+0x33/0x33
[ 1951.602344][    C0]  arch_call_rest_init+0xa/0xa
[ 1951.607124][    C0]  start_kernel+0x490/0x539
[ 1951.611642][    C0]  secondary_startup_64_no_verify+0xcf/0xdb
[ 1951.617567][    C0]  </TASK>
[ 1951.620852][    C0] Kernel Offset: disabled
[ 1951.625173][    C0] Rebooting in 86400 seconds..