last executing test programs:

15.556289696s ago: executing program 4 (id=706):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140))
r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000)
signalfd4(r1, &(0x7f0000000380)={[0x40]}, 0x8, 0x80c00)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pwritev(r0, &(0x7f0000001880)=[{&(0x7f00000003c0)="e1ac6f90b0798db5ed1fda4fb907e01eb93f536f25077be6ea3dde5c11a34af079bf1599eee7f4f97e118cc4642886863a2943ab2d069df9005efd97333f6ea90cb22127c3fa0cff7710b60da4c569", 0x4f}, {&(0x7f0000000440)="1b66d5daa32453a3f4e49ee6af17f1575022ade0f0f9731a0f1564170e3a00e56c914b1c4506ff233bed7a55f753f4e564eb47172ac9b7d72d48013b2b13cc5280b42416b650043b310ce792b992ead11df9bef1f0945ee275369dc4e4d3e75fc0a085e094eae2869810650cbe912fbb0c54da8c57b80ad7be68df405164d6b491a26cacf728f17b7ef6cd15c312", 0x8e}, {&(0x7f0000000500)="cedbd9d676e3912023d654ad09da4439e62530dfa7feca0379014effb190f93d0fbd933536a01598a172eff4d99cf3b20b87fc266610f9f02245d7122e891e1c8f24ca75374fe0a4796dd3eede26a1da982540651fdafbc9ed9e1ccc7901e180e89829f01f2093cae4c3a741118b41e7006c357d8bed27b3d6f33f81cf054749cd3afd0317b4e2a847feae2beaffae2e6f9bf74925248f40fe9831ea277515ad18", 0xa1}, {&(0x7f00000005c0)="ecfc8abdfcd15fc00e5053ef3ff42976b8652a3b5920bb97d18dd6a26bfca2913374b5c9e5eae840a7aa245989c6d5eba8eda6e77c312c07f7a1c91453d5e4648aea219e977778b10978df94", 0x4c}, {&(0x7f0000000680)}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="b80b6c0f44d7769099cae864c8be785063e23f066ad2eafe2f40a5dcd3", 0x1d}, {&(0x7f0000000740)="8d842c59c696f26508bef766690646ed89638e738d3eaec0d0a39bfd6ba0ca18b3697103c9eb99474e6326e0e5104a6f9787aaed8afb3abff1a9badf985d9d7d2f2d40b60aad75ec4d31da0295390faa820c73af20e06f1e439873c33a0c027098d3f723befbd2987af9eb6babc7766dddd45d3a0f59b76ed4b5e3ed55933ebaeb499ea5a914481d5690f0c836b154a4271fb82450b8c0da1e6b364d4bf922f13c3f09cdc1727bb33a0029eec81b38df1f891cef5fa83c77459fc6e5d6689a68cb9aff31fffa46066ab6ce5fc3fdbc4b933f6608dc0d5b5f701aeb64ad250f18ec6fcca5efdccbdb83ef31311ec8d03258", 0xf1}, {&(0x7f0000000840)="62c48b9ba6501beda0f9cb5fe31c752ad788cca9f01fd503be49766bb6725814b8873777459da9daed0216acfa47f4be2f9a92884d275ba6", 0x38}, {&(0x7f0000000880)="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", 0x1000}], 0xa, 0x8, 0x5)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff\xff\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xee01}}, 0x233)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000340), 0xae, 0x426140)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x3, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x80007fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0xa, 0x3ff}], 0xce, 0x1, 0x6, 0x3}})

13.516404836s ago: executing program 0 (id=708):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

13.023592814s ago: executing program 0 (id=710):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r1, 0xffffffffffffffff, 0x0)

10.884323186s ago: executing program 2 (id=715):
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x30, 0x2, 0x3, "d5470000002f1a0e0000000700", 0x51424752})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000000)=0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r4, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20)

10.870098336s ago: executing program 4 (id=717):
io_setup(0x45, &(0x7f0000000180))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x40010020)
sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x40000002)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r6 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

10.865313046s ago: executing program 1 (id=718):
r0 = syz_open_dev$mouse(0x0, 0x0, 0x8042)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffd}, 0x2d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x1c8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006)

9.688520634s ago: executing program 4 (id=720):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
mknod$loop(0x0, 0xfff, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

9.043196724s ago: executing program 2 (id=721):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.027987014s ago: executing program 1 (id=722):
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0), 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x271d, 0x0, &(0x7f0000000000))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002240))

6.716275568s ago: executing program 3 (id=723):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0)
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x4002, 0x0)

6.696010449s ago: executing program 0 (id=724):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000005c0)=0x0)
r1 = eventfd(0xfffffff9)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
ptrace$poke(0x4, r2, 0x0, 0x917)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
mount$binderfs(0x0, 0x0, 0x0, 0x2004000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5.685462194s ago: executing program 1 (id=725):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = epoll_create1(0x80000)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000780)={0x10000000})
openat$kvm(0xffffffffffffff9c, 0x0, 0x801, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
read$dsp(r2, &(0x7f0000000140)=""/40, 0x28)

5.684855434s ago: executing program 2 (id=726):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800)

5.684475964s ago: executing program 3 (id=727):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000104810900000000000000000500000608000500000000040500010001200000", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x240080c0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)=""/248, 0xf8}], 0x1, 0x0, 0xfffffffffffffd44, 0xf5ffffff}, 0x40003e01)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x200040c0}, 0x8000)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0x676f6000)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x40000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000140)=0x400030, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001002abd7000000000001400", @ANYRES32=0x0, @ANYBLOB="8123010000000000140003006e657464657673696d3000000000000008000d0006000008"], 0x3c}}, 0x4040000)
mbind(&(0x7f0000090000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000080)=0xb, 0x8, 0x4)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000180)={0x2a, 0x0, 0xfffffffe}, 0x48)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
writev(r5, &(0x7f0000000840)=[{&(0x7f0000000300)="bf", 0x1}], 0x1)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r7, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x6, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
add_key(0x0, 0x0, &(0x7f0000000140)="0000000000000004ff6943b8fe00000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})

5.640482835s ago: executing program 4 (id=728):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r3, 0x1f, 0x20, 0x0, 0x0)
write$nbd(r2, 0x0, 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dy'])
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

4.839242167s ago: executing program 0 (id=729):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xffffff4e, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f00000002c0))
mknod$loop(0x0, 0xfff, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080026007f0400"/16], 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x20004810)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x58, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x42, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x1}, @mptcp=@capable={0x1e, 0xc, 0x5, 0x8, 0xd0, 0x6}, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ba885a106943a3de301004248cc11502"}, @md5sig={0x13, 0x12, "5de3ddccb400"}]}}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="24002f8008000100000000000c00bdf2a56a64c36302000202aaaaaaaa96aa0c0003610800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040)

4.531385472s ago: executing program 2 (id=730):
openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x21, 0x2, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400015c0000000000000000009ae99d5a61dc3ff4b0d2af00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
pread64(r1, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)

4.527790201s ago: executing program 4 (id=731):
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5202)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x30, 0x2, 0x3, "d5470000002f1a0e0000000700", 0x51424752})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000000)=0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r4, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20)

4.008444869s ago: executing program 3 (id=732):
r0 = syz_open_dev$mouse(0x0, 0x0, 0x8042)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffd}, 0x2d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x1c8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"179c4f014d5876c3e4fa4858113c67be813637500fce388e37e40fe6caf6a8ab9fc1cea8e2fcd16a3b5acde00efe8a7d7b70a535ae5f340be5bf60748b0ac30b62af7dcf60cf8d3fcfb114b6d1f9fb8b1e8aef18382d4a02753336ab7502c9892b8fdf9aec72a2039b9a51cb0ac50a9405849e2c0dfb2f2789ae9e51b59c4d4e72ecf4591d8f01a127d5395f0d99eebddea945b4297ab24a98c891f789a65c73dad8fb44eb39bf16cb1d5f31fee042b96cd65871557a30c4bedf9a3ba6c17e29554530fda4058f25b48059b02f084faa4f91e4cf0191b80074786b4d3756059d420a1f86271ea5ccc3269f6b353502fc804d94c5b3fb23156bee74a71add4880bb19133c11acee211a9f1668bf4f3934ae9be20fef0d13239d0a4c70d90c08b8b02c4f0f3b778f86322f80151ea4226fef27ca2be21fdcf48a48167fc9ac0c3b2402be32aba0d9846b4183c00de6a70c2e15f62ac166d5573d29d23d00d26af731345a5ccf20eea009e405decb055845a56d8ab1ce9b5382325993ce12d444a2acbbdc15af24765fc618af889171d224c7b5ebdc2477d6ed6d85fd9c01f79b0e5a4e1517f6eff2ec1f19b19936b084828249285813f082416ee19a66fca34b6dd41833445edfb9ffc8b39a1e47aba48692f26d7f85f1d37097a51907670c421287cba70f3f0c72d30ace0060c846f509f7fae8b552a9a7f2e8a2b484c45b70fccaf9246249c06a56dbb11029ea821b67fde0dbe1a04a4af06a414265f6890229ef46488a78cf689ba3f72ec5067eeaf62e3a6a793a9c1a0cfe27f9ce9fc9e9a86111657662996240821f476be942664ef82489944847478d1ea7741ddfe0c9bea87e1743823729ba528682e47a6891ec2e6985692b07af258418cbcfd473b1f80673156dae9f058edcff3aa2cc9c52c01352f18a74e32f5c1f268c3a92557c35d344844bacb2b7a59f813bce96fc83ba984a664d4440f2671f56c4279b003ab01262e415cab5f41ddbc0aca42b073751f27344403f8e0742ad67054fba95f91773864b8b0e8693fb46d00426a055c921bbcd7fd18af2570a9b9cc58a0724bad0e2f33fd4ee12bf721047d3b3650714ddd2226b7adc7a85293576edb7eb68ab71ac2ede80e72f70fe70c4f2716d453451bad3164a1c31d0dd140e44661c0b1c2d004dc09298df68dd329d922e04a2c569f6f5d6187286aecd2ff7c6614932c321680c609b403769612c340f346d1914775a8b8e0651965bc7c59ef65bf0822042187d78c0e0ba8ee255052eea74f7e3a01fd09ff78d8a9390d7f37f034ed9d876c3d1849c2b4e689b9da3e69a213a61ab4ac96e45b28209f5cf71bf3ca100f4b5eef2a7356e32e1fb4c2434902cf445df1d9d13b2b01d3726766f8ebf7970a9e40cce88f364b6edcd5b5def96c08dbac0cc5f627002e4730180436c061e3c64246fd1e576c17cde76244d35fb3a8ca73d1a0a4b53c470532d53aaaed056b174e9f50666ca5996794edcd095356290ef3d6319ad6372bba007a389cb597db057bb1d62e355568e05dbac146f0cad11141427e903133b3fd25180e6225789749e8f631b5820d9dddd8a7f3f21b1e46599c10244ee00e58a27d4a26e9a05bd6f4203bea31607d6b932febef464fcdada794e7c82f7b25cfac68c094ed4cdb35da044b184460191efcb16af1f5e6945b527d09b4c66cde472db864212c0c67aeaf90a29610df17ddb3c5c7b515539a433ec221e735cd23d1d58661418f40903ddec4b53330ac152b6ac1426b0115a5bcb31bc36fd59fdd694120cf4e79882ec3dc28d0551aa0f22ba8a1282bc120202a1f6fd6fd61e29b7b3e3fdcde974d1fc753cb99ffe1f1608b88e2fed004fdad78e02675c3946a65861d827b5e21f50ca5ca762c3afa5bce905b7e6d7a8b06cae47d213899c346d47ad99a177719f763168e1f70767bdf226fab1e299549a875e9e5171b1cf95359a5e0613016cf70c198fd645efe0c4d6305589989894e0084bf1c1fdd7d4ed3238a797460d035b8007f6077a9c3d158f92c5d8f9299c7dd86f78c79739889db98840bdfa0d7681a79b09d78fddfbe7a6044ed308bb51462ee08f625396b7685e87d9a302fa71ac45bcc47504a097343c8cccffad6b42026801e77e0b1bf22a974ce5468307a5b35f333341f48ebb9a844b3f2fb0b0da82b9bd4ee80d5774975c912caf598442f8b403f756e5f0160c8d5c98af30220179a1c541545957b3b1d03440df049f7bbfc84a81720f35e42dab5c462e3485a579e0dd851d74c2261fa7a05d06382a43aecfa9136b41e46e13f5ea2524beeead6dda02d9a6fc0253ba82627928058c4724f039d38847771899efcb14ace3e396a15a9d08cc3a5f9d443691d05d2d2164ee5db8a2adde60ba2943c13e83435b7c0f08911c0b2f639f5050ce641658e04bf3074d0e082bb292a8769666cb3c3a2e27650c34cad9d3cbfccd312b2376775557049e229320f7acbf3f18b9d761f65e6e86203513f18798499137535809fc3f10b5c6a22b309062f4bc8717fcf6a3660ff9155b04dc41f4887ff726c571c270a1fca4b658126e65651438cd882aabd97b9de7ef1975594ce849abb5fec448170b7d7eb18ca78c61750486e05405b5b0d61b937b3da90d8ee104406f53221b1e28651da01222c56c3542622a7089f43d45b1709f10db170398caa9cd23f1a7637e694f3e9345fa226ac33af1a91505db21fc7e3c3ae480bebff250a43c62c503e66cb6456b90ea04592e3c48b734d5d2d09da58bb5377b942871f15bdffbb5faf34171731413972191764b8046afac7ad352a69f7fb9fa48c743d59c79cca8313b41f4e37ababa98a22d23bac3bb0b575da2f65f206bf5e4dff7e6af00e56451df767d28b0af2f9c27dc570f4c81a57918802e8d3965b92d1b7dfc4412096d240daa03ecebe2d8299a8dcdcb2f80c3099f818c070aeecad7c3ededdcd0839c581f37615cf4ba0c8d887415aa636a064a800c64fdbda79ab7f9c1e9cd645cab68100a4fd570cc65a7132c43701f03fd9ed7e5b306ad6a975cc9c66e1184f4cbedf148a8c78500f12390f56259fe46f3200444aba398eaf9acf29e041af64891c5a36c7df04c70c9ae6a1c387fd8c1083ee3c4f1d4b92db609acf98b4280e17784a179b011cd99a58e8a12961519cda823d4f61b176f166652a3f4f07385d3f7d16a0c262ee6f7d29437925782805c63498cd849c11ed957fece33fd80e7e51ff9b51645a43d80251e28a03569f35b62745a70938958144f80ecf6406d672ccd9981658e36b9ebf761a4b1e3c7804c38958a1adfcdc5beaed5f6ccb8f041a6d61b0d3da42027019b8916dba7c53dc6e20bdf3f6d754e7c52551fbfc76eb460aa170047ae8f2e4d0a8e7480d9e5c408c2ba62266554b2b1c0ee270a5308e2e2749e9a7c9c0c181ccffc710294f73c30ce478bd938c23cde4cd96d3baa611d465efe9d83f5374b254b6eb0797f581fabf968e036e8ba9a59feaab2aa8b8ca2f4df30a4016503f67e9aec4b0e24fccc751fbd361219c0ece49d3e5833dfba07c131278d2434ae5d6a38d116dee699898aae19cde949601267b59286883694e5455f4ab5431eb45108ddb02c0a7cb4b4bcb8ef975ba2fadbb8144d9019fc1565a95655b6cce4a79cef35e1f63777871d14a7a0eb27040ef0b334bea57a4e5c94287e73d67efd59877f5750021a867cac4dfe34be049cc48b1ce67a81fd8ba7aaa218c1815c681d257d187a3276cf14ef5adac2972fd4e8f4e77b250b70c4ebef312cd065651250368bda5b7bf4d68289a5eb13202783a7fbe2f493ea5fde647ad988ed7eec362d7c486cd54e83e60ecc2491de0b0180b2dfe5dd44309a46e3b5cb130a732f0b5886ff0112d7f51aab8f9f92b7165807126e8edb64b2ba20a9f197631106dfd99ec1dd082d33bb8cde00fae1356b38c7cd9856172a6f1af8dce21a4f51854ad995d0db151faebf070e55ed84430fa717d7e108118aa9b84dfd962c415969476c6f9481479e5f272f16e30dcd2a4bd1e354bd0342d9d6e7abfc5a15e511ad1155ea05c3476b51fdfcceb8f8720a4c1f401c32de7e2584009a6d62cb47b44b03a8da44b13b0e1bb7677f030d17733214e6c03174fd057173e33641bdf35b2826668dd4eb491fd7ee38443827c7b6ea4432d70fe460d12733e517295fc1f950c447aba9966c0a6f91241c2b5de4672dec6284a9cf9e8b9416f19a6e763b9225ba91ae00e97351c40a800aeb77857630d883be0a47ed281d2bfefc8d033e2c34b2641f2f3e8a4c6647b15dd9bfdfeeea3fa1157d0db77669de1da9245ff97fb8617013f3e4c5c7a4ee721787db8330886d0574efcf86c7ca3a4baa02351d284474aa0e567cf45d99ceb51972b5ea776c8208585431bfa0d23fe136d714355a4e807f41bff5d458b7bc813487082eb2faf6726851ba55cdf38791e1141843284e6ad49124108eab3000b54f2a1abbde0fedfe839359ffcc2718cccc285962cd3f16bb82af6756f43de8fa014ae85ddf822c34574108aaee9a254acc6db79b9d35e89eba57663463ebadb0926528947ffdec88d3c88f11ed07fa39cfbe441e66c4950a8702c249d001642ae1f54839d3c1faa285967b0e7fc289f66f3c1847eadb4229ba49e5a2681df3ae87a279175f54b75a600223d175ab45ac2c3762ad5eda206c1e5ee9e205fa4fece9cdb63d048139134ff8d029f661ead227e29be6f65f94c68c74f0e25ebce4e5da4a94ed33804b87199c31e0a717b977a6b1d5c6f0574521c9365c5ff35b5e1ee231b949a193164e1898d6204372af99634fd75ab4fdd48c434467da038dfb96e7ce985b52cf6542b69a369b38647dfe4b7c6b7425267c5c9305daf85ff3572eafdaf583ae9f226b7986f2402ddbe9e5551630fa0bf0d717391a8973fceb96f403c5e0c2e7bd7604d199d58cb963861b125eacdddf83a5c7cd84049d2ca46e793cddd6b7507aaa563cfbffc8ba43e59a6b9ee8a362f928887671df9ae66dfacd2e9603cf322f0e1a399ea9b6ca9c030bd7e7647267239b6303f76e2d4006d061d8891cc9db4a3da516eefc74771becea5b60094863bf12e813386c22ed00e1f5be9f681116cfe352d0d36219ff89bae173de89c121e6e56bb657277d47efc817516591c3b12ff95b9ed7edd3c8d1790842412b380202032941fc5d9ec432e5c7203fd207e32102497b13ca2ea43ed8a5991cecc19fc77a7398328e9334061997700166e3e0a72ed4b0c5c47aca9fd48d05c40f50d22f1f642a6e5a4af8ea5d1d6c5e45e2f402634069f3705767847c78081b08081052920829e22881bcba19d6452d198beccc81295a2683d0c545713ba2953fa4f667362d06a352f406a33ee7e553fcc7268e2d7fc97e1ccd340bb8c73ae631a1051acdc872a0d30da2774d9570007be36f54ac6f2b93085c353b3fa0201ca7828e7154c4a7d837cd76db45cddfa39adc095d61987e8f47ebe476f75132d7e653ec59f99d9bb576ca36f3374284ecf5e816d940456dd9299c298c9bf54eb313ef9ed29c17b987baf2ce18be63d6f87f2fb93b16522211255400af050caabc26c96777e88ebd6cf529eb8924b2ef2e0a2042ea4e9410ca1236aaee7ebf4946c8573a26c9f80a0d24b7d629bdb7bfbe0db1e3e97d37fc018f9ebca783c06c43b9f9dfc98ea684d0cd74e4631a6347a0775ad8759448a25f7d60e53ab86452b1a13fb16928142f341ee3c31c7320159819ee4319d2afb3f8e47fd0ef8893fe154d08b8fea6669a52f2", 0x1000}}, 0x1006)

3.922749581s ago: executing program 1 (id=733):
io_setup(0x45, &(0x7f0000000180))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fadvise64(0xffffffffffffffff, 0x7fffffffffffffff, 0x4, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x40010020)
sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x40000002)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r6 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

3.251010351s ago: executing program 4 (id=734):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0xc00000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r1, 0xffffffffffffffff, 0x0)

3.064349484s ago: executing program 2 (id=735):
socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$l2tp(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
fanotify_init(0x200, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r0, 0x0, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000851}, 0x8000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)

2.318837215s ago: executing program 0 (id=736):
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0), 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x271d, 0x0, &(0x7f0000000000))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002240))

2.311456705s ago: executing program 3 (id=737):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.068152909s ago: executing program 1 (id=738):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0)
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x4002, 0x0)

1.824620832s ago: executing program 2 (id=739):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
mknod$loop(0x0, 0xfff, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

982.857205ms ago: executing program 0 (id=740):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000005c0)=0x0)
r1 = eventfd(0xfffffff9)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
ptrace$poke(0x4, r2, 0x0, 0x917)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x208000, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
mount$binderfs(0x0, 0x0, 0x0, 0x2004000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

924.253076ms ago: executing program 1 (id=741):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(r3, 0x1f, 0x20, 0x0, 0x0)
write$nbd(r2, 0x0, 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dy'])
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

838.486787ms ago: executing program 3 (id=742):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in=@rand_addr=0x64010100, 0x4d4, 0x32}, @in=@empty, {0x0, 0x7, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x4000000002, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x3501, 0x2, 0x1, 0x0, 0x68}, [@algo_auth={0x48, 0x1, {{'sha3-224\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

0s ago: executing program 3 (id=743):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r1, 0x5}, &(0x7f0000000100)=0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts.
[   61.254113][ T4177] cgroup: Unknown subsys name 'net'
[   61.400330][ T4177] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   62.853114][ T4177] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   64.263180][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   64.316402][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   64.382745][ T4198] chnl_net:caif_netlink_parms(): no params data found
[   64.417784][ T4196] chnl_net:caif_netlink_parms(): no params data found
[   64.472818][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.480786][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.489417][ T4194] device bridge_slave_0 entered promiscuous mode
[   64.513647][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.520748][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.529230][ T4190] device bridge_slave_0 entered promiscuous mode
[   64.537606][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.545166][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.553500][ T4190] device bridge_slave_1 entered promiscuous mode
[   64.561214][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.568608][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.576977][ T4194] device bridge_slave_1 entered promiscuous mode
[   64.650342][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.669291][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.682339][ T4197] chnl_net:caif_netlink_parms(): no params data found
[   64.694035][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.707594][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.715059][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.723066][ T4198] device bridge_slave_0 entered promiscuous mode
[   64.732537][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.784164][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.791336][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.800133][ T4198] device bridge_slave_1 entered promiscuous mode
[   64.807433][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.814935][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.822754][ T4196] device bridge_slave_0 entered promiscuous mode
[   64.840604][ T4190] team0: Port device team_slave_0 added
[   64.864443][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.871676][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.880054][ T4196] device bridge_slave_1 entered promiscuous mode
[   64.890081][ T4194] team0: Port device team_slave_0 added
[   64.897690][ T4190] team0: Port device team_slave_1 added
[   64.917094][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.935062][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.951281][ T4194] team0: Port device team_slave_1 added
[   64.981413][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.988528][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.014572][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.035308][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.052817][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.071098][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.078218][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.104603][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.133182][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.140403][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.149544][ T4197] device bridge_slave_0 entered promiscuous mode
[   65.159407][ T4198] team0: Port device team_slave_0 added
[   65.166076][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.173047][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.199015][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.212087][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.219322][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.245370][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.266474][ T4196] team0: Port device team_slave_0 added
[   65.272678][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.280507][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.289122][ T4197] device bridge_slave_1 entered promiscuous mode
[   65.298211][ T4198] team0: Port device team_slave_1 added
[   65.322156][ T4196] team0: Port device team_slave_1 added
[   65.357380][ T4190] device hsr_slave_0 entered promiscuous mode
[   65.364367][ T4190] device hsr_slave_1 entered promiscuous mode
[   65.397018][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.404217][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.430358][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.451142][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.458981][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.485400][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.497695][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.504749][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.530802][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.544280][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.568318][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.575396][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.601454][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.615044][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.660631][ T4194] device hsr_slave_0 entered promiscuous mode
[   65.668102][ T4194] device hsr_slave_1 entered promiscuous mode
[   65.675250][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.683087][ T4194] Cannot create hsr debugfs directory
[   65.710382][ T4198] device hsr_slave_0 entered promiscuous mode
[   65.717590][ T4198] device hsr_slave_1 entered promiscuous mode
[   65.724350][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.732070][ T4198] Cannot create hsr debugfs directory
[   65.775349][ T4197] team0: Port device team_slave_0 added
[   65.807148][ T4197] team0: Port device team_slave_1 added
[   65.854527][ T4196] device hsr_slave_0 entered promiscuous mode
[   65.861257][ T4196] device hsr_slave_1 entered promiscuous mode
[   65.868440][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.876182][ T4196] Cannot create hsr debugfs directory
[   65.921541][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.928753][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.936293][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   65.961599][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[   65.963927][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.009388][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.016683][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.042886][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.042885][ T4179] Bluetooth: hci4: command 0x0409 tx timeout
[   66.042968][ T4179] Bluetooth: hci3: command 0x0409 tx timeout
[   66.093648][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   66.176073][ T4197] device hsr_slave_0 entered promiscuous mode
[   66.183117][ T4197] device hsr_slave_1 entered promiscuous mode
[   66.189863][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.197549][ T4197] Cannot create hsr debugfs directory
[   66.312675][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.326152][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.340149][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.350668][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.399919][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.427316][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.441005][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.452879][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.492915][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.507157][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.531469][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.562549][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.618245][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.634114][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.644691][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.659578][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.678339][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.740890][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.751283][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.763462][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   66.784113][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.795285][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.809112][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.820366][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.830077][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.841674][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.849056][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.858408][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.869166][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.890094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.899448][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.910454][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.920747][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.927865][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.936730][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.961774][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   66.980502][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.989749][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.999243][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.007558][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.017321][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.026717][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.035928][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.045013][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.052306][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.061697][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.070356][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.103362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.112650][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.124980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.134712][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.144102][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.153106][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.161974][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.169123][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.178911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.195310][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.209368][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.219414][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.236814][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.258990][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.268440][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.277475][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.286448][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.296570][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.317082][ T4198] 8021q: adding VLAN 0 to HW filter on device team0
[   67.338125][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.352274][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.362066][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.372460][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.389878][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.403092][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.446037][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.465034][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.476481][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.486167][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.495052][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.510777][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.520240][ T1215] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.527406][ T1215] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.542489][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.551687][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.560460][ T1215] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.567702][ T1215] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.576487][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.586240][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.594237][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.602468][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.611356][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.627818][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   67.662103][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.683493][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.692392][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.708632][ T3064] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.715810][ T3064] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.737929][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.759892][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.768428][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.778360][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.788079][ T3064] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.795215][ T3064] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.804112][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.812826][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.823444][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.832171][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.841420][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.861874][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[   67.896801][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.910979][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.921663][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.933313][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.940841][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.953122][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.962053][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.971312][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.980503][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.989228][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.999178][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.008011][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.016561][ T1110] Bluetooth: hci0: command 0x041b tx timeout
[   68.017883][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.023113][ T1110] Bluetooth: hci1: command 0x041b tx timeout
[   68.038778][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.049291][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.064528][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.079932][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.091512][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.095216][ T1110] Bluetooth: hci3: command 0x041b tx timeout
[   68.110140][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.118912][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.127210][ T1110] Bluetooth: hci4: command 0x041b tx timeout
[   68.132993][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.142439][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.151674][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.160674][ T1215] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.167822][ T1215] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.174987][ T4232] Bluetooth: hci2: command 0x041b tx timeout
[   68.179507][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.189757][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.198284][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.208371][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.217068][ T1215] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.224246][ T1215] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.274047][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.282870][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.306960][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.324288][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.340283][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.350153][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.362087][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.371862][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.381761][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.389643][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.419826][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.458114][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.470377][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.511257][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.525551][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.538810][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.550879][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.566251][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.585803][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.601630][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.610024][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.629447][ T4190] device veth0_vlan entered promiscuous mode
[   68.646701][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.674536][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.685035][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.697567][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.735238][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.771289][ T4190] device veth1_vlan entered promiscuous mode
[   68.799914][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.810350][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.821349][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.854183][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.861713][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.883000][ T4198] device veth0_vlan entered promiscuous mode
[   68.908580][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.928652][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.945754][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.961478][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.972648][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.981390][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.023554][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.032164][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.043504][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.050976][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.061050][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.070420][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.081840][ T4190] device veth0_macvtap entered promiscuous mode
[   69.093059][ T4198] device veth1_vlan entered promiscuous mode
[   69.112560][ T4190] device veth1_macvtap entered promiscuous mode
[   69.124768][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.162812][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.171691][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.181175][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.189363][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.197860][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.207191][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.218905][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.228284][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.237650][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.246115][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.264125][ T4198] device veth0_macvtap entered promiscuous mode
[   69.278599][ T4198] device veth1_macvtap entered promiscuous mode
[   69.287894][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.298154][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.308452][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.317818][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.332867][ T4194] device veth0_vlan entered promiscuous mode
[   69.347422][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.357944][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.368300][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.379336][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.388915][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.398173][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.406956][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.415328][ T4197] device veth0_vlan entered promiscuous mode
[   69.429112][ T4194] device veth1_vlan entered promiscuous mode
[   69.443434][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.462748][ T4197] device veth1_vlan entered promiscuous mode
[   69.470833][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.480041][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.489607][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.498042][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.508799][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.517955][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.527066][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.546526][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.556394][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.565500][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.574499][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.605364][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.615408][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.626446][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.637624][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.649722][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.678849][ T4194] device veth0_macvtap entered promiscuous mode
[   69.686466][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.695599][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.705839][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.714774][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.730544][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.754226][ T4196] device veth0_vlan entered promiscuous mode
[   69.761371][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.772850][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.786881][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.797185][ T4197] device veth0_macvtap entered promiscuous mode
[   69.809014][ T4194] device veth1_macvtap entered promiscuous mode
[   69.820767][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.829208][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.837532][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.848309][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.859218][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.869360][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.878642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.886605][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.898431][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.908179][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.917847][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.926940][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.942354][ T4197] device veth1_macvtap entered promiscuous mode
[   69.961958][ T4196] device veth1_vlan entered promiscuous mode
[   70.010695][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.027157][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.038424][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.049868][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.061120][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.093754][ T4238] Bluetooth: hci1: command 0x040f tx timeout
[   70.099947][ T4238] Bluetooth: hci0: command 0x040f tx timeout
[   70.108509][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.117146][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   70.126261][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.134707][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.144315][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.154473][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.165079][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.175062][ T1110] Bluetooth: hci4: command 0x040f tx timeout
[   70.175102][ T1110] Bluetooth: hci3: command 0x040f tx timeout
[   70.188456][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.199220][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.209210][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.219786][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.231282][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.240832][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.251949][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.263192][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.270421][ T4230] Bluetooth: hci2: command 0x040f tx timeout
[   70.274011][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.278177][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.320532][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.329958][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.340078][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.349255][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.359227][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.368040][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.379847][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.391310][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.401383][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.412796][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.424440][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.435312][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.447074][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.469814][ T4196] device veth0_macvtap entered promiscuous mode
[   70.481680][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.491924][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.501609][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.510979][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.521618][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.530487][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.539629][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.550876][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.559855][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.568731][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.578333][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.603984][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.612102][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.625501][ T4196] device veth1_macvtap entered promiscuous mode
[   70.645386][ T3064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.657862][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.666156][ T3064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.702284][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.734588][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.747533][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.758606][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.769749][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.779907][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.790939][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.801114][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.811855][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.825420][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.841934][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.852828][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.863111][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.875107][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.885221][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.896320][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.906687][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.918191][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.929846][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.938546][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.947625][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.957281][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.966678][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.981144][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.991525][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.999358][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.016486][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.027048][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.036668][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.045675][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.085291][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.126600][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.135813][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.246412][ T3102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.271645][ T3102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.301553][ T1215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.313441][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.319977][ T1215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.321383][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.377615][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.384589][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.403642][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.411668][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.441819][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.461212][ T4271] binder_alloc: 4269: binder_alloc_buf size 66248 failed, no address space
[   71.475935][ T4271] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[   71.534313][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.542295][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.594936][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.635737][ T3102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.683381][ T3102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.753517][ T3102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.869563][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.893040][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.904459][ T4281] process 'syz.2.7' launched '/dev/fd/4' with NULL argv: empty string added
[   72.004225][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.050957][ T4284] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7'.
[   72.083675][ T4263] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   72.174482][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   72.191393][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   72.259928][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   72.292517][ T4291] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.316600][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   72.339218][   T23] Bluetooth: hci2: command 0x0419 tx timeout
[   72.343775][ T4263] usb 4-1: Using ep0 maxpacket: 32
[   72.503586][ T4263] usb 4-1: unable to get BOS descriptor or descriptor too short
[   72.603739][ T4263] usb 4-1: config 7 has an invalid interface number: 187 but max is 0
[   72.614346][ T4263] usb 4-1: config 7 has no interface number 0
[   72.620518][ T4263] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[   72.655226][ T4297] =======================================================
[   72.655226][ T4297] WARNING: The mand mount option has been deprecated and
[   72.655226][ T4297]          and is ignored by this kernel. Remove the mand
[   72.655226][ T4297]          option from the mount to silence this warning.
[   72.655226][ T4297] =======================================================
[   72.693411][ T4263] usb 4-1: config 7 interface 187 has no altsetting 0
[   72.853862][ T4263] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[   72.933424][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.968735][ T4263] usb 4-1: Product: syz
[   72.973114][ T4263] usb 4-1: Manufacturer: syz
[   72.982172][ T4263] usb 4-1: SerialNumber: syz
[   74.015075][ T4263] usb 4-1: Unknown endpoint type found, address 0x07
[   74.038360][ T4263] usb 4-1: Unknown endpoint type found, address 0x03
[   74.071300][ T4263] usb 4-1: Not enough endpoints found in device, aborting!
[   74.223444][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.262122][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'.
[   75.013340][ T4230] usb 1-1: Using ep0 maxpacket: 16
[   75.052053][   T21] usb 4-1: USB disconnect, device number 2
[   75.153485][ T4230] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.178045][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0
[   75.197181][ T4230] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   75.244465][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.294370][ T4230] usb 1-1: config 0 descriptor??
[   75.503472][ T1110] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   75.814873][    C1] ODEBUG: Out of memory. ODEBUG disabled
[   76.463265][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.473244][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.483239][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.493237][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.503246][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.513240][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.523235][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.533236][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.543236][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.553237][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   76.933247][    C0] sched: RT throttling activated
[   77.474302][ T4230] usbhid 1-1:0.0: can't add hid device: -71
[   77.480305][ T4230] usbhid: probe of 1-1:0.0 failed with error -71
[   77.487068][ T1110] usb 3-1: config 253 has an invalid descriptor of length 97, skipping remainder of the config
[   77.509013][ T1110] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[   77.546278][ T4230] usb 1-1: USB disconnect, device number 2
[   77.578050][ T1110] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   77.683530][ T1110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   77.692669][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   77.868801][ T1110] usb 3-1: SerialNumber: syz
[   77.953325][ T4264] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   78.374210][ T4264] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   78.382396][ T4264] usb 2-1: config 0 has no interface number 0
[   78.389613][ T4264] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping
[   78.412821][ T1110] usb 3-1: bad CDC descriptors
[   78.447034][ T1110] usb 3-1: bad CDC descriptors
[   78.471725][ T1110] usb 3-1: USB disconnect, device number 2
[   78.564856][ T4264] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   78.584122][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   78.781333][ T4264] usb 2-1: Product: syz
[   78.787011][ T4264] usb 2-1: SerialNumber: syz
[   79.627511][ T4264] usb 2-1: config 0 descriptor??
[   79.757222][ T4264] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[   80.036859][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   80.736385][   T23] usb 2-1: USB disconnect, device number 2
[   81.510498][ T1325] kernel write not supported for file /36/net/ip_vs_stats_percpu (pid: 1325 comm: kworker/0:3)
[   84.806258][ T4416] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock
[   86.408728][ T4420] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[   86.738500][ T1107] cfg80211: failed to load regulatory.db
[   87.003376][ T4229] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   88.203473][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.220884][ T4451] fuse: Bad value for 'rootmode'
[   88.229693][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[   88.264151][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   88.637782][ T4229] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[   88.689655][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[   88.726239][ T4264] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   88.755816][ T4229] usb 5-1: Product: syz
[   88.784578][ T4229] usb 5-1: Manufacturer: syz
[   88.818575][ T4229] usb 5-1: SerialNumber: syz
[   88.918805][ T4229] usb 5-1: config 0 descriptor??
[   89.013516][ T4264] usb 3-1: Using ep0 maxpacket: 16
[   89.055252][ T4229] radio-si470x 5-1:0.0: could not find interrupt in endpoint
[   89.087603][ T4229] radio-si470x: probe of 5-1:0.0 failed with error -5
[   89.142927][ T4229] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[   89.153479][ T4264] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.182631][ T4264] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   89.573345][ T4263] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   89.619150][ T4264] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   89.635434][ T4264] usb 3-1: config 1 interface 1 has no altsetting 0
[   89.791674][ T4450] Set syz1 is full, maxelem 6117 reached
[   89.833279][ T4263] usb 2-1: Using ep0 maxpacket: 32
[   90.686793][ T4264] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[   90.727765][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.768493][ T4264] usb 3-1: Product: syz
[   90.772861][ T4264] usb 3-1: Manufacturer: syz
[   90.832352][ T4470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'.
[   90.903054][ T4264] usb 3-1: SerialNumber: syz
[   91.523403][ T4263] usb 2-1: unable to get BOS descriptor or descriptor too short
[   91.553460][ T4264] usb 3-1: can't set config #1, error -71
[   91.569738][ T4264] usb 3-1: USB disconnect, device number 3
[   91.593519][ T4263] usb 2-1: unable to read config index 0 descriptor/start: -71
[   91.601162][ T4263] usb 2-1: can't read configurations, error -71
[   92.894145][ T4238] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.268010][ T4232] usb 5-1: USB disconnect, device number 2
[   94.464505][ T4238] usb 4-1: unable to read config index 0 descriptor/start: -71
[   94.475699][ T4238] usb 4-1: can't read configurations, error -71
[   96.735757][ T4512] capability: warning: `syz.1.65' uses 32-bit capabilities (legacy support in use)
[  100.306982][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  100.712721][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  100.782294][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  100.837866][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  100.904263][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  100.976102][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  101.047216][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  101.079067][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  101.102607][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  101.129647][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[  102.741927][ T4381] Bluetooth: hci4: command 0x0411 tx timeout
[  103.169901][ T4558] netlink: 'syz.3.83': attribute type 6 has an invalid length.
[  103.962074][ T4558] netlink: 'syz.3.83': attribute type 6 has an invalid length.
[  106.443417][ T4381] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  106.526537][ T4599] __nla_validate_parse: 2 callbacks suppressed
[  106.526580][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'.
[  106.694386][ T4381] usb 1-1: Using ep0 maxpacket: 8
[  107.083522][ T4381] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  107.116583][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.148908][ T4381] usb 1-1: Product: syz
[  107.153320][ T4381] usb 1-1: Manufacturer: syz
[  107.167340][ T4381] usb 1-1: SerialNumber: syz
[  107.392434][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[  107.403105][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[  107.419283][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[  107.483717][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[  107.623706][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[  107.693608][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[  107.720682][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'.
[  107.732846][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[  107.762660][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.100'.
[  107.943561][ T4381] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  108.011382][ T4381] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  108.051767][ T4381] usb 1-1: USB disconnect, device number 3
[  108.331139][ T4324] udevd[4324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.783833][ T4658] __nla_validate_parse: 3 callbacks suppressed
[  113.783851][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.065378][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.077645][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.086805][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.097388][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.106540][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.129450][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.211528][ T4618] syz.2.102 (4618): drop_caches: 2
[  114.252389][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.295985][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  114.325186][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  118.924970][ T4697] xt_hashlimit: invalid interval
[  119.082963][ T4697] serio: Serial port ptm0
[  120.107260][ T4707] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  122.276956][ T4743] netlink: 'syz.3.142': attribute type 6 has an invalid length.
[  122.288856][ T4743] netlink: 'syz.3.142': attribute type 6 has an invalid length.
[  122.663337][ T4263] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  122.927636][ T4263] usb 1-1: Using ep0 maxpacket: 32
[  123.053953][ T4263] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  123.082880][ T4263] usb 1-1: config 2 has no interface number 0
[  123.095317][ T4263] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  123.127532][ T4263] usb 1-1: config 2 interface 88 has no altsetting 0
[  123.304643][ T4263] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  123.324672][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  123.348587][ T4263] usb 1-1: Product: syz
[  123.363618][ T4263] usb 1-1: Manufacturer: syz
[  123.379760][ T4263] usb 1-1: SerialNumber: syz
[  123.463555][ T4737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  123.513296][ T4265] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  123.717682][ T4737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  124.013565][ T4265] usb 3-1: config 0 interface 0 has no altsetting 0
[  124.025683][ T4265] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a75, bcdDevice= 0.00
[  124.057061][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.087515][ T4265] usb 3-1: config 0 descriptor??
[  125.123577][ T4263] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  125.136023][ T4263] asix 1-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  125.170860][ T4263] asix: probe of 1-1:2.88 failed with error -71
[  125.332459][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.404859][ T4263] usb 1-1: USB disconnect, device number 4
[  125.432421][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.441106][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.448672][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.463249][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.480985][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.492442][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.506156][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.514028][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.521491][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.539438][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.557768][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.587008][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.607258][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.640429][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.663329][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.671990][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.693311][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.700777][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.816746][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.882250][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  125.954012][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  126.014970][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  126.045982][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  126.273634][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  126.408697][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  126.457818][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  126.740475][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  126.759717][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  126.775645][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.181797][ T4791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'.
[  127.194364][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.205389][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.303794][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.314102][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.321880][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.329986][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.347182][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.360946][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.371514][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.381783][ T4265] hid-generic 0003:1B1C:0A75.0001: unknown main item tag 0x0
[  127.585014][ T4265] hid-generic 0003:1B1C:0A75.0001: hidraw0: USB HID v0.81 Device [HID 1b1c:0a75] on usb-dummy_hcd.2-1/input0
[  127.770607][ T4265] usb 3-1: USB disconnect, device number 4
[  129.405662][ T4820] Zero length message leads to an empty skb
[  129.671583][ T4814] fido_id[4814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  129.860852][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  129.872679][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  129.890643][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  129.909371][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  129.935504][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  129.972897][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  129.982483][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  129.991861][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  130.002529][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'.
[  130.506047][ T4844] 9pnet: Insufficient options for proto=fd
[  132.456570][ T4878] __nla_validate_parse: 2 callbacks suppressed
[  132.456586][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.598082][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.635864][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.649008][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.663657][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.679356][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.699015][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.715357][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.728493][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.755332][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'.
[  132.895094][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.901468][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.080331][ T4263] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  134.643382][ T4263] usb 3-1: unable to get BOS descriptor or descriptor too short
[  134.834286][ T4263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.866844][ T4263] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  134.933653][ T4263] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  134.990153][ T4909] loop1: detected capacity change from 0 to 512
[  135.091169][ T4909] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  135.102324][ T4909] EXT4-fs (loop1): mount failed
[  135.108878][ T4263] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[  135.124714][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.133040][ T4263] usb 3-1: Product: syz
[  135.142873][ T4263] usb 3-1: Manufacturer: syz
[  135.149046][ T4263] usb 3-1: SerialNumber: syz
[  135.306550][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  135.801815][    T7] usb 5-1: Using ep0 maxpacket: 32
[  136.584937][    T7] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  136.594923][    T7] usb 5-1: config 2 has no interface number 0
[  136.984823][ T4263] usb 3-1: Can't get UAC3 power state for id 10
[  137.356568][    T7] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  137.419027][    T7] usb 5-1: config 2 interface 88 has no altsetting 0
[  137.496270][ T4263] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  137.517730][ T4263] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  137.896320][ T4263] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  137.913492][    T7] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  137.933096][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  137.947903][ T4263] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  137.964167][    T7] usb 5-1: Product: syz
[  137.984743][    T7] usb 5-1: Manufacturer: syz
[  138.009714][ T4263] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  138.019639][    T7] usb 5-1: SerialNumber: syz
[  138.026713][ T4263] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  138.119645][ T4263] usb 3-1: USB disconnect, device number 5
[  138.126032][    T7] usb 5-1: can't set config #2, error -71
[  138.135870][    T7] usb 5-1: USB disconnect, device number 3
[  138.738300][ T4263] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  138.844614][ T4969] loop3: detected capacity change from 0 to 512
[  139.003363][ T4263] usb 3-1: Using ep0 maxpacket: 16
[  139.026316][ T4969] EXT4-fs (loop3): corrupt root inode, run e2fsck
[  139.035887][ T4969] EXT4-fs (loop3): mount failed
[  139.953721][ T4263] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  140.088829][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.314681][ T4263] usb 3-1: Product: syz
[  140.452794][ T4263] usb 3-1: Manufacturer: syz
[  140.474784][ T4263] usb 3-1: SerialNumber: syz
[  140.514967][ T4263] usb 3-1: config 0 descriptor??
[  141.204457][ T4263] dvb_usb_dtv5100: probe of 3-1:0.0 failed with error -110
[  141.362484][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.371282][ T4263] usb 3-1: USB disconnect, device number 6
[  143.773448][ T5013] __nla_validate_parse: 10 callbacks suppressed
[  143.773489][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'.
[  144.829799][ T5023] loop0: detected capacity change from 0 to 512
[  144.881000][ T5023] EXT4-fs (loop0): corrupt root inode, run e2fsck
[  144.881102][ T5023] EXT4-fs (loop0): mount failed
[  146.994925][ T5040] netlink: 68 bytes leftover after parsing attributes in process `syz.4.236'.
[  147.088358][ T5042] IPVS: sed: FWM 3 0x00000003 - no destination available
[  147.129638][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  147.333390][   T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  147.613337][   T21] usb 5-1: Using ep0 maxpacket: 16
[  147.673673][   T21] usb 5-1: too many configurations: 123, using maximum allowed: 8
[  148.473489][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.503970][ T5062] loop1: detected capacity change from 0 to 512
[  148.583635][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.633903][ T5062] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  148.640450][ T5062] EXT4-fs (loop1): mount failed
[  148.753565][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.898882][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.433336][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.713455][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.813373][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.613356][   T21] usb 5-1: unable to read config index 7 descriptor/all
[  151.620398][   T21] usb 5-1: can't read configurations, error -71
[  152.456478][ T5102] loop1: detected capacity change from 0 to 512
[  153.848389][ T5102] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  154.022220][ T5102] EXT4-fs (loop1): mount failed
[  154.139802][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[  156.853314][ T4265] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  157.283513][ T4265] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  157.301614][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.324464][ T4265] usb 2-1: config 0 descriptor??
[  157.742196][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'.
[  158.333829][ T4265] usb 2-1: Cannot read MAC address
[  158.339408][ T4265] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  158.431341][ T5156] loop0: detected capacity change from 0 to 512
[  158.491810][ T4265] usb 2-1: USB disconnect, device number 5
[  158.769702][ T5156] EXT4-fs (loop0): corrupt root inode, run e2fsck
[  158.894508][ T5156] EXT4-fs (loop0): mount failed
[  160.246390][ T5180] tipc: Started in network mode
[  160.429236][ T5180] tipc: Node identity be3cad29dbba, cluster identity 4711
[  160.437180][ T5180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.445054][ T5185] device syzkaller0 entered promiscuous mode
[  161.096665][ T5191] tipc: Resetting bearer <eth:syzkaller0>
[  161.163736][ T5179] tipc: Resetting bearer <eth:syzkaller0>
[  161.229055][ T5179] tipc: Disabling bearer <eth:syzkaller0>
[  162.143054][ T5197] netlink: 'syz.1.284': attribute type 6 has an invalid length.
[  162.941128][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'.
[  163.437768][ T5195] netlink: 'syz.1.284': attribute type 6 has an invalid length.
[  164.399494][ T5221] loop2: detected capacity change from 0 to 512
[  164.643010][ T5221] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  164.654819][ T5221] EXT4-fs (loop2): mount failed
[  165.660229][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'.
[  165.723335][ T4229] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  166.183463][ T4229] usb 5-1: Using ep0 maxpacket: 16
[  166.383788][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.432584][ T4229] usb 5-1: config 0 has no interfaces?
[  166.676500][ T4229] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  166.685658][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.695782][ T4229] usb 5-1: config 0 descriptor??
[  167.844609][ T5267] netlink: 'syz.3.304': attribute type 6 has an invalid length.
[  167.892292][ T5273] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[  167.903600][ T5267] netlink: 'syz.3.304': attribute type 6 has an invalid length.
[  168.199487][ T4479] usb 5-1: USB disconnect, device number 6
[  168.240268][ T5276] loop1: detected capacity change from 0 to 512
[  168.437527][ T5276] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  169.175561][ T5276] EXT4-fs (loop1): mount failed
[  169.493366][ T4263] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  170.804762][ T4263] usb 4-1: config 0 interface 0 has no altsetting 0
[  170.831395][ T4263] usb 4-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00
[  170.845497][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.860236][ T4263] usb 4-1: config 0 descriptor??
[  171.785466][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x2
[  171.800822][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x6
[  171.818357][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0xe
[  171.825366][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.832382][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.839326][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.846645][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.854201][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.861207][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.868162][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.875204][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.882108][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.889163][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.896098][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.903097][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  171.921951][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  172.736015][ T4263] ntrig 0003:1B96:000D.0002: unknown main item tag 0x0
[  173.324605][ T4263] ntrig 0003:1B96:000D.0002: hidraw0: USB HID v0.81 Device [HID 1b96:000d] on usb-dummy_hcd.3-1/input0
[  173.394273][ T4263] usb 4-1: USB disconnect, device number 5
[  173.673329][ T1107] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  173.882345][ T5339] loop0: detected capacity change from 0 to 512
[  174.140525][ T5339] EXT4-fs (loop0): corrupt root inode, run e2fsck
[  174.173324][ T5339] EXT4-fs (loop0): mount failed
[  174.186149][ T5336] fido_id[5336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  174.493644][ T1107] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  174.515960][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.559794][ T1107] usb 3-1: Product: syz
[  174.585246][ T1107] usb 3-1: Manufacturer: syz
[  174.589907][ T1107] usb 3-1: SerialNumber: syz
[  174.664841][ T1107] usb 3-1: config 0 descriptor??
[  174.959283][ T1107] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  176.643482][ T1107] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  176.678226][ T1107] usb 3-1: USB disconnect, device number 7
[  176.827961][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[  178.531325][ T4263] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  178.727298][   T26] audit: type=1804 audit(1782569441.079:2): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.339" name="bus" dev="ramfs" ino=36947 res=1 errno=0
[  178.753243][ T4229] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  179.673334][ T4263] usb 3-1: config 0 interface 0 has no altsetting 0
[  179.680561][ T4263] usb 3-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00
[  179.688717][   T26] audit: type=1804 audit(1782569441.119:3): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.339" name="bus" dev="ramfs" ino=36947 res=1 errno=0
[  179.803411][ T4229] usb 4-1: Using ep0 maxpacket: 16
[  179.943836][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.983837][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  180.064234][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  180.137557][ T4229] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  180.221313][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  180.433907][ T4229] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  180.480868][ T4229] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  180.579293][ T4229] usb 4-1: Manufacturer: syz
[  180.720399][ T4229] usb 4-1: config 0 descriptor??
[  181.983367][ T4229] rc_core: IR keymap rc-hauppauge not found
[  182.000337][ T4229] Registered IR keymap rc-empty
[  182.054965][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  182.173618][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  182.320944][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[  182.394498][ T4229] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  182.792065][ T4229] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5
[  182.900815][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.921712][ T4263] usb 3-1: config 0 descriptor??
[  182.931515][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  182.951419][ T4263] usb 3-1: can't set config #0, error -71
[  182.958435][ T4263] usb 3-1: USB disconnect, device number 8
[  182.984307][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  183.173273][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  183.382452][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  183.904102][   T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  183.989803][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.103743][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.133264][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.168365][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.363325][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.393552][ T4229] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.475715][ T4229] mceusb 4-1:0.0: Registered 盨 with mce emulator interface version 1
[  184.490143][ T4229] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  184.503439][   T13] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  184.522322][   T13] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  184.557101][ T4229] usb 4-1: USB disconnect, device number 6
[  184.876210][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  184.910414][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  184.935878][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  185.154355][ T4264] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  185.523696][ T4264] usb 2-1: config 0 interface 0 has no altsetting 0
[  185.968058][   T13] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  185.983839][   T13] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  185.991892][   T13] usb 5-1: Product: syz
[  185.997063][   T13] usb 5-1: Manufacturer: syz
[  186.040765][ T4264] usb 2-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00
[  186.056936][   T13] usb 5-1: can't set config #1, error -71
[  186.079309][   T13] usb 5-1: USB disconnect, device number 7
[  186.237162][ T4479] Bluetooth: hci1: command 0x0406 tx timeout
[  186.265677][ T4479] Bluetooth: hci3: command 0x0406 tx timeout
[  186.351160][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.363936][ T4264] usb 2-1: config 0 descriptor??
[  186.698163][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'.
[  187.302478][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x2
[  188.169008][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x6
[  188.249588][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  188.257259][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  188.264287][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0xe
[  188.292067][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.109158][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.116406][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.127452][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.145249][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.152203][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.160875][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.168357][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.175598][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.183142][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.190554][ T4264] ntrig 0003:1B96:000D.0003: unknown main item tag 0x0
[  189.204076][ T4264] ntrig 0003:1B96:000D.0003: hidraw0: USB HID v0.81 Device [HID 1b96:000d] on usb-dummy_hcd.1-1/input0
[  189.235854][ T4264] usb 2-1: USB disconnect, device number 6
[  189.247499][ T5462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.970962][ T5470] netlink: 'syz.3.366': attribute type 6 has an invalid length.
[  189.987108][ T5470] netlink: 'syz.3.366': attribute type 6 has an invalid length.
[  191.390969][   T13] Bluetooth: hci2: command 0x0406 tx timeout
[  191.646992][ T5497] fido_id[5497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  191.903607][   T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  192.423616][   T13] usb 4-1: config 0 interface 0 has no altsetting 0
[  192.431547][   T13] usb 4-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00
[  192.522239][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.532566][   T13] usb 4-1: config 0 descriptor??
[  193.638298][ T4238] Bluetooth: hci5: command 0x1003 tx timeout
[  193.645187][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  194.276034][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.324105][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.334642][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x2
[  194.341541][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x6
[  194.402511][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0xe
[  194.432301][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  194.435302][ T4179] libceph: connect (1)[c::]:6789 error -101
[  194.448512][ T4179] libceph: mon0 (1)[c::]:6789 connect error
[  194.463797][ T4179] libceph: connect (1)[c::]:6789 error -101
[  194.470829][ T4179] libceph: mon0 (1)[c::]:6789 connect error
[  194.551533][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  194.635218][ T5521] netlink: 'syz.0.382': attribute type 6 has an invalid length.
[  194.648899][ T5521] netlink: 'syz.0.382': attribute type 6 has an invalid length.
[  194.750900][ T4179] libceph: connect (1)[c::]:6789 error -101
[  194.767856][ T4179] libceph: mon0 (1)[c::]:6789 connect error
[  195.070568][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.110083][ T5514] ceph: No mds server is up or the cluster is laggy
[  195.122385][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.163341][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.183293][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.190952][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.204531][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.218764][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.229913][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.240137][   T13] ntrig 0003:1B96:000D.0004: unknown main item tag 0x0
[  195.250905][   T13] ntrig 0003:1B96:000D.0004: hidraw0: USB HID v0.81 Device [HID 1b96:000d] on usb-dummy_hcd.3-1/input0
[  195.307175][   T13] usb 4-1: USB disconnect, device number 7
[  195.473093][ T5526] fido_id[5526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  195.680796][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  195.693309][ T4479] Bluetooth: hci5: command 0x1001 tx timeout
[  195.701375][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  195.708069][   T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  195.963474][   T13] usb 4-1: Using ep0 maxpacket: 8
[  196.083599][   T13] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  196.101327][   T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  196.136948][   T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  196.171340][   T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  196.208537][   T13] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.256320][   T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  196.295945][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.654604][   T13] usb 4-1: usb_control_msg returned -32
[  196.660240][   T13] usbtmc 4-1:16.0: can't read capabilities
[  196.682928][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  196.692348][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  196.703932][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  196.713269][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  196.722627][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  196.734794][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  196.745591][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  196.756386][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  196.767411][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  197.053438][ T5538] usbtmc 4-1:16.0: stb usb_control_msg returned -32
[  198.455765][ T4479] Bluetooth: hci5: command 0x1009 tx timeout
[  198.476021][ T4238] usb 4-1: USB disconnect, device number 8
[  200.813393][ T4238] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  201.193362][ T4238] usb 1-1: config 0 interface 0 has no altsetting 0
[  201.200111][ T4238] usb 1-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00
[  201.223242][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.235107][ T4238] usb 1-1: config 0 descriptor??
[  201.737034][ T5572] netlink: 'syz.2.396': attribute type 6 has an invalid length.
[  201.789597][ T5572] netlink: 'syz.2.396': attribute type 6 has an invalid length.
[  202.115183][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x2
[  202.122138][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x6
[  202.143608][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0xe
[  202.866576][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.873687][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.880915][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.887939][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.894966][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.901881][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.908859][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.915977][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.938676][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.977846][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  202.996809][ T4238] ntrig 0003:1B96:000D.0005: unknown main item tag 0x0
[  203.019023][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.045081][ T4238] ntrig 0003:1B96:000D.0005: hidraw0: USB HID v0.81 Device [HID 1b96:000d] on usb-dummy_hcd.0-1/input0
[  203.101502][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'.
[  203.114295][ T4238] usb 1-1: USB disconnect, device number 5
[  203.115659][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.142589][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.235564][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.251855][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.262893][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.302177][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.319225][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.332160][ T5590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[  203.360588][ T4229] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  203.414503][ T5601] fido_id[5601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  203.784922][ T5612] netlink: 'syz.1.410': attribute type 6 has an invalid length.
[  203.798805][ T5612] netlink: 'syz.1.410': attribute type 6 has an invalid length.
[  204.074062][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.195160][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.205543][ T4229] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  204.257803][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.329913][ T4229] usb 3-1: config 0 descriptor??
[  205.383432][ T4238] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  205.753895][ T4238] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.765022][ T4238] usb 4-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00
[  205.818253][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.871015][ T4229] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 5/7
[  205.888205][ T4238] usb 4-1: config 0 descriptor??
[  208.565046][ T4229] cp2112 0003:10C4:EA90.0006: parse failed
[  208.571156][ T4229] cp2112: probe of 0003:10C4:EA90.0006 failed with error -22
[  208.786334][ T4229] usb 3-1: USB disconnect, device number 9
[  209.463352][ T4238] usb 4-1: can't set config #0, error -71
[  209.479152][ T4238] usb 4-1: USB disconnect, device number 9
[  209.506253][ T5640] __nla_validate_parse: 1 callbacks suppressed
[  209.506270][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  209.592905][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  209.716310][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  209.981602][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  209.992542][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  210.002893][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  210.549701][ T4229] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  211.531005][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  211.833552][ T4229] usb 3-1: Using ep0 maxpacket: 8
[  211.850122][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  211.907295][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  212.054876][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short
[  212.208919][ T5640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  212.267614][ T5657] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  212.276085][ T4229] usb 3-1: config 3 has an invalid interface number: 55 but max is 0
[  212.303754][ T5657] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  212.653240][ T4229] usb 3-1: config 3 has no interface number 0
[  212.659417][ T4229] usb 3-1: config 3 interface 55 has no altsetting 0
[  213.704338][ T4229] usb 3-1: New USB device found, idVendor=0ccd, idProduct=004f, bcdDevice=ed.32
[  213.833269][ T4264] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  214.534058][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.563510][ T4229] usb 3-1: can't set config #3, error -71
[  214.585677][ T4229] usb 3-1: USB disconnect, device number 10
[  214.664758][ T5674] __nla_validate_parse: 1 callbacks suppressed
[  214.664776][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[  214.953604][ T4264] usb 4-1: config 0 interface 0 has no altsetting 0
[  214.962042][ T4264] usb 4-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00
[  215.141215][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.212604][ T5695] tmpfs: Unknown parameter 'usrquota'
[  215.234672][ T4264] usb 4-1: config 0 descriptor??
[  215.677480][ T4238] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  215.896516][ T5712] tipc: Started in network mode
[  215.901549][ T5712] tipc: Node identity eeaf712586a8, cluster identity 4711
[  215.909181][ T5712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.938265][ T5712] device syzkaller0 entered promiscuous mode
[  216.021227][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x2
[  216.041567][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x6
[  216.070847][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0xe
[  216.092789][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.100242][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.107805][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.115016][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.122523][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.129901][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.137412][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.144963][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.152423][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.159658][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.167113][ T4264] ntrig 0003:1B96:000D.0007: unknown main item tag 0x0
[  216.188694][ T4264] ntrig 0003:1B96:000D.0007: hidraw0: USB HID v0.81 Device [HID 1b96:000d] on usb-dummy_hcd.3-1/input0
[  216.194785][ T5711] tipc: Resetting bearer <eth:syzkaller0>
[  216.309660][ T4264] usb 4-1: USB disconnect, device number 10
[  216.309861][ T4238] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  216.442041][ T5711] tipc: Disabling bearer <eth:syzkaller0>
[  216.461602][ T5704] netlink: 'syz.0.443': attribute type 6 has an invalid length.
[  216.470120][ T5704] netlink: 'syz.0.443': attribute type 6 has an invalid length.
[  216.484493][ T4238] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  216.499732][ T4238] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  216.511568][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.553662][ T5697] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  216.629848][ T5715] fido_id[5715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  216.819622][ T5697] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  216.842220][ T5697] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  216.869542][ T4238] usb 2-1: USB disconnect, device number 7
[  218.863255][ T4264] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  219.051594][ T4265] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  219.273572][ T4264] usb 5-1: Using ep0 maxpacket: 16
[  219.333760][ T4265] usb 4-1: Using ep0 maxpacket: 16
[  219.444185][ T4264] usb 5-1: config 3 has an invalid interface number: 20 but max is 0
[  219.480507][ T4264] usb 5-1: config 3 has no interface number 0
[  219.493777][ T4265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.548283][ T4265] usb 4-1: config 0 has no interfaces?
[  219.575818][ T4264] usb 5-1: config 3 interface 20 has no altsetting 0
[  219.618106][ T4265] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  219.702732][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.740483][ T4265] usb 4-1: config 0 descriptor??
[  219.863257][ T4264] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  219.897300][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.913370][ T4264] usb 5-1: Product: syz
[  219.918058][ T4264] usb 5-1: Manufacturer: syz
[  219.922680][ T4264] usb 5-1: SerialNumber: syz
[  220.839182][    T7] usb 4-1: USB disconnect, device number 11
[  220.993727][ T4264] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input6
[  221.033859][ T3547] bcm5974 5-1:3.20: could not read from device
[  221.133041][ T3547] bcm5974 5-1:3.20: could not read from device
[  221.172262][ T4264] usb 5-1: USB disconnect, device number 8
[  221.505555][ T5730] syz.4.452 uses obsolete (PF_INET,SOCK_PACKET)
[  221.933367][ T4264] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  222.298397][ T4264] usb 5-1: Using ep0 maxpacket: 16
[  223.203302][ T4264] usb 5-1: unable to read config index 0 descriptor/start: -71
[  223.240169][ T4264] usb 5-1: can't read configurations, error -71
[  225.341802][ T4238] Bluetooth: hci5: command 0x1003 tx timeout
[  225.374201][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  225.423264][    T7] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  226.778930][    T7] usb 4-1: unable to read config index 0 descriptor/start: -71
[  226.793201][    T7] usb 4-1: can't read configurations, error -71
[  227.463423][ T4238] Bluetooth: hci5: command 0x1001 tx timeout
[  227.476564][ T4200] Bluetooth: hci5: sending frame failed (-49)
[  229.791121][ T4238] Bluetooth: hci5: command 0x1009 tx timeout
[  229.883125][ T5851] rtc_cmos 00:00: Alarms can be up to one day in the future
[  230.743433][ T1107] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  230.913323][   T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  231.163231][   T13] usb 5-1: Using ep0 maxpacket: 16
[  231.374755][ T1107] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  232.119309][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.423390][   T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.491138][ T1107] usb 2-1: Product: syz
[  232.519967][ T1107] usb 2-1: Manufacturer: syz
[  232.544423][ T1107] usb 2-1: SerialNumber: syz
[  232.622684][   T13] usb 5-1: config 0 has no interfaces?
[  232.628346][   T13] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  232.641302][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.654916][   T13] usb 5-1: config 0 descriptor??
[  232.655093][ T1107] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  234.042052][   T13] usb 2-1: USB disconnect, device number 8
[  234.190379][ T1107] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  234.280786][ T4264] usb 5-1: USB disconnect, device number 11
[  234.311996][   T13] usb 2-1: ath9k_htc: USB layer deinitialized
[  234.733328][ T4265] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  235.163539][ T4265] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  235.172709][ T4265] usb 1-1: config 0 has no interface number 0
[  235.179411][ T4265] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  235.219172][ T4265] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  235.231587][ T4265] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  235.242683][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.271726][ T4265] usb 1-1: config 0 descriptor??
[  235.295270][ T5905] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  235.383523][ T4265] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  235.507191][ T5920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  235.535152][ T5920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.676637][ T4265] usb 1-1: USB disconnect, device number 6
[  235.776513][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  235.816185][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  235.830958][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  235.840485][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  235.869637][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  235.918068][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  235.962641][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  236.031691][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  236.041540][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  236.056155][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  236.973420][   T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  237.523650][   T13] usb 5-1: Using ep0 maxpacket: 16
[  237.643902][   T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.743267][   T13] usb 5-1: config 0 has no interfaces?
[  237.773262][   T13] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  237.782365][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.819587][   T13] usb 5-1: config 0 descriptor??
[  239.857784][ T4479] usb 5-1: USB disconnect, device number 12
[  241.278420][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'.
[  242.727249][ T6005] tipc: Started in network mode
[  242.819924][ T6005] tipc: Node identity eef54eed2c59, cluster identity 4711
[  242.940472][ T6005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.487129][ T6005] tipc: Disabling bearer <eth:syzkaller0>
[  243.543292][ T4479] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  246.452099][ T4479] usb 2-1: Using ep0 maxpacket: 16
[  248.013447][ T4479] usb 2-1: device descriptor read/all, error -71
[  250.090682][ T6054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.141571][ T6054] device syzkaller0 entered promiscuous mode
[  250.262761][ T6054] tipc: Resetting bearer <eth:syzkaller0>
[  250.473022][ T6051] tipc: Resetting bearer <eth:syzkaller0>
[  250.577326][ T6051] tipc: Disabling bearer <eth:syzkaller0>
[  252.879808][ T6083] kAFS: No cell specified
[  255.703961][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.947941][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  258.633592][    T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  258.913505][    T7] usb 5-1: Using ep0 maxpacket: 16
[  259.761362][ T6136] kAFS: No cell specified
[  259.766267][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.826922][    T7] usb 5-1: config 0 has no interfaces?
[  259.886520][    T7] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  259.986455][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.146160][    T7] usb 5-1: config 0 descriptor??
[  261.958076][ T4238] usb 5-1: USB disconnect, device number 13
[  264.386133][ T6188] kAFS: No cell specified
[  265.653290][ T4479] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  266.023417][ T4231] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  266.283400][ T4479] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  266.303397][ T4231] usb 5-1: Using ep0 maxpacket: 16
[  266.423386][ T4479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.443409][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.473199][ T4231] usb 5-1: config 0 has no interfaces?
[  266.482863][ T4479] usb 3-1: config 0 descriptor??
[  266.493301][ T4231] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  266.504422][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.592286][ T4231] usb 5-1: config 0 descriptor??
[  267.033457][ T4231] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  267.111146][ T6209] tipc: Cannot configure node identity twice
[  267.472927][ T6206] syz.3.603 (6206): drop_caches: 2
[  267.534454][ T4231] usb 2-1: Using ep0 maxpacket: 32
[  267.869732][ T4231] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  267.885501][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.924589][ T4231] usb 2-1: config 0 descriptor??
[  267.984536][ T4231] gspca_main: nw80x-2.14.0 probing 055f:d001
[  268.193371][ T4479] usb 3-1: Cannot set autoneg
[  268.716043][ T4479] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -61
[  268.735736][ T4479] usb 3-1: USB disconnect, device number 11
[  268.770054][ T4238] usb 5-1: USB disconnect, device number 14
[  269.652787][ T4479] usb 2-1: USB disconnect, device number 11
[  270.757029][ T6228] capability: warning: `syz.0.610' uses deprecated v2 capabilities in a way that may be insecure
[  271.214716][ T6245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.263766][ T6245] device syzkaller0 entered promiscuous mode
[  271.331592][ T6245] tipc: Resetting bearer <eth:syzkaller0>
[  271.376466][ T6244] tipc: Resetting bearer <eth:syzkaller0>
[  271.434050][ T6244] tipc: Disabling bearer <eth:syzkaller0>
[  274.263286][ T4238] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  276.393541][ T4238] usb 2-1: device descriptor read/64, error -71
[  276.746135][ T4238] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  277.163773][ T4238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.184154][ T4238] usb 2-1: config 0 has no interfaces?
[  277.189765][ T4238] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e
[  277.229776][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.267340][ T4238] usb 2-1: config 0 descriptor??
[  278.164023][ T6297] netlink: 136 bytes leftover after parsing attributes in process `syz.3.632'.
[  278.201745][ T6297] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  279.185659][ T4231] usb 2-1: USB disconnect, device number 13
[  285.669139][ T6362] netlink: 'syz.4.648': attribute type 6 has an invalid length.
[  285.840363][ T6362] netlink: 'syz.4.648': attribute type 6 has an invalid length.
[  286.693296][ T4238] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  287.903381][ T4238] usb 1-1: unable to get BOS descriptor or descriptor too short
[  287.993483][ T4238] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  288.023388][ T4315] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  288.253386][ T4238] usb 1-1: string descriptor 0 read error: -22
[  288.260889][ T4238] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  288.273302][ T4315] usb 3-1: Using ep0 maxpacket: 16
[  288.295279][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.393335][ T4315] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  289.173390][ T4315] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  289.182492][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.283548][ T6397] binder: 6395:6397 ioctl c0306201 0 returned -14
[  289.296273][ T4315] usb 3-1: Product: syz
[  289.331266][ T4315] usb 3-1: Manufacturer: syz
[  289.349262][ T4315] usb 3-1: SerialNumber: syz
[  289.397680][ T4315] usb 3-1: config 0 descriptor??
[  289.483553][   T26] audit: type=1326 audit(1782569551.809:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f8939e59 code=0x7ffc0000
[  289.537890][   T26] audit: type=1326 audit(1782569551.819:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f8939e59 code=0x7ffc0000
[  289.577342][   T26] audit: type=1326 audit(1782569551.929:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f8939e59 code=0x7ffc0000
[  289.619486][   T26] audit: type=1326 audit(1782569551.929:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99f8939aeb code=0x7ffc0000
[  290.718832][ T4238] usb 1-1: USB disconnect, device number 7
[  290.860381][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'.
[  290.862788][   T26] audit: type=1326 audit(1782569551.929:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99f8939aeb code=0x7ffc0000
[  290.926694][   T26] audit: type=1326 audit(1782569551.929:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f8939e59 code=0x7ffc0000
[  290.953088][   T26] audit: type=1326 audit(1782569551.959:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f99f88fa68e code=0x7ffc0000
[  290.980102][   T26] audit: type=1326 audit(1782569552.169:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f8939e59 code=0x7ffc0000
[  291.024019][   T26] audit: type=1326 audit(1782569552.169:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f8939e59 code=0x7ffc0000
[  291.201975][   T26] audit: type=1326 audit(1782569552.189:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.0.650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f99f8939e59 code=0x7ffc0000
[  292.033185][   T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  292.055094][ T4263] usb 3-1: USB disconnect, device number 12
[  292.334493][   T21] usb 5-1: Using ep0 maxpacket: 8
[  292.515379][   T21] usb 5-1: config 8 has an invalid interface number: 188 but max is 0
[  293.118589][   T21] usb 5-1: config 8 has no interface number 0
[  293.153263][   T21] usb 5-1: config 8 interface 188 altsetting 0 has an invalid endpoint with address 0xFD, skipping
[  293.363401][   T21] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  293.396602][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.533521][   T21] usb 5-1: Product: syz
[  293.689261][   T21] usb 5-1: Manufacturer: syz
[  293.726121][   T21] usb 5-1: SerialNumber: syz
[  293.765316][ T6436] syz.0.672 sent an empty control message without MSG_MORE.
[  294.850432][   T21] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  295.931924][ T6456] device bond0 entered promiscuous mode
[  296.074115][ T6456] device bond_slave_0 entered promiscuous mode
[  296.089765][ T6456] device bond_slave_1 entered promiscuous mode
[  296.591047][   T21] usb 5-1: USB disconnect, device number 15
[  298.663343][   T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  300.997635][   T21] usb 1-1: Using ep0 maxpacket: 16
[  301.100886][   T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  301.285357][   T21] usb 1-1: unable to get BOS descriptor or descriptor too short
[  301.363221][   T23] usb 4-1: Using ep0 maxpacket: 8
[  302.003381][   T21] usb 1-1: unable to read config index 0 descriptor/start: -71
[  302.017483][   T21] usb 1-1: can't read configurations, error -71
[  302.223509][   T23] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  302.253359][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.292862][   T23] usb 4-1: Product: syz
[  302.311519][   T23] usb 4-1: Manufacturer: syz
[  302.316511][   T23] usb 4-1: SerialNumber: syz
[  302.344041][   T23] usb 4-1: config 0 descriptor??
[  302.385859][   T23] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  302.406052][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  302.468471][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  302.520513][   T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  302.530766][   T23] usb 4-1: media controller created
[  302.622354][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  302.786221][ T6515] block device autoloading is deprecated and will be removed.
[  303.176590][   T23] cxusb: set interface failed
[  303.251245][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  303.640478][ T6523] netlink: 'syz.1.698': attribute type 3 has an invalid length.
[  304.705656][   T23] DVB: Unable to find symbol mt352_attach()
[  304.712024][   T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  305.293849][   T23] rc_core: IR keymap rc-dvico-portable not found
[  305.300408][   T23] Registered IR keymap rc-empty
[  305.308318][   T23] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  307.757184][   T23] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7
[  307.776570][   T23] dvb-usb: schedule remote query interval to 100 msecs.
[  307.783707][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  307.797446][   T23] usb 4-1: USB disconnect, device number 14
[  307.870095][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  308.041253][ T6556] netlink: 'syz.4.706': attribute type 6 has an invalid length.
[  308.093456][ T4238] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  308.263219][   T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  309.833284][ T4238] usb 2-1: unable to get BOS descriptor or descriptor too short
[  309.925121][ T4238] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.962773][ T6559] netlink: 'syz.4.706': attribute type 6 has an invalid length.
[  309.972625][ T4238] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  310.080646][ T6561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.110827][ T6561] device syzkaller0 entered promiscuous mode
[  310.134199][ T6561] tipc: Resetting bearer <eth:syzkaller0>
[  310.152608][ T6560] tipc: Resetting bearer <eth:syzkaller0>
[  310.172332][ T6560] tipc: Disabling bearer <eth:syzkaller0>
[  310.305954][ T4238] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40
[  310.315802][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.324040][ T4238] usb 2-1: Product: syz
[  310.328307][ T4238] usb 2-1: Manufacturer: syz
[  310.333027][ T4238] usb 2-1: SerialNumber: syz
[  310.843409][ T4238] usb 2-1: 0:1 : does not exist
[  310.848477][ T4238] usb 2-1: BAAD SPEAKER p_chmask mismatch
[  311.516990][    T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  311.619910][ T4238] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  311.649032][ T4238] usb 2-1: USB disconnect, device number 14
[  311.814559][ T6580] afs: Unknown parameter ''
[  311.823361][    T7] usb 1-1: Using ep0 maxpacket: 16
[  311.858766][ T4619] udevd[4619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  311.888986][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.713'.
[  311.953908][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.069502][    T7] usb 1-1: config 0 has no interfaces?
[  312.163701][    T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  312.247017][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.395164][    T7] usb 1-1: config 0 descriptor??
[  313.530924][   T23] usb 1-1: USB disconnect, device number 10
[  316.984470][ T6606] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  317.147600][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.158001][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  318.021096][ T6632] mmap: syz.3.727 (6632) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  318.042328][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.727'.
[  318.737529][ T6640] afs: Unknown parameter 'dy'
[  321.218466][ T6664] tipc: Started in network mode
[  321.223643][ T6664] tipc: Node identity f6cbf6580b11, cluster identity 4711
[  321.231021][ T6664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.239266][ T6664] device syzkaller0 entered promiscuous mode
[  321.258537][ T6664] tipc: Resetting bearer <eth:syzkaller0>
[  321.265895][ T6662] tipc: Resetting bearer <eth:syzkaller0>
[  321.282060][ T6662] tipc: Disabling bearer <eth:syzkaller0>
[  321.378569][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.388780][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.400692][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.433488][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.442661][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.599220][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.608423][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.618203][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.627390][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  321.663306][   T21] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  322.189818][   T21] usb 5-1: Using ep0 maxpacket: 16
[  322.546048][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.593739][   T21] usb 5-1: config 0 has no interfaces?
[  322.622132][   T21] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[  322.642583][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.652958][   T21] usb 5-1: config 0 descriptor??
[  323.306079][ T6682] afs: Unknown parameter 'dy'
[  323.484763][ T6686] 
[  323.487149][ T6686] ============================================
[  323.493319][ T6686] WARNING: possible recursive locking detected
[  323.499493][ T6686] syzkaller #0 Not tainted
[  323.503921][ T6686] --------------------------------------------
[  323.510083][ T6686] syz.4.734/6686 is trying to acquire lock:
[  323.516001][ T6686] ffffffff8cb409b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0x10a0
[  323.526252][ T6686] 
[  323.526252][ T6686] but task is already holding lock:
[  323.533637][ T6686] ffffffff8cb409b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0x10a0
[  323.543856][ T6686] 
[  323.543856][ T6686] other info that might help us debug this:
[  323.551930][ T6686]  Possible unsafe locking scenario:
[  323.551930][ T6686] 
[  323.559400][ T6686]        CPU0
[  323.562709][ T6686]        ----
[  323.566025][ T6686]   lock(qp_broker_list.mutex);
[  323.570896][ T6686]   lock(qp_broker_list.mutex);
[  323.575769][ T6686] 
[  323.575769][ T6686]  *** DEADLOCK ***
[  323.575769][ T6686] 
[  323.583932][ T6686]  May be due to missing lock nesting notation
[  323.583932][ T6686] 
[  323.592265][ T6686] 1 lock held by syz.4.734/6686:
[  323.597218][ T6686]  #0: ffffffff8cb409b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0xe6/0x10a0
[  323.607879][ T6686] 
[  323.607879][ T6686] stack backtrace:
[  323.613799][ T6686] CPU: 1 PID: 6686 Comm: syz.4.734 Not tainted syzkaller #0
[  323.621112][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  323.631198][ T6686] Call Trace:
[  323.634506][ T6686]  <TASK>
[  323.637460][ T6686]  dump_stack_lvl+0x188/0x250
[  323.642166][ T6686]  ? show_regs_print_info+0x20/0x20
[  323.647387][ T6686]  ? load_image+0x410/0x410
[  323.651919][ T6686]  __lock_acquire+0x1247/0x7b50
[  323.656803][ T6686]  ? rcu_lock_release+0x5/0x20
[  323.661596][ T6686]  ? __lock_acquire+0x7b50/0x7b50
[  323.666649][ T6686]  ? verify_lock_unused+0x140/0x140
[  323.671872][ T6686]  ? mark_lock+0x94/0x320
[  323.676223][ T6686]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  323.682233][ T6686]  ? lock_chain_count+0x20/0x20
[  323.687110][ T6686]  ? __rwlock_init+0x140/0x140
[  323.691907][ T6686]  lock_acquire+0x19e/0x400
[  323.696435][ T6686]  ? vmci_qp_broker_detach+0xe6/0x10a0
[  323.701927][ T6686]  ? stack_trace_save+0xa6/0xf0
[  323.706805][ T6686]  ? __might_sleep+0xf0/0xf0
[  323.711425][ T6686]  ? read_lock_is_recursive+0x10/0x10
[  323.716828][ T6686]  ? stack_depot_save+0x41b/0x460
[  323.721893][ T6686]  __mutex_lock_common+0x1e5/0x2400
[  323.727128][ T6686]  ? vmci_qp_broker_detach+0xe6/0x10a0
[  323.732625][ T6686]  ? vmci_ctx_enqueue_datagram+0x3bf/0x430
[  323.738475][ T6686]  ? vmci_datagram_dispatch+0x44f/0xc40
[  323.744062][ T6686]  ? vmci_host_close+0x8d/0x140
[  323.748943][ T6686]  ? __fput+0x212/0x8c0
[  323.753133][ T6686]  ? task_work_run+0x125/0x1a0
[  323.757930][ T6686]  ? exit_to_user_mode_loop+0x10f/0x130
[  323.763501][ T6686]  ? exit_to_user_mode_prepare+0xee/0x180
[  323.769282][ T6686]  ? do_syscall_64+0x58/0xa0
[  323.773925][ T6686]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  323.780053][ T6686]  ? vmci_qp_broker_detach+0xe6/0x10a0
[  323.785554][ T6686]  ? mutex_lock_io_nested+0x60/0x60
[  323.790795][ T6686]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  323.796811][ T6686]  ? lock_chain_count+0x20/0x20
[  323.801695][ T6686]  mutex_lock_nested+0x17/0x20
[  323.806528][ T6686]  vmci_qp_broker_detach+0xe6/0x10a0
[  323.811852][ T6686]  ? kasan_quarantine_put+0xd4/0x210
[  323.817164][ T6686]  ? lockdep_hardirqs_on+0x94/0x140
[  323.822396][ T6686]  ? qp_notify_peer+0x1f0/0x1f0
[  323.827278][ T6686]  ? slab_free_freelist_hook+0xec/0x170
[  323.832851][ T6686]  ? vmci_ctx_put+0x562/0xbd0
[  323.837554][ T6686]  ? kfree+0xef/0x2a0
[  323.841572][ T6686]  vmci_ctx_put+0x5c1/0xbd0
[  323.846108][ T6686]  ? preempt_schedule+0xbc/0xd0
[  323.850989][ T6686]  ? vmci_ctx_destroy+0xf0/0xf0
[  323.855863][ T6686]  ? __lock_acquire+0x7b50/0x7b50
[  323.860921][ T6686]  ? do_raw_spin_lock+0x128/0x2f0
[  323.865978][ T6686]  ? preempt_schedule_thunk+0x16/0x18
[  323.871383][ T6686]  vmci_ctx_enqueue_datagram+0x3bf/0x430
[  323.877047][ T6686]  vmci_datagram_dispatch+0x44f/0xc40
[  323.882451][ T6686]  ? rcu_lock_release+0x20/0x20
[  323.887330][ T6686]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  323.893353][ T6686]  vmci_qp_broker_detach+0xa62/0x10a0
[  323.898765][ T6686]  ? qp_notify_peer+0x1f0/0x1f0
[  323.903648][ T6686]  ? vmci_ctx_put+0x562/0xbd0
[  323.908355][ T6686]  ? kfree+0xef/0x2a0
[  323.912364][ T6686]  vmci_ctx_put+0x5c1/0xbd0
[  323.916905][ T6686]  ? vmci_ctx_destroy+0xf0/0xf0
[  323.921784][ T6686]  ? __rwlock_init+0x140/0x140
[  323.926582][ T6686]  ? do_raw_spin_unlock+0x11d/0x230
[  323.931814][ T6686]  vmci_host_close+0x8d/0x140
[  323.936538][ T6686]  ? vmci_host_open+0xe0/0xe0
[  323.941254][ T6686]  __fput+0x212/0x8c0
[  323.945269][ T6686]  task_work_run+0x125/0x1a0
[  323.949894][ T6686]  exit_to_user_mode_loop+0x10f/0x130
[  323.955292][ T6686]  exit_to_user_mode_prepare+0xee/0x180
[  323.960864][ T6686]  syscall_exit_to_user_mode+0x16/0x40
[  323.966349][ T6686]  do_syscall_64+0x58/0xa0
[  323.970785][ T6686]  ? clear_bhb_loop+0x30/0x80
[  323.975495][ T6686]  ? clear_bhb_loop+0x30/0x80
[  323.980204][ T6686]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  323.986144][ T6686] RIP: 0033:0x7f8c067b7e59
[  323.990588][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.010226][ T6686] RSP: 002b:00007f8c049cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  324.018677][ T6686] RAX: 0000000000000000 RBX: 00007f8c06a31180 RCX: 00007f8c067b7e59
[  324.026697][ T6686] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008
[  324.034697][ T6686] RBP: 00007f8c0684de6f R08: 0000000000000000 R09: 0000000000000000
[  324.042702][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.050692][ T6686] R13: 00007f8c06a31218 R14: 00007f8c06a31180 R15: 00007ffe7d968e48
[  324.058697][ T6686]  </TASK>