last executing test programs:

21m37.957744578s ago: executing program 1 (id=1172):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808578, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)
ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000f00)={{0x2, 0xffffffff, 0x571, 0xe, 0x9}, 0x2c5, [0x1, 0x7, 0x2, 0x7ff, 0x8, 0x5, 0xefa, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x2, 0x8, 0x401, 0x6, 0x2, 0x1, 0x9aa8, 0x31, 0xd, 0x0, 0x1, 0x0, 0x1, 0x9, 0x81, 0x4, 0x9, 0x9, 0x5e2c94f1, 0xd179, 0x5, 0x8, 0x200, 0xffff, 0x3f, 0x2, 0xafc5, 0xa, 0xffff, 0x3, 0x4, 0xffff8000, 0x0, 0x1, 0xafde, 0x400, 0x61, 0x2, 0x7, 0x2, 0x74b, 0x80000001, 0x3, 0xda5, 0xfffffffa, 0x80, 0x8, 0x800, 0x9, 0x0, 0x1, 0xb, 0x18000, 0xffffffff, 0x7791, 0x0, 0x80000001, 0x1, 0x6a, 0x400, 0x8, 0x0, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xfffffff9, 0x8c, 0x9, 0xfffffffc, 0x75, 0x81, 0xe, 0x1, 0x5, 0x193c52a4, 0xe, 0x7ff, 0x4, 0x6, 0x4, 0x80000001, 0x4, 0x3, 0x0, 0x4, 0x2, 0x1, 0xfffffffd, 0xe9, 0xb, 0x39ad1795, 0xfffffffb, 0x5, 0x5, 0x5, 0x0, 0x81, 0x6, 0x2, 0x2, 0x3, 0x5, 0x3, 0x8000, 0x9fd, 0x8, 0x200, 0x7d, 0x7, 0x80000000, 0xc, 0x0, 0x697ea4a3, 0x1, 0x2, 0xa, 0x0, 0x6, 0xdd9, 0x7, 0x5, 0x5c60dc33, 0x1ceb, 0x3, 0x8184, 0x1, 0x6, 0x1, 0x6, 0x7, 0x1, 0x3, 0x9, 0x7, 0x1, 0x6, 0x4, 0x2, 0xd631, 0x5, 0x7, 0x8000, 0x4, 0x5, 0x5, 0x80, 0x7, 0x7, 0x9, 0x6, 0x0, 0x7, 0x726, 0x8, 0x5, 0x4, 0x5, 0x7f, 0x4, 0x81, 0x3, 0x3, 0xd3, 0x9, 0x8, 0x4, 0xfffffffe, 0xd926, 0x101, 0x800, 0x6, 0x7, 0x9, 0x8, 0x0, 0x9, 0x5, 0xff, 0x2, 0x3ff, 0x800, 0x1, 0x7, 0xfffffff0, 0x4, 0x2, 0x9, 0x4, 0x9, 0x3, 0x7, 0xffffffff, 0xad, 0x97ce, 0x6, 0x0, 0xf3, 0x7ff, 0x10000, 0xa03, 0x0, 0xffff, 0x75ec, 0x5, 0x9, 0x4, 0xd8b9, 0xfffffc01, 0xfce, 0x5, 0x2c, 0x4, 0x0, 0x3ff, 0x4, 0xfffffffa, 0x5, 0x1, 0xcc, 0x0, 0xe, 0x4, 0x2207, 0x10001, 0x7, 0x7, 0x6, 0x9a, 0xfffffff7, 0x5, 0x1000, 0x4, 0x3, 0x1000, 0x80, 0x10001, 0x3, 0x9, 0xfffffffb, 0x401, 0x3, 0xb570, 0x2, 0x7e3e, 0x0, 0x1, 0xfff, 0xfffffffc, 0xced, 0x8b, 0xf64, 0x5adc, 0x800, 0xc, 0x91, 0x3, 0x4, 0x9, 0xa, 0x9ca8, 0x8, 0x5, 0x7, 0x2, 0x9, 0xfffffffa, 0x4, 0xffffffff, 0x7, 0x5, 0x5, 0x3, 0x1, 0x17b, 0x10000, 0x9, 0x4, 0x8, 0x5, 0x5, 0x9, 0x4, 0x6, 0x7fffffff, 0x5dea, 0x800, 0xfffffffc, 0x2, 0x0, 0xc, 0xaf4b, 0x1, 0x10000, 0x0, 0xfffffffe, 0x3, 0x6cc, 0x3, 0x4baf, 0x2, 0x5fd, 0x7, 0x80, 0x7, 0x1ff, 0x9, 0x400, 0x977, 0x2, 0x6, 0xffffffff, 0x74b0, 0x2, 0x7, 0x7, 0x4, 0x1, 0x3, 0x3c, 0x4, 0xbc, 0x10, 0x4, 0x100, 0x0, 0x6, 0xfffffffb, 0x7, 0x2, 0x9, 0x0, 0x2, 0x5c0, 0x10000, 0x1, 0xe25, 0x7ff, 0x3, 0x2, 0x4, 0x7fffffff, 0xd00, 0x0, 0x5, 0x101, 0x7, 0xfde, 0x1ff, 0xc, 0x8001, 0x52a2, 0x5abb, 0x6, 0x2, 0x4, 0x56, 0xeab, 0x2, 0x0, 0xfff, 0xa, 0x9, 0x4, 0x101, 0x4ca8, 0x7, 0x9, 0x5, 0x9, 0x7, 0xe, 0x9, 0x7, 0x401, 0x5, 0x1000, 0x81b, 0x75913e89, 0x148e295e, 0xfffffffb, 0x1, 0x6, 0x3ff, 0x5, 0x100, 0x6, 0x3d41, 0x3, 0x3, 0x3, 0xf, 0x6, 0x3, 0x7, 0x1, 0xfffffffd, 0x5, 0x8001, 0x0, 0x7ff, 0xf, 0x81, 0x4e, 0x1000, 0x400, 0x8, 0x5, 0x10000, 0xd4, 0x3, 0x4, 0xfffffffa, 0xfffffffd, 0x81, 0x100, 0x5, 0x7, 0x6, 0x80000000, 0x8, 0x0, 0x45, 0x1, 0x72, 0x5, 0xb, 0x9394, 0x3, 0x80, 0xa, 0x7, 0x7, 0x8001, 0x2, 0x40, 0xffffffff, 0x0, 0x10, 0x0, 0xb9b0000, 0x7, 0x0, 0xfffff000, 0x2, 0x3, 0x9af, 0xfffffffd, 0x7, 0x4, 0x7, 0x6, 0x9a50, 0xa6dcd651, 0xffffffff, 0x40, 0x0, 0x6, 0x1, 0x8, 0x78e, 0xcb, 0x2, 0x5, 0x3, 0x3, 0xb, 0x8, 0xb, 0xb, 0x0, 0x3, 0x4, 0x5f, 0x9, 0x4, 0xffff8001, 0x8, 0x8, 0x3, 0x1, 0x7, 0x0, 0x8b12f1, 0x4, 0x6, 0x1, 0x3, 0x10001, 0x9, 0x0, 0xb9f, 0x9, 0x1, 0x5, 0xfffffdf2, 0x6c6f460c, 0x4, 0x300000, 0x7, 0x1, 0x1, 0x7, 0x4, 0x4, 0x7, 0x1, 0x6, 0x1, 0x2, 0x0, 0x0, 0x3, 0x4, 0x6, 0x100, 0xa, 0x9, 0x8, 0xffff, 0x7, 0x7a6, 0x7f, 0x5e15, 0x8, 0xa48d, 0x5, 0xf52e, 0x22, 0x3, 0x6, 0xfff, 0x200, 0x3a51, 0x0, 0x101, 0x0, 0xb4b5, 0xc62, 0x52, 0xb5b, 0x27, 0x4, 0x5, 0x769c, 0x6, 0x101, 0x200, 0x0, 0x3, 0x4, 0xa, 0xc, 0x200, 0x9, 0xee, 0x3, 0x1c, 0x4, 0x4, 0x7, 0x100, 0x80000001, 0xfffff659, 0x8001, 0x101, 0x3d, 0x4, 0x10, 0x401, 0x0, 0x4, 0x1, 0x5, 0x9, 0x3, 0xd, 0x0, 0x90, 0x401, 0xe, 0x5, 0xd1, 0x80, 0x400, 0xb, 0x0, 0x7, 0xb, 0x3ff, 0x4, 0x2, 0x400, 0x10001, 0x3, 0xd, 0x0, 0x4, 0xc095, 0x200, 0x9, 0x9, 0x9, 0x45ca, 0x0, 0x12, 0x30ab, 0x0, 0x6, 0x9, 0x6, 0x445, 0x1, 0x2, 0x9, 0x2, 0x14, 0x6, 0xba, 0x7, 0x5, 0x3, 0x9, 0x9, 0x0, 0x15d9, 0x3, 0x9, 0xbc, 0x3, 0x80000001, 0x5, 0x7dce, 0x9, 0x0, 0x2, 0x10001, 0x6, 0x80000000, 0x5a, 0x1, 0xfffffc01, 0x7, 0x10, 0x4d1, 0x9, 0x6, 0x1, 0x0, 0x4, 0x2, 0x10000, 0x8, 0x2, 0xfff, 0x4, 0xb, 0x2da398a2, 0x7, 0xffffffff, 0x5, 0x200, 0x7ff, 0x4, 0xfae, 0x401, 0xe7, 0x7, 0x486e, 0x0, 0x8001, 0x133f, 0x7, 0x7fffffff, 0x80, 0x2, 0x8000, 0x1, 0x55b6, 0x0, 0x0, 0xfffffff9, 0x3, 0x101, 0x7, 0x8, 0x0, 0x5, 0x40, 0x6, 0x4, 0x80, 0x9, 0x4000000, 0x2b, 0xffff, 0x2, 0x80000000, 0x3, 0x3, 0x5, 0x2, 0x90d, 0x1, 0xfffff89a, 0x80, 0x4, 0x3, 0x80000001, 0x9, 0x10, 0x6, 0xb8fa, 0xa0f, 0x5, 0x6, 0x4000000, 0xc, 0x9, 0x0, 0x5, 0x81, 0x101, 0x4, 0x1, 0x10, 0x1, 0x3, 0x2, 0x7e, 0x4, 0x30, 0x3ff, 0x3, 0x100, 0xe9a, 0x7, 0x1, 0x2, 0x5, 0x1000, 0xe9, 0x800, 0x7ff, 0xa, 0x3ff, 0x4, 0x5, 0x3, 0x9, 0x931, 0x7ff, 0x40, 0x8, 0xe, 0x1, 0x981e, 0x2, 0x7, 0x9, 0x6, 0x8d2, 0x0, 0x7fff, 0x8, 0x8, 0xa72, 0xc14, 0x7782d948, 0x7f, 0x32, 0x2, 0x8, 0x2, 0x6c, 0xfffffffc, 0x0, 0x1, 0x564, 0x7, 0x2, 0x0, 0x1779d3d4, 0x9, 0x4, 0x9, 0x4, 0x2d28, 0x2, 0xa0d, 0x77a, 0xf7, 0xc54, 0x3, 0x9, 0xc61, 0x8, 0x3, 0x2, 0x1, 0x7f, 0x3, 0xd6f, 0x80000001, 0xddb, 0x5, 0x800, 0x0, 0xffffffff, 0xe791, 0x9, 0x3, 0x4, 0x8, 0xb44c, 0x3, 0x3, 0x9, 0x4, 0x80, 0x400, 0x9, 0x6, 0x2, 0x9, 0x9, 0x800, 0x100, 0x8, 0x400, 0x8, 0x4, 0x6e8, 0x4, 0x4, 0x7, 0x1, 0x2, 0x4, 0x3, 0x9, 0xffffffff, 0x80, 0x80000000, 0x29, 0xffffff66, 0x3, 0x50000, 0x8b8, 0x80000000, 0x7, 0xfff, 0xffff7c66, 0x5, 0xf, 0x8a07, 0x9, 0x0, 0x2, 0x2, 0xfffffffd, 0x2, 0x4, 0x10, 0x10, 0x9, 0x8, 0x80000, 0x4, 0x8, 0x6, 0x6b, 0x8, 0x9, 0x1, 0x1, 0x5, 0x9, 0xfff, 0x4, 0x10001, 0x9, 0x8, 0xd8, 0x8, 0x100, 0xe, 0x9, 0x6, 0x49, 0x0, 0x0, 0x10, 0x7, 0x6, 0x0, 0x9, 0x8000, 0x395d, 0x8, 0xffff7fff, 0x5, 0x4ca, 0x8001, 0x64, 0xabf9, 0x1, 0x8, 0x2, 0x40, 0x8, 0x3, 0x3, 0x6, 0xffffffff, 0x0, 0xffffffff, 0x4, 0x9, 0x4, 0x9, 0x7b852488, 0x2, 0x6, 0x3, 0x2, 0x18000000, 0x6, 0x9, 0xcbd3, 0x72, 0x8bc, 0x0, 0x0, 0x8ed4, 0xb8d, 0x9, 0x78, 0x1f3, 0x5, 0x7, 0xffff, 0xfffffa8c, 0x2, 0x7, 0xfffffff8, 0xdb56, 0xa, 0x2, 0xfff, 0x3, 0xe65, 0xea, 0x10000, 0xfffffff1, 0x8, 0x29f06221, 0x1, 0xfffffffe, 0x6, 0x3, 0x1, 0x8, 0x10001, 0x6, 0xc, 0xfffffffb, 0xe27, 0x7fff, 0x10, 0x4, 0xf3, 0x10, 0x800, 0x8, 0xfff, 0x3, 0x6, 0x10001, 0x4, 0x40, 0x2, 0x8, 0x3, 0x4, 0xe, 0x9, 0x4, 0x4, 0x800, 0x56bf, 0xe, 0x1, 0x3, 0xe, 0x8, 0x6, 0x8, 0xd, 0x3, 0x2, 0x3, 0x4, 0xf4fa, 0x1, 0x2, 0x2, 0x200, 0x1, 0xa]})

21m35.598053674s ago: executing program 1 (id=1175):
socket$inet6(0xa, 0x80002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1})
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

21m29.446982791s ago: executing program 1 (id=1184):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0xa8502, 0xd2, 0x10}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc)
open_tree(r2, &(0x7f00000001c0)='./file0\x00', 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe2$watch_queue(0x0, 0x80)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)

21m21.719873309s ago: executing program 1 (id=1194):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioperm(0x5, 0x6, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)

21m18.894223009s ago: executing program 1 (id=1196):
r0 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc)

21m16.195625066s ago: executing program 1 (id=1203):
socket$nl_netfilter(0x10, 0x3, 0xc)
add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

21m0.906597956s ago: executing program 32 (id=1203):
socket$nl_netfilter(0x10, 0x3, 0xc)
add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

20m47.903282303s ago: executing program 0 (id=1230):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x4b4c, &(0x7f0000000000))
socket(0x400000000010, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc8202)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xde00000})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000140), 0xfffffffffffffffe, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

20m43.838267123s ago: executing program 0 (id=1235):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syslog(0xa, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00), 0x0)
open(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x188)
unshare(0x22020600)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20)
r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000080)={0x1, 0x5, 0x2})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)

20m42.543677235s ago: executing program 0 (id=1236):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
dup(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000000c0), &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi5\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000340)={0x3, r8, 0x7ffffff6, 0x4, 0xb, 0x1fd, 0x1})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r2, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB='6\x00'/12, @ANYRES32=r2, @ANYBLOB="7744003d1c42bbbf5585481f5bbebca9b2f629aaff93bbcb72fe456308ce041701d014bd296888cb9c78a507b05930052948b0ef1d844b312f5ebfb475c2cc6eaa09ce4a3359e074f46d7db213fddac962f43b3475e0a538f40e397d03db34408cbd055b680c837b98a7b3e3f79903f8c42445400ccff486f003712c179c2595d77e26dcf4558cb3ae2a095d1b31a7f7691800"/156, @ANYRES64=r10], 0x20)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, 0x0, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT, @ANYRES32=r3], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b73964}, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

20m40.978215525s ago: executing program 0 (id=1237):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r0 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x2)
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0xc8202)
socket$nl_route(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x1ff, 0x0, 0xf, 0x80000009}, 0x0, 0x0)

20m39.635644088s ago: executing program 0 (id=1239):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x422800, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0})
getresuid(&(0x7f0000000000), &(0x7f0000000200)=<r0=>0x0, &(0x7f0000000080))
setuid(r0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x2, [{0x0, 0x3, 0x2}]}, @ptr, @enum={0x7}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0), 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000100)={0x4, 0x5}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_sctp(0x2, 0x1, 0x84)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

20m34.275398759s ago: executing program 0 (id=1250):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c1}, 0x24004804)

20m19.00539184s ago: executing program 33 (id=1250):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c1}, 0x24004804)

11m57.552713937s ago: executing program 5 (id=2027):
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket(0x2b, 0x80801, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0)

11m56.242453459s ago: executing program 5 (id=2029):
r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000606000/0x1000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f00000039c0)=""/204)

11m55.353882147s ago: executing program 5 (id=2031):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

11m49.3463235s ago: executing program 5 (id=2036):
r0 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x51)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r4 = accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_open_dev$media(0x0, 0xa, 0x41)
unshare(0x62040200)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x40010, r0, 0xffffc000)
r5 = socket(0x2b, 0x1, 0x1)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x1, 0x6, 0xd]}, &(0x7f0000000140)=0x54)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4)
sendmmsg$alg(r4, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="48000000000000001701000002000000330000002aa52517cc6b2518a3e28acdd9d52b604a30fa4c64d7531a3c92f0f0568c83e4ea19e7667397e93988bed27e11a12078071091000147f51913a4b2495c67a2c845e925284932a7b7a81c2cfeb6ea1be360837fc5d162a2bf43920e06e58843e02eaf90b34bca9f3decf3b9"], 0x48, 0x8010}], 0x1, 0x4)

11m44.885179973s ago: executing program 5 (id=2042):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0)
inotify_init1(0x0)

11m43.268850055s ago: executing program 5 (id=2044):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

11m27.771568472s ago: executing program 34 (id=2044):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6m20.868470169s ago: executing program 2 (id=2634):
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407})
read$midi(0xffffffffffffffff, 0x0, 0x3b)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_RESET(r0, 0x5100)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4180, 0x0)

6m20.628379267s ago: executing program 2 (id=2636):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
r2 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r3=>0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x5, r3})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000cc0)={0x0, 0x0, r1, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000100)={r4, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r6, r5, 0x0, 0x0, 0x1})

6m20.335080786s ago: executing program 2 (id=2637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x10000411)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

6m19.843298582s ago: executing program 2 (id=2638):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x6, 0x8b, 0xfffa}, 0x1a, [0x7fee, 0xc95a, 0x201, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x2, 0x4, 0x6, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x1000005, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x1, 0x5, 0x10001, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x131, 0x7ffe, 0x7, 0xfffffff1, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x7, 0x3, 0x0, 0x7, 0x5, 0xfffffffc, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x2, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0xf, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x7, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x5, 0x80000003, 0x9, 0x48c93690, 0x7f, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x400005, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x7, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0x400d, 0x2950bfaf, 0x8, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x1004, 0xfffe, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xffffffb1], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x0, 0x2, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf56, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x7, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x2, 0x1, 0x0, 0x4, 0x8, 0x3031d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0xa070, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6m18.920574632s ago: executing program 2 (id=2642):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

6m18.638938031s ago: executing program 2 (id=2644):
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
close(0xffffffffffffffff)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

6m2.375205869s ago: executing program 35 (id=2644):
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
close(0xffffffffffffffff)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

23.035487883s ago: executing program 4 (id=3231):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40010)

21.216253942s ago: executing program 7 (id=3234):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
getpgrp(0xffffffffffffffff)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2002b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x802, 0x1})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = io_uring_setup(0x2dfd, 0x0)
r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43ba, 0x80, 0x0, 0x34f})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1)
r4 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r4, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000240)="27050200340f3c00060f2f2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000000000000080", 0x48}], 0x1}, 0x9cdc2384056f013d)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0)

19.631484903s ago: executing program 4 (id=3235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13.814648052s ago: executing program 7 (id=3240):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/135, 0x87}, {0x0}], 0x2, &(0x7f0000000540), 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = fcntl$dupfd(r5, 0x0, r5)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000007}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f0000004d0012"], 0xb4}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28)

13.190918252s ago: executing program 6 (id=3241):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x7, 0x0, &(0x7f00000000c0)="e02742e8680d85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13.129712194s ago: executing program 3 (id=3242):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000300)={0x739, 0x0, 0x200008c, 0x2, &(0x7f00000002c0)})
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb6a, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x4)
ioprio_set$uid(0x3, 0x0, 0x0)

11.264224034s ago: executing program 3 (id=3243):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
syz_clone3(&(0x7f0000000900)={0x23800100, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x109301)

11.059138991s ago: executing program 6 (id=3244):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00')
r1 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x17, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

8.998735968s ago: executing program 6 (id=3245):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x40801)
ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000140)={0x7, 0x1, 0x5, 0x100001, 0x6a, 0x8, 0x4})
epoll_create1(0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x8eaf6000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x2, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1)

8.416511357s ago: executing program 7 (id=3246):
r0 = socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x51)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r4 = accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_open_dev$media(0x0, 0xa, 0x41)
unshare(0x62040200)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x40010, r0, 0xffffc000)
r5 = socket(0x2b, 0x1, 0x1)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x5, 0x1, 0x6, 0xd]}, &(0x7f0000000140)=0x54)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4)
sendmmsg$alg(r4, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="48000000000000001701000002000000330000002aa52517cc6b2518a3e28acdd9d52b604a30fa4c64d7531a3c92f0f0568c83e4ea19e7667397e93988bed27e11a12078071091000147f51913a4b2495c67a2c845e925284932a7b7a81c2cfeb6ea1be360837fc5d162a2bf43920e06e58843e02eaf90b34bca9f3decf3b9"], 0x48, 0x8010}], 0x1, 0x4)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x78, "a6ee7dec98be9583ca071020c09e4a2a714e97db73b44faf3e37a9adfeb5b3509855df3fbec291802d222b4e70d916a5dce8e008b4590425064dd9e945eb2b644a2f9fcb8d5838b59e4ff7f936aa74e36cbbbbd9b4076f0e8267aa2a561e3055a6bcd1064cd363d8f87e22c144f67752402017b237655891"}, &(0x7f0000000440)=0x80)

8.107466727s ago: executing program 4 (id=3247):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b0000009500000300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6})

7.788361717s ago: executing program 4 (id=3248):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
getpgrp(0xffffffffffffffff)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2002b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x802, 0x1})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = io_uring_setup(0x2dfd, 0x0)
r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43ba, 0x80, 0x0, 0x34f})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1)
r4 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r4, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000240)="27050200340f3c00060f2f2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000000000000080", 0x48}], 0x1}, 0x9cdc2384056f013d)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0)

6.984463904s ago: executing program 6 (id=3249):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x422800, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0})
getresuid(&(0x7f0000000000), &(0x7f0000000200)=<r0=>0x0, 0x0)
setuid(r0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0), 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000100)={0x4, 0x5}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_sctp(0x2, 0x1, 0x84)
add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d0020070000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

6.541142318s ago: executing program 3 (id=3250):
socket$phonet(0x23, 0x2, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x24044884)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'})

6.529141568s ago: executing program 4 (id=3251):
r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x20000)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x739, 0x0, 0x200008c, 0x2, &(0x7f00000002c0)})
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb6a, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4)
ioprio_set$uid(0x3, 0x0, 0x0)

4.788821975s ago: executing program 4 (id=3252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x7, 0x0, &(0x7f00000000c0)="e02742e8680d85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.814553819s ago: executing program 6 (id=3253):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00')
r1 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000017000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x17, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x3, 0x2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

2.629162935s ago: executing program 3 (id=3254):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/135, 0x87}, {0x0}], 0x2, &(0x7f0000000540), 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = fcntl$dupfd(r5, 0x0, r5)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000007}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f0000004d0012"], 0xb4}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28)

2.45755159s ago: executing program 7 (id=3255):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000340), 0x0, 0x8000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8)
r3 = io_uring_setup(0x7a98, &(0x7f0000000080)={0x0, 0x6d47, 0x0, 0x0, 0x35e})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x11, &(0x7f00000002c0)=[0x2, 0xffff], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0x7, 0x2)

1.555418799s ago: executing program 3 (id=3256):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b0000009500000300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80600, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000040)={0xc4, 0x0, 0x6})

1.356969766s ago: executing program 7 (id=3257):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x40801)
ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000140)={0x7, 0x1, 0x5, 0x100001, 0x6a, 0x8, 0x4})
epoll_create1(0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x8eaf6000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x2, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1)

1.054133946s ago: executing program 7 (id=3258):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002", 0x29}], 0x1}, 0x0)
r1 = socket$kcm(0x23, 0x5, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x810)
listen(r1, 0x800)
accept(r1, 0x0, &(0x7f00000000c0))
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @dev}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x3c}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)

983.381168ms ago: executing program 3 (id=3259):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
getpgrp(0xffffffffffffffff)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2002b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x8, 0x802, 0x1})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = io_uring_setup(0x2dfd, 0x0)
r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x43ba, 0x80, 0x0, 0x34f})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1)
r4 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r4, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000000240)="27050200340f3c00060f2f2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000000000000080", 0x48}], 0x1}, 0x9cdc2384056f013d)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r5, r6})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r7)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0)

0s ago: executing program 6 (id=3260):
r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x20000)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x739, 0x0, 0x200008c, 0x2, &(0x7f00000002c0)})
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb6a, 0x80000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4)
ioprio_set$uid(0x3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[  855.670165][ T5786] Bluetooth: hci0: unexpected event for opcode 0x2035
[  859.699780][ T5786] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  859.709522][ T5786] Bluetooth: hci0: Injecting HCI hardware error event
[  859.719005][T10484] Bluetooth: hci0: hardware error 0x00
[  861.777862][T10484] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  861.863434][T12059] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present
[  863.852561][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'.
[  864.375761][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  864.707395][    T8] usb 5-1: Using ep0 maxpacket: 8
[  864.735161][    T8] usb 5-1: config 6 has an invalid interface number: 2 but max is 0
[  864.743535][    T8] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  864.787313][    T8] usb 5-1: config 6 has no interface number 0
[  864.821823][    T8] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  864.862202][    T8] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  864.877228][    T8] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  864.937998][    T8] usb 5-1: Product: syz
[  864.942252][    T8] usb 5-1: Manufacturer: syz
[  864.946892][    T8] usb 5-1: SerialNumber: syz
[  865.010706][    T8] hso 5-1:6.2: Failed to find INT IN ep
[  866.007982][   T23] usb 5-1: USB disconnect, device number 2
[  870.425782][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  870.432918][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  871.306870][T12134] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR
[  872.129212][T12151] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  872.156513][T12151] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  885.281117][T12265] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[  892.967355][   T23] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  894.792760][T12337] fuse: Bad value for 'group_id'
[  898.902049][T12361] binder: 12360:12361 ioctl c018620c 2000000004c0 returned -22
[  898.967357][   T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  899.177628][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  899.696792][   T23] usb 4-1: Using ep0 maxpacket: 8
[  899.831809][   T23] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  899.857434][   T23] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  899.857491][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  899.887187][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[  899.917961][   T23] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  899.936154][    T8] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  899.936874][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.971902][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.046678][    T8] usb 5-1: config 0 descriptor??
[  900.188303][   T23] usb 4-1: config 0 descriptor??
[  901.005429][   T27] usb 5-1: USB disconnect, device number 4
[  901.319781][   T23] hid (null): global environment stack underflow
[  901.326215][   T23] hid (null): unknown global tag 0xc
[  901.350489][   T23] hid (null): unknown global tag 0xd
[  901.606520][   T23] waltop 0003:172F:0501.0005: global environment stack underflow
[  901.962133][T12383] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[  902.346246][   T23] waltop 0003:172F:0501.0005: item 0 2 1 11 parsing failed
[  902.366081][   T23] waltop: probe of 0003:172F:0501.0005 failed with error -22
[  902.397631][   T23] usb 4-1: USB disconnect, device number 11
[  902.526964][T12391] fuse: Bad value for 'group_id'
[  903.550408][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  903.782304][   T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  903.810443][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.847483][   T23] usb 5-1: Product: syz
[  903.860259][   T23] usb 5-1: Manufacturer: syz
[  903.869996][   T23] usb 5-1: SerialNumber: syz
[  903.943858][   T23] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  904.031690][ T5767] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  904.281558][    C1] usb 5-1: ath9k_htc: invalid pkt_len (f25c)
[  904.580098][    T8] usb 5-1: USB disconnect, device number 5
[  905.967294][ T5767] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  905.991949][ T5767] ath9k_htc: Failed to initialize the device
[  906.142308][    T8] usb 5-1: ath9k_htc: USB layer deinitialized
[  910.611954][T12455] netlink: 'syz.4.1587': attribute type 2 has an invalid length.
[  910.661660][T12455] netlink: 'syz.4.1587': attribute type 1 has an invalid length.
[  911.268322][T12462] fuse: Bad value for 'group_id'
[  911.298064][T12461] fuse: Bad value for 'group_id'
[  916.493773][T12511] fuse: Bad value for 'group_id'
[  919.228229][T12528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  919.486704][T12535] usb usb7: usbfs: process 12535 (syz.5.1606) did not claim interface 0 before use
[  920.309083][T12544] usb usb8: usbfs: process 12544 (syz.5.1609) did not claim interface 0 before use
[  920.987889][T12548] fuse: Bad value for 'group_id'
[  928.946756][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  930.997516][T10484] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  931.440219][T12595] usb usb7: usbfs: process 12595 (syz.3.1617) did not claim interface 0 before use
[  932.722025][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  932.728482][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  935.867450][T12619] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[  937.239127][T12633] tmpfs: Bad value for 'mpol'
[  937.861220][T12636] No such timeout policy "syz1"
[  940.267375][T12650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  940.880716][T12642] usb usb7: usbfs: process 12642 (syz.4.1635) did not claim interface 0 before use
[  943.765289][T12660] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[  947.151616][T12682] No such timeout policy "syz1"
[  950.798673][T12701] usb usb7: usbfs: process 12701 (syz.3.1651) did not claim interface 0 before use
[  952.232392][T12709] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[  952.648487][T12715] binder: 12708:12715 ioctl c0306201 0 returned -14
[  953.619071][T12724] No such timeout policy "syz1"
[  957.895297][T12733] usb usb7: usbfs: process 12733 (syz.5.1661) did not claim interface 0 before use
[  960.524334][ T5786] Bluetooth: hci3: unexpected cc 0x2035 length: 2 > 1
[  960.533829][ T5786] Bluetooth: hci3: unexpected event for opcode 0x2035
[  961.343766][T12778] usb usb7: usbfs: process 12778 (syz.4.1673) did not claim interface 0 before use
[  964.577368][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  964.807230][ T5786] Bluetooth: hci3: Injecting HCI hardware error event
[  964.816362][ T5786] Bluetooth: hci3: hardware error 0x00
[  965.515876][T12819] syz.5.1685 (12819): drop_caches: 2
[  966.073467][T12829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1687'.
[  968.516320][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  969.009629][T12848] fuse: Unknown parameter 'grou00000000000000000000'
[  969.474893][T12850] No such timeout policy "syz1"
[  969.607508][ T5786] Bluetooth: hci1: unexpected cc 0x2035 length: 2 > 1
[  969.615606][ T5786] Bluetooth: hci1: unexpected event for opcode 0x2035
[  973.673784][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  973.682881][ T5786] Bluetooth: hci1: Injecting HCI hardware error event
[  973.699937][ T5786] Bluetooth: hci1: hardware error 0x00
[  973.838411][T12865] syz.2.1700 (12865): drop_caches: 2
[  975.874544][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  976.499541][T12897] fuse: Unknown parameter 'grou00000000000000000000'
[  979.262500][T12916] syz.5.1712 (12916): drop_caches: 2
[  979.702789][T10660] IPVS: starting estimator thread 0...
[  979.940437][T12921] IPVS: using max 17 ests per chain, 40800 per kthread
[  981.907997][T12934] fuse: Unknown parameter 'grou00000000000000000000'
[  985.284373][T12957] syz.2.1721 (12957): drop_caches: 2
[  985.479449][T12957] binder: 12956:12957 ioctl c0306201 200000000180 returned -14
[  988.220631][T12966] fuse: Unknown parameter 'grou00000000000000000000'
[  988.634426][T12971] random: crng reseeded on system resumption
[  993.302855][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  993.314701][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  994.032998][T12990] syz.3.1733 (12990): drop_caches: 2
[  994.999033][T12998] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[  996.467416][T13006] fuse: Unknown parameter 'grou00000000000000000000'
[ 1000.112859][T13027] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1000.465244][T13033] syz.5.1743 (13033): drop_caches: 2
[ 1000.533178][T13033] binder: 13031:13033 ioctl c0306201 200000000180 returned -14
[ 1000.876011][T13039] binder: 13038:13039 ioctl c0306201 200000000180 returned -14
[ 1001.344754][T13047] random: crng reseeded on system resumption
[ 1001.806145][T13051] fuse: Bad value for 'fd'
[ 1004.058396][T13060] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1008.610984][T13075] binder: 13074:13075 ioctl c0306201 200000000180 returned -14
[ 1010.616783][T13092] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[ 1010.906262][T13102] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1016.538303][T13143] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1016.816861][T13145] binder: 13144:13145 ioctl c0306201 200000000180 returned -14
[ 1020.821667][ T5786] Bluetooth: hci2: unexpected cc 0x2035 length: 2 > 1
[ 1020.830452][ T5786] Bluetooth: hci2: unexpected event for opcode 0x2035
[ 1021.971274][T13189] binder: 13187:13189 ioctl c0306201 200000000180 returned -14
[ 1024.987368][ T5786] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1024.996227][ T5786] Bluetooth: hci2: Injecting HCI hardware error event
[ 1025.005640][ T5786] Bluetooth: hci2: hardware error 0x00
[ 1026.455322][T13224] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1026.732346][T13224] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1795'.
[ 1026.967852][T13228] binder: 13227:13228 ioctl c0306201 200000000180 returned -14
[ 1027.055893][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'.
[ 1027.411907][T13231] usb usb7: usbfs: process 13231 (syz.2.1797) did not claim interface 0 before use
[ 1028.187353][ T5786] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1028.419327][T13239] binder: 13238:13239 unknown command 1074553619
[ 1028.429360][T13239] binder: 13238:13239 ioctl c0306201 200000000440 returned -22
[ 1030.169719][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'.
[ 1030.420514][T13265] binder: 13264:13265 ioctl c0306201 200000000180 returned -14
[ 1030.891450][T13270] usb usb7: usbfs: process 13270 (syz.5.1808) did not claim interface 0 before use
[ 1032.857414][T13274] No such timeout policy "syz1"
[ 1033.493150][T13282] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1033.591537][T13282] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1810'.
[ 1033.651179][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1810'.
[ 1034.259790][T13287] fuse: Bad value for 'user_id'
[ 1034.724817][T13291] binder: 13290:13291 ioctl c0306201 200000000180 returned -14
[ 1036.839138][T13303] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1040.444866][T13321] fuse: Bad value for 'user_id'
[ 1040.691025][T13324] binder: 13322:13324 ioctl c0306201 200000000180 returned -14
[ 1041.038798][T13329] Option 'D' to dns_resolver key: bad/missing value
[ 1045.864931][T13355] usb usb7: usbfs: process 13355 (syz.3.1828) did not claim interface 0 before use
[ 1046.131934][T13359] binder: 13357:13359 ioctl c0306201 200000000080 returned -14
[ 1046.169427][T13359] binder: 13357:13359 ioctl c0306201 2000000003c0 returned -14
[ 1046.326285][T13329] netlink: 'syz.5.1825': attribute type 21 has an invalid length.
[ 1048.348089][T13369] fuse: Bad value for 'user_id'
[ 1049.608967][T13375] binder: 13374:13375 ioctl c0306201 200000000180 returned -14
[ 1051.384628][T13380] usb usb7: usbfs: process 13380 (syz.5.1837) did not claim interface 0 before use
[ 1051.427495][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[ 1053.846207][T13402] fuse: Bad value for 'user_id'
[ 1053.859726][T13401] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1054.240790][T13406] fuse: Bad value for 'user_id'
[ 1055.557849][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.566397][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.593750][T13408] binder: 13407:13408 ioctl c0306201 200000000180 returned -14
[ 1056.818188][T13415] usb usb7: usbfs: process 13415 (syz.2.1847) did not claim interface 0 before use
[ 1060.870358][T13428] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR
[ 1061.129296][T13438] fuse: Bad value for 'user_id'
[ 1063.145583][T13444] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1064.169020][T13450] binder: 13449:13450 ioctl c0306201 200000000180 returned -14
[ 1064.905257][T13453] usb usb7: usbfs: process 13453 (syz.4.1857) did not claim interface 0 before use
[ 1065.010474][   T27] IPVS: starting estimator thread 0...
[ 1065.129537][T13459] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1067.253905][T13473] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1070.776583][T13486] binder: 13485:13486 ioctl c0306201 200000000180 returned -14
[ 1071.482885][T13492] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1072.234838][T13493] syz.2.1870: attempt to access beyond end of device
[ 1072.234838][T13493] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1072.248343][T13493] exFAT-fs (loop2): unable to read boot sector
[ 1072.254577][T13493] exFAT-fs (loop2): failed to read boot sector
[ 1072.260848][T13493] exFAT-fs (loop2): failed to recognize exfat type
[ 1077.209227][T13512] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[ 1077.810028][T13524] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1077.826869][T13524] UDF-fs: Scanning with blocksize 512 failed
[ 1077.833813][T13524] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1077.841429][T13524] UDF-fs: Scanning with blocksize 1024 failed
[ 1077.848081][T13524] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1077.855712][T13524] UDF-fs: Scanning with blocksize 2048 failed
[ 1077.862717][T13524] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[ 1077.870596][T13524] UDF-fs: Scanning with blocksize 4096 failed
[ 1078.988634][T13529] binder: 13528:13529 ioctl c0306201 200000000180 returned -14
[ 1080.040440][T13536] syz.4.1880: attempt to access beyond end of device
[ 1080.040440][T13536] loop4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1080.053613][T13536] exFAT-fs (loop4): unable to read boot sector
[ 1080.059910][T13536] exFAT-fs (loop4): failed to read boot sector
[ 1080.066104][T13536] exFAT-fs (loop4): failed to recognize exfat type
[ 1086.022996][T13567] binder: 13565:13567 ioctl c0306201 200000000180 returned -14
[ 1089.987077][T13585] syz.5.1894: attempt to access beyond end of device
[ 1089.987077][T13585] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1090.002976][T13585] exFAT-fs (loop5): unable to read boot sector
[ 1090.009609][T13585] exFAT-fs (loop5): failed to read boot sector
[ 1090.020603][T13585] exFAT-fs (loop5): failed to recognize exfat type
[ 1095.147300][T13612] binder: 13611:13612 ioctl c0306201 200000000180 returned -14
[ 1103.889566][T13661] syz.2.1911 (13661): drop_caches: 2
[ 1103.912800][T13663] binder: 13660:13663 ioctl c0306201 0 returned -14
[ 1108.464381][T13692] fuse: Bad value for 'rootmode'
[ 1112.372385][T13722] syz.5.1922 (13722): drop_caches: 2
[ 1113.381995][T13726] binder: 13720:13726 ioctl c0306201 0 returned -14
[ 1116.065386][T13805] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[ 1116.104667][T13810] fuse: Bad value for 'rootmode'
[ 1116.210728][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.217278][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1119.550243][T13834] syz.3.1934 (13834): drop_caches: 2
[ 1119.569815][T13834] binder: 13833:13834 ioctl c0306201 0 returned -14
[ 1121.112679][T13849] fuse: Bad value for 'rootmode'
[ 1121.475516][T13844] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[ 1123.805736][T13874] Option 'D' to dns_resolver key: bad/missing value
[ 1126.199056][T13882] syz.2.1945 (13882): drop_caches: 2
[ 1132.596182][T13874] netlink: 'syz.3.1942': attribute type 21 has an invalid length.
[ 1135.022651][T13972] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR
[ 1135.252459][T13979] syz.4.1954 (13979): drop_caches: 2
[ 1142.317205][    T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1142.879401][T14027] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[ 1143.376528][    T8] usb 5-1: Using ep0 maxpacket: 8
[ 1143.397881][T14035] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1143.423182][    T8] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1143.442922][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.747986][    T8] usb 5-1: Product: syz
[ 1144.753562][    T8] usb 5-1: Manufacturer: syz
[ 1144.786381][    T8] usb 5-1: SerialNumber: syz
[ 1144.800187][    T8] usb 5-1: config 0 descriptor??
[ 1144.829336][    T8] gspca_main: se401-2.14.0 probing 047d:5003
[ 1147.055744][    T8] gspca_se401: read req failed req 0x06 error -19
[ 1147.117983][    T8] usb 5-1: USB disconnect, device number 6
[ 1149.772068][T14069] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1155.138643][T14101] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1161.931873][T14134] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1164.131644][T14146] usb usb7: usbfs: process 14146 (syz.4.2002) did not claim interface 0 before use
[ 1168.494358][T14165] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1169.737147][ T5827] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1171.477148][ T5827] usb 6-1: Using ep0 maxpacket: 32
[ 1171.505553][ T5827] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1171.517672][ T5827] usb 6-1: config 0 has no interface number 0
[ 1171.538108][ T5827] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1171.567363][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1171.607322][ T5827] usb 6-1: Product: syz
[ 1171.614620][ T5827] usb 6-1: Manufacturer: syz
[ 1171.624188][ T5827] usb 6-1: SerialNumber: syz
[ 1171.683140][ T5827] usb 6-1: config 0 descriptor??
[ 1171.700977][ T5827] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1171.939894][ T5827] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1172.047895][ T5827] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1172.118208][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1172.168675][ T5827] usb 6-1: USB disconnect, device number 2
[ 1172.226521][ T5827] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1172.382486][ T5827] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1172.435561][ T5827] quatech2 6-1:0.51: device disconnected
[ 1175.577454][T14210] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1177.623312][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.647251][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1180.249470][T14232] usb usb7: usbfs: process 14232 (syz.3.2012) did not claim interface 0 before use
[ 1188.888966][T14327] usb usb7: usbfs: process 14327 (syz.2.2030) did not claim interface 0 before use
[ 1190.897125][T14343] Option 'D' to dns_resolver key: bad/missing value
[ 1194.627859][T14343] netlink: 'syz.2.2033': attribute type 21 has an invalid length.
[ 1199.697788][T14421] usb usb7: usbfs: process 14421 (syz.3.2041) did not claim interface 0 before use
[ 1201.051241][T14425] Can't find ip_set type hash:ip,ma
[ 1211.457305][T14528] orangefs_mount: mount request failed with -4
[ 1213.218376][T14534] usb usb7: usbfs: process 14534 (syz.2.2053) did not claim interface 0 before use
[ 1220.189485][T14557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1220.368119][T14557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1223.458766][T12811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1223.517282][T12811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1223.554387][T12811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1223.568141][T12811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1223.575975][T12811] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1223.584666][T12811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1225.842025][ T5786] Bluetooth: hci4: command tx timeout
[ 1226.240924][T14624] usb usb7: usbfs: process 14624 (syz.2.2068) did not claim interface 0 before use
[ 1227.334526][T14628] Can't find ip_set type hash:ip,ma
[ 1227.560363][T13946] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.857111][ T5786] Bluetooth: hci4: command tx timeout
[ 1228.227757][T13946] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1228.275239][T14565] chnl_net:caif_netlink_parms(): no params data found
[ 1228.371973][T13946] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.541002][T13946] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.591535][T14565] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1229.623898][T14565] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1229.660553][T14565] bridge_slave_0: entered allmulticast mode
[ 1230.797353][ T5786] Bluetooth: hci4: command tx timeout
[ 1230.809753][T14565] bridge_slave_0: entered promiscuous mode
[ 1230.888553][T14565] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1230.895760][T14565] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1230.904903][T14565] bridge_slave_1: entered allmulticast mode
[ 1230.912307][T14565] bridge_slave_1: entered promiscuous mode
[ 1231.012240][T14565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1231.099340][T14565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1232.445732][T14565] team0: Port device team_slave_0 added
[ 1232.488561][T14565] team0: Port device team_slave_1 added
[ 1232.817227][T12811] Bluetooth: hci4: command tx timeout
[ 1232.830605][T14565] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1232.837766][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1232.863682][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1232.873569][T14565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1232.914733][T14565] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1232.937720][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1232.963684][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1233.051089][T14565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1234.455556][T14565] hsr_slave_0: entered promiscuous mode
[ 1234.476029][T14565] hsr_slave_1: entered promiscuous mode
[ 1234.489275][T14565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1234.505518][T14565] Cannot create hsr debugfs directory
[ 1234.897117][T12811] Bluetooth: hci4: command tx timeout
[ 1235.982238][T14698] usb usb7: usbfs: process 14698 (syz.4.2076) did not claim interface 0 before use
[ 1238.469821][T14709] Can't find ip_set type hash:ip,mar
[ 1239.074423][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.082610][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.969313][T13946] hsr_slave_0: left promiscuous mode
[ 1240.039904][T13946] hsr_slave_1: left promiscuous mode
[ 1240.669750][T13946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1240.784605][T13946] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1240.846457][T13946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1240.858588][T13946] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1240.874626][T13946] bridge_slave_1: left allmulticast mode
[ 1240.883308][T13946] bridge_slave_1: left promiscuous mode
[ 1240.891335][T13946] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.937122][T13946] bridge_slave_0: left allmulticast mode
[ 1240.942990][T13946] bridge_slave_0: left promiscuous mode
[ 1240.950408][T13946] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1241.398559][T14778] usb usb7: usbfs: process 14778 (syz.3.2089) did not claim interface 0 before use
[ 1243.334829][T13946] veth1_macvtap: left promiscuous mode
[ 1243.340622][T13946] veth0_macvtap: left promiscuous mode
[ 1244.426164][T13946] team0 (unregistering): Port device team_slave_1 removed
[ 1244.831676][T13946] team0 (unregistering): Port device team_slave_0 removed
[ 1245.143050][T13946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1245.271570][T13946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1245.894122][T13946] bond0 (unregistering): Released all slaves
[ 1246.453802][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'.
[ 1246.544308][T14565] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1246.746169][T14565] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1248.041716][T14565] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1248.183725][T14565] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1248.534529][T14825] usb usb7: usbfs: process 14825 (syz.2.2097) did not claim interface 0 before use
[ 1248.896322][T14565] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1248.995926][T14565] 8021q: adding VLAN 0 to HW filter on device team0
[ 1249.065489][T13948] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1249.072748][T13948] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1249.126020][T13946] IPVS: stop unused estimator thread 0...
[ 1249.140701][T13793] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1249.148046][T13793] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1249.768052][ T5767] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1249.977282][ T5767] usb 3-1: Using ep0 maxpacket: 32
[ 1249.996272][ T5767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1250.030062][ T5767] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1250.068559][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1250.077064][ T5767] usb 3-1: Product: syz
[ 1250.081469][ T5767] usb 3-1: Manufacturer: syz
[ 1250.086322][ T5767] usb 3-1: SerialNumber: syz
[ 1250.184756][ T5767] usb 3-1: config 0 descriptor??
[ 1250.212057][T14842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1250.581965][T14565] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1251.048543][T14873] random: crng reseeded on system resumption
[ 1252.463749][   T23] usb 3-1: USB disconnect, device number 18
[ 1256.898373][T14565] veth0_vlan: entered promiscuous mode
[ 1257.034036][T14565] veth1_vlan: entered promiscuous mode
[ 1258.120146][T14565] veth0_macvtap: entered promiscuous mode
[ 1258.154802][T14565] veth1_macvtap: entered promiscuous mode
[ 1260.565503][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1260.647119][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1260.697061][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1260.742322][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1260.765630][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1260.778452][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2108'.
[ 1260.811904][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1260.844143][T14565] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1260.872730][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1260.912683][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1260.931849][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1260.951392][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1260.969350][T14565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1260.994542][T14565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1261.019196][T14565] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1261.109887][T14565] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.122623][T14565] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.132069][T14565] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.141314][T14565] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.600331][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1261.645735][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1261.757379][ T5869] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1261.821610][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1261.863212][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1261.957688][ T5869] usb 3-1: Using ep0 maxpacket: 8
[ 1261.993690][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1262.052132][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1262.075881][ T5869] usb 3-1: can't read configurations, error -71
[ 1262.491776][T15105] Option 'D' to dns_resolver key: bad/missing value
[ 1267.737073][T15105] netlink: 'syz.6.2063': attribute type 21 has an invalid length.
[ 1271.749222][T15248] Option 'D' to dns_resolver key: bad/missing value
[ 1271.765665][T15248] netlink: 'syz.3.2138': attribute type 21 has an invalid length.
[ 1273.314685][T15240] Can't find ip_set type hash:ip,mar
[ 1277.963773][T15347] Option 'D' to dns_resolver key: bad/missing value
[ 1281.908978][T15347] netlink: 'syz.4.2151': attribute type 21 has an invalid length.
[ 1282.067171][ T2135] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1282.266002][T15249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1282.290536][T15249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1282.300576][ T2135] usb 3-1: Using ep0 maxpacket: 32
[ 1282.305880][T15249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1282.342987][T15249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1282.354609][ T2135] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1282.371389][ T2135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1282.382030][T15249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1282.421782][ T2135] usb 3-1: config 0 descriptor??
[ 1282.442401][T15249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1282.713204][ T2135] as10x_usb: device has been detected
[ 1282.725138][ T2135] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1282.874912][ T2135] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1282.888885][ T2135] as10x_usb: error during firmware upload part1
[ 1282.895881][ T2135] Registered device nBox DVB-T Dongle
[ 1283.062632][T15357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1283.209861][T15357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1284.748717][T15249] Bluetooth: hci0: command tx timeout
[ 1285.532819][T15364] chnl_net:caif_netlink_parms(): no params data found
[ 1285.549209][    T9] usb 3-1: USB disconnect, device number 21
[ 1285.626114][    T9] Unregistered device nBox DVB-T Dongle
[ 1285.718947][    T9] as10x_usb: device has been disconnected
[ 1285.846372][T15397] random: crng reseeded on system resumption
[ 1286.503592][T15364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1286.516824][T15364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1286.539071][T15364] bridge_slave_0: entered allmulticast mode
[ 1286.808744][T15364] bridge_slave_0: entered promiscuous mode
[ 1286.817157][T15249] Bluetooth: hci0: command tx timeout
[ 1287.029615][T15364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.185170][T15364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1287.209154][T15364] bridge_slave_1: entered allmulticast mode
[ 1287.218677][T15364] bridge_slave_1: entered promiscuous mode
[ 1287.382580][T15364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1287.443162][T15364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1288.205289][T15364] team0: Port device team_slave_0 added
[ 1288.219152][T15364] team0: Port device team_slave_1 added
[ 1288.405295][T15364] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1288.430700][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1288.474739][T15364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1288.489121][T15364] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1288.497218][T15364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1288.525231][T15364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1288.624643][T15364] hsr_slave_0: entered promiscuous mode
[ 1288.641884][T15364] hsr_slave_1: entered promiscuous mode
[ 1288.648471][T15364] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1288.662863][T15364] Cannot create hsr debugfs directory
[ 1288.697057][ T2135] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[ 1288.897655][T15249] Bluetooth: hci0: command tx timeout
[ 1288.919620][ T2135] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping
[ 1288.941317][ T2135] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1288.951084][ T2135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1288.959592][ T2135] usb 3-1: Product: syz
[ 1288.964582][ T2135] usb 3-1: Manufacturer: syz
[ 1288.970743][ T2135] usb 3-1: SerialNumber: syz
[ 1288.979414][ T2135] usb 3-1: config 0 descriptor??
[ 1289.030540][ T2135] snd-usb-audio: probe of 3-1:0.0 failed with error -22
[ 1289.144493][T15364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1289.173861][T14809] udevd[14809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1289.190383][T15364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.433425][T15364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1289.464927][T15364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1290.043285][T15364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1290.065950][T15364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1290.328659][T15364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1290.341014][T15364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1291.019377][T15249] Bluetooth: hci0: command tx timeout
[ 1291.333937][T15364] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1291.345657][   T23] usb 3-1: USB disconnect, device number 22
[ 1291.374191][T15364] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1291.431542][T15364] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1291.469211][T15364] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1291.819819][T15364] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1291.922541][T15469] random: crng reseeded on system resumption
[ 1292.461871][T15364] 8021q: adding VLAN 0 to HW filter on device team0
[ 1292.498503][T13791] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.505652][T13791] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1292.544992][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1292.552209][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1293.713549][T15364] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1294.480077][T15364] veth0_vlan: entered promiscuous mode
[ 1294.512799][T15364] veth1_vlan: entered promiscuous mode
[ 1294.672854][T15364] veth0_macvtap: entered promiscuous mode
[ 1294.717957][T15364] veth1_macvtap: entered promiscuous mode
[ 1294.749169][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.761661][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.772542][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.785297][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.795817][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.807494][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.821340][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1294.839832][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.854507][T15364] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1294.870295][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1294.881669][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.892362][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1294.903360][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.927147][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1294.958572][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1294.985356][T15364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1295.016292][T15364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1295.066745][T15364] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1295.090228][T15364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1295.106263][T15364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1295.125550][T15364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1295.156563][T15364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1295.391797][T14951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1295.427060][T14951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1295.499962][T14960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1295.537490][T14960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1299.595904][T15589] Option 'D' to dns_resolver key: bad/missing value
[ 1300.502908][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.513037][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1304.097661][T12811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1304.126703][T12811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1304.139067][T12811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1304.167864][T12811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1304.179772][T12811] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1304.189595][T12811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1306.152546][T15589] netlink: 'syz.3.2193': attribute type 21 has an invalid length.
[ 1306.258191][T15249] Bluetooth: hci1: command tx timeout
[ 1307.767250][T15670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2199'.
[ 1308.136440][T15672] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1308.342905][T15249] Bluetooth: hci1: command tx timeout
[ 1308.421341][T15600] chnl_net:caif_netlink_parms(): no params data found
[ 1308.737281][T15600] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1308.744510][T15600] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1308.764571][T15600] bridge_slave_0: entered allmulticast mode
[ 1308.772868][T15600] bridge_slave_0: entered promiscuous mode
[ 1308.782658][T15600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1308.790287][T15600] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1308.800070][T15600] bridge_slave_1: entered allmulticast mode
[ 1308.800265][T15688] fuse: Bad value for 'group_id'
[ 1308.812030][T15600] bridge_slave_1: entered promiscuous mode
[ 1308.932580][T15600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1309.005696][T15600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1310.437132][T15249] Bluetooth: hci1: command tx timeout
[ 1310.972366][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2209'.
[ 1311.118174][T15600] team0: Port device team_slave_0 added
[ 1311.147250][T15600] team0: Port device team_slave_1 added
[ 1311.193630][T15600] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1311.220827][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1311.248429][T15600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1311.264578][T15600] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1311.271677][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1311.307353][T15600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1311.423556][T15600] hsr_slave_0: entered promiscuous mode
[ 1311.448937][T15600] hsr_slave_1: entered promiscuous mode
[ 1311.455829][T15600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1311.469136][T15600] Cannot create hsr debugfs directory
[ 1311.995879][T15728] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2214'.
[ 1312.556525][T15733] fuse: Bad value for 'group_id'
[ 1312.577186][T15249] Bluetooth: hci1: command tx timeout
[ 1312.913725][T15600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1314.714498][T15744] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR
[ 1315.190769][T15745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2218'.
[ 1316.033361][T15600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1316.296656][T15600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1316.414232][T15600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1316.441487][T15800] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2223'.
[ 1318.095229][T15819] fuse: Bad value for 'group_id'
[ 1318.350209][T15600] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1318.372008][T15600] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1318.396538][T15600] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1318.418960][T15600] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1319.002489][T15600] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1319.412147][T15600] 8021q: adding VLAN 0 to HW filter on device team0
[ 1319.740896][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1319.748378][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1320.115059][T13718] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1320.122489][T13718] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1321.891834][T15855] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2231'.
[ 1322.243632][T15600] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1322.937822][T15600] veth0_vlan: entered promiscuous mode
[ 1323.880386][T15600] veth1_vlan: entered promiscuous mode
[ 1324.660496][T15600] veth0_macvtap: entered promiscuous mode
[ 1324.675128][T15600] veth1_macvtap: entered promiscuous mode
[ 1324.827496][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1324.856175][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.879428][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1324.907059][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.922344][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1324.947220][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1324.972791][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1325.026984][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1325.047043][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1325.066990][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1325.090969][T15600] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1325.178030][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1325.218258][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1325.232893][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1325.254227][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1325.278213][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1325.305855][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1325.343381][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1325.365521][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1325.385756][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1325.406518][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1325.460088][T15600] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1325.501580][T15600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.547023][T15600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.563912][T15600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.587049][T15600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.908160][T14962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1325.939811][T14962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1326.055286][T14962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1326.107203][T14962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1326.350832][T15935] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1328.232319][T15982] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2249'.
[ 1329.627521][T16020] random: crng reseeded on system resumption
[ 1330.630170][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[ 1331.812727][T16055] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2262'.
[ 1333.066200][T16064] Option 'D' to dns_resolver key: bad/missing value
[ 1337.717295][T16132] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[ 1337.723896][T16132] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1337.732278][T16132] vhci_hcd vhci_hcd.0: Device attached
[ 1338.507406][   T27] usb 46-1: SetAddress Request (2) to port 0
[ 1338.578660][   T27] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1339.087114][T16133] vhci_hcd: connection closed
[ 1339.108839][T13780] vhci_hcd: stop threads
[ 1339.118240][T13780] vhci_hcd: release socket
[ 1339.127767][T13780] vhci_hcd: disconnect device
[ 1339.271357][T16140] Option 'D' to dns_resolver key: bad/missing value
[ 1342.763091][T16195] netlink: set zone limit has 8 unknown bytes
[ 1343.307609][T14415] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1344.177229][   T27] usb 46-1: device descriptor read/8, error -110
[ 1344.597878][   T27] usb usb46-port1: attempt power cycle
[ 1345.314691][T12811] Bluetooth: hci3: command 0x1003 tx timeout
[ 1345.746229][T16208] Option 'D' to dns_resolver key: bad/missing value
[ 1345.768936][T15249] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1346.416050][   T27] usb usb46-port1: unable to enumerate USB device
[ 1348.658052][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[ 1348.697056][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1348.877119][    T8] usb 4-1: Using ep0 maxpacket: 16
[ 1348.901983][    T8] usb 4-1: config 0 has no interfaces?
[ 1348.917046][    T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1348.933971][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1348.981913][    T8] usb 4-1: config 0 descriptor??
[ 1349.171980][   T28] audit: type=1326 audit(1779673971.942:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.2.2296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c04b9ce59 code=0x0
[ 1349.407723][T16252] Option 'D' to dns_resolver key: bad/missing value
[ 1349.657284][ T5767] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[ 1349.951736][ T5767] usb 3-1: not running at top speed; connect to a high speed hub
[ 1350.087658][ T5767] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[ 1350.125942][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.179596][ T5767] usb 3-1: Product: ဉ
[ 1350.190916][ T5767] usb 3-1: Manufacturer: ꘤괮ﳚ踓ꗂ韓乬︥䌰缶뼈夷于流紎˿쌄侮ᜎ䚄줊瑫縏裏树쿍Ῥﲐ榩祿㷹
[ 1350.210768][ T5767] usb 3-1: SerialNumber: 튩멥頷䏉镎桗Ⲵ菕䌂횳㫊鑄䞷韍뽢㪝狤䲭韒葚䘟살繹읁̵鹌Š辥뢩⺜⨴뗠螾锭衏杈⊒輡ヽ搋즨릢礞棻ࢩ閉จऑ聋뫕띗撪֕孾놃ຶ
[ 1350.322399][ T5827] usb 4-1: USB disconnect, device number 12
[ 1350.517417][ T5767] usb 3-1: Audio class v2/v3 interfaces need an interface association
[ 1350.584579][ T5767] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[ 1350.683015][ T5767] usb 3-1: USB disconnect, device number 23
[ 1351.830326][T14809] udevd[14809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1354.267614][T16278] Option 'D' to dns_resolver key: bad/missing value
[ 1359.831320][T16309] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[ 1360.210501][T16316] Option 'D' to dns_resolver key: bad/missing value
[ 1361.944253][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.950887][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.547132][ T5767] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1363.769290][ T5767] usb 7-1: Using ep0 maxpacket: 32
[ 1363.776568][ T5767] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1363.802665][ T5767] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1363.812804][ T5767] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1363.849221][ T5767] usb 7-1: Product: syz
[ 1363.853439][ T5767] usb 7-1: Manufacturer: syz
[ 1363.858621][ T5767] usb 7-1: SerialNumber: syz
[ 1363.870677][ T5767] usb 7-1: config 0 descriptor??
[ 1363.877547][T16327] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1366.393001][ T5767] usb 7-1: USB disconnect, device number 2
[ 1367.069804][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2328'.
[ 1367.737749][T16350] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1370.758320][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2339'.
[ 1371.175968][T16390] syz.3.2340: attempt to access beyond end of device
[ 1371.175968][T16390] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1371.196267][T16390] exFAT-fs (loop3): unable to read boot sector
[ 1371.203635][T16390] exFAT-fs (loop3): failed to read boot sector
[ 1371.210123][T16390] exFAT-fs (loop3): failed to recognize exfat type
[ 1375.961346][T16424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2348'.
[ 1377.893688][T16431] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1380.037037][T16436] syz.3.2351: attempt to access beyond end of device
[ 1380.037037][T16436] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1380.059504][T16436] exFAT-fs (loop3): unable to read boot sector
[ 1380.065978][T16436] exFAT-fs (loop3): failed to read boot sector
[ 1380.072165][T16436] exFAT-fs (loop3): failed to recognize exfat type
[ 1382.033239][T16209] Bluetooth: hci1: command 0x0405 tx timeout
[ 1384.725760][T16476] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[ 1390.280140][T10660] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1390.596219][T10660] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1390.621365][T10660] usb 5-1: config 0 has no interfaces?
[ 1390.653557][T10660] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1390.696874][T10660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.845636][T10660] usb 5-1: config 0 descriptor??
[ 1391.134360][ T5785] usb 5-1: USB disconnect, device number 7
[ 1391.797435][T10660] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1392.001473][T10660] usb 4-1: Using ep0 maxpacket: 8
[ 1392.009342][T10660] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1392.044194][T10660] usb 4-1: config 4 interface 0 has no altsetting 0
[ 1392.068487][T10660] usb 4-1: string descriptor 0 read error: -22
[ 1392.074851][T10660] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1392.109162][T10660] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1392.166154][T10660] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1392.332054][T10660] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1393.125064][T16539] usb 4-1: dvb_usb_au6610: wlen=0, aborting
[ 1393.152702][T10660] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1393.160806][T10660] usb 4-1: media controller created
[ 1393.194994][T10660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1394.201005][   T28] audit: type=1326 audit(1779674015.049:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.4.2383" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fdb73f96bd7 code=0x0
[ 1394.342009][T10660] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1394.542853][T10660] usb 4-1: USB disconnect, device number 13
[ 1396.529509][T16561] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[ 1396.935338][T16569] tc action pedit offset must be on 32 bit boundaries
[ 1398.665740][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2398'.
[ 1403.212992][T16641] block device autoloading is deprecated and will be removed.
[ 1404.745312][T16652] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1408.482729][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[ 1413.269258][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1413.554173][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1413.562262][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1413.572148][    T9] usb 5-1: config 4 has an invalid interface number: 54 but max is 2
[ 1413.580808][    T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1413.592092][    T9] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 3
[ 1413.601576][    T9] usb 5-1: config 4 has no interface number 0
[ 1413.608058][    T9] usb 5-1: config 4 interface 54 altsetting 16 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 1413.619227][    T9] usb 5-1: config 4 interface 54 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 8
[ 1413.629308][    T9] usb 5-1: config 4 interface 54 altsetting 16 has an invalid endpoint with address 0x18, skipping
[ 1413.641496][    T9] usb 5-1: config 4 interface 54 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[ 1413.655256][    T9] usb 5-1: config 4 interface 54 has no altsetting 0
[ 1413.665321][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=98.fa
[ 1413.674546][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1413.682734][    T9] usb 5-1: Product: syz
[ 1413.687032][    T9] usb 5-1: Manufacturer: syz
[ 1413.691747][    T9] usb 5-1: SerialNumber: syz
[ 1413.700878][T16702] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1413.937788][    T9] usbtest 5-1:4.54: couldn't get endpoints, -22
[ 1413.944491][    T9] usbtest: probe of 5-1:4.54 failed with error -22
[ 1413.956473][    T9] usb 5-1: USB disconnect, device number 8
[ 1420.371923][   T28] audit: type=1800 audit(1779674038.893:6): pid=16745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2440" name="file0" dev="overlay" ino=281 res=0 errno=0
[ 1422.606175][T14565] cgroup: fork rejected by pids controller in /syz6
[ 1424.331958][T16776] QAT: failed to copy from user cfg_data.
[ 1424.777061][T14953] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1425.008529][T14953] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1425.141243][T14953] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1425.261589][T14953] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1425.490739][ T5827] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1425.559610][T16785] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2451'.
[ 1425.693702][ T5827] usb 3-1: Using ep0 maxpacket: 8
[ 1425.751944][ T5827] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1425.761426][ T5827] usb 3-1: config 179 has no interface number 0
[ 1425.768605][ T5827] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1425.780058][ T5827] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1425.792994][ T5827] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 1425.804599][ T5827] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 1425.816303][ T5827] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1425.857111][ T5827] usb 3-1: config 179 interface 65 has no altsetting 0
[ 1425.904128][ T5827] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1425.982413][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.141973][ T5827] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7
[ 1426.264771][ T5128] input input7: unable to receive magic message: -110
[ 1426.357639][ T5128] input input7: unable to receive magic message: -32
[ 1426.536799][ T5128] input input7: unable to receive magic message: -32
[ 1426.554199][    T8] usb 3-1: USB disconnect, device number 24
[ 1426.554341][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1426.569664][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1426.593684][    T8] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1426.635622][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1426.649472][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1426.670356][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1426.689271][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1426.709690][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1426.717619][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1427.112496][T16787] autofs4:pid:16787:autofs_fill_super: called with bogus options
[ 1427.446013][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1427.462383][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1428.474824][T16813] xt_hashlimit: size too large, truncated to 1048576
[ 1428.974229][T16209] Bluetooth: hci3: command tx timeout
[ 1430.042082][   T28] audit: type=1800 audit(1779674048.185:7): pid=16832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2461" name="file0" dev="overlay" ino=424 res=0 errno=0
[ 1430.518091][T16790] chnl_net:caif_netlink_parms(): no params data found
[ 1430.804995][   T28] audit: type=1107 audit(1779674049.299:8): pid=16848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 1431.188546][T16209] Bluetooth: hci3: command tx timeout
[ 1431.940571][T14953] hsr_slave_0: left promiscuous mode
[ 1431.960970][T14953] hsr_slave_1: left promiscuous mode
[ 1432.102696][T14953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1432.176643][T14953] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1432.253806][T14953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1432.293624][T14953] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1432.391842][T14953] bridge_slave_1: left allmulticast mode
[ 1432.447130][T14953] bridge_slave_1: left promiscuous mode
[ 1432.500970][T14953] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1432.543586][T14953] bridge_slave_0: left allmulticast mode
[ 1432.549328][T14953] bridge_slave_0: left promiscuous mode
[ 1432.607775][T14953] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1433.132435][T14953] veth1_macvtap: left promiscuous mode
[ 1433.270164][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1433.326092][T14953] veth0_macvtap: left promiscuous mode
[ 1433.500983][ T5786] Bluetooth: hci3: command tx timeout
[ 1433.590679][    T9] usb 4-1: device descriptor read/64, error -71
[ 1433.911178][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1434.108056][    T9] usb 4-1: device descriptor read/64, error -71
[ 1434.264820][    T9] usb usb4-port1: attempt power cycle
[ 1434.755491][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1434.820555][    T9] usb 4-1: device descriptor read/8, error -71
[ 1435.029759][T14953] team0 (unregistering): Port device team_slave_1 removed
[ 1435.103435][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'.
[ 1435.129916][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1435.160271][ T5786] Bluetooth: hci1: command 0x0405 tx timeout
[ 1435.194664][    T9] usb 4-1: device descriptor read/8, error -71
[ 1435.249723][T14953] team0 (unregistering): Port device team_slave_0 removed
[ 1435.375510][    T9] usb usb4-port1: unable to enumerate USB device
[ 1435.389377][T14953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1435.728113][T16209] Bluetooth: hci3: command tx timeout
[ 1436.381742][T14953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1439.139803][T16916] Bluetooth: MGMT ver 1.22
[ 1440.566247][T14953] bond0 (unregistering): Released all slaves
[ 1440.904623][T16790] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1440.914548][T16790] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1440.924456][T16790] bridge_slave_0: entered allmulticast mode
[ 1440.942748][T16790] bridge_slave_0: entered promiscuous mode
[ 1440.982366][T16790] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1441.028398][T16790] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1441.035729][T16790] bridge_slave_1: entered allmulticast mode
[ 1441.080129][T16790] bridge_slave_1: entered promiscuous mode
[ 1441.191178][T16790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1441.211887][T16790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1441.308937][T16790] team0: Port device team_slave_0 added
[ 1441.373294][T16790] team0: Port device team_slave_1 added
[ 1442.301053][T16790] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1442.417336][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1442.865732][T16790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1443.273329][T16790] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1443.280704][T16790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1443.387059][T16790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1443.626357][T16790] hsr_slave_0: entered promiscuous mode
[ 1443.662627][T16790] hsr_slave_1: entered promiscuous mode
[ 1443.695388][T16790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1443.726845][T16790] Cannot create hsr debugfs directory
[ 1447.367863][T16985] ALSA: seq fatal error: cannot create timer (-22)
[ 1448.209947][T16975] hugetlbfs: Bad value 'x' for mount option 'size'
[ 1448.209947][T16975] 
[ 1448.775670][    T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1449.192753][    T8] usb 3-1: Using ep0 maxpacket: 8
[ 1449.399781][    T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1449.537165][    T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1449.653805][    T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1449.718047][    T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1449.757617][    T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1449.812183][    T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1449.839280][T16790] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1449.876051][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1449.983940][T16790] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1450.202598][    T8] usb 3-1: GET_CAPABILITIES returned 0
[ 1450.243367][T16790] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1450.253243][    T8] usbtmc 3-1:16.0: can't read capabilities
[ 1450.422339][    T8] usb 3-1: USB disconnect, device number 25
[ 1450.475991][T16790] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1451.955019][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2507'.
[ 1452.068341][T16790] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1452.166821][T16790] 8021q: adding VLAN 0 to HW filter on device team0
[ 1452.237491][T13793] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1452.244758][T13793] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1452.347771][T14978] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1452.355014][T14978] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1454.232854][T16790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1457.973699][T17124] ALSA: mixer_oss: invalid OSS volume 'PHl�6��q
ӆ���ONEOUT'
[ 1458.679208][T16790] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1462.706487][T16790] veth0_vlan: entered promiscuous mode
[ 1464.264581][T16790] veth1_vlan: entered promiscuous mode
[ 1464.412362][T16790] veth0_macvtap: entered promiscuous mode
[ 1464.476203][T16790] veth1_macvtap: entered promiscuous mode
[ 1464.540542][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1464.568848][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1464.594444][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1464.622431][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1464.645014][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1464.815446][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1464.825382][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1464.860787][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1466.700039][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1466.710717][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1466.733422][T16790] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1466.799614][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1466.854036][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1466.865165][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1466.898882][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1466.908793][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1466.952472][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1466.963038][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1466.973532][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1467.025442][T16790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1467.054237][T16790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1467.092536][T16790] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1467.137308][T16790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1467.172633][T16790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1467.204807][T16790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1467.219679][T16790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1468.704337][T14978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1468.772932][T14978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1468.882457][T13940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1468.918614][T13940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1471.304362][T17229] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1471.343164][T17224] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[ 1477.397059][T17264] IPVS: length: 24 != 67608
[ 1483.202318][T17291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1483.211518][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.121437][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.132292][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.179860][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.573435][ T3521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.593330][T13940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.608515][ T2135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.617700][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1485.655552][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1488.572894][ T2135] net_ratelimit: 3 callbacks suppressed
[ 1488.573005][ T2135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1489.508864][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1489.620723][T17339] random: crng reseeded on system resumption
[ 1489.665953][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1491.134710][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1491.338638][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1491.576661][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1491.624649][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1491.717188][ T3521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1491.748483][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1491.759254][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1493.103725][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1493.171567][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1493.181533][T15108] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1493.519893][T15108] usb 3-1: Using ep0 maxpacket: 8
[ 1493.593011][T15108] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1493.643742][T15108] usb 3-1: config 179 has no interface number 0
[ 1493.656905][T15108] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1493.680208][T15108] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1493.694085][T15108] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1493.707892][T15108] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1494.612282][T15108] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1494.617572][   T27] net_ratelimit: 1 callbacks suppressed
[ 1494.617622][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1494.630550][T15108] usb 3-1: config 179 interface 65 has no altsetting 0
[ 1494.646555][T15108] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1494.655705][T15108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.896866][T15108] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8
[ 1495.047920][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1495.312609][T15108] usb 3-1: USB disconnect, device number 26
[ 1495.318895][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1495.443094][T15108] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1495.770312][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1496.629608][T17431] netlink: 'syz.2.2595': attribute type 2 has an invalid length.
[ 1498.353051][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1498.361279][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1498.414897][T13948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1498.424180][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1498.567192][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1499.544758][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.087067][ T2135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.288218][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1501.308461][T17466] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[ 1501.799987][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1502.326706][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1503.466843][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1504.887370][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1504.918958][T14974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1504.932716][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1504.948362][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1506.530154][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1508.431833][T17515] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1508.471035][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1508.563454][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1509.706614][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1510.380838][T14316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1510.389845][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1510.402637][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1510.828120][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1510.955372][T17537] IPVS: length: 24 != 67608
[ 1511.621124][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1511.981525][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1513.130830][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1515.064388][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1515.182764][ T2135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1515.948177][T17598] IPVS: length: 24 != 67608
[ 1516.585055][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.321014][ T2135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1518.507125][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.427785][T13346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1519.752219][T10660] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1519.895056][T17606] netlink: 'syz.6.2627': attribute type 21 has an invalid length.
[ 1519.944486][T10660] usb 5-1: Using ep0 maxpacket: 8
[ 1519.957848][T10660] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1519.998072][T10660] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1520.010422][T10660] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1520.020930][T10660] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1520.032032][T10660] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1520.049121][T10660] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1520.062251][T10660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.009987][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1522.026524][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1522.034777][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1522.061157][T10660] usb 5-1: usb_control_msg returned -32
[ 1522.132388][T10660] usbtmc 5-1:16.0: can't read capabilities
[ 1523.256892][T13346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1523.424789][T17610] usbtmc 5-1:16.0: usb_control_msg returned -71
[ 1523.432551][T17626] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90
[ 1523.434158][T13346] usb 5-1: USB disconnect, device number 9
[ 1524.857116][T13346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.108306][T17650] binder_alloc: 17649: binder_alloc_buf, no vma
[ 1525.179962][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.203799][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.212483][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.243645][T15108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.298780][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1525.307213][T17652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1526.509382][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1527.029648][T10911] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1527.286430][T10911] usb 3-1: Using ep0 maxpacket: 8
[ 1527.297422][T10911] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1527.315433][T10911] usb 3-1: config 4 interface 0 has no altsetting 0
[ 1527.327552][T17651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1527.328299][T10911] usb 3-1: string descriptor 0 read error: -22
[ 1527.343759][T10911] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1527.353266][T10911] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1527.387402][T17651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1527.425533][T10911] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1527.465749][T10911] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1527.482672][T10911] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1527.495362][T10911] usb 3-1: media controller created
[ 1527.591541][T10911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1528.827079][T10911] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1528.981217][T17706] binder_alloc: 17704: binder_alloc_buf, no vma
[ 1529.721074][T17712] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[ 1530.598768][T10911] net_ratelimit: 3 callbacks suppressed
[ 1530.598786][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1531.729240][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1531.876512][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1532.077394][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1532.847400][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1533.041955][T17747] fuse: Unknown parameter '0x0000000000000003'
[ 1534.122915][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1535.225724][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1536.444958][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1537.074397][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1537.534294][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.976850][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1538.991893][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1540.104097][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1540.914151][T17800] fuse: Unknown parameter '0x0000000000000003'
[ 1541.296891][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1541.731445][    T9] usb 3-1: USB disconnect, device number 27
[ 1542.244538][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1542.411675][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1543.562362][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1543.669096][T17825] fuse: Unknown parameter '0x0000000000000003'
[ 1543.804045][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1543.838600][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1543.865820][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1543.879399][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1543.889722][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1543.897269][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1544.736725][T17847] binder_alloc: 17846: binder_alloc_buf, no vma
[ 1544.747808][T17847] binder: 17846:17847 unknown command 0
[ 1544.753480][T17847] binder: 17846:17847 ioctl c0306201 200000000480 returned -22
[ 1544.761710][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1545.484369][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1545.919733][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1546.082857][T16209] Bluetooth: hci4: command tx timeout
[ 1546.934029][T17863] fuse: Unknown parameter '0x0000000000000003'
[ 1547.029072][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1547.109710][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1547.271457][ T3468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1547.318306][T17830] chnl_net:caif_netlink_parms(): no params data found
[ 1547.555779][ T3468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1547.634976][T17877] binder_alloc: 17876: binder_alloc_buf, no vma
[ 1547.796979][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1548.076443][ T3468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1548.142534][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1548.283349][ T3468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1548.317214][T16209] Bluetooth: hci4: command tx timeout
[ 1548.431394][T17830] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1548.439100][T17830] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1548.446642][T17830] bridge_slave_0: entered allmulticast mode
[ 1548.460710][T17830] bridge_slave_0: entered promiscuous mode
[ 1548.479525][T17830] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1548.489995][T17830] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1548.497337][T17830] bridge_slave_1: entered allmulticast mode
[ 1548.508466][T17830] bridge_slave_1: entered promiscuous mode
[ 1548.717540][T17896] fuse: Unknown parameter '0x0000000000000003'
[ 1548.725242][T17830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1548.734901][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1549.025677][T17830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1549.526885][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1549.818659][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2706'.
[ 1550.110956][T17830] team0: Port device team_slave_0 added
[ 1550.529368][T16209] Bluetooth: hci4: command tx timeout
[ 1550.560634][T17830] team0: Port device team_slave_1 added
[ 1550.595742][T17912] binder_alloc: 17910: binder_alloc_buf, no vma
[ 1550.617883][T17912] binder: 17910:17912 unknown command 0
[ 1550.628353][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1550.679080][T17912] binder: 17910:17912 ioctl c0306201 200000000480 returned -22
[ 1550.862860][T17830] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1550.885144][T17830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1550.926660][T17830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1550.990054][T17915] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2709'.
[ 1551.001748][T17921] fuse: Unknown parameter '0x0000000000000003'
[ 1551.018601][T17830] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1551.025992][T17830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1551.077516][T17830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1551.100976][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2710'.
[ 1551.885697][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1551.992424][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1552.165143][T17830] hsr_slave_0: entered promiscuous mode
[ 1552.225474][T17830] hsr_slave_1: entered promiscuous mode
[ 1552.238518][T17830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1552.248207][T17830] Cannot create hsr debugfs directory
[ 1552.380762][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2715'.
[ 1552.750779][T16209] Bluetooth: hci4: command tx timeout
[ 1553.409932][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1553.487919][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1553.570303][T17948] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1553.586202][T17949] binder_alloc: 17945: binder_alloc_buf, no vma
[ 1554.100770][ T3468] hsr_slave_0: left promiscuous mode
[ 1554.136342][ T3468] hsr_slave_1: left promiscuous mode
[ 1554.161637][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1554.169146][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1554.206174][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1554.213696][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1554.253581][ T3468] bridge_slave_1: left allmulticast mode
[ 1554.274644][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1554.294887][ T3468] bridge_slave_0: left allmulticast mode
[ 1554.300848][ T3468] bridge_slave_0: left promiscuous mode
[ 1554.307851][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1554.595197][ T3468] veth1_macvtap: left promiscuous mode
[ 1554.647623][ T3468] veth0_macvtap: left promiscuous mode
[ 1555.102474][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1555.256375][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1556.375783][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1556.779047][T17973] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1557.118070][ T3468] team0 (unregistering): Port device team_slave_1 removed
[ 1557.220950][ T3468] team0 (unregistering): Port device team_slave_0 removed
[ 1557.289012][ T3468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1557.363741][ T3468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1557.465694][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1557.922386][ T3468] bond0 (unregistering): Released all slaves
[ 1558.062632][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'.
[ 1558.273623][T17830] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1558.376043][T17830] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1558.478659][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1558.564379][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1558.740877][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1558.747468][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1559.237764][T17830] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1559.299718][T17987] binder_alloc: 17982: binder_alloc_buf, no vma
[ 1559.588938][T17830] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1559.689297][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1560.533270][T18002] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1560.542609][T17830] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1560.818381][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1561.256259][T17830] 8021q: adding VLAN 0 to HW filter on device team0
[ 1561.384536][T13948] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1561.391848][T13948] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1561.437249][T13948] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1561.444551][T13948] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1561.752967][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1561.939063][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1562.702173][T18026] binder_alloc: 18022: binder_alloc_buf, no vma
[ 1563.009747][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1563.589789][T17830] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1563.756198][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1564.121332][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1565.206759][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1565.232488][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1566.417009][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1567.220181][T17830] veth0_vlan: entered promiscuous mode
[ 1567.265319][T17830] veth1_vlan: entered promiscuous mode
[ 1567.541674][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1567.692465][T17830] veth0_macvtap: entered promiscuous mode
[ 1567.705752][T17830] veth1_macvtap: entered promiscuous mode
[ 1568.025147][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1568.053005][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.063331][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1568.077329][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.087536][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1568.098467][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.109377][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1568.120737][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.131975][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1568.142927][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.172790][T17830] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1568.234244][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1568.294898][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.308152][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1568.321986][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.332518][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1568.345463][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.356291][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1568.370983][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.398365][T17830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1568.423904][T17830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1568.457776][T17830] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1568.481235][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1569.388446][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1569.509924][T17830] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1569.560074][T17830] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1569.568866][T17830] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1569.716582][T17830] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1570.360669][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1570.394201][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1570.683506][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1571.382060][T13772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1571.420746][T13772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1571.740730][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1572.924498][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1573.781411][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1574.045152][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1574.484972][T18207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1574.503815][T18207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1574.513646][T18207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1574.526358][T18207] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1576.580562][T10660] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1577.031965][T10660] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1577.056170][T10660] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1577.114458][T10660] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1577.132396][T10660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1577.168809][T10660] usb 7-1: SerialNumber: syz
[ 1577.433620][T10660] usb 7-1: 0:2 : does not exist
[ 1577.468558][T10660] usb 7-1: unit 5 not found!
[ 1577.546809][T10660] usb 7-1: USB disconnect, device number 3
[ 1577.695897][T14809] udevd[14809]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1581.567873][T18292] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1584.901826][T18366] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1588.297779][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'.
[ 1588.430543][T18405] syzkaller0: entered promiscuous mode
[ 1591.423756][T15108] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1592.780843][T15108] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1592.812128][T15108] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1592.823523][T15108] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1592.841377][T15108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1592.866817][T15108] usb 7-1: SerialNumber: syz
[ 1592.910873][T18456] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1593.126569][T15108] usb 7-1: 0:2 : does not exist
[ 1593.176328][T15108] usb 7-1: unit 5 not found!
[ 1593.241997][T15108] usb 7-1: USB disconnect, device number 4
[ 1593.293570][T17608] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1593.746065][T17608] usb 8-1: config 0 has no interfaces?
[ 1593.814417][T17608] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1593.823787][T17608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1593.836367][T17608] usb 8-1: Product: syz
[ 1593.843366][T17608] usb 8-1: Manufacturer: syz
[ 1593.848152][T17608] usb 8-1: SerialNumber: syz
[ 1593.979953][T17608] usb 8-1: config 0 descriptor??
[ 1595.210282][   T23] usb 8-1: USB disconnect, device number 2
[ 1600.389090][T17608] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1600.464227][T18524] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1600.622366][T17608] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1600.653987][T17608] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1600.699084][T17608] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1600.731004][T17608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1600.752628][T17608] usb 4-1: SerialNumber: syz
[ 1600.994155][T17608] usb 4-1: 0:2 : does not exist
[ 1601.031224][T17608] usb 4-1: unit 5 not found!
[ 1601.073730][T17608] usb 4-1: USB disconnect, device number 18
[ 1601.293498][T14809] udevd[14809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1601.788958][T10911] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[ 1601.853708][T18541] binder_alloc: 18540: binder_alloc_buf, no vma
[ 1601.944308][T18544] binder_alloc: 18540: binder_alloc_buf, no vma
[ 1602.004942][T10911] usb 5-1: config 0 has no interfaces?
[ 1602.013109][T10911] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1602.022848][T10911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1602.040735][T10911] usb 5-1: Product: syz
[ 1602.051088][T10911] usb 5-1: Manufacturer: syz
[ 1602.062939][T10911] usb 5-1: SerialNumber: syz
[ 1602.086725][T10911] usb 5-1: config 0 descriptor??
[ 1602.740113][    T8] usb 5-1: USB disconnect, device number 10
[ 1609.976345][T18619] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1610.800307][T10660] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1611.131136][T10660] usb 8-1: config 0 has no interfaces?
[ 1611.201967][T10660] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1611.327191][T10660] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1611.422465][T10660] usb 8-1: Product: syz
[ 1611.437605][T18646] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1611.474278][T10660] usb 8-1: Manufacturer: syz
[ 1611.489379][T10660] usb 8-1: SerialNumber: syz
[ 1611.834481][T10660] usb 8-1: config 0 descriptor??
[ 1612.194522][T17608] usb 8-1: USB disconnect, device number 3
[ 1616.432695][T18697] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1617.418371][T18703] syzkaller0: entered promiscuous mode
[ 1617.999349][ T5767] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1618.084266][T18716] loop4: detected capacity change from 0 to 1764
[ 1618.256865][ T5767] usb 8-1: config 0 has no interfaces?
[ 1618.281351][T18720] netlink: 'syz.4.2847': attribute type 11 has an invalid length.
[ 1618.289834][T18720] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2847'.
[ 1618.401568][T18720] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1618.451053][ T5767] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1618.461285][ T5767] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.469507][ T5767] usb 8-1: Product: syz
[ 1618.474665][ T5767] usb 8-1: Manufacturer: syz
[ 1618.479571][ T5767] usb 8-1: SerialNumber: syz
[ 1618.522731][ T5767] usb 8-1: config 0 descriptor??
[ 1618.846320][T15108] usb 8-1: USB disconnect, device number 4
[ 1619.630545][T18745] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1620.090387][T18757] netlink: 'syz.3.2854': attribute type 32 has an invalid length.
[ 1620.116056][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'.
[ 1620.138032][T18757] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[ 1622.113635][T18774] loop4: detected capacity change from 0 to 512
[ 1622.833820][T18774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1624.923429][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1624.937795][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1625.425828][T10784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1627.718382][T18791] netlink: 'syz.7.2861': attribute type 21 has an invalid length.
[ 1627.822654][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'.
[ 1638.861541][T18928] binder: BINDER_SET_CONTEXT_MGR already set
[ 1638.867752][T18928] binder: 18927:18928 ioctl 4018620d 200000004a80 returned -16
[ 1638.988831][T18932] overlayfs: missing 'lowerdir'
[ 1639.745931][    T8] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[ 1639.991004][    T8] usb 5-1: config 0 has no interfaces?
[ 1640.029396][    T8] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1640.054528][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.083148][    T8] usb 5-1: Product: syz
[ 1640.087422][    T8] usb 5-1: Manufacturer: syz
[ 1640.098005][    T8] usb 5-1: SerialNumber: syz
[ 1640.140068][    T8] usb 5-1: config 0 descriptor??
[ 1640.400031][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'.
[ 1640.432140][T17608] usb 5-1: USB disconnect, device number 11
[ 1641.960462][T18970] loop7: detected capacity change from 0 to 32768
[ 1642.108684][T18970] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1642.266594][T18970] XFS (loop7): Ending clean mount
[ 1642.621846][T17830] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1642.907754][T18996] binder: BINDER_SET_CONTEXT_MGR already set
[ 1642.940692][T18996] binder: 18995:18996 ioctl 4018620d 200000004a80 returned -16
[ 1643.200774][T19002] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1643.225928][T19002] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1646.616526][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'.
[ 1647.532984][T19032] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1647.578989][T19032] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1648.267739][T19041] binder: BINDER_SET_CONTEXT_MGR already set
[ 1648.316443][T19041] binder: 19039:19041 ioctl 4018620d 200000004a80 returned -16
[ 1654.053655][T19075] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1654.086615][T19075] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1658.339079][T19114] overlayfs: missing 'lowerdir'
[ 1665.185348][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[ 1668.315790][T19169] overlayfs: missing 'lowerdir'
[ 1671.337902][T16209] Bluetooth: hci3: unexpected event for opcode 0x007f
[ 1673.088794][T19201] overlayfs: missing 'lowerdir'
[ 1675.113505][T19225] binder: BINDER_SET_CONTEXT_MGR already set
[ 1675.121324][T19225] binder: 19224:19225 ioctl 4018620d 200000004a80 returned -16
[ 1676.404347][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[ 1678.404762][T19243] overlayfs: missing 'workdir'
[ 1678.770698][T16209] Bluetooth: hci0: unexpected event for opcode 0x007f
[ 1679.533806][T19250] netlink: 'syz.3.2961': attribute type 21 has an invalid length.
[ 1680.105497][T19258] binder: BINDER_SET_CONTEXT_MGR already set
[ 1680.117833][T19258] binder: 19257:19258 ioctl 4018620d 200000004a80 returned -16
[ 1682.930271][T19271] overlayfs: missing 'workdir'
[ 1683.177680][T16209] Bluetooth: hci3: unexpected event for opcode 0x007f
[ 1685.135848][T19296] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1685.411728][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'.
[ 1685.906935][T19300] binder: BINDER_SET_CONTEXT_MGR already set
[ 1685.931032][T19300] binder: 19299:19300 ioctl 4018620d 200000004a80 returned -16
[ 1686.563710][T19295] loop3: detected capacity change from 0 to 32768
[ 1686.632959][T19311] overlayfs: missing 'workdir'
[ 1686.716226][T19295] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1688.132349][T19295] XFS (loop3): Ending clean mount
[ 1688.284175][T19321] netlink: 'syz.4.2979': attribute type 2 has an invalid length.
[ 1688.292114][T19321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2979'.
[ 1689.155730][T15364] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1689.387103][T19324] loop4: detected capacity change from 0 to 512
[ 1689.648519][T19324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1690.051612][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1690.058166][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1691.083213][T10784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1691.715426][T19337] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1697.398680][T16209] Bluetooth: hci4: unexpected event for opcode 0x007f
[ 1699.494376][T19371] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1699.976947][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'.
[ 1706.167470][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3003'.
[ 1716.427970][T19460] netlink: 'syz.3.3020': attribute type 21 has an invalid length.
[ 1716.489107][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'.
[ 1719.290477][T19476] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1726.266102][T19508] netlink: 'syz.6.3031': attribute type 21 has an invalid length.
[ 1728.260843][T19518] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1730.813945][T19528] overlayfs: missing 'lowerdir'
[ 1733.068500][T19538] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1733.088492][T19538] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1735.955984][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3030'.
[ 1735.979668][T16209] Bluetooth: hci0: unexpected event for opcode 0x007f
[ 1736.591680][T19559] netlink: 'syz.6.3041': attribute type 21 has an invalid length.
[ 1738.979756][T19569] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1739.027983][T19571] overlayfs: missing 'lowerdir'
[ 1739.513655][T19577] netlink: 'syz.6.3049': attribute type 2 has an invalid length.
[ 1739.521786][T19577] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3049'.
[ 1743.068640][T19591] loop7: detected capacity change from 0 to 16
[ 1743.103139][T19591] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1744.625268][T19600] IPVS: length: 24 != 67608
[ 1747.478813][T19612] overlayfs: missing 'lowerdir'
[ 1747.775892][T19614] loop3: detected capacity change from 0 to 16
[ 1747.814753][T19614] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1750.458477][T19630] netlink: 'syz.4.3056': attribute type 21 has an invalid length.
[ 1755.706160][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1755.756374][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1757.065195][T19679] loop6: detected capacity change from 0 to 16
[ 1757.072634][T19679] MTD: Attempt to mount non-MTD device "/dev/loop6"
[ 1760.163906][T19687] netlink: 'syz.3.3072': attribute type 21 has an invalid length.
[ 1762.685224][T19706] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3079'.
[ 1762.985805][T19708] loop3: detected capacity change from 0 to 1764
[ 1763.202249][T19709] netlink: 'syz.3.3080': attribute type 11 has an invalid length.
[ 1763.211269][T19709] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3080'.
[ 1763.307908][T19712] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1763.530398][T19714] overlayfs: missing 'lowerdir'
[ 1765.028537][T19720] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[ 1768.758887][T19733] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3088'.
[ 1769.079448][T19740] overlayfs: missing 'lowerdir'
[ 1770.367027][T19748] loop3: detected capacity change from 0 to 128
[ 1770.427908][T19748] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1770.462592][T19748] hpfs: filesystem error: improperly stopped
[ 1770.469252][T19748] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1770.478138][T19748] hpfs: You really don't want any checks? You are crazy...
[ 1770.507439][T19748] hpfs: hpfs_map_sector(): read error
[ 1770.527620][T19748] hpfs: code page support is disabled
[ 1770.541390][T19748] hpfs: hpfs_map_4sectors(): unaligned read
[ 1770.550277][T19748] hpfs: hpfs_map_4sectors(): unaligned read
[ 1770.557074][T19748] hpfs: filesystem error: unable to find root dir
[ 1770.971952][T19757] IPVS: length: 24 != 67608
[ 1773.479675][T19772] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3098'.
[ 1779.369304][T19796] netlink: 'syz.7.3105': attribute type 21 has an invalid length.
[ 1779.926178][T19800] overlayfs: missing 'lowerdir'
[ 1780.139525][T19805] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3108'.
[ 1780.149947][    T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[ 1780.365969][    T9] usb 8-1: config 0 has no interfaces?
[ 1780.376967][    T9] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1780.395547][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1780.410986][    T9] usb 8-1: Product: syz
[ 1780.426124][    T9] usb 8-1: Manufacturer: syz
[ 1780.431260][    T9] usb 8-1: SerialNumber: syz
[ 1782.054122][    T9] usb 8-1: config 0 descriptor??
[ 1782.320110][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3107'.
[ 1782.368933][T17608] usb 8-1: USB disconnect, device number 5
[ 1791.329848][T19848] netlink: 'syz.3.3115': attribute type 21 has an invalid length.
[ 1792.588713][T17608] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[ 1792.846849][T17608] usb 4-1: config 0 has no interfaces?
[ 1793.470050][T17608] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1793.872654][T17608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1793.880773][T17608] usb 4-1: Product: syz
[ 1793.892083][T17608] usb 4-1: Manufacturer: syz
[ 1793.897699][T17608] usb 4-1: SerialNumber: syz
[ 1793.957762][T17608] usb 4-1: config 0 descriptor??
[ 1795.152422][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'.
[ 1795.181521][T17608] usb 4-1: USB disconnect, device number 19
[ 1795.596724][T19868] loop7: detected capacity change from 0 to 1764
[ 1795.906182][T19874] netlink: 'syz.7.3122': attribute type 11 has an invalid length.
[ 1795.914427][T19874] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3122'.
[ 1796.263738][T19873] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1799.994507][T19889] netlink: 'syz.7.3127': attribute type 21 has an invalid length.
[ 1801.057215][T19897] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3129'.
[ 1806.267193][T19927] netlink: 'syz.4.3138': attribute type 21 has an invalid length.
[ 1811.845446][T19954] netlink: 'syz.4.3141': attribute type 2 has an invalid length.
[ 1811.994416][    T8] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[ 1812.190582][    T8] usb 7-1: config 0 has no interfaces?
[ 1812.206464][    T8] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1812.245186][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1812.317897][    T8] usb 7-1: Product: syz
[ 1812.322157][    T8] usb 7-1: Manufacturer: syz
[ 1812.360054][    T8] usb 7-1: SerialNumber: syz
[ 1812.401597][    T8] usb 7-1: config 0 descriptor??
[ 1812.638515][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3132'.
[ 1812.676200][T10911] usb 7-1: USB disconnect, device number 5
[ 1814.144504][T10911] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1814.358239][T10911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1814.403165][T10911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1814.461497][T10911] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1814.495002][T10911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1814.542132][T10911] usb 7-1: SerialNumber: syz
[ 1815.648391][T10911] usb 7-1: 0:2 : does not exist
[ 1815.653507][T10911] usb 7-1: unit 7 not found!
[ 1815.738161][T10911] usb 7-1: USB disconnect, device number 6
[ 1815.877767][T19985] udevd[19985]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1819.587561][T16209] Bluetooth: hci3: unexpected event for opcode 0x007f
[ 1820.949458][T10911] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[ 1821.093296][T20036] netlink: 'syz.4.3148': attribute type 21 has an invalid length.
[ 1821.289877][T10911] usb 7-1: config 0 has no interfaces?
[ 1821.362479][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1822.045305][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1823.537634][T10911] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1823.556620][T10911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1823.564856][T10911] usb 7-1: Product: syz
[ 1823.571185][T10911] usb 7-1: Manufacturer: syz
[ 1823.575933][T10911] usb 7-1: SerialNumber: syz
[ 1823.583715][T10911] usb 7-1: config 0 descriptor??
[ 1823.999554][    T9] usb 7-1: USB disconnect, device number 7
[ 1824.477468][T20052] IPVS: length: 24 != 67608
[ 1825.007353][T20060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3157'.
[ 1825.173505][T20064] netlink: 'syz.3.3151': attribute type 2 has an invalid length.
[ 1831.325602][T13346] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 1831.562929][T13346] usb 5-1: config 0 has no interfaces?
[ 1831.575301][T13346] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1831.610479][T13346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1831.645060][T13346] usb 5-1: Product: syz
[ 1831.672534][T16209] Bluetooth: hci3: unexpected event for opcode 0x007f
[ 1831.672627][T13346] usb 5-1: Manufacturer: syz
[ 1831.690507][T13346] usb 5-1: SerialNumber: syz
[ 1831.708322][T13346] usb 5-1: config 0 descriptor??
[ 1831.746900][T20111] IPVS: length: 24 != 67608
[ 1831.853639][T20115] netlink: 'syz.7.3163': attribute type 21 has an invalid length.
[ 1832.459112][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3164'.
[ 1832.593052][T13346] usb 5-1: USB disconnect, device number 12
[ 1834.963842][T20127] netlink: 'syz.7.3173': attribute type 2 has an invalid length.
[ 1837.029076][T20150] IPVS: length: 24 != 67608
[ 1838.231325][T20170] netlink: 'syz.4.3181': attribute type 21 has an invalid length.
[ 1838.314008][    T8] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 1839.790885][    T8] usb 7-1: config 0 has no interfaces?
[ 1839.815607][    T8] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1839.852184][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1839.869700][    T8] usb 7-1: Product: syz
[ 1839.880525][    T8] usb 7-1: Manufacturer: syz
[ 1839.896532][    T8] usb 7-1: SerialNumber: syz
[ 1840.058422][    T8] usb 7-1: config 0 descriptor??
[ 1841.851851][    T8] usb 7-1: USB disconnect, device number 8
[ 1843.120185][T20200] IPVS: length: 24 != 67608
[ 1843.235356][T17608] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1843.244833][   T27] kworker/dying (27) used greatest stack depth: 15696 bytes left
[ 1843.565741][T17608] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1843.649412][T17608] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1843.881579][T17608] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1843.925956][T17608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1843.934047][T17608] usb 5-1: SerialNumber: syz
[ 1844.113195][T20212] netlink: 'syz.7.3186': attribute type 2 has an invalid length.
[ 1844.502420][T17608] usb 5-1: 0:2 : does not exist
[ 1844.575799][T17608] usb 5-1: unit 5 not found!
[ 1844.741378][T17608] usb 5-1: USB disconnect, device number 13
[ 1844.907981][T19985] udevd[19985]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1845.452974][T20230] netlink: 'syz.6.3191': attribute type 21 has an invalid length.
[ 1850.710526][T20242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3193'.
[ 1852.302884][T20259] IPVS: length: 24 != 67608
[ 1854.202553][T20284] netlink: 'syz.6.3200': attribute type 2 has an invalid length.
[ 1858.533897][T16209] Bluetooth: hci0: unexpected event for opcode 0x007f
[ 1859.567520][T20322] IPVS: length: 24 != 67608
[ 1864.274463][T20341] netlink: 'syz.6.3213': attribute type 2 has an invalid length.
[ 1865.401396][T20350] netlink: 'syz.4.3203': attribute type 21 has an invalid length.
[ 1869.731778][T20374] IPVS: length: 24 != 67608
[ 1871.236516][T16209] Bluetooth: hci3: unexpected event for opcode 0x007f
[ 1874.461506][T20414] netlink: 'syz.6.3222': attribute type 2 has an invalid length.
[ 1876.882922][T20434] netlink: 'syz.7.3223': attribute type 21 has an invalid length.
[ 1879.574588][T20446] IPVS: length: 24 != 67608
[ 1880.475606][T16209] Bluetooth: hci3: unexpected event for opcode 0x007f
[ 1880.654850][T20455] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3230'.
[ 1887.022023][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1887.028542][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1890.595473][T20506] netlink: 'syz.3.3239': attribute type 21 has an invalid length.
[ 1899.540414][T20565] netlink: 'syz.3.3250': attribute type 21 has an invalid length.
[ 1901.948648][T20573] IPVS: length: 24 != 67608
[ 1904.306132][T20588] netlink: 'syz.7.3258': attribute type 2 has an invalid length.
[ 1904.361293][    C0] 
[ 1904.363702][    C0] ================================
[ 1904.368845][    C0] WARNING: inconsistent lock state
[ 1904.373997][    C0] syzkaller #0 Not tainted
[ 1904.378448][    C0] --------------------------------
[ 1904.383592][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[ 1904.390476][    C0] syz.7.3258/20585 [HC0[0]:SC1[1]:HE1:SE0] takes:
[ 1904.396936][    C0] ffff88806b732c70 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x180/0x990
[ 1904.406622][    C0] {SOFTIRQ-ON-W} state was registered at:
[ 1904.412375][    C0]   lock_acquire+0x19e/0x420
[ 1904.417079][    C0]   _raw_spin_lock_nested+0x32/0x50
[ 1904.422538][    C0]   __sk_receive_skb+0x180/0x990
[ 1904.427520][    C0]   pep_do_rcv+0x682/0xa90
[ 1904.431982][    C0]   __release_sock+0x1e5/0x460
[ 1904.436821][    C0]   release_sock+0x5f/0x1c0
[ 1904.441366][    C0]   pep_sock_accept+0xd58/0x12d0
[ 1904.446350][    C0]   pn_socket_accept+0x12a/0x370
[ 1904.451330][    C0]   do_accept+0x4d8/0x6c0
[ 1904.455700][    C0]   __sys_accept4+0x9b/0x100
[ 1904.460338][    C0]   __x64_sys_accept+0x7d/0x90
[ 1904.465149][    C0]   do_syscall_64+0x55/0xb0
[ 1904.469790][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1904.475893][    C0] irq event stamp: 4044
[ 1904.480073][    C0] hardirqs last  enabled at (4044): [<ffffffff8a90f5c3>] _raw_spin_unlock_irq+0x23/0x50
[ 1904.489854][    C0] hardirqs last disabled at (4043): [<ffffffff8a90f38a>] _raw_spin_lock_irq+0x8a/0xf0
[ 1904.499478][    C0] softirqs last  enabled at (4038): [<ffffffff887a7a19>] netif_rx+0x79/0x90
[ 1904.508405][    C0] softirqs last disabled at (4039): [<ffffffff81526d2a>] do_softirq+0xfa/0x1a0
[ 1904.517444][    C0] 
[ 1904.517444][    C0] other info that might help us debug this:
[ 1904.525551][    C0]  Possible unsafe locking scenario:
[ 1904.525551][    C0] 
[ 1904.533044][    C0]        CPU0
[ 1904.536362][    C0]        ----
[ 1904.539682][    C0]   lock(slock-AF_PHONET/1);
[ 1904.544332][    C0]   <Interrupt>
[ 1904.547820][    C0]     lock(slock-AF_PHONET/1);
[ 1904.552639][    C0] 
[ 1904.552639][    C0]  *** DEADLOCK ***
[ 1904.552639][    C0] 
[ 1904.560824][    C0] 5 locks held by syz.7.3258/20585:
[ 1904.566069][    C0]  #0: ffff88807a9ff420 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230
[ 1904.576334][    C0]  #1: ffff88806b7326b0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0
[ 1904.586066][    C0]  #2: ffffffff8d132120 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x2cf/0x6f0
[ 1904.595711][    C0]  #3: ffff88806b731ff0 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18f/0x990
[ 1904.605559][    C0]  #4: ffff88806b732070 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x78f/0xc80
[ 1904.615054][    C0] 
[ 1904.615054][    C0] stack backtrace:
[ 1904.621005][    C0] CPU: 0 PID: 20585 Comm: syz.7.3258 Not tainted syzkaller #0
[ 1904.628518][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1904.638617][    C0] Call Trace:
[ 1904.641986][    C0]  <IRQ>
[ 1904.644892][    C0]  dump_stack_lvl+0x18c/0x250
[ 1904.649697][    C0]  ? show_regs_print_info+0x20/0x20
[ 1904.654988][    C0]  ? __kernel_text_address+0xd/0x30
[ 1904.660200][    C0]  ? unwind_get_return_address+0x91/0xc0
[ 1904.665879][    C0]  valid_state+0x13b/0x1d0
[ 1904.670333][    C0]  mark_lock_irq+0xad/0x900
[ 1904.674878][    C0]  ? stack_trace_save+0xaa/0x100
[ 1904.679851][    C0]  ? save_trace+0xcd0/0xcd0
[ 1904.684405][    C0]  ? mark_lock+0x94/0x320
[ 1904.688770][    C0]  ? save_trace+0x5d/0xcd0
[ 1904.693225][    C0]  ? verify_lock_unused+0x140/0x140
[ 1904.698537][    C0]  mark_lock+0x208/0x320
[ 1904.702788][    C0]  __lock_acquire+0xd1a/0x7d40
[ 1904.707569][    C0]  ? verify_lock_unused+0x140/0x140
[ 1904.712804][    C0]  ? mark_lock+0x94/0x320
[ 1904.717193][    C0]  ? verify_lock_unused+0x140/0x140
[ 1904.722420][    C0]  ? sk_filter_trim_cap+0x18a/0x900
[ 1904.727647][    C0]  ? __lock_acquire+0x7d40/0x7d40
[ 1904.732745][    C0]  lock_acquire+0x19e/0x420
[ 1904.737267][    C0]  ? __sk_receive_skb+0x180/0x990
[ 1904.742329][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1904.747751][    C0]  ? sk_filter_trim_cap+0x18a/0x900
[ 1904.753007][    C0]  ? copy_bpf_fprog_from_user+0x2d0/0x2d0
[ 1904.758764][    C0]  ? __lock_acquire+0x7d40/0x7d40
[ 1904.763801][    C0]  ? __lock_acquire+0x1273/0x7d40
[ 1904.768833][    C0]  _raw_spin_lock_nested+0x32/0x50
[ 1904.773960][    C0]  ? __sk_receive_skb+0x180/0x990
[ 1904.778994][    C0]  __sk_receive_skb+0x180/0x990
[ 1904.783862][    C0]  pep_do_rcv+0x682/0xa90
[ 1904.788202][    C0]  ? pep_recvmsg+0x600/0x600
[ 1904.792803][    C0]  ? phonet_rcv+0x78f/0xc80
[ 1904.797331][    C0]  __sk_receive_skb+0x436/0x990
[ 1904.802197][    C0]  phonet_rcv+0x78f/0xc80
[ 1904.806556][    C0]  ? phonet_proto_unregister+0x130/0x130
[ 1904.812196][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1904.818209][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1904.823675][    C0]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1904.828711][    C0]  ? phonet_proto_unregister+0x130/0x130
[ 1904.834353][    C0]  __netif_receive_skb+0xcc/0x290
[ 1904.839390][    C0]  ? process_backlog+0x2cf/0x6f0
[ 1904.844340][    C0]  process_backlog+0x391/0x6f0
[ 1904.849139][    C0]  ? trigger_rx_softirq+0x60/0x60
[ 1904.854179][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1904.860219][    C0]  ? lock_chain_count+0x20/0x20
[ 1904.865081][    C0]  __napi_poll+0xc0/0x460
[ 1904.869429][    C0]  ? net_rx_action+0x3a0/0xc40
[ 1904.874215][    C0]  net_rx_action+0x616/0xc40
[ 1904.878824][    C0]  ? net_tx_action+0x980/0x980
[ 1904.883598][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1904.889588][    C0]  ? lock_chain_count+0x20/0x20
[ 1904.894440][    C0]  ? lapic_next_event+0x11/0x20
[ 1904.899328][    C0]  handle_softirqs+0x280/0x820
[ 1904.904102][    C0]  ? do_softirq+0xfa/0x1a0
[ 1904.908529][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1904.913126][    C0]  ? netif_rx+0x79/0x90
[ 1904.917306][    C0]  do_softirq+0xfa/0x1a0
[ 1904.921562][    C0]  </IRQ>
[ 1904.924569][    C0]  <TASK>
[ 1904.927537][    C0]  ? __local_bh_enable_ip+0x1c0/0x1c0
[ 1904.932948][    C0]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[ 1904.938963][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1904.943740][    C0]  __local_bh_enable_ip+0x184/0x1c0
[ 1904.948943][    C0]  ? _local_bh_enable+0xa0/0xa0
[ 1904.953801][    C0]  netif_rx+0x83/0x90
[ 1904.957794][    C0]  pn_send+0x553/0x7f0
[ 1904.961939][    C0]  pn_skb_send+0x218/0x510
[ 1904.966373][    C0]  pep_sock_close+0x2c1/0x5b0
[ 1904.971067][    C0]  pn_socket_release+0x95/0xb0
[ 1904.975859][    C0]  sock_close+0xbd/0x230
[ 1904.980121][    C0]  ? sock_mmap+0xa0/0xa0
[ 1904.984370][    C0]  __fput+0x234/0x970
[ 1904.988406][    C0]  task_work_run+0x1d4/0x260
[ 1904.993013][    C0]  ? task_work_cancel+0x220/0x220
[ 1904.998241][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1905.003743][    C0]  exit_to_user_mode_loop+0xe6/0x110
[ 1905.009048][    C0]  exit_to_user_mode_prepare+0xee/0x180
[ 1905.014608][    C0]  syscall_exit_to_user_mode+0x1a/0x50
[ 1905.020079][    C0]  do_syscall_64+0x61/0xb0
[ 1905.024501][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1905.029217][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1905.033908][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1905.039812][    C0] RIP: 0033:0x7f631479ce59
[ 1905.044249][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1905.064062][    C0] RSP: 002b:00007ffd339133a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1905.072763][    C0] RAX: 0000000000000000 RBX: 00007ffd33913490 RCX: 00007f631479ce59
[ 1905.080781][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1905.088779][    C0] RBP: 00000000001c86ce R08: 0000000000000001 R09: 0000000000000000
[ 1905.096764][    C0] R10: 0000001b2d020000 R11: 0000000000000246 R12: 00007ffd339134d0
[ 1905.104752][    C0] R13: 00007f6314a15fac R14: 00000000001c877f R15: 00007f6314a15fa0
[ 1905.112829][    C0]  </TASK>
[ 1905.167025][T20585] gprs0: detached