last executing test programs:

24m59.699911543s ago: executing program 32 (id=7):
socket(0xa, 0x802, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

24m44.271606384s ago: executing program 33 (id=21):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x418, 0x218, 0x218, 0x0, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@arp={@broadcast, @private=0xa010101, 0xffffffff, 0xffffffff, 0xf, 0xf, {@mac=@random="c0f0469e2312", {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0xd7, 0x7, 0x7, 0xf5, 0x7, 'ipvlan1\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x22}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @empty, @local, 0x2, 0x1}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x1d}, 0xffff00, 0xffffffff, 0x10, 0xb, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff]}}, 0x2, 0x5, 0x3ff, 0x1, 0x1ff, 0xa45, 'syzkaller0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0800010003000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]})
writev(r6, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r7=>0x0})
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b00010062726964676500004800028005001900020000000500"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)

22m29.944203376s ago: executing program 34 (id=171):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setpgid(r0, r0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0x80000a)

13m30.35057155s ago: executing program 4 (id=832):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/210, 0xd2, 0x0, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0xca, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

13m30.206779629s ago: executing program 4 (id=834):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0)
ioctl$COMEDI_LOCK(r0, 0x6405)

13m30.106912443s ago: executing program 4 (id=835):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
close(r4)
r5 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0xc4, 0x2c, 0xf3f, 0x70fd2c, 0x5dddbbd, {0x0, 0x0, 0x0, r6, {0xc}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xd, 0x6, 0x8, 0x1, 0xfbff, 0x8000, 0x4403, 0x10001, [{0x8, 0x8, 0x5, 0x160a}, {0xffffd89d, 0x0, 0x4b11, 0x5}, {0x8, 0xdd, 0x9, 0x2}, {0x8, 0xfffffff7, 0x100, 0x7531}, {0x7, 0xb, 0x10c000, 0x1}, {0xc71, 0x3ff, 0x9, 0x6}, {0x3, 0x6, 0x8, 0xffe}, {0x4, 0x9, 0xffff, 0x7}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)='\a', 0x1}], 0x1}, 0x20004014)

13m29.251504781s ago: executing program 4 (id=836):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

13m29.233663724s ago: executing program 4 (id=837):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2d, 'cpu'}]}, 0x5)
write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x4, 0x10000000, 0xe, 0x4, 0x8, 0x1, 0x0, 0x0, 0x69bc5c594e12aa77, 0xd0}}, 0x50)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

13m27.759197611s ago: executing program 4 (id=844):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
bind$bt_hci(r0, &(0x7f0000000100), 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

13m27.406656711s ago: executing program 35 (id=844):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
bind$bt_hci(r0, &(0x7f0000000100), 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

12m44.753179372s ago: executing program 0 (id=1004):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m44.181548028s ago: executing program 0 (id=1010):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(0xffffffffffffffff, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

12m43.894978378s ago: executing program 0 (id=1013):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x22010008)

12m43.667797429s ago: executing program 0 (id=1016):
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x1, 0x800, 0x1, {0x8, @sliced={0x1, [0x7, 0x9, 0x9, 0x793, 0xffff, 0x349, 0x9f, 0x8, 0x7, 0xf, 0x1, 0x5, 0x800, 0x1, 0x1, 0x4, 0x0, 0x7fff, 0x20, 0xff, 0x0, 0x2, 0x5, 0xf, 0x710, 0x1ff, 0x7ff, 0x6, 0xd, 0x7fff, 0x6, 0xf420, 0x9, 0x5, 0x9, 0xa21c, 0x6, 0xffff, 0x2, 0x8000, 0x9, 0x8, 0xb3, 0x7, 0x0, 0x1, 0x200, 0xfffe], 0xed}}, 0x4})

12m43.453936356s ago: executing program 0 (id=1018):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x2, 0x3, 0x7, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m41.861945029s ago: executing program 0 (id=1028):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004)

12m39.557952877s ago: executing program 8 (id=1050):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0)

12m38.722280034s ago: executing program 8 (id=1057):
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x200, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x801}, 0xfffffd81)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x2, 0x3, 0x7, 0x4})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12m37.839208054s ago: executing program 8 (id=1059):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

12m37.56342947s ago: executing program 8 (id=1064):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

12m36.494053475s ago: executing program 8 (id=1074):
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)

12m36.333489335s ago: executing program 8 (id=1075):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x38, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x9}]}}]}, 0x38}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12m36.180110223s ago: executing program 5 (id=1077):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0, 0x5000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e00000010b000200e00000010c00028005000100000000002400028014000180080001"], 0x64}, 0x1, 0x0, 0x0, 0x20040044}, 0x40110)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT])
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

12m36.027605408s ago: executing program 5 (id=1079):
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="3c75c2", 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1}, 0x2a45}], 0x1, 0x40000043, 0x0)
setrlimit(0x9, &(0x7f0000000400))
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0)
io_setup(0x2004, &(0x7f0000000680))

12m34.813360519s ago: executing program 5 (id=1083):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/118, 0x76}], 0x1}, 0x8}], 0x1, 0x2040, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8003, 0x8)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

12m33.539060661s ago: executing program 5 (id=1086):
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

12m33.275320887s ago: executing program 5 (id=1088):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xc5, 0x6, 0xca1, 0x0, 0x10003, 0x100003d, 0x400200cc4, 0xffffffffffffffd3, 0x80000001, 0x9, 0x8001, 0x4, 0x2, 0x4, 0x2, 0x80008d], 0x60000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

12m32.545511754s ago: executing program 5 (id=1094):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c, @empty, @local, 0x0, 0x0, 0x1000002}})

12m25.794945794s ago: executing program 36 (id=1028):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x7, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004)

12m20.079517841s ago: executing program 37 (id=1075):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x38, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x9}]}}]}, 0x38}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12m16.382997593s ago: executing program 38 (id=1094):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c, @empty, @local, 0x0, 0x0, 0x1000002}})

7m27.204108127s ago: executing program 1 (id=1989):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880)

7m26.870213085s ago: executing program 1 (id=1990):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r1, 0xae9a)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xce, 0x9, 0x82, '\x00', 0x6})

7m26.663245341s ago: executing program 1 (id=1992):
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x3b, 0x3000}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900099a453001f", 0x7, 0x20004080, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)
socket$nl_route(0x10, 0x3, 0x0)

7m25.282912929s ago: executing program 1 (id=1996):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10)
bind$tipc(r3, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900))
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x200}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
lstat(&(0x7f00000010c0)='./file0\x00', 0x0)

7m23.102305464s ago: executing program 1 (id=2000):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x1001)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141700, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x21, &(0x7f0000000180)={@local, @remote, @void, {@llc={0x4, {@snap={0x0, 0x1, "f469", "93b415", 0x811, "6928d4efc85cdc320ee2"}}}}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0x0, 0xfffffffc, {{@in=@loopback, 0x4d6}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x8000, 0x0, 0x8000, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4}, {}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xfffffff9, 0x2}}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x0)

7m21.007891499s ago: executing program 1 (id=2001):
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x10})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
write$P9_RFSYNC(r2, &(0x7f00000001c0)={0x7, 0x33, 0x2}, 0x7)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x36c, 0x40810)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
setsockopt$inet6_int(r2, 0x29, 0xc0, &(0x7f0000000300)=0x800, 0x4)
ftruncate(r3, 0x80079a0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05022dbd7000fedbdf250100000000000000024100000010001375754e35f76a58afc4f85a6f"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000affe984035cc3f690fe7010203010902400001000000000904330000020203000a240100040802010207240404"], 0x0)
lseek(r3, 0x0, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)

7m4.056876242s ago: executing program 39 (id=2001):
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x10})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
write$P9_RFSYNC(r2, &(0x7f00000001c0)={0x7, 0x33, 0x2}, 0x7)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x36c, 0x40810)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fc", 0x51}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
setsockopt$inet6_int(r2, 0x29, 0xc0, &(0x7f0000000300)=0x800, 0x4)
ftruncate(r3, 0x80079a0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05022dbd7000fedbdf250100000000000000024100000010001375754e35f76a58afc4f85a6f"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000affe984035cc3f690fe7010203010902400001000000000904330000020203000a240100040802010207240404"], 0x0)
lseek(r3, 0x0, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)

2m32.851209415s ago: executing program 6 (id=2802):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008800)

2m32.687020547s ago: executing program 6 (id=2805):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000001020000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

2m31.214554985s ago: executing program 6 (id=2809):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x6322, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/24, 0x18}, 0x2}], 0x400000000000091, 0x40012161, 0x0)

2m29.955421256s ago: executing program 6 (id=2812):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040))
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2m29.398689576s ago: executing program 6 (id=2817):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
request_key(0x0, 0x0, &(0x7f0000000200)='q\xa9', 0x0)
close(0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func_proto, @datasec={0x3, 0x0, 0x0, 0xf, 0x2, [], "34aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "0374"}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000003c0)=""/143, 0x44, 0x8f, 0x1}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
io_setup(0x4, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000000c0)=[0x0])
rt_sigpending(0x0, 0x0)

2m28.261836075s ago: executing program 6 (id=2819):
syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESDEC], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000007})

17.910748752s ago: executing program 9 (id=3064):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0)

10.730189622s ago: executing program 2 (id=3074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

10.466510364s ago: executing program 9 (id=3076):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2})
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r5, r4, 0x1c, 0x3, 0x2})
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd25, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}]}, 0x34}}, 0x4000000)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400300c4590572988b70d0ce9086a1182a23f2a5a46c6d23b62a7a7e1ff021621272501f23ecfa7ac63496272eeec0df334b2eabcdebb6a32d634b79eca13d6659a88cfcdcb7533abdb0ebf6bd3ffc4830ddf592cf893f0b52abe6f08d25bcb57a9866f025fcb94b9886b5dba44e3c74a59fc7692960138d16e4082597cf408bd372a54c0407dfc2a0627ab4970ed5b77ac9105287de730447b5d0cfe217d977fb6ad887cb5440c8ecb25b248e69e7d195779fc2f70c68cf7605068e502ac863b30d5c5798d4", @ANYRES16=r8, @ANYBLOB="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"], 0x340}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)

10.453607214s ago: executing program 3 (id=3077):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$video(&(0x7f00000009c0), 0x7, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$kcm(0x1e, 0x1, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

9.816535013s ago: executing program 7 (id=3078):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)

9.814653233s ago: executing program 2 (id=3079):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)

8.937335092s ago: executing program 2 (id=3080):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1012, &(0x7f00000030c0)=ANY=[], 0x0)

8.921924886s ago: executing program 3 (id=3081):
r0 = syz_open_dev$evdev(0x0, 0x8c, 0x600)
ioctl$EVIOCGMASK(r0, 0x80104592, 0xfffffffffffffffe)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000})
socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x2000000}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdff8, 0x2, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

8.82426676s ago: executing program 7 (id=3082):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')

8.424219396s ago: executing program 2 (id=3083):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r1, 0x4b44, 0x10000000000004)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]})
timer_create(0x0, 0x0, &(0x7f0000000300))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = epoll_create(0x4583)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="42ed3a0a4a2e3269e17d8032d89c9e811ce6560fd7d0394198b5386c16b0dce02049d446e430902385965c36053d64bd3c0e68978dfaa7f229f9c2f5b84a722e1ae80108e6b8fcbdc32f98896a028629515ddd72ae526152df1cbdcc329ad8f866ceb6681669576682b33fe8a956f0f4e1b00d7b75ed47abcb9a9cd7887cd83a92b9933cbb877c30da23dc01a25aae0e821a84ee55099763107713aa72c2e28751610666449634eb16f3a082c142a01aee"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$netlink(0x10, 0x3, 0xc)

7.572887263s ago: executing program 3 (id=3084):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xb2a42000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000008c0)={0xc0})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

6.192182671s ago: executing program 3 (id=3085):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0)

5.269487758s ago: executing program 9 (id=3086):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x1c, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

5.132519997s ago: executing program 2 (id=3087):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="020300030c0000002cbd7000ffdbdf250100090000000000050006003c0000000a004e2400000008ff01000000120000000000000000000100f0000000000000ad000100000000000000070c00e600c00200080008000000c3"], 0x60}, 0x1, 0x7}, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1})
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d384", @ANYRES64=r1])
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(0x0, 0x6, 0x1000)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

3.912790721s ago: executing program 3 (id=3088):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x3)

3.318469563s ago: executing program 7 (id=3089):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

3.092783401s ago: executing program 9 (id=3090):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c)
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003a00290200800000facedf2502"], 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000)
r5 = getpgid(0x0)
prlimit64(r5, 0x17, &(0x7f0000000040)={0x5, 0x1}, &(0x7f0000000080))
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

3.058094358s ago: executing program 7 (id=3091):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)

3.004385554s ago: executing program 3 (id=3092):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)

1.812465365s ago: executing program 7 (id=3093):
r0 = syz_open_dev$evdev(0x0, 0x8c, 0x600)
ioctl$EVIOCGMASK(r0, 0x80104592, 0xfffffffffffffffe)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000})
socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x2000000}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdff8, 0x2, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.553092934s ago: executing program 9 (id=3094):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xb2a42000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000008c0)={0xc0})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

11.814785ms ago: executing program 2 (id=3095):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x64}}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
writev(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0)

5.355153ms ago: executing program 9 (id=3096):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r1, 0x4b44, 0x10000000000004)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]})
timer_create(0x0, 0x0, &(0x7f0000000300))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = epoll_create(0x4583)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="42ed3a0a4a2e3269e17d8032d89c9e811ce6560fd7d0394198b5386c16b0dce02049d446e430902385965c36053d64bd3c0e68978dfaa7f229f9c2f5b84a722e1ae80108e6b8fcbdc32f98896a028629515ddd72ae526152df1cbdcc329ad8f866ceb6681669576682b33fe8a956f0f4e1b00d7b75ed47abcb9a9cd7887cd83a92b9933cbb877c30da23dc01a25aae0e821a84ee55099763107713aa72c2e28751610666449634eb16f3a082c142a01aee"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$netlink(0x10, 0x3, 0xc)

0s ago: executing program 7 (id=3097):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0)

kernel console output (not intermixed with test programs):

.384979][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.567940][   T43] bridge_slave_0: left allmulticast mode
[ 1005.567979][   T43] bridge_slave_0: left promiscuous mode
[ 1005.568280][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1005.854909][   T43] bridge_slave_1: left allmulticast mode
[ 1005.854948][   T43] bridge_slave_1: left promiscuous mode
[ 1005.855199][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.017529][   T43] bridge_slave_0: left allmulticast mode
[ 1006.017559][   T43] bridge_slave_0: left promiscuous mode
[ 1006.018038][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.169705][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1007.255377][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1007.320742][   T43] bond0 (unregistering): Released all slaves
[ 1007.876995][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1007.960588][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1008.026574][   T43] bond0 (unregistering): Released all slaves
[ 1008.441448][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1008.527902][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1008.592115][   T43] bond0 (unregistering): Released all slaves
[ 1008.637303][T12779] tipc: Started in network mode
[ 1008.637337][T12779] tipc: Node identity 1a418ca794e3, cluster identity 4711
[ 1008.637530][T12779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1008.774196][T12770] tipc: Disabling bearer <eth:syzkaller0>
[ 1009.526521][T12802] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[ 1009.863234][T12175] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1010.142101][T12175] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1010.215690][T12175] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1010.244974][T12175] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1010.260105][T12175] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1010.316800][T12175] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1010.320955][T12175] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1010.387693][T12175] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1011.104855][   T43] hsr_slave_0: left promiscuous mode
[ 1011.144306][   T43] hsr_slave_1: left promiscuous mode
[ 1011.145212][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1011.177432][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1011.337582][   T43] hsr_slave_0: left promiscuous mode
[ 1011.357999][   T43] hsr_slave_1: left promiscuous mode
[ 1011.358968][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1011.412888][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1011.583628][   T43] hsr_slave_0: left promiscuous mode
[ 1011.625231][   T43] hsr_slave_1: left promiscuous mode
[ 1011.626503][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1011.654180][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1011.910669][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1503'.
[ 1011.910863][T12838] netlink: del zone limit has 8 unknown bytes
[ 1013.347033][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1013.415634][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1015.284725][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1015.333731][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1015.846688][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1015.900123][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1016.086317][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1016.108011][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1509'.
[ 1016.687588][T12881] binder: 12879:12881 ioctl 4018620d 0 returned -22
[ 1018.901088][T12175] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.954030][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1019.019981][T12175] 8021q: adding VLAN 0 to HW filter on device team0
[ 1019.108707][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.110091][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1019.422678][T12920] binder: 12919:12920 ioctl 4018620d 0 returned -22
[ 1019.503429][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.503535][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1021.428704][T12947] binder: 12945:12947 ioctl 4018620d 0 returned -22
[ 1021.439354][T12248] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1021.472746][T12248] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1021.557578][T12248] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1021.667568][T12248] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1021.689694][T12248] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1021.860643][T12248] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1021.888929][T12958] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1022.584759][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1022.656755][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1022.685573][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1022.703420][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1022.707252][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1022.906736][T12248] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1023.005158][T12248] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1023.066221][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1024.614458][T12293] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1024.750519][T12293] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1024.765325][T12293] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1024.806464][T12293] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1024.820278][T12293] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1024.984613][   T61] Bluetooth: hci4: command tx timeout
[ 1025.037323][T12293] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1025.076153][T13000] binder: 12998:13000 ioctl c0306201 0 returned -14
[ 1025.076619][T12293] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1025.115674][T12293] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1026.337703][T12248] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1026.347108][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1026.627621][T12248] 8021q: adding VLAN 0 to HW filter on device team0
[ 1026.873435][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.881822][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1026.966492][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.966628][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1027.154755][T13040] binder: 13039:13040 ioctl c0306201 0 returned -14
[ 1027.210863][   T61] Bluetooth: hci4: command tx timeout
[ 1028.113173][T12293] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1028.270883][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1029.138158][T13076] binder: 13075:13076 ioctl c0306201 0 returned -14
[ 1029.471049][T13082] binder: BINDER_SET_CONTEXT_MGR already set
[ 1029.471067][T13082] binder: 13081:13082 ioctl 4018620d 200000004a80 returned -16
[ 1029.566116][   T61] Bluetooth: hci4: command tx timeout
[ 1029.844908][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1029.956932][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1029.992654][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1029.994234][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1030.018801][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1030.416406][T12968] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1030.416559][T12968] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1030.416745][T12968] bridge_slave_0: entered allmulticast mode
[ 1030.418961][T12968] bridge_slave_0: entered promiscuous mode
[ 1030.423805][T12293] 8021q: adding VLAN 0 to HW filter on device team0
[ 1030.454875][ T6164] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1030.455407][T12968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1030.455629][T12968] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.456017][T12968] bridge_slave_1: entered allmulticast mode
[ 1030.460000][T12968] bridge_slave_1: entered promiscuous mode
[ 1030.614188][ T6164] usb 7-1: Using ep0 maxpacket: 16
[ 1030.614956][T12968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1030.622739][ T6164] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1030.622801][ T6164] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1030.622828][ T6164] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.680908][ T6164] usb 7-1: config 0 descriptor??
[ 1030.749663][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1030.753266][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1030.780904][T12968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1030.915248][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.915818][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1030.923795][T10478] usb 7-1: USB disconnect, device number 7
[ 1031.595984][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.596303][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1031.634507][T12968] team0: Port device team_slave_0 added
[ 1031.660506][T12968] team0: Port device team_slave_1 added
[ 1031.736385][   T61] Bluetooth: hci4: command tx timeout
[ 1031.933799][T12968] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1031.933817][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1031.933853][T12968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1031.995629][T12968] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1031.995648][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1031.995681][T12968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1032.252102][   T61] Bluetooth: hci1: command tx timeout
[ 1032.397143][T12968] hsr_slave_0: entered promiscuous mode
[ 1032.406053][T12968] hsr_slave_1: entered promiscuous mode
[ 1032.416003][T12968] debugfs: 'hsr0' already exists in 'hsr'
[ 1032.416027][T12968] Cannot create hsr debugfs directory
[ 1033.205360][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1033.271350][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1033.276534][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1033.319311][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1033.322222][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1034.003204][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1034.475505][ T5611] Bluetooth: hci1: command tx timeout
[ 1035.668787][ T5611] Bluetooth: hci3: command tx timeout
[ 1036.577368][   T43] bridge_slave_1: left allmulticast mode
[ 1036.577405][   T43] bridge_slave_1: left promiscuous mode
[ 1036.577752][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1036.694711][ T5611] Bluetooth: hci1: command tx timeout
[ 1036.824606][   T43] bridge_slave_0: left allmulticast mode
[ 1036.824654][   T43] bridge_slave_0: left promiscuous mode
[ 1036.824930][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1037.891974][ T5611] Bluetooth: hci3: command tx timeout
[ 1038.920021][ T5611] Bluetooth: hci1: command tx timeout
[ 1038.925807][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1577'.
[ 1038.925845][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1577'.
[ 1038.984745][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1577'.
[ 1038.984780][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1577'.
[ 1039.288926][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1039.367034][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1039.413243][   T43] bond0 (unregistering): Released all slaves
[ 1040.114366][ T5611] Bluetooth: hci3: command tx timeout
[ 1040.158613][   T43] hsr_slave_0: left promiscuous mode
[ 1040.212046][   T43] hsr_slave_1: left promiscuous mode
[ 1040.213267][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1040.255444][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1040.323395][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1582'.
[ 1040.859102][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1040.927332][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1040.958770][T11680] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1041.118651][T11680] usb 7-1: Using ep0 maxpacket: 16
[ 1041.122490][T11680] usb 7-1: config 0 has an invalid interface number: 147 but max is 0
[ 1041.122510][T11680] usb 7-1: config 0 has no interface number 0
[ 1041.122533][T11680] usb 7-1: too many endpoints for config 0 interface 147 altsetting 39: 40, using maximum allowed: 30
[ 1041.122562][T11680] usb 7-1: config 0 interface 147 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 40
[ 1041.122582][T11680] usb 7-1: config 0 interface 147 has no altsetting 0
[ 1041.154428][T11680] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1041.154502][T11680] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1041.154556][T11680] usb 7-1: Product: syz
[ 1041.154598][T11680] usb 7-1: Manufacturer: syz
[ 1041.154661][T11680] usb 7-1: SerialNumber: syz
[ 1041.246864][T11680] usb 7-1: config 0 descriptor??
[ 1041.657342][T11680] usb 7-1: USB disconnect, device number 8
[ 1041.813842][T10245] udevd[10245]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.147/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1042.337486][ T5611] Bluetooth: hci3: command tx timeout
[ 1043.434394][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1590'.
[ 1043.515161][T13084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1043.515407][T13084] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.515664][T13084] bridge_slave_0: entered allmulticast mode
[ 1043.519274][T13084] bridge_slave_0: entered promiscuous mode
[ 1043.567269][T13084] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1043.567424][T13084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1043.567650][T13084] bridge_slave_1: entered allmulticast mode
[ 1043.574868][T13084] bridge_slave_1: entered promiscuous mode
[ 1043.983052][T13084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1044.042768][T13084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1044.141818][T13084] team0: Port device team_slave_0 added
[ 1044.156858][T13084] team0: Port device team_slave_1 added
[ 1044.175236][ T8320] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1044.318280][T13084] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1044.318293][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1044.318314][T13084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1044.336744][ T8320] usb 8-1: Using ep0 maxpacket: 16
[ 1044.382900][ T8320] usb 8-1: config 0 has an invalid interface number: 147 but max is 0
[ 1044.382921][ T8320] usb 8-1: config 0 has no interface number 0
[ 1044.382945][ T8320] usb 8-1: too many endpoints for config 0 interface 147 altsetting 39: 40, using maximum allowed: 30
[ 1044.382973][ T8320] usb 8-1: config 0 interface 147 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 40
[ 1044.382993][ T8320] usb 8-1: config 0 interface 147 has no altsetting 0
[ 1044.506662][ T8320] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1044.506697][ T8320] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1044.506719][ T8320] usb 8-1: Product: syz
[ 1044.506735][ T8320] usb 8-1: Manufacturer: syz
[ 1044.506750][ T8320] usb 8-1: SerialNumber: syz
[ 1044.573391][ T8320] usb 8-1: config 0 descriptor??
[ 1044.600437][T13084] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1044.600456][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1044.600488][T13084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1045.064845][ T8320] usb 8-1: USB disconnect, device number 9
[ 1045.101310][T10289] udevd[10289]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[ 1046.461638][T13084] hsr_slave_0: entered promiscuous mode
[ 1046.463054][T13084] hsr_slave_1: entered promiscuous mode
[ 1046.906046][T13122] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.906172][T13122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.906358][T13122] bridge_slave_0: entered allmulticast mode
[ 1046.909435][T13122] bridge_slave_0: entered promiscuous mode
[ 1047.213182][T13122] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.213798][T13122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1047.214026][T13122] bridge_slave_1: entered allmulticast mode
[ 1047.216195][T13122] bridge_slave_1: entered promiscuous mode
[ 1047.679814][ T8320] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1047.840724][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1047.842405][ T8320] usb 7-1: Using ep0 maxpacket: 16
[ 1047.897288][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1047.965347][ T8320] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1047.965370][ T8320] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1047.965385][ T8320] usb 7-1: Product: syz
[ 1047.965396][ T8320] usb 7-1: Manufacturer: syz
[ 1047.965406][ T8320] usb 7-1: SerialNumber: syz
[ 1048.009410][ T8320] usb 7-1: config 0 descriptor??
[ 1048.248794][T12968] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1048.331082][T12968] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1048.384040][T13122] team0: Port device team_slave_0 added
[ 1048.384531][T12968] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1048.887809][T12968] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1048.932295][ T8320] usb 7-1: USB disconnect, device number 9
[ 1049.054490][T13122] team0: Port device team_slave_1 added
[ 1049.054676][T12968] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1049.121655][T10245] udevd[10245]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1049.154132][T12968] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1049.264242][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1049.343827][T12968] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1049.450174][T12968] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1049.557560][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1609'.
[ 1049.557679][T13314] netlink: del zone limit has 8 unknown bytes
[ 1049.877072][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1049.877092][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1049.877124][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1050.200688][T13336] binder: 13335:13336 ioctl c0306201 0 returned -14
[ 1050.229454][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1050.229469][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1050.229492][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1050.730842][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1615'.
[ 1050.730953][T13347] netlink: del zone limit has 8 unknown bytes
[ 1050.924741][T13122] hsr_slave_0: entered promiscuous mode
[ 1050.926036][T13122] hsr_slave_1: entered promiscuous mode
[ 1050.926914][T13122] debugfs: 'hsr0' already exists in 'hsr'
[ 1050.927048][T13122] Cannot create hsr debugfs directory
[ 1050.959665][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1616'.
[ 1051.015230][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1616'.
[ 1051.701773][T13364] binder: 13363:13364 ioctl c0306201 0 returned -14
[ 1054.731094][T13395] binder: 13394:13395 ioctl c0306201 0 returned -14
[ 1054.953459][T12968] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1055.868784][T12968] 8021q: adding VLAN 0 to HW filter on device team0
[ 1055.872162][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1055.982296][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.982511][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1056.036517][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.036664][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1057.162019][   T43] bridge_slave_1: left allmulticast mode
[ 1057.162750][   T43] bridge_slave_1: left promiscuous mode
[ 1057.206151][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.432024][   T43] bridge_slave_0: left allmulticast mode
[ 1057.466385][   T43] bridge_slave_0: left promiscuous mode
[ 1057.466662][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.850379][   T43] bridge_slave_1: left allmulticast mode
[ 1058.850425][   T43] bridge_slave_1: left promiscuous mode
[ 1058.850674][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.454529][   T43] bridge_slave_0: left allmulticast mode
[ 1059.454559][   T43] bridge_slave_0: left promiscuous mode
[ 1059.454743][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.601749][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1060.686578][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1060.709940][   T43] bond0 (unregistering): Released all slaves
[ 1061.871959][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1061.957767][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1061.980204][   T43] bond0 (unregistering): Released all slaves
[ 1062.178158][ T5259] 8021q: adding VLAN 0 to HW filter on device eth22
[ 1062.658408][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1646'.
[ 1062.658435][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1646'.
[ 1063.187067][   T43] hsr_slave_0: left promiscuous mode
[ 1063.233574][   T43] hsr_slave_1: left promiscuous mode
[ 1063.234597][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1063.283077][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1063.286664][T13486] loop2: detected capacity change from 0 to 7
[ 1063.451834][T13486] Dev loop2: unable to read RDB block 7
[ 1063.451895][T13486]  loop2: unable to read partition table
[ 1063.452121][T13486] loop2: partition table beyond EOD, truncated
[ 1063.452167][T13486] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1063.568338][   T43] hsr_slave_0: left promiscuous mode
[ 1063.612313][   T43] hsr_slave_1: left promiscuous mode
[ 1063.629414][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1063.724418][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1064.744150][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1064.833198][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1065.590614][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1065.655037][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1068.107562][ T8320] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[ 1068.295396][ T8320] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1068.295432][ T8320] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1068.295463][ T8320] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 1068.295487][ T8320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.303566][ T8320] usb 7-1: config 0 descriptor??
[ 1068.755822][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x3
[ 1068.755921][ T8320] koneplus 0003:1E7D:2E22.0001: ignoring exceeding usage max
[ 1068.784791][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.784839][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.784869][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.784955][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.784982][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.785010][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.785037][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.785064][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.785103][ T8320] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0
[ 1068.960727][ T8320] koneplus 0003:1E7D:2E22.0001: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.6-1/input0
[ 1068.993446][ T8320] usb 7-1: USB disconnect, device number 10
[ 1069.231083][T13540] fido_id[13540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[ 1070.211772][T12968] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1071.109444][T12968] veth0_vlan: entered promiscuous mode
[ 1071.283155][T12968] veth1_vlan: entered promiscuous mode
[ 1071.899002][T12968] veth0_macvtap: entered promiscuous mode
[ 1072.995524][T12968] veth1_macvtap: entered promiscuous mode
[ 1073.050630][T12968] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1073.208414][T12968] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1073.276929][T13084] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1073.321183][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1073.352245][T13084] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1073.385147][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1073.385580][   T14] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.426278][   T14] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.442326][T13084] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1073.560622][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1073.561081][   T14] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.598523][   T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.609553][T13084] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1073.713993][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1075.611970][T13122] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1076.103852][T13122] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1076.140271][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1076.140292][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1076.195195][T13122] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1076.242477][T13122] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1076.278992][T13122] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1076.328711][T13122] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1076.375477][T13122] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1076.408720][T13122] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1076.460243][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1076.460266][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1076.697416][T13084] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1076.955636][T13084] 8021q: adding VLAN 0 to HW filter on device team0
[ 1077.426158][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1077.426290][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1077.451846][T13649] overlayfs: missing 'lowerdir'
[ 1077.516017][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1077.517888][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1077.698188][T13122] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1077.966285][T13122] 8021q: adding VLAN 0 to HW filter on device team0
[ 1078.015045][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1078.016850][ T8538] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1078.104162][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1078.105961][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1082.690595][T13084] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1082.988359][T13718] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1688'.
[ 1082.996302][T13718] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1688'.
[ 1083.292594][T13084] veth0_vlan: entered promiscuous mode
[ 1083.368026][T13084] veth1_vlan: entered promiscuous mode
[ 1083.533577][T13084] veth0_macvtap: entered promiscuous mode
[ 1083.649082][T13084] veth1_macvtap: entered promiscuous mode
[ 1083.675760][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1083.749781][T13084] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1083.813116][T13084] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1083.939581][ T1291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.945430][ T1291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.953326][ T1291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1083.990242][ T1291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1085.185331][T13122] veth0_vlan: entered promiscuous mode
[ 1085.384739][T13122] veth1_vlan: entered promiscuous mode
[ 1085.800869][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1085.800892][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1085.929404][T13122] veth0_macvtap: entered promiscuous mode
[ 1086.063253][T13122] veth1_macvtap: entered promiscuous mode
[ 1086.078396][ T8538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1086.078417][ T8538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1086.340513][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1086.427072][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1086.474871][ T1291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.479191][ T1291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.503165][ T1291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.531955][ T1291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.521736][ T5968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.527669][ T5968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.271806][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.271831][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1090.748085][T11680] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1091.132723][T11680] usb 7-1: Using ep0 maxpacket: 16
[ 1091.275912][T13841] gfs2: error -5 reading superblock
[ 1092.007692][T11680] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1092.007754][T11680] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1092.007791][T11680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1092.050546][T11680] usb 7-1: config 0 descriptor??
[ 1092.280608][T13821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1092.282229][T13821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1092.304815][T13139] usb 7-1: USB disconnect, device number 11
[ 1096.508430][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1724'.
[ 1096.508548][T13908] netlink: del zone limit has 8 unknown bytes
[ 1099.352889][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1737'.
[ 1099.352975][T13959] netlink: del zone limit has 8 unknown bytes
[ 1107.740033][T14051] netlink: 200 bytes leftover after parsing attributes in process `syz.9.1761'.
[ 1107.904567][T14053] syzkaller0: entered promiscuous mode
[ 1107.904587][T14053] syzkaller0: entered allmulticast mode
[ 1107.959450][T14053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1107.993530][T14052] tipc: Resetting bearer <eth:syzkaller0>
[ 1111.021181][T14052] tipc: Disabling bearer <eth:syzkaller0>
[ 1111.374140][ T5969] tipc: Node number set to 2393017511
[ 1111.929585][T14080] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1768'.
[ 1111.931196][T14080] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1768'.
[ 1112.080997][T14085] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1769'.
[ 1114.540068][T14120] syzkaller0: entered promiscuous mode
[ 1114.540088][T14120] syzkaller0: entered allmulticast mode
[ 1114.654191][T14120] tipc: Started in network mode
[ 1114.654228][T14120] tipc: Node identity fe40b590c603, cluster identity 4711
[ 1114.654455][T14120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1114.697306][T14118] tipc: Resetting bearer <eth:syzkaller0>
[ 1115.082582][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.105760][T14118] tipc: Disabling bearer <eth:syzkaller0>
[ 1116.026926][T14137] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1781'.
[ 1116.035298][T14137] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1781'.
[ 1116.541705][T14141] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1782'.
[ 1117.764404][T10478] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1121.700911][T14170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1793'.
[ 1121.714080][T14170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1793'.
[ 1122.199487][T14176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'.
[ 1122.247654][ T5969] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 1122.577261][ T5969] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1122.577544][ T5969] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1122.577586][ T5969] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 1122.577608][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.865674][ T5969] usb 7-1: config 0 descriptor??
[ 1123.601893][ T5969] usbhid 7-1:0.0: can't add hid device: -71
[ 1123.602277][ T5969] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1123.652145][ T5969] usb 7-1: USB disconnect, device number 12
[ 1123.840636][T10478] usb 2-1: device descriptor read/all, error -110
[ 1123.989315][T10478] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1124.149337][T10478] usb 2-1: device descriptor read/64, error -32
[ 1124.267111][T10478] usb usb2-port1: attempt power cycle
[ 1126.054490][T10478] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1126.074404][T10478] usb 2-1: device descriptor read/8, error -32
[ 1126.161636][T14195] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1801'.
[ 1127.193330][T14203] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1804'.
[ 1127.212794][T14203] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1804'.
[ 1127.718938][T14207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1806'.
[ 1131.188070][T14230] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1812'.
[ 1131.364157][T14234] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1815'.
[ 1131.369820][T14234] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1815'.
[ 1131.955891][T14238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1132.073690][T14237] tipc: Disabling bearer <eth:syzkaller0>
[ 1136.010883][T14280] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1827'.
[ 1136.012367][T14280] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1827'.
[ 1136.335442][T14286] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1830'.
[ 1138.100547][T14310] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1838'.
[ 1138.141397][T14310] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1838'.
[ 1139.633399][ T8284] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 1139.796996][ T8284] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1139.797037][ T8284] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1139.797073][ T8284] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 1139.797100][ T8284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1139.857897][ T8284] usb 3-1: config 0 descriptor??
[ 1140.549995][ T8284] hid_parser_main: 6 callbacks suppressed
[ 1140.550099][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x3
[ 1140.550186][ T8284] koneplus 0003:1E7D:2E22.0002: ignoring exceeding usage max
[ 1140.592532][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.592587][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.592615][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.592698][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.592726][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.592753][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.592779][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.649288][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.649323][ T8284] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0
[ 1140.716232][ T8284] koneplus 0003:1E7D:2E22.0002: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0
[ 1140.777543][ T8284] usb 3-1: USB disconnect, device number 2
[ 1140.984374][T14336] fido_id[14336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1141.898869][ T6164] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1142.165329][ T6164] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1142.165360][ T6164] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[ 1142.165382][ T6164] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1142.165405][ T6164] usb 2-1: config 0 has no interface number 0
[ 1142.165423][ T6164] usb 2-1: config 0 has no interface number 1
[ 1142.165480][ T6164] usb 2-1: too many endpoints for config 0 interface 4 altsetting 109: 182, using maximum allowed: 30
[ 1142.165548][ T6164] usb 2-1: config 0 interface 4 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 182
[ 1142.165578][ T6164] usb 2-1: config 0 interface 4 has no altsetting 0
[ 1142.289876][ T6164] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f
[ 1142.289900][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.289915][ T6164] usb 2-1: Product: syz
[ 1142.289926][ T6164] usb 2-1: Manufacturer: syz
[ 1142.289936][ T6164] usb 2-1: SerialNumber: syz
[ 1142.344408][ T6164] usb 2-1: config 0 descriptor??
[ 1142.414474][ T6164] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22
[ 1143.065743][ T5611] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[ 1143.065794][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1143.065826][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1143.065841][ T5611] Workqueue: hci4 hci_rx_work
[ 1143.066006][ T5611] Call Trace:
[ 1143.066044][ T5611]  <TASK>
[ 1143.066107][ T5611]  dump_stack_lvl+0xe8/0x150
[ 1143.066216][ T5611]  sysfs_create_dir_ns+0x271/0x2a0
[ 1143.066321][ T5611]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1143.066391][ T5611]  ? rt_spin_unlock+0x163/0x200
[ 1143.066454][ T5611]  kobject_add_internal+0x62c/0xce0
[ 1143.066515][ T5611]  kobject_add+0x163/0x240
[ 1143.066538][ T5611]  ? rt_spin_unlock+0x157/0x200
[ 1143.066569][ T5611]  ? __pfx_kobject_add+0x10/0x10
[ 1143.066601][ T5611]  ? get_device_parent+0x370/0x3a0
[ 1143.066679][ T5611]  device_add+0x3fa/0xb80
[ 1143.066709][ T5611]  hci_conn_add_sysfs+0xd5/0x210
[ 1143.066805][ T5611]  le_conn_complete_evt+0xfef/0x1580
[ 1143.066887][ T5611]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1143.066912][ T5611]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1143.066971][ T5611]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1143.067005][ T5611]  ? rt_mutex_slowunlock+0x219/0x460
[ 1143.067033][ T5611]  ? skb_pull_data+0xf0/0x200
[ 1143.067121][ T5611]  hci_le_conn_complete_evt+0x187/0x470
[ 1143.067164][ T5611]  hci_event_packet+0x67a/0xf10
[ 1143.067232][ T5611]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1143.067256][ T5611]  ? __pfx_hci_event_packet+0x10/0x10
[ 1143.067291][ T5611]  ? preempt_schedule_common+0x82/0xd0
[ 1143.067322][ T5611]  ? preempt_schedule_thunk+0x16/0x40
[ 1143.067358][ T5611]  ? hci_send_to_monitor+0xe2/0x590
[ 1143.067389][ T5611]  hci_rx_work+0x3ee/0x1020
[ 1143.067433][ T5611]  ? process_scheduled_works+0xa20/0x14e0
[ 1143.067501][ T5611]  process_scheduled_works+0xa8e/0x14e0
[ 1143.067559][ T5611]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1143.067594][ T5611]  ? assign_work+0x3cf/0x5d0
[ 1143.067626][ T5611]  worker_thread+0xa47/0xfb0
[ 1143.067685][ T5611]  kthread+0x388/0x470
[ 1143.067774][ T5611]  ? __pfx_worker_thread+0x10/0x10
[ 1143.067798][ T5611]  ? __pfx_kthread+0x10/0x10
[ 1143.067830][ T5611]  ret_from_fork+0x514/0xb70
[ 1143.067914][ T5611]  ? __pfx_ret_from_fork+0x10/0x10
[ 1143.067947][ T5611]  ? __switch_to+0xc89/0x1420
[ 1143.068003][ T5611]  ? __pfx_kthread+0x10/0x10
[ 1143.068038][ T5611]  ret_from_fork_asm+0x1a/0x30
[ 1143.068082][ T5611]  </TASK>
[ 1143.068163][ T5611] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1143.068207][ T5611] Bluetooth: hci4: failed to register connection device
[ 1144.157860][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'.
[ 1145.456324][T14342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.498895][T14342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1147.645974][T14381] gfs2: error -5 reading superblock
[ 1151.074185][   T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[ 1151.074215][   T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1151.074260][   T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1151.074276][   T61] Workqueue: hci0 hci_rx_work
[ 1151.074318][   T61] Call Trace:
[ 1151.074327][   T61]  <TASK>
[ 1151.074339][   T61]  dump_stack_lvl+0xe8/0x150
[ 1151.074381][   T61]  sysfs_create_dir_ns+0x271/0x2a0
[ 1151.074422][   T61]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1151.074465][   T61]  ? rt_spin_unlock+0x163/0x200
[ 1151.074499][   T61]  kobject_add_internal+0x62c/0xce0
[ 1151.074534][   T61]  kobject_add+0x163/0x240
[ 1151.074556][   T61]  ? rt_spin_unlock+0x157/0x200
[ 1151.074600][   T61]  ? __pfx_kobject_add+0x10/0x10
[ 1151.074632][   T61]  ? get_device_parent+0x370/0x3a0
[ 1151.074664][   T61]  device_add+0x3fa/0xb80
[ 1151.074692][   T61]  hci_conn_add_sysfs+0xd5/0x210
[ 1151.074727][   T61]  le_conn_complete_evt+0xfef/0x1580
[ 1151.074765][   T61]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1151.074792][   T61]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1151.074825][   T61]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1151.074859][   T61]  ? rt_mutex_slowunlock+0x219/0x460
[ 1151.074887][   T61]  ? skb_pull_data+0xf0/0x200
[ 1151.074920][   T61]  hci_le_conn_complete_evt+0x187/0x470
[ 1151.074954][   T61]  hci_event_packet+0x67a/0xf10
[ 1151.074996][   T61]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1151.075019][   T61]  ? __pfx_hci_event_packet+0x10/0x10
[ 1151.075051][   T61]  ? rt_spin_unlock+0x157/0x200
[ 1151.075089][   T61]  ? hci_send_to_monitor+0xe2/0x590
[ 1151.075121][   T61]  hci_rx_work+0x3ee/0x1020
[ 1151.075163][   T61]  ? process_scheduled_works+0xa20/0x14e0
[ 1151.075195][   T61]  process_scheduled_works+0xa8e/0x14e0
[ 1151.075255][   T61]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1151.075292][   T61]  ? assign_work+0x3cf/0x5d0
[ 1151.075324][   T61]  worker_thread+0xa47/0xfb0
[ 1151.075383][   T61]  kthread+0x388/0x470
[ 1151.075419][   T61]  ? __pfx_worker_thread+0x10/0x10
[ 1151.075446][   T61]  ? __pfx_kthread+0x10/0x10
[ 1151.075482][   T61]  ret_from_fork+0x514/0xb70
[ 1151.075519][   T61]  ? __pfx_ret_from_fork+0x10/0x10
[ 1151.075554][   T61]  ? __switch_to+0xc89/0x1420
[ 1151.075597][   T61]  ? __pfx_kthread+0x10/0x10
[ 1151.075631][   T61]  ret_from_fork_asm+0x1a/0x30
[ 1151.075675][   T61]  </TASK>
[ 1151.084445][   T61] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1151.084496][   T61] Bluetooth: hci0: failed to register connection device
[ 1153.127200][ T5735] usb 2-1: USB disconnect, device number 6
[ 1153.515476][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'.
[ 1153.515562][T14413] netlink: del zone limit has 8 unknown bytes
[ 1154.393177][ T5611] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[ 1155.437973][ T5611] Bluetooth: hci4: command 0x0406 tx timeout
[ 1155.864225][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1887'.
[ 1155.864342][T14457] netlink: del zone limit has 8 unknown bytes
[ 1159.391823][ T8320] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1161.507668][ T5611] Bluetooth: hci1: command 0x0406 tx timeout
[ 1163.104215][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1901'.
[ 1163.104432][T14500] netlink: del zone limit has 8 unknown bytes
[ 1164.810191][T14509] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1903'.
[ 1164.818096][T14509] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1903'.
[ 1165.340168][ T8320] usb 2-1: device descriptor read/all, error -110
[ 1165.472210][ T8320] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1165.611877][ T8320] usb 2-1: device descriptor read/64, error -32
[ 1165.733189][ T8320] usb usb2-port1: attempt power cycle
[ 1166.466383][   T61] Bluetooth: hci3: command 0x0406 tx timeout
[ 1166.678781][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'.
[ 1166.703755][T14535] netlink: del zone limit has 8 unknown bytes
[ 1168.187190][T14546] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1917'.
[ 1168.263679][T14546] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1917'.
[ 1170.798553][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1926'.
[ 1170.798643][T14572] netlink: del zone limit has 8 unknown bytes
[ 1171.775826][T14582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1930'.
[ 1171.776580][T14582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1930'.
[ 1175.051458][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'.
[ 1175.051585][T14606] netlink: del zone limit has 8 unknown bytes
[ 1176.503726][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1943'.
[ 1176.503765][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1943'.
[ 1176.617457][ T1075] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1176.619154][ T1075] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1176.619216][ T1075] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1176.619354][ T1075] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1181.092935][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.375969][T14669] Driver unsupported XDP return value 0 on prog  (id 56) dev N/A, expect packet loss!
[ 1182.558180][T14678] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1966'.
[ 1189.007576][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1984'.
[ 1189.008763][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1984'.
[ 1191.907321][T14763] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1992'.
[ 1192.166802][ T8284] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1193.277324][ T8284] usb 3-1: Using ep0 maxpacket: 16
[ 1195.194111][ T8284] usb 3-1: unable to read config index 0 descriptor/all
[ 1195.194162][ T8284] usb 3-1: can't read configurations, error -71
[ 1201.662696][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'.
[ 1201.662791][T14815] netlink: del zone limit has 8 unknown bytes
[ 1204.038169][T10478] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1205.181543][T10478] usb 3-1: Using ep0 maxpacket: 16
[ 1205.184057][T10478] usb 3-1: config 0 has an invalid interface number: 147 but max is 0
[ 1205.184084][T10478] usb 3-1: config 0 has no interface number 0
[ 1205.184117][T10478] usb 3-1: too many endpoints for config 0 interface 147 altsetting 39: 40, using maximum allowed: 30
[ 1205.184157][T10478] usb 3-1: config 0 interface 147 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 40
[ 1205.184188][T10478] usb 3-1: config 0 interface 147 has no altsetting 0
[ 1205.274904][T10478] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1205.274928][T10478] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1205.274943][T10478] usb 3-1: Product: syz
[ 1205.274954][T10478] usb 3-1: Manufacturer: syz
[ 1205.274964][T10478] usb 3-1: SerialNumber: syz
[ 1205.348416][T10478] usb 3-1: config 0 descriptor??
[ 1206.391059][T10478] usb 3-1: USB disconnect, device number 5
[ 1206.773012][T13542] udevd[13542]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.147/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1207.305189][ T8320] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1210.585477][T14895] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2034'.
[ 1213.837243][T10478] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1213.986088][ T8320] usb 2-1: device descriptor read/all, error -110
[ 1214.127140][ T8320] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1214.194662][T10478] usb 10-1: Using ep0 maxpacket: 16
[ 1214.339472][ T8320] usb 2-1: device descriptor read/64, error -32
[ 1214.430181][T10478] usb 10-1: device descriptor read/all, error -71
[ 1214.514385][ T8320] usb usb2-port1: attempt power cycle
[ 1215.066368][ T8320] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1215.088223][ T8320] usb 2-1: device descriptor read/8, error -32
[ 1215.346837][ T8320] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1215.381564][ T8320] usb 2-1: device descriptor read/8, error -32
[ 1215.430692][   T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1215.480295][   T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1215.494283][ T8320] usb usb2-port1: unable to enumerate USB device
[ 1215.502989][   T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1215.515205][ T6164] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1215.654982][   T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1215.730971][   T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1216.594233][ T6164] usb 7-1: Using ep0 maxpacket: 32
[ 1216.597032][ T6164] usb 7-1: config 1 interface 0 altsetting 142 endpoint 0x81 has an invalid bInterval 204, changing to 11
[ 1216.597059][ T6164] usb 7-1: config 1 interface 0 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1216.597079][ T6164] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1216.600627][ T6164] usb 7-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40
[ 1216.600654][ T6164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.600673][ T6164] usb 7-1: Product: syz
[ 1216.600685][ T6164] usb 7-1: Manufacturer: syz
[ 1216.600698][ T6164] usb 7-1: SerialNumber: syz
[ 1216.986354][ T6164] appletouch 7-1:1.0: Failed to read mode from device.
[ 1216.986584][ T6164] appletouch 7-1:1.0: probe with driver appletouch failed with error -5
[ 1217.066728][ T6164] usb 7-1: USB disconnect, device number 13
[ 1217.829513][T14942] loop2: detected capacity change from 0 to 7
[ 1217.899557][T14942] Dev loop2: unable to read RDB block 7
[ 1217.899606][T14942]  loop2: unable to read partition table
[ 1217.899826][T14942] loop2: partition table beyond EOD, truncated
[ 1217.900555][T14942] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1218.118794][   T61] Bluetooth: hci5: command tx timeout
[ 1219.482675][T14850] raw-gadget.0 gadget.1: failed to queue disconnect event
[ 1221.434416][   T61] Bluetooth: hci5: command tx timeout
[ 1223.607452][ T5611] Bluetooth: hci5: command tx timeout
[ 1223.621494][T14775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1225.816695][ T5611] Bluetooth: hci5: command tx timeout
[ 1227.134263][T14775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1228.368284][ T8320] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[ 1228.641511][ T8320] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1228.641552][ T8320] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1228.641588][ T8320] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 1228.641614][ T8320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1228.702671][ T8320] usb 3-1: config 0 descriptor??
[ 1228.825065][T14775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1229.193198][ T5969] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1229.589499][ T5969] usb 10-1: Using ep0 maxpacket: 16
[ 1229.592604][ T5969] usb 10-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config
[ 1229.592659][ T5969] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1229.592686][ T5969] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[ 1229.595749][ T5969] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1229.595782][ T5969] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1229.595805][ T5969] usb 10-1: Product: syz
[ 1229.595820][ T5969] usb 10-1: Manufacturer: syz
[ 1229.595836][ T5969] usb 10-1: SerialNumber: syz
[ 1229.599216][ T8320] usbhid 3-1:0.0: can't add hid device: -71
[ 1229.599342][ T8320] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1229.907907][ T8320] usb 3-1: USB disconnect, device number 6
[ 1229.923866][ T5969] usb 10-1: config 0 descriptor??
[ 1229.959427][ T5969] appledisplay 10-1:0.0: Could not find int-in endpoint
[ 1230.012445][ T5969] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1230.128842][T14775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1231.629869][T14921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1231.629999][T14921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1231.632506][T14921] bridge_slave_0: entered allmulticast mode
[ 1231.648421][T14921] bridge_slave_0: entered promiscuous mode
[ 1231.757132][T14921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1231.757262][T14921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1231.760741][T14921] bridge_slave_1: entered allmulticast mode
[ 1231.786072][T14921] bridge_slave_1: entered promiscuous mode
[ 1232.052267][T14921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1232.087720][T14921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1232.408787][ T8320] usb 10-1: USB disconnect, device number 4
[ 1232.552646][T14921] team0: Port device team_slave_0 added
[ 1232.642589][T14921] team0: Port device team_slave_1 added
[ 1233.597161][T14921] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1233.598712][T14921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1233.598746][T14921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1233.911537][T14921] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1233.911555][T14921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1233.911586][T14921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1236.146761][T15089] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2094'.
[ 1236.409114][T15106] 9pnet_fd: p9_fd_create_tcp (15106): problem connecting socket to 127.0.0.1
[ 1236.656705][T14921] hsr_slave_0: entered promiscuous mode
[ 1236.666129][T14921] hsr_slave_1: entered promiscuous mode
[ 1236.675397][T14921] debugfs: 'hsr0' already exists in 'hsr'
[ 1236.677632][T14921] Cannot create hsr debugfs directory
[ 1237.617221][T14775] bridge_slave_1: left allmulticast mode
[ 1237.617259][T14775] bridge_slave_1: left promiscuous mode
[ 1237.618863][T14775] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1238.071256][   T61] Bluetooth: hci4: command 0x0406 tx timeout
[ 1238.435657][T14775] bridge_slave_0: left allmulticast mode
[ 1238.435687][T14775] bridge_slave_0: left promiscuous mode
[ 1238.435896][T14775] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1241.249116][T14775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1241.337115][T14775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1241.377886][T14775] bond0 (unregistering): Released all slaves
[ 1241.424584][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1246.259563][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1246.716586][ T5259] 8021q: adding VLAN 0 to HW filter on device eth22
[ 1247.910569][T14775] hsr_slave_0: left promiscuous mode
[ 1247.949389][T14775] hsr_slave_1: left promiscuous mode
[ 1247.951127][T14775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1247.951156][T14775] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1248.001888][T14775] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1248.001917][T14775] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1248.151599][T14775] veth1_macvtap: left promiscuous mode
[ 1248.151717][T14775] veth0_macvtap: left promiscuous mode
[ 1248.151987][T14775] veth1_vlan: left promiscuous mode
[ 1248.152186][T14775] veth0_vlan: left promiscuous mode
[ 1248.366316][T15213] 9p: Bad value for 'wfdno'
[ 1254.254342][T14775] team0 (unregistering): Port device team_slave_1 removed
[ 1254.649419][T14775] team0 (unregistering): Port device team_slave_0 removed
[ 1256.169152][ T5259] 8021q: adding VLAN 0 to HW filter on device eth23
[ 1256.577526][T15282] 9p: Bad value for 'wfdno'
[ 1258.270747][T15276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1258.353802][T15273] tipc: Disabling bearer <eth:syzkaller0>
[ 1260.362805][ T5259] 8021q: adding VLAN 0 to HW filter on device eth24
[ 1260.398042][T15319] 9p: Bad value for 'wfdno'
[ 1262.843134][T15349] syzkaller0: entered promiscuous mode
[ 1262.843164][T15349] syzkaller0: entered allmulticast mode
[ 1263.420632][ T8320] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[ 1263.597465][ T8320] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1263.597504][ T8320] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1263.597541][ T8320] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 1263.597567][ T8320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1263.645192][ T8320] usb 7-1: config 0 descriptor??
[ 1265.347467][ T8320] koneplus 0003:1E7D:2E22.0003: ignoring exceeding usage max
[ 1265.367022][ T8320] hid_parser_main: 6 callbacks suppressed
[ 1265.367047][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367084][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367111][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367198][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367225][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367252][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367279][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367305][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367342][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.367389][ T8320] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0
[ 1265.516882][ T8320] koneplus 0003:1E7D:2E22.0003: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.6-1/input0
[ 1265.597393][ T8320] usb 7-1: USB disconnect, device number 14
[ 1267.193406][T15383] fido_id[15383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1268.333477][T15397] input: syz1 as /devices/virtual/input/input10
[ 1268.681304][T14921] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1268.754345][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1268.819029][T14921] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1268.959720][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1268.961855][T14921] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1269.053578][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1269.097826][T14921] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1269.194093][T14921] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1269.470529][T10478] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1269.576250][T14921] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1269.651966][T10478] usb 10-1: Using ep0 maxpacket: 32
[ 1269.656700][T15411] syz.7.2172 (15411) used greatest stack depth: 18632 bytes left
[ 1269.742548][T10478] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1269.748312][T14921] 8021q: adding VLAN 0 to HW filter on device team0
[ 1269.750443][T10478] usb 10-1: unable to read config index 0 descriptor/start: -71
[ 1269.750549][T10478] usb 10-1: can't read configurations, error -71
[ 1269.825232][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1269.825403][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1269.883369][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1269.883516][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1269.921139][T15412] syz.7.2172 (15412) used greatest stack depth: 18408 bytes left
[ 1276.140669][T14921] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1276.291341][T14921] veth0_vlan: entered promiscuous mode
[ 1276.345897][T14921] veth1_vlan: entered promiscuous mode
[ 1276.438567][T14921] veth0_macvtap: entered promiscuous mode
[ 1276.455347][T14921] veth1_macvtap: entered promiscuous mode
[ 1276.505643][T14921] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1276.529882][T14921] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1276.565081][T14776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1276.572645][T14776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1276.573764][T14776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1276.574011][T14776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1283.159659][   T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1283.219502][   T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1283.272476][   T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1283.299129][   T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1283.301427][   T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1283.419034][ T5332] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1283.574489][ T5332] usb 7-1: Using ep0 maxpacket: 16
[ 1283.592012][ T5332] usb 7-1: config 0 has an invalid interface number: 147 but max is 0
[ 1283.592033][ T5332] usb 7-1: config 0 has no interface number 0
[ 1283.592056][ T5332] usb 7-1: too many endpoints for config 0 interface 147 altsetting 39: 40, using maximum allowed: 30
[ 1283.592085][ T5332] usb 7-1: config 0 interface 147 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 40
[ 1283.592107][ T5332] usb 7-1: config 0 interface 147 has no altsetting 0
[ 1283.653366][ T5332] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1283.653400][ T5332] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1283.653431][ T5332] usb 7-1: Product: syz
[ 1283.653447][ T5332] usb 7-1: Manufacturer: syz
[ 1283.653463][ T5332] usb 7-1: SerialNumber: syz
[ 1283.813338][ T5332] usb 7-1: config 0 descriptor??
[ 1285.296768][ T5332] usb 7-1: USB disconnect, device number 15
[ 1285.312035][ T5611] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[ 1285.637749][   T61] Bluetooth: hci1: command tx timeout
[ 1285.804580][T13542] udevd[13542]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.147/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1287.286103][ T1312] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1288.573941][   T61] Bluetooth: hci1: command tx timeout
[ 1290.769676][   T61] Bluetooth: hci1: command tx timeout
[ 1292.189516][   T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 1292.189544][   T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1292.189573][   T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1292.189588][   T61] Workqueue: hci3 hci_rx_work
[ 1292.189635][   T61] Call Trace:
[ 1292.189644][   T61]  <TASK>
[ 1292.189655][   T61]  dump_stack_lvl+0xe8/0x150
[ 1292.189696][   T61]  sysfs_create_dir_ns+0x271/0x2a0
[ 1292.189738][   T61]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1292.189779][   T61]  ? rt_spin_unlock+0x163/0x200
[ 1292.189811][   T61]  kobject_add_internal+0x62c/0xce0
[ 1292.189847][   T61]  kobject_add+0x163/0x240
[ 1292.189878][   T61]  ? rt_spin_unlock+0x157/0x200
[ 1292.189911][   T61]  ? __pfx_kobject_add+0x10/0x10
[ 1292.189941][   T61]  ? get_device_parent+0x370/0x3a0
[ 1292.189974][   T61]  device_add+0x3fa/0xb80
[ 1292.190002][   T61]  hci_conn_add_sysfs+0xd5/0x210
[ 1292.190037][   T61]  le_conn_complete_evt+0xfef/0x1580
[ 1292.190076][   T61]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1292.190101][   T61]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1292.190133][   T61]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1292.190166][   T61]  ? rt_mutex_slowunlock+0x219/0x460
[ 1292.190193][   T61]  ? skb_pull_data+0xf0/0x200
[ 1292.190226][   T61]  hci_le_conn_complete_evt+0x187/0x470
[ 1292.190259][   T61]  hci_event_packet+0x67a/0xf10
[ 1292.190300][   T61]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1292.190322][   T61]  ? __pfx_hci_event_packet+0x10/0x10
[ 1292.190353][   T61]  ? rt_spin_unlock+0x157/0x200
[ 1292.190391][   T61]  ? hci_send_to_monitor+0xe2/0x590
[ 1292.190421][   T61]  hci_rx_work+0x3ee/0x1020
[ 1292.190464][   T61]  ? process_scheduled_works+0xa20/0x14e0
[ 1292.190493][   T61]  process_scheduled_works+0xa8e/0x14e0
[ 1292.190554][   T61]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1292.190589][   T61]  ? assign_work+0x3cf/0x5d0
[ 1292.190621][   T61]  worker_thread+0xa47/0xfb0
[ 1292.190680][   T61]  kthread+0x388/0x470
[ 1292.190714][   T61]  ? __pfx_worker_thread+0x10/0x10
[ 1292.190739][   T61]  ? __pfx_kthread+0x10/0x10
[ 1292.190770][   T61]  ret_from_fork+0x514/0xb70
[ 1292.190802][   T61]  ? __pfx_ret_from_fork+0x10/0x10
[ 1292.190835][   T61]  ? __switch_to+0xc89/0x1420
[ 1292.190879][   T61]  ? __pfx_kthread+0x10/0x10
[ 1292.190913][   T61]  ret_from_fork_asm+0x1a/0x30
[ 1292.190956][   T61]  </TASK>
[ 1292.191066][   T61] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1292.191105][   T61] Bluetooth: hci3: failed to register connection device
[ 1293.015675][   T61] Bluetooth: hci1: command tx timeout
[ 1293.160266][ T1312] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.748772][ T1312] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.884766][   T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1295.911667][   T61] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[ 1296.048097][   T31] usb 3-1: Using ep0 maxpacket: 32
[ 1296.051043][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1296.052649][   T31] usb 3-1: config 1 interface 0 altsetting 142 endpoint 0x81 has an invalid bInterval 204, changing to 11
[ 1296.052683][   T31] usb 3-1: config 1 interface 0 altsetting 142 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1296.052712][   T31] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1296.061006][   T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40
[ 1296.061054][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1296.061132][   T31] usb 3-1: Product: syz
[ 1296.061186][   T31] usb 3-1: Manufacturer: syz
[ 1296.061242][   T31] usb 3-1: SerialNumber: syz
[ 1296.672414][   T31] appletouch 3-1:1.0: Failed to read mode from device.
[ 1296.672650][   T31] appletouch 3-1:1.0: probe with driver appletouch failed with error -5
[ 1296.704123][   T31] usb 3-1: USB disconnect, device number 7
[ 1296.978429][ T1312] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.132580][T15542] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1298.132848][T15542] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1298.135311][T15542] bridge_slave_0: entered allmulticast mode
[ 1298.168958][T15542] bridge_slave_0: entered promiscuous mode
[ 1298.206882][T15542] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1298.207016][T15542] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1298.207805][T15542] bridge_slave_1: entered allmulticast mode
[ 1298.216730][T15542] bridge_slave_1: entered promiscuous mode
[ 1299.043207][   T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[ 1299.043235][   T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1299.043262][   T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1299.043278][   T61] Workqueue: hci2 hci_rx_work
[ 1299.043317][   T61] Call Trace:
[ 1299.043326][   T61]  <TASK>
[ 1299.043336][   T61]  dump_stack_lvl+0xe8/0x150
[ 1299.043377][   T61]  sysfs_create_dir_ns+0x271/0x2a0
[ 1299.043417][   T61]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1299.043459][   T61]  ? rt_spin_unlock+0x163/0x200
[ 1299.043491][   T61]  kobject_add_internal+0x62c/0xce0
[ 1299.043525][   T61]  kobject_add+0x163/0x240
[ 1299.043546][   T61]  ? rt_spin_unlock+0x157/0x200
[ 1299.043579][   T61]  ? __pfx_kobject_add+0x10/0x10
[ 1299.043610][   T61]  ? get_device_parent+0x370/0x3a0
[ 1299.043641][   T61]  device_add+0x3fa/0xb80
[ 1299.043670][   T61]  hci_conn_add_sysfs+0xd5/0x210
[ 1299.043706][   T61]  le_conn_complete_evt+0xfef/0x1580
[ 1299.043743][   T61]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1299.043769][   T61]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1299.043801][   T61]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1299.043835][   T61]  ? rt_mutex_slowunlock+0x219/0x460
[ 1299.043863][   T61]  ? skb_pull_data+0xf0/0x200
[ 1299.043895][   T61]  hci_le_conn_complete_evt+0x187/0x470
[ 1299.043928][   T61]  hci_event_packet+0x67a/0xf10
[ 1299.043968][   T61]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1299.043990][   T61]  ? __pfx_hci_event_packet+0x10/0x10
[ 1299.044021][   T61]  ? rt_spin_unlock+0x157/0x200
[ 1299.044060][   T61]  ? hci_send_to_monitor+0xe2/0x590
[ 1299.044091][   T61]  hci_rx_work+0x3ee/0x1020
[ 1299.044142][   T61]  ? process_scheduled_works+0xa20/0x14e0
[ 1299.044175][   T61]  process_scheduled_works+0xa8e/0x14e0
[ 1299.044233][   T61]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1299.044268][   T61]  ? assign_work+0x3cf/0x5d0
[ 1299.044301][   T61]  worker_thread+0xa47/0xfb0
[ 1299.044357][   T61]  kthread+0x388/0x470
[ 1299.044391][   T61]  ? __pfx_worker_thread+0x10/0x10
[ 1299.044416][   T61]  ? __pfx_kthread+0x10/0x10
[ 1299.044450][   T61]  ret_from_fork+0x514/0xb70
[ 1299.044487][   T61]  ? __pfx_ret_from_fork+0x10/0x10
[ 1299.044519][   T61]  ? __switch_to+0xc89/0x1420
[ 1299.044551][   T61]  ? __pfx_kthread+0x10/0x10
[ 1299.044586][   T61]  ret_from_fork_asm+0x1a/0x30
[ 1299.044624][   T61]  </TASK>
[ 1299.044679][   T61] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1299.044718][   T61] Bluetooth: hci2: failed to register connection device
[ 1299.063524][ T5611] Bluetooth: hci3: command 0x0406 tx timeout
[ 1299.867055][T15542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1299.890090][T15542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1300.283509][T15542] team0: Port device team_slave_0 added
[ 1300.342991][T15542] team0: Port device team_slave_1 added
[ 1300.723245][T15742] syzkaller0: entered promiscuous mode
[ 1300.723273][T15742] syzkaller0: entered allmulticast mode
[ 1300.749525][T15542] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1300.749545][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1300.749574][T15542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1300.766214][T15542] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1300.766263][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1300.766337][T15542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1301.732429][   T61] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[ 1301.773136][ T1312] bridge_slave_1: left allmulticast mode
[ 1301.773174][ T1312] bridge_slave_1: left promiscuous mode
[ 1301.773480][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1301.912847][ T1312] bridge_slave_0: left allmulticast mode
[ 1301.912876][ T1312] bridge_slave_0: left promiscuous mode
[ 1301.913083][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1302.827658][ T1312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1302.876081][ T1312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1302.899947][ T1312] bond0 (unregistering): Released all slaves
[ 1303.226908][T15542] hsr_slave_0: entered promiscuous mode
[ 1303.234976][T15542] hsr_slave_1: entered promiscuous mode
[ 1304.892247][ T1312] hsr_slave_0: left promiscuous mode
[ 1305.002067][ T1312] hsr_slave_1: left promiscuous mode
[ 1305.003215][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1305.003244][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1305.048746][ T1312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1305.048777][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1305.244088][ T5612] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[ 1305.254802][ T1312] veth1_macvtap: left promiscuous mode
[ 1305.255168][ T1312] veth0_macvtap: left promiscuous mode
[ 1305.259882][ T1312] veth1_vlan: left promiscuous mode
[ 1305.261539][ T1312] veth0_vlan: left promiscuous mode
[ 1306.186154][   T61] Bluetooth: hci2: command 0x0406 tx timeout
[ 1309.341096][ T1312] team0 (unregistering): Port device team_slave_1 removed
[ 1309.510216][ T1312] team0 (unregistering): Port device team_slave_0 removed
[ 1309.860065][T15800] syzkaller0: entered promiscuous mode
[ 1309.860090][T15800] syzkaller0: entered allmulticast mode
[ 1309.989119][T15810] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[ 1311.888484][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1313.042338][T15928] syzkaller0: entered promiscuous mode
[ 1313.042613][T15928] syzkaller0: entered allmulticast mode
[ 1313.834082][T15810] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[ 1318.879221][T15993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2298'.
[ 1318.989757][T15991] syzkaller0: entered promiscuous mode
[ 1318.989785][T15991] syzkaller0: entered allmulticast mode
[ 1321.585254][T16031] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2308'.
[ 1321.853726][T16035] 9p: Bad value for 'wfdno'
[ 1322.227943][T15542] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1322.622942][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1322.628419][T15542] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1322.709285][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1322.710776][T15542] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1322.876900][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1322.898637][T15542] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1322.987019][T15542] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1323.145014][T16052] syzkaller0: entered promiscuous mode
[ 1323.145043][T16052] syzkaller0: entered allmulticast mode
[ 1325.597654][T16093] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2322'.
[ 1327.364567][T15542] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1327.449226][T15542] 8021q: adding VLAN 0 to HW filter on device team0
[ 1327.509267][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1327.512280][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1327.631107][ T3283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1327.635442][ T3283] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1328.062718][T15542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1328.062744][T15542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1328.297464][T16133] warning: `syz.2.2332' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1329.476386][T16145] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2337'.
[ 1329.884854][T16149] syzkaller0: entered promiscuous mode
[ 1329.884882][T16149] syzkaller0: entered allmulticast mode
[ 1331.844137][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2349'.
[ 1332.680056][T15542] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1332.753923][T16211] syzkaller0: entered promiscuous mode
[ 1332.753948][T16211] syzkaller0: entered allmulticast mode
[ 1332.805099][ T5735] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1332.954294][T16220] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2360'.
[ 1332.970481][ T5735] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1332.970508][ T5735] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1332.970526][ T5735] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1332.970569][ T5735] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1332.970593][ T5735] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1332.972619][ T5735] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1332.972645][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1332.972665][ T5735] usb 3-1: Product: syz
[ 1332.972678][ T5735] usb 3-1: Manufacturer: syz
[ 1333.094019][ T5735] cdc_wdm 3-1:1.0: skipping garbage
[ 1333.094041][ T5735] cdc_wdm 3-1:1.0: skipping garbage
[ 1333.119593][ T5735] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1333.119691][ T5735] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1334.135625][T15542] veth0_vlan: entered promiscuous mode
[ 1334.330773][T15542] veth1_vlan: entered promiscuous mode
[ 1334.451134][T10478] usb 3-1: USB disconnect, device number 8
[ 1334.478562][T15542] veth0_macvtap: entered promiscuous mode
[ 1334.526710][T15542] veth1_macvtap: entered promiscuous mode
[ 1334.613161][T15542] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1334.678808][T15542] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1334.778981][ T1075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1334.779078][ T1075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1334.779119][ T1075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1334.779158][ T1075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1335.913940][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2370'.
[ 1336.429844][T13991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1336.429869][T13991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1336.521377][ T3345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1336.521401][ T3345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1336.738629][T16252] syzkaller0: entered promiscuous mode
[ 1336.738656][T16252] syzkaller0: entered allmulticast mode
[ 1337.027052][T16254] random: crng reseeded on system resumption
[ 1339.242890][T16279] netlink: 200 bytes leftover after parsing attributes in process `syz.9.2383'.
[ 1341.964276][T16298] syzkaller0: entered promiscuous mode
[ 1341.964304][T16298] syzkaller0: entered allmulticast mode
[ 1344.690851][T16319] netlink: 'syz.9.2393': attribute type 21 has an invalid length.
[ 1345.028073][T16326] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2395'.
[ 1345.532728][T16340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1345.547076][T16340] IPv6: NLM_F_CREATE should be set when creating new route
[ 1345.998827][T16349] syzkaller0: entered promiscuous mode
[ 1345.998863][T16349] syzkaller0: entered allmulticast mode
[ 1346.997932][T16368] 9p: Bad value for 'wfdno'
[ 1347.094129][T16375] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2411'.
[ 1347.314852][T16377] netlink: 'syz.6.2410': attribute type 21 has an invalid length.
[ 1350.433985][T15810] Bluetooth: Unknown LE signaling command 0x41
[ 1350.434013][T15810] Bluetooth: Wrong link type (-22)
[ 1350.662377][T16409] syzkaller0: entered promiscuous mode
[ 1350.662405][T16409] syzkaller0: entered allmulticast mode
[ 1350.724425][T16413] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2423'.
[ 1351.110439][   T31] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1352.229724][   T31] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1352.231298][   T31] usb 7-1: config 7 has an invalid interface number: 239 but max is 0
[ 1352.231325][   T31] usb 7-1: config 7 has no interface number 0
[ 1352.231359][   T31] usb 7-1: config 7 interface 239 has no altsetting 0
[ 1352.312186][   T31] usb 7-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=ac.60
[ 1352.312222][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.312246][   T31] usb 7-1: Product: syz
[ 1352.312262][   T31] usb 7-1: Manufacturer: syz
[ 1352.312278][   T31] usb 7-1: SerialNumber: syz
[ 1352.736713][   T31] usb 7-1: USB disconnect, device number 16
[ 1354.625616][T16461] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2435'.
[ 1356.366653][T16481] syzkaller0: entered promiscuous mode
[ 1356.366682][T16481] syzkaller0: entered allmulticast mode
[ 1358.335226][T16506] Invalid source name
[ 1358.335247][T16506] UBIFS error (pid: 16506): cannot open "./file0", error -22
[ 1361.452926][T16539] syzkaller0: entered promiscuous mode
[ 1361.452953][T16539] syzkaller0: entered allmulticast mode
[ 1370.537505][  T197] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1370.815645][  T197] usb 7-1: Using ep0 maxpacket: 32
[ 1370.820178][  T197] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 1370.820208][  T197] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.820228][  T197] usb 7-1: Product: syz
[ 1370.820240][  T197] usb 7-1: Manufacturer: syz
[ 1370.820254][  T197] usb 7-1: SerialNumber: syz
[ 1370.844261][  T197] usb 7-1: config 0 descriptor??
[ 1371.929015][  T197] airspy 7-1:0.0: Board ID: 00
[ 1371.929121][  T197] airspy 7-1:0.0: Firmware version: 
[ 1373.077372][  T197] airspy 7-1:0.0: Registered as swradio24
[ 1373.086555][  T197] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 1373.155656][  T197] usb 7-1: USB disconnect, device number 17
[ 1375.237952][T16651] syzkaller0: entered promiscuous mode
[ 1375.237970][T16651] syzkaller0: entered allmulticast mode
[ 1375.964658][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880603a8c00: rx timeout, send abort
[ 1375.970172][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880603a8c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[ 1375.979298][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880603abc00: rx timeout, send abort
[ 1375.989602][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880603abc00: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session.
[ 1377.539713][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1381.343587][T16694] syzkaller0: entered promiscuous mode
[ 1381.343616][T16694] syzkaller0: entered allmulticast mode
[ 1388.017610][T16744] syzkaller0: entered promiscuous mode
[ 1388.017634][T16744] syzkaller0: entered allmulticast mode
[ 1389.976634][T16771] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2542'.
[ 1392.135803][T16789] syzkaller0: entered promiscuous mode
[ 1392.135833][T16789] syzkaller0: entered allmulticast mode
[ 1392.257152][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2549'.
[ 1392.304555][T16794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1392.690542][T16801] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2553'.
[ 1394.121837][T10478] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[ 1394.308305][T10478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1394.308365][T10478] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1394.311491][T10478] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1394.311520][T10478] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1394.311542][T10478] usb 4-1: Manufacturer: syz
[ 1394.448041][T10478] usb 4-1: config 0 descriptor??
[ 1394.517625][T10478] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1394.962291][T16831] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2566'.
[ 1396.890116][T16846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1398.185845][ T8284] usb 4-1: USB disconnect, device number 3
[ 1412.218974][T16950] vivid-000: disconnect
[ 1412.250816][T16949] vivid-000: reconnect
[ 1416.439959][T16987] ksmbd: Unknown IPC event: 3, ignore.
[ 1418.233558][T15810] Bluetooth: hci1: command 0x0406 tx timeout
[ 1420.882732][T16994] blkio.reset_stats is deprecated
[ 1423.884285][   T36] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1425.238038][   T36] usb 10-1: Using ep0 maxpacket: 32
[ 1425.241730][   T36] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1425.241766][   T36] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1425.241797][   T36] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1425.241844][   T36] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1425.241870][   T36] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1428.016367][   T36] usb 10-1: config 0 descriptor??
[ 1428.017482][   T36] usb 10-1: can't set config #0, error -71
[ 1428.049001][   T36] usb 10-1: USB disconnect, device number 7
[ 1428.893991][ T8284] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1429.064996][ T8284] usb 7-1: Using ep0 maxpacket: 16
[ 1429.074531][ T8284] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1429.074553][ T8284] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1429.074581][ T8284] usb 7-1: Product: syz
[ 1429.074591][ T8284] usb 7-1: Manufacturer: syz
[ 1429.074600][ T8284] usb 7-1: SerialNumber: syz
[ 1429.159555][ T8284] usb 7-1: config 0 descriptor??
[ 1429.556237][ T8284] usb 7-1: USB disconnect, device number 18
[ 1429.890983][T15964] udevd[15964]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1435.895642][ T8284] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1437.380888][ T5735] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[ 1437.971892][ T5735] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1437.991012][ T5735] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1437.991043][ T5735] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1437.991062][ T5735] usb 7-1: Manufacturer: syz
[ 1438.019887][ T8284] usb 10-1: Using ep0 maxpacket: 16
[ 1438.042691][ T8284] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1438.042723][ T8284] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1438.042744][ T8284] usb 10-1: Product: syz
[ 1438.042759][ T8284] usb 10-1: Manufacturer: syz
[ 1438.042774][ T8284] usb 10-1: SerialNumber: syz
[ 1438.111556][ T8284] usb 10-1: config 0 descriptor??
[ 1438.160349][ T5735] usb 7-1: config 0 descriptor??
[ 1438.263529][ T5735] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1438.358532][   T31] usb 10-1: USB disconnect, device number 8
[ 1438.763624][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2679'.
[ 1440.061027][   T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1440.386272][   T31] usb 4-1: Using ep0 maxpacket: 32
[ 1440.389212][   T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1440.389235][   T31] usb 4-1: config 0 has no interface number 0
[ 1440.397299][   T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1440.397334][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.397354][   T31] usb 4-1: Product: syz
[ 1440.397367][   T31] usb 4-1: Manufacturer: syz
[ 1440.397381][   T31] usb 4-1: SerialNumber: syz
[ 1440.576345][   T31] usb 4-1: config 0 descriptor??
[ 1440.702447][ T5734] usb 7-1: USB disconnect, device number 19
[ 1441.130492][   T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1441.130532][   T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1441.172368][ T8284] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1442.020453][   T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1442.021334][   T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[ 1443.341159][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1443.445462][   T31] usb 4-1: USB disconnect, device number 4
[ 1443.469851][ T8284] usb 3-1: Using ep0 maxpacket: 16
[ 1443.947851][ T8284] usb 3-1: device descriptor read/all, error -71
[ 1448.652654][ T5734] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1448.844956][ T5734] usb 10-1: Using ep0 maxpacket: 16
[ 1448.855048][ T5734] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1448.855081][ T5734] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1448.855104][ T5734] usb 10-1: Product: syz
[ 1448.855120][ T5734] usb 10-1: Manufacturer: syz
[ 1448.855136][ T5734] usb 10-1: SerialNumber: syz
[ 1448.930671][ T5734] usb 10-1: config 0 descriptor??
[ 1449.596483][ T5734] usb 10-1: USB disconnect, device number 9
[ 1451.965464][   T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1452.125481][   T31] usb 3-1: Using ep0 maxpacket: 32
[ 1452.128037][   T31] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1452.128071][   T31] usb 3-1: config 0 has no interface number 0
[ 1452.131400][   T31] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1452.131426][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.131446][   T31] usb 3-1: Product: syz
[ 1452.131460][   T31] usb 3-1: Manufacturer: syz
[ 1452.131473][   T31] usb 3-1: SerialNumber: syz
[ 1452.150977][   T31] usb 3-1: config 0 descriptor??
[ 1452.371309][ T5734] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1452.531591][ T5734] usb 10-1: Using ep0 maxpacket: 16
[ 1452.533816][ T5734] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1452.533866][ T5734] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1452.533908][ T5734] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1452.533933][ T5734] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.595996][ T5734] usb 10-1: config 0 descriptor??
[ 1452.612728][ T5734] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1452.690009][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1452.690039][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1452.995059][   T31] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1453.039447][   T31] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[ 1453.471166][T17323] netlink: 504 bytes leftover after parsing attributes in process `syz.9.2726'.
[ 1453.554396][   T31] usb 3-1: USB disconnect, device number 11
[ 1454.621587][   T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1455.351582][ T5735] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[ 1455.440753][   T31] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1455.440787][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1455.462373][   T31] usb 3-1: config 0 descriptor??
[ 1455.476044][   T31] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1455.539403][ T5735] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1455.541500][ T5735] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1455.541593][ T5735] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1455.541615][ T5735] usb 7-1: Manufacturer: syz
[ 1455.609697][ T5735] usb 7-1: config 0 descriptor??
[ 1455.684716][T13139] usb 10-1: USB disconnect, device number 10
[ 1455.789176][ T5735] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1456.966794][T17352] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2736'.
[ 1457.274257][   T31] gspca_stv06xx: HDCS-1020 sensor detected
[ 1458.620011][ T5734] usb 7-1: USB disconnect, device number 20
[ 1458.648889][   T31] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71
[ 1458.699343][   T31] usb 3-1: USB disconnect, device number 12
[ 1462.089475][T17391] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2747'.
[ 1462.629929][   T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1462.873585][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1462.873632][   T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1462.873654][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.945096][   T31] usb 3-1: config 0 descriptor??
[ 1463.176174][   T31] usbhid 3-1:0.0: can't add hid device: -71
[ 1463.176296][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1463.182742][   T31] usb 3-1: USB disconnect, device number 13
[ 1463.345819][   T36] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1463.956446][   T36] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1463.956480][   T36] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1463.956501][   T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1463.956550][   T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1463.956579][   T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1463.981744][   T36] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1463.981838][   T36] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1463.981916][   T36] usb 7-1: Product: syz
[ 1463.981958][   T36] usb 7-1: Manufacturer: syz
[ 1464.105590][   T36] cdc_wdm 7-1:1.0: skipping garbage
[ 1464.105613][   T36] cdc_wdm 7-1:1.0: skipping garbage
[ 1464.105716][   T36] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1464.170577][   T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1465.448462][   T36] usb 7-1: USB disconnect, device number 21
[ 1465.524123][   T31] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1465.524169][   T31] usb 3-1: can't read configurations, error -71
[ 1469.428486][T17422] netlink: 'syz.2.2757': attribute type 21 has an invalid length.
[ 1470.136190][   T36] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[ 1470.306612][   T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1470.331069][   T36] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1470.331100][   T36] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1470.331123][   T36] usb 4-1: Manufacturer: syz
[ 1470.358576][   T36] usb 4-1: config 0 descriptor??
[ 1470.460659][   T36] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1474.680119][T10756] usb 4-1: USB disconnect, device number 5
[ 1474.823363][ T8284] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1475.005551][ T8284] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1475.005583][ T8284] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1475.005606][ T8284] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1475.005660][ T8284] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1475.005689][ T8284] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1475.013720][ T8284] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1475.013751][ T8284] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1475.013772][ T8284] usb 10-1: Product: syz
[ 1475.013787][ T8284] usb 10-1: Manufacturer: syz
[ 1475.907784][ T8284] cdc_wdm 10-1:1.0: skipping garbage
[ 1475.907807][ T8284] cdc_wdm 10-1:1.0: skipping garbage
[ 1475.907907][ T8284] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1477.372420][   T36] usb 10-1: USB disconnect, device number 11
[ 1482.406858][T17529] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2790'.
[ 1484.578994][ T5720] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1484.745259][ T5720] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1484.745291][ T5720] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1484.745312][ T5720] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1484.745362][ T5720] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1484.745391][ T5720] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1484.753206][ T5720] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1484.753262][ T5720] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1484.753284][ T5720] usb 10-1: Product: syz
[ 1484.753312][ T5720] usb 10-1: Manufacturer: syz
[ 1484.860906][ T5720] cdc_wdm 10-1:1.0: skipping garbage
[ 1484.860927][ T5720] cdc_wdm 10-1:1.0: skipping garbage
[ 1484.861019][ T5720] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1485.319747][ T5720] usb 10-1: USB disconnect, device number 12
[ 1490.433662][T17610] overlayfs: missing 'workdir'
[ 1490.522170][ T5734] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1490.747355][ T5734] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1490.747388][ T5734] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1490.747410][ T5734] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1490.747476][ T5734] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1490.747507][ T5734] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1490.752875][ T5734] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1490.752909][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1490.752932][ T5734] usb 7-1: Product: syz
[ 1490.752948][ T5734] usb 7-1: Manufacturer: syz
[ 1492.054945][ T5734] cdc_wdm 7-1:1.0: skipping garbage
[ 1492.054974][ T5734] cdc_wdm 7-1:1.0: skipping garbage
[ 1492.055081][ T5734] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1492.508601][ T5734] usb 7-1: USB disconnect, device number 22
[ 1496.152925][T15810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1496.205716][T15810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1496.257389][T15810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1496.278459][T15810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1496.288144][T15810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1496.787449][T17657] overlayfs: missing 'workdir'
[ 1498.322913][T17671] gfs2: error -5 reading superblock
[ 1498.578066][T15810] Bluetooth: hci5: command tx timeout
[ 1499.010930][ T8284] hid_parser_main: 5 callbacks suppressed
[ 1499.010956][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1
[ 1499.010989][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.011017][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.011044][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.011094][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.011122][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.011149][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.011178][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.011206][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.011233][ T8284] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[ 1499.465212][ T8284] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.04 Device [syz1] on syz1
[ 1499.719788][T17685] fido_id[17685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1500.113002][T17688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1500.113021][T17688] IPv6: NLM_F_CREATE should be set when creating new route
[ 1500.166394][T14776] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1500.166435][T14776] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1501.534680][T15810] Bluetooth: hci5: command tx timeout
[ 1503.718085][T15810] Bluetooth: hci5: command tx timeout
[ 1506.119843][T15810] Bluetooth: hci5: command tx timeout
[ 1506.438013][T14776] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1506.438053][T14776] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.022111][T17723] overlayfs: missing 'lowerdir'
[ 1507.429189][T14776] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1507.429230][T14776] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.858565][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1509.150976][T14776] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1509.151018][T14776] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.282682][T17747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1509.282701][T17747] IPv6: NLM_F_CREATE should be set when creating new route
[ 1509.282739][T17747] IPv6: NLM_F_CREATE should be set when creating new route
[ 1512.962383][T17647] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1512.962576][T17647] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1512.962792][T17647] bridge_slave_0: entered allmulticast mode
[ 1512.965558][T17647] bridge_slave_0: entered promiscuous mode
[ 1512.969553][T17647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1512.969776][T17647] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1512.970330][T17647] bridge_slave_1: entered allmulticast mode
[ 1512.984526][T17647] bridge_slave_1: entered promiscuous mode
[ 1513.196434][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1513.223365][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1513.537661][T17647] team0: Port device team_slave_0 added
[ 1513.565430][T17647] team0: Port device team_slave_1 added
[ 1513.825675][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1513.825694][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1513.825726][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1513.921447][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1513.921461][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1513.921482][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1514.950513][T17773] overlayfs: missing 'lowerdir'
[ 1516.767282][T17647] hsr_slave_0: entered promiscuous mode
[ 1516.772411][T17647] hsr_slave_1: entered promiscuous mode
[ 1516.778509][T17647] debugfs: 'hsr0' already exists in 'hsr'
[ 1516.780436][T17647] Cannot create hsr debugfs directory
[ 1517.123391][T17793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1517.125313][T17793] IPv6: NLM_F_CREATE should be set when creating new route
[ 1519.214722][T14776] bridge_slave_1: left allmulticast mode
[ 1519.214761][T14776] bridge_slave_1: left promiscuous mode
[ 1519.215035][T14776] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1520.181166][T14776] bridge_slave_0: left allmulticast mode
[ 1520.480092][T14776] bridge_slave_0: left promiscuous mode
[ 1520.480375][T14776] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1523.053158][T14776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1523.168246][T14776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1523.196516][T14776] bond0 (unregistering): Released all slaves
[ 1524.519854][T17814] team0: Port device syz_tun added
[ 1526.505944][T14776] tipc: Left network mode
[ 1531.041014][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1531.357896][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'.
[ 1534.179812][T14776] hsr_slave_0: left promiscuous mode
[ 1534.219933][T14776] hsr_slave_1: left promiscuous mode
[ 1534.220763][T14776] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1534.220790][T14776] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1534.272847][T14776] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1534.272875][T14776] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1534.519498][T14776] veth1_macvtap: left promiscuous mode
[ 1534.519599][T14776] veth0_macvtap: left promiscuous mode
[ 1534.519798][T14776] veth1_vlan: left promiscuous mode
[ 1534.520004][T14776] veth0_vlan: left promiscuous mode
[ 1536.744531][T14776] team0 (unregistering): Port device team_slave_1 removed
[ 1536.803400][T14776] team0 (unregistering): Port device team_slave_0 removed
[ 1538.630384][ T6164] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1538.843525][ T6164] usb 10-1: device descriptor read/64, error -71
[ 1539.269207][ T6164] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1539.484291][ T6164] usb 10-1: device descriptor read/64, error -71
[ 1539.617221][ T6164] usb usb10-port1: attempt power cycle
[ 1540.189203][ T6164] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1540.263774][ T6164] usb 10-1: device descriptor read/8, error -71
[ 1540.553291][ T6164] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1540.622765][ T6164] usb 10-1: device descriptor read/8, error -71
[ 1540.737768][ T6164] usb usb10-port1: unable to enumerate USB device
[ 1545.152922][T17647] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1545.276257][T17647] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1545.277575][T17647] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1545.368458][T17647] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1545.382867][T17647] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1545.464322][T17647] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1545.479174][T17647] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1545.521770][ T8284] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1545.686091][ T8284] usb 10-1: device descriptor read/64, error -71
[ 1545.729690][T17647] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1545.939031][ T8284] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1547.071751][ T8284] usb 10-1: device descriptor read/64, error -71
[ 1547.255775][ T8284] usb usb10-port1: attempt power cycle
[ 1547.578351][T17647] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1547.626812][ T8284] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1547.650470][ T8284] usb 10-1: device descriptor read/8, error -71
[ 1547.758392][T17647] 8021q: adding VLAN 0 to HW filter on device team0
[ 1547.808892][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1547.809102][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1547.915273][ T8284] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1547.943513][ T8284] usb 10-1: device descriptor read/8, error -71
[ 1547.974432][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1547.974565][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1548.056124][ T8284] usb usb10-port1: unable to enumerate USB device
[ 1548.570052][T18132] binder_alloc: 18131: binder_alloc_buf, no vma
[ 1549.329084][T18142] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[18143] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[18142]
[ 1554.175910][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1555.663641][T17647] veth0_vlan: entered promiscuous mode
[ 1555.742319][T17647] veth1_vlan: entered promiscuous mode
[ 1555.894454][T17647] veth0_macvtap: entered promiscuous mode
[ 1555.927138][T17647] veth1_macvtap: entered promiscuous mode
[ 1556.043098][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1556.076589][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1556.124344][ T3283] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1556.124493][ T3283] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1556.124641][ T3283] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1556.124829][ T3283] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.396388][T18189] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[ 1559.396525][T18189] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[ 1559.396672][T18189] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1563.919099][T18175] syz.9.2961 (18175): drop_caches: 2
[ 1564.036867][T18197] binder_alloc: 18196: binder_alloc_buf, no vma
[ 1564.168254][T15810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1564.210901][T15810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1564.224969][T15810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1564.229270][T15810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1564.230095][T15810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1566.562451][   T61] Bluetooth: hci2: command tx timeout
[ 1568.253244][T11648] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1568.774739][   T61] Bluetooth: hci2: command tx timeout
[ 1569.926147][T18249] binder_alloc: 18248: binder_alloc_buf, no vma
[ 1571.216908][   T61] Bluetooth: hci2: command tx timeout
[ 1571.442341][T11648] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1572.505154][T11648] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1573.715450][   T61] Bluetooth: hci2: command tx timeout
[ 1574.556317][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1575.756355][T11648] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1575.795187][T13139] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1576.010170][T13139] usb 10-1: Using ep0 maxpacket: 32
[ 1576.014261][T13139] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.014286][T13139] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1576.018534][T13139] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1576.018560][T13139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1576.018583][T13139] usb 10-1: Product: syz
[ 1576.018593][T13139] usb 10-1: Manufacturer: syz
[ 1576.018603][T13139] usb 10-1: SerialNumber: syz
[ 1576.098488][T13139] usb 10-1: config 0 descriptor??
[ 1578.592499][T18198] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1578.592705][T18198] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1578.592948][T18198] bridge_slave_0: entered allmulticast mode
[ 1579.483753][T18198] bridge_slave_0: entered promiscuous mode
[ 1579.697352][T18198] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1579.697538][T18198] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1579.697785][T18198] bridge_slave_1: entered allmulticast mode
[ 1579.722868][T18198] bridge_slave_1: entered promiscuous mode
[ 1579.907682][T10756] usb 10-1: USB disconnect, device number 21
[ 1581.299830][T18198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1581.403100][T18198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1581.516000][T11648] bridge_slave_1: left allmulticast mode
[ 1581.516038][T11648] bridge_slave_1: left promiscuous mode
[ 1581.516294][T11648] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1581.865761][T11648] bridge_slave_0: left allmulticast mode
[ 1581.865791][T11648] bridge_slave_0: left promiscuous mode
[ 1581.866024][T11648] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1588.455010][T11648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1592.039076][T11648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1592.358930][T11648] bond0 (unregistering): Released all slaves
[ 1592.844007][T18198] team0: Port device team_slave_0 added
[ 1592.868440][T18198] team0: Port device team_slave_1 added
[ 1593.121661][T18198] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1593.121680][T18198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1593.121711][T18198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1593.126358][T18198] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1593.126375][T18198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1593.126406][T18198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1593.523445][ T5735] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1593.688720][ T5735] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1593.688752][ T5735] usb 4-1: config 1 descriptor has 1 excess byte, ignoring
[ 1593.688771][ T5735] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1593.689095][ T5735] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1593.745918][ T5735] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1593.745951][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1593.746272][ T5735] usb 4-1: Product: syz
[ 1593.746290][ T5735] usb 4-1: Manufacturer: syz
[ 1594.471185][ T5735] cdc_wdm 4-1:1.0: skipping garbage
[ 1594.471230][ T5735] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1594.760077][   T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[ 1594.960968][ T5735] usb 4-1: USB disconnect, device number 6
[ 1594.976661][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1594.976696][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1594.977795][   T31] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1594.977813][   T31] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1594.977827][   T31] usb 3-1: Manufacturer: syz
[ 1595.063682][T18198] hsr_slave_0: entered promiscuous mode
[ 1595.190817][   T31] usb 3-1: config 0 descriptor??
[ 1595.193988][T18198] hsr_slave_1: entered promiscuous mode
[ 1595.226426][T18198] debugfs: 'hsr0' already exists in 'hsr'
[ 1595.226453][T18198] Cannot create hsr debugfs directory
[ 1598.896094][   T31] hid_parser_main: 18 callbacks suppressed
[ 1598.896121][   T31] cougar 0003:060B:700A.0005: unknown main item tag 0x0
[ 1598.896150][   T31] cougar 0003:060B:700A.0005: unknown main item tag 0x0
[ 1598.896174][   T31] cougar 0003:060B:700A.0005: unknown main item tag 0x0
[ 1598.896210][   T31] cougar 0003:060B:700A.0005: unknown main item tag 0x0
[ 1598.896232][   T31] cougar 0003:060B:700A.0005: unknown main item tag 0x0
[ 1599.585682][   T31] cougar 0003:060B:700A.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1599.607345][   T31] usb 3-1: USB disconnect, device number 16
[ 1604.583357][T18437] fido_id[18437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1604.890627][T11648] hsr_slave_0: left promiscuous mode
[ 1604.928152][T11648] hsr_slave_1: left promiscuous mode
[ 1604.929152][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1604.929175][T11648] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1604.981421][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1604.981450][T11648] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1606.001358][T11648] veth1_macvtap: left promiscuous mode
[ 1606.002685][T11648] veth0_macvtap: left promiscuous mode
[ 1606.002965][T11648] veth1_vlan: left promiscuous mode
[ 1606.075814][T11648] veth0_vlan: left promiscuous mode
[ 1613.524174][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3052'.
[ 1613.524319][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3052'.
[ 1617.540920][T11648] team0 (unregistering): Port device team_slave_1 removed
[ 1619.180955][T11648] team0 (unregistering): Port device team_slave_0 removed
[ 1620.426264][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1620.528503][ T5735] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 1620.565753][T18524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3062'.
[ 1620.593812][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3063'.
[ 1620.593881][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3063'.
[ 1620.706096][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1620.706130][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1620.714176][ T5735] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1620.714205][ T5735] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1620.714224][ T5735] usb 3-1: Manufacturer: syz
[ 1620.768021][ T5735] usb 3-1: config 0 descriptor??
[ 1621.280093][ T5735] cougar 0003:060B:700A.0006: unknown main item tag 0x0
[ 1621.280129][ T5735] cougar 0003:060B:700A.0006: unknown main item tag 0x0
[ 1621.280154][ T5735] cougar 0003:060B:700A.0006: unknown main item tag 0x0
[ 1621.280180][ T5735] cougar 0003:060B:700A.0006: unknown main item tag 0x0
[ 1621.280206][ T5735] cougar 0003:060B:700A.0006: unknown main item tag 0x0
[ 1621.376143][ T5735] cougar 0003:060B:700A.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1622.277627][T10478] usb 3-1: USB disconnect, device number 17
[ 1623.462755][T18547] gfs2: error -5 reading superblock
[ 1624.973135][T18544] fido_id[18544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1628.177394][T15810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1628.214017][T15810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1628.242102][T15810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1628.248127][T15810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1628.252575][T15810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1629.999290][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1630.885083][   T61] Bluetooth: hci5: command tx timeout
[ 1633.187863][   T61] Bluetooth: hci5: command tx timeout
[ 1635.373667][   T61] Bluetooth: hci5: command tx timeout
[ 1638.436935][   T61] Bluetooth: hci5: command tx timeout
[ 1640.059256][T10756] ------------[ cut here ]------------
[ 1640.059274][T10756] faux_driver vkms: [drm] vblank wait timed out on crtc 0
[ 1640.059299][T10756] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#0: kworker/0:6/10756
[ 1640.059412][T10756] Modules linked in:
[ 1640.059438][T10756] CPU: 0 UID: 0 PID: 10756 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1640.059462][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1640.059477][T10756] Workqueue: events drm_fb_helper_damage_work
[ 1640.059532][T10756] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560
[ 1640.059559][T10756] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 85 df b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49
[ 1640.059578][T10756] RSP: 0000:ffffc900050878e0 EFLAGS: 00010246
[ 1640.059627][T10756] RAX: 1ffff110041e7000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1640.059641][T10756] RDX: ffffffff8be251a0 RSI: ffffffff8be42460 RDI: ffffffff8fbafbd0
[ 1640.059659][T10756] RBP: ffffc900050879c8 R08: 0000000000000000 R09: 0000000000000000
[ 1640.059674][T10756] R10: dffffc0000000000 R11: fffffbfff1f5ef7f R12: ffffffff8be42460
[ 1640.059691][T10756] R13: ffff888020f38000 R14: ffffffff8fbafbd0 R15: ffffffff8be251a0
[ 1640.059708][T10756] FS:  0000000000000000(0000) GS:ffff888125c4a000(0000) knlGS:0000000000000000
[ 1640.059727][T10756] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1640.059743][T10756] CR2: 000055558ae2f4a0 CR3: 000000000dfb0000 CR4: 00000000003526f0
[ 1640.059762][T10756] Call Trace:
[ 1640.059773][T10756]  <TASK>
[ 1640.059789][T10756]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[ 1640.059812][T10756]  ? rt_spin_unlock+0x157/0x200
[ 1640.059841][T10756]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1640.059944][T10756]  ? rt_spin_unlock+0x163/0x200
[ 1640.059974][T10756]  ? drm_vblank_get+0x147/0x280
[ 1640.059999][T10756]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[ 1640.060046][T10756]  drm_fb_helper_damage_work+0x125/0x700
[ 1640.060073][T10756]  ? process_scheduled_works+0xa20/0x14e0
[ 1640.060100][T10756]  ? process_scheduled_works+0xa20/0x14e0
[ 1640.060125][T10756]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 1640.060152][T10756]  ? rcu_is_watching+0x15/0xb0
[ 1640.060209][T10756]  ? process_scheduled_works+0xa20/0x14e0
[ 1640.060234][T10756]  process_scheduled_works+0xa8e/0x14e0
[ 1640.060296][T10756]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1640.060328][T10756]  ? assign_work+0x3cf/0x5d0
[ 1640.060358][T10756]  worker_thread+0xa47/0xfb0
[ 1640.060397][T10756]  ? __kthread_parkme+0x71/0x1f0
[ 1640.060436][T10756]  kthread+0x388/0x470
[ 1640.060467][T10756]  ? __pfx_worker_thread+0x10/0x10
[ 1640.060491][T10756]  ? __pfx_kthread+0x10/0x10
[ 1640.060523][T10756]  ret_from_fork+0x514/0xb70
[ 1640.060558][T10756]  ? __pfx_ret_from_fork+0x10/0x10
[ 1640.060589][T10756]  ? __switch_to+0xc89/0x1420
[ 1640.060619][T10756]  ? __pfx_kthread+0x10/0x10
[ 1640.060649][T10756]  ret_from_fork_asm+0x1a/0x30
[ 1640.060688][T10756]  </TASK>
[ 1640.060698][T10756] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1640.060716][T10756] CPU: 0 UID: 0 PID: 10756 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1640.060734][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1640.060744][T10756] Workqueue: events drm_fb_helper_damage_work
[ 1640.060781][T10756] Call Trace:
[ 1640.060788][T10756]  <TASK>
[ 1640.060795][T10756]  vpanic+0x56c/0xa60
[ 1640.060831][T10756]  ? __pfx__printk+0x10/0x10
[ 1640.060858][T10756]  ? __pfx_vpanic+0x10/0x10
[ 1640.060876][T10756]  ? is_bpf_text_address+0x292/0x2b0
[ 1640.060899][T10756]  ? is_bpf_text_address+0x26/0x2b0
[ 1640.060926][T10756]  panic+0xc5/0xd0
[ 1640.060942][T10756]  ? __pfx_panic+0x10/0x10
[ 1640.060965][T10756]  ? ret_from_fork_asm+0x1a/0x30
[ 1640.060986][T10756]  __warn+0x315/0x4c0
[ 1640.061002][T10756]  ? drm_crtc_wait_one_vblank+0x3bc/0x560
[ 1640.061025][T10756]  ? drm_crtc_wait_one_vblank+0x3bc/0x560
[ 1640.061046][T10756]  __report_bug+0x331/0x530
[ 1640.061158][T10756]  ? drm_crtc_wait_one_vblank+0x3bc/0x560
[ 1640.061177][T10756]  ? __pfx___report_bug+0x10/0x10
[ 1640.061208][T10756]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1640.061235][T10756]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1640.061272][T10756]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1640.061301][T10756]  report_bug_entry+0x19a/0x290
[ 1640.061329][T10756]  ? drm_crtc_wait_one_vblank+0x51a/0x560
[ 1640.061348][T10756]  ? drm_crtc_wait_one_vblank+0x51f/0x560
[ 1640.061369][T10756]  handle_bug+0xce/0x200
[ 1640.061387][T10756]  exc_invalid_op+0x1a/0x50
[ 1640.061404][T10756]  asm_exc_invalid_op+0x1a/0x20
[ 1640.061441][T10756] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560
[ 1640.061459][T10756] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 85 df b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49
[ 1640.061473][T10756] RSP: 0000:ffffc900050878e0 EFLAGS: 00010246
[ 1640.061488][T10756] RAX: 1ffff110041e7000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1640.061499][T10756] RDX: ffffffff8be251a0 RSI: ffffffff8be42460 RDI: ffffffff8fbafbd0
[ 1640.061511][T10756] RBP: ffffc900050879c8 R08: 0000000000000000 R09: 0000000000000000
[ 1640.061522][T10756] R10: dffffc0000000000 R11: fffffbfff1f5ef7f R12: ffffffff8be42460
[ 1640.061534][T10756] R13: ffff888020f38000 R14: ffffffff8fbafbd0 R15: ffffffff8be251a0
[ 1640.061564][T10756]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[ 1640.061581][T10756]  ? rt_spin_unlock+0x157/0x200
[ 1640.061601][T10756]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1640.061631][T10756]  ? rt_spin_unlock+0x163/0x200
[ 1640.061653][T10756]  ? drm_vblank_get+0x147/0x280
[ 1640.061689][T10756]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[ 1640.061719][T10756]  drm_fb_helper_damage_work+0x125/0x700
[ 1640.061743][T10756]  ? process_scheduled_works+0xa20/0x14e0
[ 1640.061768][T10756]  ? process_scheduled_works+0xa20/0x14e0
[ 1640.061790][T10756]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 1640.061813][T10756]  ? rcu_is_watching+0x15/0xb0
[ 1640.061837][T10756]  ? process_scheduled_works+0xa20/0x14e0
[ 1640.061857][T10756]  process_scheduled_works+0xa8e/0x14e0
[ 1640.061901][T10756]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1640.061926][T10756]  ? assign_work+0x3cf/0x5d0
[ 1640.061954][T10756]  worker_thread+0xa47/0xfb0
[ 1640.061994][T10756]  ? __kthread_parkme+0x71/0x1f0
[ 1640.062031][T10756]  kthread+0x388/0x470
[ 1640.062061][T10756]  ? __pfx_worker_thread+0x10/0x10
[ 1640.062085][T10756]  ? __pfx_kthread+0x10/0x10
[ 1640.062120][T10756]  ret_from_fork+0x514/0xb70
[ 1640.062159][T10756]  ? __pfx_ret_from_fork+0x10/0x10
[ 1640.062194][T10756]  ? __switch_to+0xc89/0x1420
[ 1640.062227][T10756]  ? __pfx_kthread+0x10/0x10
[ 1640.062273][T10756]  ret_from_fork_asm+0x1a/0x30
[ 1640.062315][T10756]  </TASK>
[ 1640.062931][T10756] Kernel Offset: disabled