last executing test programs:

21.150962782s ago: executing program 4 (id=3221):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000400)=@vmx={0x8, 0x0, 0x2080, {0x4, 0x1000, {0x3}, 0x0, 0x4000000}, {"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", "5b2928e86f2144dedbacfb7ae4d5e77a33b46720fb75f2c46855d3b7356d2ef92719c0c01b3d24cc4b23f083cb064e465fc4aa1ee89950d54c17066eb905b93420d4dd7d1c497088ceb3e4ef61e307d7a0cd1766c01179e49ba6d65d11cd4b67d5f462b80f64a992ae83fa8874c077628949c91de5c2393e62046c7c876d7d299f08d42dd4400c4e6d323c31fcd3bc905906231dec5cedd7851d3fc6ad7305115e6436bae31f6e65b20af517777fb518e83fe7e182ac4242ec883cc4acd66b80e78cf822d7f53b1cdc7558501c5a3a30aaa7560e56d59069513ff84b29c851980180dcb5f2ca13e4f4f863369f3d80bd6bba8ce80fe6281bc1a4ec54354a3af3bfdbc8e3e5cb8e2b569395231d741543e80b70f40f5f90d6c057799b0b9b4d330dcfd9e1f1761ff9aba4a902ea5dd335693a5d4a066fd2b0fc3db50c25f21e86ee06b07e888b001fbd74aec677d2e7ea35d8445e817f0dabc80d14bc225a948643abb4444b0b71e4f3bf2c1ee5a009fe3dc872826500568ebeb9a6fa47ca411115efde549a177f5b40cda72e823eaf0ec8a8e41e2822b5930c00f2c72994065138e2bc80df48382c3517a2f1e1066ae32a0e7d44986098ee15d0765a8952e1a745ff1bc98b3d95799de832c2316c494f6d2dccc49224780a5af9bcb556c69938a4d98451413c56acddc74cd4ee038a0b575857632e838ef86ed28ecfee7c85a19c1a484aac7c115cb1658eab9f17939e725aba137671ea5d40b8c9c966d36ee2c6a95f47eb0469053b6fb3ae8cc9961d3e2b4452f2632220009ce178ce41899a8d4586058d14ae398a1ace3cf369261cb9d982213eefbc49a1bdeb3d47502f43145ec1b480c65de958c388f89209d5c73babcbb0ba3dcfd939c677618c139a3018fe898ebf89cca1b2ae3c72019610a1d6bf0dc7edebedcb73463c61333b72cfe3a626006799aa8446f1f054ab306ca61e4f497d92582cd4d20b74b3bf2c6d40d78cc68da942f347721059ea1b01b46bf10e1c018cc57cf87d0965b92fae95e958425ba0049e72e53d972bb9881357f33fc8f770ae2f14dcca1d8df948f314e96f8d123b839ce8400363ea064ea3946de084fbcaf7efbefde4ee293b810a987b2a6b7d9109b28dc7d39809e623a004188a1db7b61c7b6dbb4533bbdc76dd62979d1ae1361d0648161963d280b54efff455192d95ebb5306fde766e04872d5ce5f782bc68eccd1a12dd36e109b25c94174e8553d014109c1e40d15f9393df3de297148dbd27d9377b7de2c862bf5f48036b76498ffe9139c9df68bb61651f1cffa7863d9552ee0aaa40210cb3341b26a8a82805a87f754472925aae13ae40b7b051d3949488033c2094fe2a5a53c82bab084a0f2c8effd1b100180ba1b45c13ca5ad062b7180b20bcc62538e7f7debc5e913c6084c3ba317fe62f5f544d8e648fd5fc48d6b9e65b49f36c0e6fffb2d63ff7edd1ab9b1c8bfe1179bd7458304bda6dfc4d87088d685be617b05ba7cb5a05a8f72f0fb581bce8c0904d5facbdd9a8f10e6ef9f373274b829208a9df01e9b9f0f57e0fb9abfeb6e9a732c1fd3bef9b0f9d64da12fc12e1d56d210d1b1accce40b29533d9d62a5bcba60047dc203e5ac1aecc3ed47d16d88ef37feb5d2afc7b0edb67802149f937185f5b97a349fad548f17bd6a4accbc4e3ada4aecb8b3cd6d82aa87c840e38ac672c5e5304635f3a0769dd856edd5e9d361a53401c8308f25b1d834ed258dd76e60b60b66dedf943a991d9ceb55ba184603d8a0c37c5feea89679750a205d7940302876c226aaea004b83dc81d6e3f7770d7840b84ba3583de1f79db2fe6bb2d55681fce9b6df2aeccbe7b7aee8e63fd0f6b64d8760d9b3de88afdd94c8485e6654bd0df093db4b347049734ae2867fa80eb49d67203b01970e87e1c28074ff268108b509df4ea5846033001aca2ec011ad4ae816492a8d01f0b685cc9d0faf7cfffa8a318b395f739bd449fe5679dfef3d48c24e8e038c8787964e9ba41395c0c49d0f6c9bfc29a96ef1284866960129bebdf11e5a23d4fef7687678cd41caa3b52b12cdc277134589592954a9f2115e3483511af987badbf5b39f1960afb9f6e96ade72059669f06e9dbaa2809d35a58af6d2016b6f164baf221d760ef2480ec1b9ff02c54c4a671c7fde93fadaf17b50fb5bb87481256c80960bd3d62e1d1d21eea324c3c6a865673b301de6c06502b7fc27397c719fbf9dbea097abf4064161a0c183589d7f50d4b4115e56d414c0b9d32c8bec69b46f0a8885beedfa74e2ae03f9765d7938515b9bf38038351435e777f8b027434e24617aecc1e38a1fe7bd74906b1b06c15cc6d9271e9312ce10e7f5a506e73b83eee69cdfa21a24f5e8e413439e1c1892ad7e672575de28dbbee14f2b0f7b378b28f14ffcb3085204abacdacdd4cd53e4ded545099649eb6f1175d5fcd46a8f6b2e6eec86c6c74faecbce3901231eef33c5c8b990e6face38992ee820a111dd5747a6e69fdf42241ebbab4461169108c395636c9c5842bb4082e91c96a7c692a9cd0194481f8775917431463b91fe7831ac0a58fce9a9cff18eb255f06b6542ec6a4d9c18659bbe2ed5c8c353060900bc28dd2a9a0651b44a0a1a12644de3374615da49ce41bbd01444e920955326c66a0ff2d70a6ca2e571725aeebc4519a5a71a58f94ee1ebfb0a6ab7e451bf9f52200a0c1929d5a8135b069dfb0bf144cee55a0c946dff56f17912ddf5f638d23270042869d7b22899dd049d717a73d91dbfa1256039a5facd4f5cb7a648fa5e10bbeb5c016ab6e1d873a1e694f116ff4a55d5855b01a6a5f9585f1bf007880dc9f2f702b8daed30a73eec1490778f369b76bb5c0755350a809efd263e44bcad4b86b648df2f0675435dcd79ac52bb4a75f7cb0dd9e559aa0d5ef5ae0bda591ed9d823163ae8e21198d3c60792513529a944275f99725d9963b6eae990d80601cf335af8084ea8f2d163b9cc9ac4be751f5c5b5aea909908a9c30bb40915398a2d9e5285a8ddb92cbd5b754044e919e44c32faa5febad08abff2a360fe03700bb21b0e45891735a250fdc256ef1dde212f01bdb8bcb0c5d9be54cca76f8e549eb42fba1e2de2c4c36bc232f5fa71e29296917a8cbe18c5bc9d7c7b0886e7c7ed017f1b3d28e071eb0f0336c4a066704d9c452d6648c34e30f1b0212676f00c2dc0a71caebc69a4c9641a3054b0f6eec391a8e993d25af5123680130f582e83a7c938f522718d235dd63f803c513dbfe4286487f63592375879eefaa83771201f2f44dd0017702f45092ed4cbaad034e87a08471facf1a031c064920f08b560245d7f1ce0e0706d2bc1fce5c30a31e9d35916ea3197e780cd119d0efe3db165c738b4bfb7f742e354592cac185ab0dbcc33faafe6ddc8653ece219cbb7be6d78215f83d4392e854a08c3ea509516978b2f81c68aa6deea2f3c126b695b9f526dedd57dee842c3128a13b87edf1bbd619bd4c9f9f3ec6faea4e7b0ab639b5d98a90ca69451871acbab2e0fd769b4dc017d941bc8048c0adc6ce579cb1b265ff5c26d965146902e7b519c085e1c227834cb032ab3a11cabc0a63286e8365ae9d9213395d1436b94738eef3b1d9489cbf791676a6e555c2787f0ad22f726855b8bd0a013c08960fc741fcc2bd58f994e706a6504da2801be1628ad683ac4d332de0eeb710afffa8a324770bc89227697ec0bab18cb2446258afdbacf231407c6ef356a1f5fb9609e5cc41adf06ab40e90bdbcef3c2899d50fcf0b34edaa7f2b3cfb5a46710dadfcfda0e0294392f0cb10080d64d47d6b5f081c857671835d1677b37f6531460e916e184577af3516a786a462b28b2c988dbdbbc4d1f7c87f455479f2a275f92d1a59c5bf05cf0e04ca531e4ebf74c830c67a57b9dd170c57d34e7b3889261511bc1ad3d6ab7c0aa38f48114d42b4f0df755f829b668bfbdaa8706f8fabd38d193e17f3c68757cd2a83d8c7fb2ae128f6c214100fb6a33a48c51b8f91072a78745ce1286f3d3f7a78cf5991815dd8a194caf3d75dffd424c8fa56c311171a38691a6778a32ddccfbcbc1f66fa7c504dd4aefac68d793bbd1510a3fb544903b4ca16983513d4b0b7441c7ab0799e215955ba7f6c6b315873e2c61082b209bf3da09cc96061f881a8588379c49cdeb76cddc8001aa72a49331e47cd56dffe33e2857231c53c53d3a2277cb4ac44ed084ac4869e4031166792112c03f930adae0aa1c6c3024e8f937d738d0217b89ca1e2d6b46d45a7d8d087cc7243757dd294aef7b610821ba42dac23ee5f7dfdfe14cdf4fceb57e54114d8aaf6fd35e7ca31381d119e00be23547db7b0c12dbb2e4a11541328666ed03d9083040e6991656ffa99a27dc7f10d2c3f8808dcf4d14d8873382123af7f0beff2df782c806ae67142a37b800d97e2e1974c4c4706f5bc522c022624cba111b1417d5a4e329f589187061ce6e8ba3e528459d58ab971fa2e59774295a3074246180dfdda85b2b6a6b7691cfb7c2f288a5208c9cdb6d2ffac405881ff5336e5a5cfdb8563687cac8eb61580ed77256fbd709c9c0787076bb07745dd210d712e85131e966f0a4d39e99f54aa53e0ed22811ca1a1e9c0e96cd648dfb095ce373c3a13a8b0895c5e2aaa4fdfd3544e6eea6ac152dd7b51d9514fff0dffd296f98d288ac39aa1dee32f44225e621531cf95772a7f309b60e872f7c9c6dacc62d2b6ebd4c20b29b4d03028782cadd8e76b3edf425bd6225d28062da0c014fa37a408198312d684147ef8629a2f53f4f95bfc169282288979c21ed751b702fe1b7423debb40bcbbd6b1c94a6c6a1a19ea52f9dfdbc556214a5d8180884a1b2df69f5d799b4975641bc19c73a2b6586b05e047bcbfe8668e5be28b573b815df4597b034d534c5e8cdfcded37155bc0faa38113b4618bfaec5de5cdf962650f477af0612cd28140975cd00b207b8dde1234e121e6ca309946e9a86e933e5ad316be11469563e3b1239cc9a9a976e5a810f7c6b9e492962274253a16968717dfeefb78b71e88091f335a4f0c34d5723fc40eeacc2f50077747e5ccec7909a8fda2464736278857832acb0e977c988f89dc1bf266335e61c422e2517113fe2c99f280bf3cc5acb59e4ba02fbdb42556d19615dbd2b53d717254821292c556971babda3b70d4c0897f5d7044f357f4625603bc3ec8a0956c01ea7704fcdb9e7f928088bb908963dfd4bfb2afcd7b1a2bc7e21e03cb9c01a425693668490facc4da08eb11cf399c3714e6f94253cdfab6016a8c3c5c9b99a09365829c20193a3c7f8b9bb5325532bbd92d8cb57654007f4bf801b843e586a70bf90956fe6597be22811a77283af3c70a1ef99f4f26fc5b554f45e69c989e2cb167f69b75ea02f8e4fc47dd6b88bf18f98af0d1c8cdab080456136a3528bb2511a63bc600837ab2934d353d6fe04ee67681941fb68bcdb3fcdd9068c852c82941431338e4df5b49245813572c79db0eeb20800cfbc1f2d281e7616b2afe188930f025f17fbcc224286790a3045c78d7135137b157b424b9ac4c7a6fb29b54f124e046e23bbd1ece2fb8d5722a9c62a096b6baa82d75074b587aebc69ad2e5390231e8b8dd6d3c2e25ff87271d4fafd7293ae82fcae33f00b9d363e72762bbc4c18ea9181aa585fcb41ddeaf1a18db555c69174ce68c8454556ade95940e1a89dd238a0d36fe9f1bac42975e32de2efb0c26bba5caa11cf02927616134e8225a56660185f68aa75950afcb4933efe4fcb99035e4d28b"}})

18.359118251s ago: executing program 4 (id=3232):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4, 0x4, 0x3, 0x3, 0xdfe, <r0=>0xffffffffffffffff})
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="0203000211ffff000000000000000000030006003300000002004e240a01000200000000000000000200010000000000000041fd0000000005000500322000000a004e200000000300000000000000000000ffffffffffff05000000000000000100080000000000040003000080000008008000000000000600000000000000e1ffffff"], 0x88}, 0x1, 0x7}, 0x0)
socket$inet(0x2, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0xb, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81)
finit_module(r5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f041})
ioctl$PPPIOCGCHAN(r7, 0x80047437, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000051e000/0x2000)=nil)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)

16.030405761s ago: executing program 2 (id=3235):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x1)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10)
connect$inet(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x25, &(0x7f0000000300)=[{0x20, '\x00', @data=0x9, 0x5}, {0x37, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x2, @uvalue=0xfef}, {0x0, @uvalue=0x3}, {0x1, @uvalue=0x7}]}, 0xfffffff5}]})

12.369476027s ago: executing program 2 (id=3245):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write(r0, 0x0, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

12.316003587s ago: executing program 0 (id=3246):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {&(0x7f0000000540)="b4e007f06d", 0x5}, {&(0x7f0000000580)}, {&(0x7f0000000ac0)}], 0x4, 0x4d9e, 0x8)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11.585969539s ago: executing program 1 (id=3247):
gettid()
io_uring_setup(0x3450, &(0x7f0000000280)={0x0, 0x3ff3, 0x803fc})
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x484c0, 0x108)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94)
write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '&\xf5q\xa3\x91\xad\xb9\x869\x9fp\x0e\x90\xd4\xd7<\x10w\xc1\x9b\xa8\x03\xd2\xf2\xaaI\xd49\xba\xea<\x8f \x91\x0f\xb0\xa2\x93\xb4\xe7\xd2\xdb\xb5q\xdd\x17c>\xdd\xf4\x8d\x10Q\xc3l>K\xc3\x96\x0e\x1b!G\x17\\\x16v6]\xca\xa8\xf8\x1c\x0f\xad\xa2\xfa!\xc8}s(\x90>I\x9f}\bA\xe9\x0e\xb0>L\xf9\xd5U\xce$\xd7]\xf3[p\x9bA=\xf0\x18\\\xae\x8dN\xbc\xa9\xd1\t#sH\xbc\xb4\x14\xe5\x8c\x9a6\'F\xe2\xc32\a)\v\xc0\b:W\xb8\xa0\xc3\xadhSv\xb8\x8d\xbcC\xd2\xaa\x82\xf5\aR\xa0\xca\xcc\x93\xa4E\x83\xb8BQ\x97n\xbdF\x82F5\x05K\xb6 \xa0\\\xfc\xe0\xc8\xf9ZtlD\x02\xf9\x05xH\x10\xd3#\xea\x0e\xdb\xc7\xe1[g8K\x0e\xcc\x99\x13pL\xd5\xaf\xaf\\R\xfe\x8a\x18\x1c\xcc\xc0\xd8\xf4\xcfX\"\xeb\xca\x05\xaeA\xa4\xd8\xd2Z\v\xed\x88\xcf6\xb15\xf4\x81\xe8\bG\xca\x06\xdb\xb2?\x86\xf2\xc2a\xc3u`T\x132\x94oT\xda\x03\x8f.\xd8\xb5\xd5\xe0\xe9\xefVP\x16\xc03\x13\xd2\x8e-a\xff\'z\xdc\x8e\xc0A\x97l-?\xff\x8e\xc2\x93\xd0\xbc\xa2X\x1b~2\xeatq\x18\xdb\xffF\x81\x84\x83\x8b\xc3\xf0\v\xd2\x10\xb0(B\x13\xef\x17\xf2\xb4\a\xf6 \xd1\xde\xc9\xd0s\x1c\v\x0eF`s7M\xac\x1b\x04ga\x10\xd3\x1d\xcd\xba\x91}3\xb2\xec\x02\xb1p\xeb\xc9p;,;\xeb\aU\xdfOa2\x9c\xff\x03\x04\x06\xa5ym=)\x8e\xc1\x1fw=\xc2\xb2\xd0\x13}\x96\x16Nd|\x8a\x95}\xe6\x9c\xfc\xb0\xdc\xbe6 \xb2\xfa\xd4\xe8=\xf6\xbd8\xcd\xa1T\x03}\x88\x1a\x90\xd1\xa1\x86\xa1\x17E\x9a\xb4\x1a_\x13\xdd\xbe\x1f(C\xc7X?\x91\xe6\xeb#Oc\x05\xf02W\xa8\xac\xad\x04\x8e\xa4\n\xc0Z\x17\xd2pJ\xcb\xd4._\x8d0\xeebh\xd5k\x99\x98\n5\xff\xd38\xd6\xc2\xbf\xa7m\x9c\x8c\xd1\x05\t\x9aI\xd3j]:\x11\xe5O\xf0\x89OLAY\x1d\x14\xb6 \xca'}, {0x20, '\xe2Z\x93\xc3\xde\x8d\xc4^h&8\xb6S\xedD\xca?\x94^\x1b\x8cP\x8c\x92\xee\xa53\"\xd4\xe0\xbb\t\xd0@\xe1\xd4\xba\x88[\x9e\xc5\x98=d\xf0\xb1\xe9+\x96\xa5\xe0@\t \xdb\n\xfc\xc4\xb9\xf8\xab\xe5D\r$B\x83\xa2Tv\xb8\xe9\xcf\x9b3\x05\x1byc\xc2)\xdd&6\xddVO3\x8b1ta\x89\xbd\xdeb\xa5\xf7<\xfb\x88\xb8\x17\xd1\xd4%>\x90\x16\x93s\xc71{\x00\x896\xea\xe3\xd4\r\x18^\x88T2\xd3)\x0e\x91\b\xffsX\xb1Gz\xcd\xfe\xcb$\xa2\xe8)I\xeb\xbd\xe0_4\xbd\x9e\xd1<\xadI\xa2u'}, {0x20, '@'}], 0xa, "8218042ab8359b2410b7ce6ef857455486522925f8b0471505e9b0437fc318487a5d7f9d056dfa16db2e79c7dd359202df092c"}, 0x2e8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x73, 0x4, 0xa35d, 0x0, 0x2, 0x9db0, "4c4d94730133967172aa814c8fbaa0e1a5d8a7ecbcddf1cfd9a8dd57eefe85ad60e786cf0d3bdc6f93fb52ecb936d16f73a7af2d0f1d836064b16eda285eaf152ee222b39a27a25f85f818b60eb25967ff7a50fb08f4d7077384e2c4b2ff643ed64e98b6d524b0010a688dac23ffbe60b93628"}}, 0x18b)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x2, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$inet(r3, 0x0, 0x4048081)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x3, {0x0, 0xf0, 0x1}, {0x2, 0x0, 0x4}, 0xff}, {0x1, 0x3, {0x0, 0xf0}, {0x1, 0xff, 0x4}, 0x1, 0x51b8a5fa7e944d27}, {0x2, 0x2, {0x0, 0x0, 0x1}, {0x1, 0x1, 0x2}, 0x0, 0x1}, {0x3, 0x1, {0x2, 0x1, 0x4}, {0x0, 0xf0, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2}, {0x1, 0x0, 0x2}, 0xfd, 0xfd}], 0xa0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
wait4(0x0, 0x0, 0x8, 0x0)

11.029437501s ago: executing program 4 (id=3249):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x15)
syz_usb_connect(0x2, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8db3008720541005470012207010902740001000040000904"], 0x0)
socket$netlink(0x10, 0x3, 0x7)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0)
getpgrp(0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1)
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x19, 0x800000000004}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0))
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904000002da8671000905065abf0300000009058202"], 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000217000/0x2000)=nil, 0x2000, 0x9)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)

10.62493839s ago: executing program 0 (id=3250):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioprio_get$pid(0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, &(0x7f0000000100))
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}, 0x1, 0x7}, 0x0)

10.51299877s ago: executing program 1 (id=3251):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
sched_setscheduler(0x0, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_socket_connect_nvme_tcp()
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x2)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, r7)
setpgid(0x0, r7)
fchdir(r6)
r8 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000040)=0x1)
connect$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0)
close(0x3)

9.070477496s ago: executing program 1 (id=3252):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1008c20, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012002daf08d08981490a00f480102030109021b00010755e00109043a03024ed82c5c09050e"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x62}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}]}, 0x28}, 0x1, 0x0, 0x0, 0x7fb38aead40ff21a}, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x1d)
mkdir(&(0x7f0000000000)='./bus\x00', 0x84)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x400, 0x3, 0x7})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi0\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x80000001, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffbc, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x2, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x2000005]})
r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fallocate(r7, 0x0, 0x0, 0x8ffff)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

8.844085596s ago: executing program 0 (id=3253):
ioperm(0x1, 0x3, 0x1000)
gettid()
io_uring_setup(0x3450, &(0x7f0000000280)={0x0, 0x3ff3, 0x803fc})
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x484c0, 0x108)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94)
write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '&\xf5q\xa3\x91\xad\xb9\x869\x9fp\x0e\x90\xd4\xd7<\x10w\xc1\x9b\xa8\x03\xd2\xf2\xaaI\xd49\xba\xea<\x8f \x91\x0f\xb0\xa2\x93\xb4\xe7\xd2\xdb\xb5q\xdd\x17c>\xdd\xf4\x8d\x10Q\xc3l>K\xc3\x96\x0e\x1b!G\x17\\\x16v6]\xca\xa8\xf8\x1c\x0f\xad\xa2\xfa!\xc8}s(\x90>I\x9f}\bA\xe9\x0e\xb0>L\xf9\xd5U\xce$\xd7]\xf3[p\x9bA=\xf0\x18\\\xae\x8dN\xbc\xa9\xd1\t#sH\xbc\xb4\x14\xe5\x8c\x9a6\'F\xe2\xc32\a)\v\xc0\b:W\xb8\xa0\xc3\xadhSv\xb8\x8d\xbcC\xd2\xaa\x82\xf5\aR\xa0\xca\xcc\x93\xa4E\x83\xb8BQ\x97n\xbdF\x82F5\x05K\xb6 \xa0\\\xfc\xe0\xc8\xf9ZtlD\x02\xf9\x05xH\x10\xd3#\xea\x0e\xdb\xc7\xe1[g8K\x0e\xcc\x99\x13pL\xd5\xaf\xaf\\R\xfe\x8a\x18\x1c\xcc\xc0\xd8\xf4\xcfX\"\xeb\xca\x05\xaeA\xa4\xd8\xd2Z\v\xed\x88\xcf6\xb15\xf4\x81\xe8\bG\xca\x06\xdb\xb2?\x86\xf2\xc2a\xc3u`T\x132\x94oT\xda\x03\x8f.\xd8\xb5\xd5\xe0\xe9\xefVP\x16\xc03\x13\xd2\x8e-a\xff\'z\xdc\x8e\xc0A\x97l-?\xff\x8e\xc2\x93\xd0\xbc\xa2X\x1b~2\xeatq\x18\xdb\xffF\x81\x84\x83\x8b\xc3\xf0\v\xd2\x10\xb0(B\x13\xef\x17\xf2\xb4\a\xf6 \xd1\xde\xc9\xd0s\x1c\v\x0eF`s7M\xac\x1b\x04ga\x10\xd3\x1d\xcd\xba\x91}3\xb2\xec\x02\xb1p\xeb\xc9p;,;\xeb\aU\xdfOa2\x9c\xff\x03\x04\x06\xa5ym=)\x8e\xc1\x1fw=\xc2\xb2\xd0\x13}\x96\x16Nd|\x8a\x95}\xe6\x9c\xfc\xb0\xdc\xbe6 \xb2\xfa\xd4\xe8=\xf6\xbd8\xcd\xa1T\x03}\x88\x1a\x90\xd1\xa1\x86\xa1\x17E\x9a\xb4\x1a_\x13\xdd\xbe\x1f(C\xc7X?\x91\xe6\xeb#Oc\x05\xf02W\xa8\xac\xad\x04\x8e\xa4\n\xc0Z\x17\xd2pJ\xcb\xd4._\x8d0\xeebh\xd5k\x99\x98\n5\xff\xd38\xd6\xc2\xbf\xa7m\x9c\x8c\xd1\x05\t\x9aI\xd3j]:\x11\xe5O\xf0\x89OLAY\x1d\x14\xb6 \xca'}, {0x20, '\xe2Z\x93\xc3\xde\x8d\xc4^h&8\xb6S\xedD\xca?\x94^\x1b\x8cP\x8c\x92\xee\xa53\"\xd4\xe0\xbb\t\xd0@\xe1\xd4\xba\x88[\x9e\xc5\x98=d\xf0\xb1\xe9+\x96\xa5\xe0@\t \xdb\n\xfc\xc4\xb9\xf8\xab\xe5D\r$B\x83\xa2Tv\xb8\xe9\xcf\x9b3\x05\x1byc\xc2)\xdd&6\xddVO3\x8b1ta\x89\xbd\xdeb\xa5\xf7<\xfb\x88\xb8\x17\xd1\xd4%>\x90\x16\x93s\xc71{\x00\x896\xea\xe3\xd4\r\x18^\x88T2\xd3)\x0e\x91\b\xffsX\xb1Gz\xcd\xfe\xcb$\xa2\xe8)I\xeb\xbd\xe0_4\xbd\x9e\xd1<\xadI\xa2u'}, {0x20, '@'}], 0xa, "8218042ab8359b2410b7ce6ef857455486522925f8b0471505e9b0437fc318487a5d7f9d056dfa16db2e79c7dd359202df092c"}, 0x2e8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x73, 0x4, 0xa35d, 0x0, 0x2, 0x9db0, "4c4d94730133967172aa814c8fbaa0e1a5d8a7ecbcddf1cfd9a8dd57eefe85ad60e786cf0d3bdc6f93fb52ecb936d16f73a7af2d0f1d836064b16eda285eaf152ee222b39a27a25f85f818b60eb25967ff7a50fb08f4d7077384e2c4b2ff643ed64e98b6d524b0010a688dac23ffbe60b93628"}}, 0x18b)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x2, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$inet(r2, 0x0, 0x4048081)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x3, {0x0, 0xf0, 0x1}, {0x2, 0x0, 0x4}, 0xff}, {0x1, 0x3, {0x0, 0xf0}, {0x1, 0xff, 0x4}, 0x1, 0x51b8a5fa7e944d27}, {0x2, 0x2, {0x0, 0x0, 0x1}, {0x1, 0x1, 0x2}, 0x0, 0x1}, {0x3, 0x1, {0x2, 0x1, 0x4}, {0x0, 0xf0, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2}, {0x1, 0x0, 0x2}, 0xfd, 0xfd}], 0xa0)

6.974667918s ago: executing program 3 (id=3254):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

6.526299969s ago: executing program 2 (id=3255):
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x68c03, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x1, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

6.297613508s ago: executing program 0 (id=3256):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x1)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10)
connect$inet(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x25, &(0x7f0000000300)=[{0x20, '\x00', @data=0x9, 0x5}, {0x37, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x2, @uvalue=0xfef}, {0x0, @uvalue=0x3}, {0x1, @uvalue=0x7}]}, 0xfffffff5}]})

6.268527033s ago: executing program 2 (id=3257):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000840)={0x2d, 0x4, 0xfffffffe}, 0xc)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
io_uring_setup(0x5801, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x0, 0xa7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)

5.539949345s ago: executing program 1 (id=3258):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006c00)=@delchain={0x84, 0x65, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x1}, {0x5, 0xa}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xff}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "b9817204f80fea97e37c93ba450d409b"}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xd6, 0x3}}, @TCA_RATE={0x6, 0x5, {0xd6, 0xfd}}]}, 0x84}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000015c0), 0x0, 0x8, 0xd215)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r7, 0xab00, r8)
r9 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400)
ioctl$NBD_DISCONNECT(r9, 0xab08)
close_range(r6, 0xffffffffffffffff, 0x0)

5.539317445s ago: executing program 0 (id=3259):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x8002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = getpgrp(r2)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0xf, 0x10000, 0x4, 0xfffffffe, 0xaa, '@\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$media(0x0, 0x2, 0x129081)
ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fcdbdf25190000000c00060002000000000000000c000600020000000000000008000300", @ANYRES32=r7, @ANYBLOB="29000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="080003", @ANYRES32=r9, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0xc004)
rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6)

4.779602581s ago: executing program 0 (id=3260):
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101400, 0xad)
lseek(r4, 0x100000001, 0x0)

4.126956566s ago: executing program 4 (id=3261):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {&(0x7f0000000540)="b4e007f06d", 0x5}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5ad", 0x12}, {&(0x7f0000000ac0)}], 0x4, 0x4d9e, 0x8)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.999352624s ago: executing program 3 (id=3262):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\t', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x9, 0x0, 0x1, @loopback, @local}}}}}}}, 0x0)

3.818495872s ago: executing program 1 (id=3263):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioprio_get$pid(0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, &(0x7f0000000100))
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x2, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}, 0x1, 0x7}, 0x0)

3.790044017s ago: executing program 3 (id=3264):
mount(&(0x7f0000000000)=@sr0, 0x0, 0x0, 0x1000058, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x8c}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x3)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14a011ad69d08f1757c7fc7c060800000056000100000000000000003ba6e382eecbbf96"], 0x14}}, 0x0)
read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102392, 0x18ff8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1, 0xd868}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0413"], 0xc)

3.148299714s ago: executing program 4 (id=3265):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a000000000000611184000000000095020000000000003cbcf102"], 0x0}, 0x94)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(0x0, 0x80)
semtimedop(0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e1"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080)
socket$nl_route(0x10, 0x3, 0x0)

2.544086278s ago: executing program 3 (id=3266):
ioperm(0x1, 0x3, 0x1000)
gettid()
io_uring_setup(0x3450, &(0x7f0000000280)={0x0, 0x3ff3, 0x803fc})
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x484c0, 0x108)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94)
write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '&\xf5q\xa3\x91\xad\xb9\x869\x9fp\x0e\x90\xd4\xd7<\x10w\xc1\x9b\xa8\x03\xd2\xf2\xaaI\xd49\xba\xea<\x8f \x91\x0f\xb0\xa2\x93\xb4\xe7\xd2\xdb\xb5q\xdd\x17c>\xdd\xf4\x8d\x10Q\xc3l>K\xc3\x96\x0e\x1b!G\x17\\\x16v6]\xca\xa8\xf8\x1c\x0f\xad\xa2\xfa!\xc8}s(\x90>I\x9f}\bA\xe9\x0e\xb0>L\xf9\xd5U\xce$\xd7]\xf3[p\x9bA=\xf0\x18\\\xae\x8dN\xbc\xa9\xd1\t#sH\xbc\xb4\x14\xe5\x8c\x9a6\'F\xe2\xc32\a)\v\xc0\b:W\xb8\xa0\xc3\xadhSv\xb8\x8d\xbcC\xd2\xaa\x82\xf5\aR\xa0\xca\xcc\x93\xa4E\x83\xb8BQ\x97n\xbdF\x82F5\x05K\xb6 \xa0\\\xfc\xe0\xc8\xf9ZtlD\x02\xf9\x05xH\x10\xd3#\xea\x0e\xdb\xc7\xe1[g8K\x0e\xcc\x99\x13pL\xd5\xaf\xaf\\R\xfe\x8a\x18\x1c\xcc\xc0\xd8\xf4\xcfX\"\xeb\xca\x05\xaeA\xa4\xd8\xd2Z\v\xed\x88\xcf6\xb15\xf4\x81\xe8\bG\xca\x06\xdb\xb2?\x86\xf2\xc2a\xc3u`T\x132\x94oT\xda\x03\x8f.\xd8\xb5\xd5\xe0\xe9\xefVP\x16\xc03\x13\xd2\x8e-a\xff\'z\xdc\x8e\xc0A\x97l-?\xff\x8e\xc2\x93\xd0\xbc\xa2X\x1b~2\xeatq\x18\xdb\xffF\x81\x84\x83\x8b\xc3\xf0\v\xd2\x10\xb0(B\x13\xef\x17\xf2\xb4\a\xf6 \xd1\xde\xc9\xd0s\x1c\v\x0eF`s7M\xac\x1b\x04ga\x10\xd3\x1d\xcd\xba\x91}3\xb2\xec\x02\xb1p\xeb\xc9p;,;\xeb\aU\xdfOa2\x9c\xff\x03\x04\x06\xa5ym=)\x8e\xc1\x1fw=\xc2\xb2\xd0\x13}\x96\x16Nd|\x8a\x95}\xe6\x9c\xfc\xb0\xdc\xbe6 \xb2\xfa\xd4\xe8=\xf6\xbd8\xcd\xa1T\x03}\x88\x1a\x90\xd1\xa1\x86\xa1\x17E\x9a\xb4\x1a_\x13\xdd\xbe\x1f(C\xc7X?\x91\xe6\xeb#Oc\x05\xf02W\xa8\xac\xad\x04\x8e\xa4\n\xc0Z\x17\xd2pJ\xcb\xd4._\x8d0\xeebh\xd5k\x99\x98\n5\xff\xd38\xd6\xc2\xbf\xa7m\x9c\x8c\xd1\x05\t\x9aI\xd3j]:\x11\xe5O\xf0\x89OLAY\x1d\x14\xb6 \xca'}, {0x20, '\xe2Z\x93\xc3\xde\x8d\xc4^h&8\xb6S\xedD\xca?\x94^\x1b\x8cP\x8c\x92\xee\xa53\"\xd4\xe0\xbb\t\xd0@\xe1\xd4\xba\x88[\x9e\xc5\x98=d\xf0\xb1\xe9+\x96\xa5\xe0@\t \xdb\n\xfc\xc4\xb9\xf8\xab\xe5D\r$B\x83\xa2Tv\xb8\xe9\xcf\x9b3\x05\x1byc\xc2)\xdd&6\xddVO3\x8b1ta\x89\xbd\xdeb\xa5\xf7<\xfb\x88\xb8\x17\xd1\xd4%>\x90\x16\x93s\xc71{\x00\x896\xea\xe3\xd4\r\x18^\x88T2\xd3)\x0e\x91\b\xffsX\xb1Gz\xcd\xfe\xcb$\xa2\xe8)I\xeb\xbd\xe0_4\xbd\x9e\xd1<\xadI\xa2u'}, {0x20, '@'}], 0xa, "8218042ab8359b2410b7ce6ef857455486522925f8b0471505e9b0437fc318487a5d7f9d056dfa16db2e79c7dd359202df092c"}, 0x2e8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x73, 0x4, 0xa35d, 0x0, 0x2, 0x9db0, "4c4d94730133967172aa814c8fbaa0e1a5d8a7ecbcddf1cfd9a8dd57eefe85ad60e786cf0d3bdc6f93fb52ecb936d16f73a7af2d0f1d836064b16eda285eaf152ee222b39a27a25f85f818b60eb25967ff7a50fb08f4d7077384e2c4b2ff643ed64e98b6d524b0010a688dac23ffbe60b93628"}}, 0x18b)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x2, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$inet(r2, 0x0, 0x4048081)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x3, {0x0, 0xf0, 0x1}, {0x2, 0x0, 0x4}, 0xff}, {0x1, 0x3, {0x0, 0xf0}, {0x1, 0xff, 0x4}, 0x1, 0x51b8a5fa7e944d27}, {0x2, 0x2, {0x0, 0x0, 0x1}, {0x1, 0x1, 0x2}, 0x0, 0x1}, {0x3, 0x1, {0x2, 0x1, 0x4}, {0x0, 0xf0, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2}, {0x1, 0x0, 0x2}, 0xfd, 0xfd}], 0xa0)

2.379056489s ago: executing program 4 (id=3267):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write(r0, 0x0, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2.301497715s ago: executing program 1 (id=3268):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1008c20, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012002daf08d08981490a00f480102030109021b00010755e00109043a03024ed82c5c09050e"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x62}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}]}, 0x28}, 0x1, 0x0, 0x0, 0x7fb38aead40ff21a}, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x1d)
mkdir(&(0x7f0000000000)='./bus\x00', 0x84)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x400, 0x3, 0x7})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi0\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x5, 0x47, 0x2, 0xcc7, 0xfff, 0x80000001, 0x5, 0x3ff, 0x7f, 0x15fe, 0x1, 0x0, 0x3, 0xe1cb, 0xff7fffbc, 0x0, 0x2f, 0x295, 0x80000089, 0xfffffffc, 0x7, 0x2, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x2000005]})
r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fallocate(r7, 0x0, 0x0, 0x8ffff)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1.58909033s ago: executing program 3 (id=3269):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x1)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10)
connect$inet(r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x25, &(0x7f0000000300)=[{0x20, '\x00', @data=0x9, 0x5}, {0x37, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x2, @uvalue=0xfef}, {0x0, @uvalue=0x3}, {0x1, @uvalue=0x7}]}, 0xfffffff5}]})

1.010290068s ago: executing program 2 (id=3270):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)

782.929238ms ago: executing program 3 (id=3271):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=<r5=>0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58)
sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x4000000000000001, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, 0x1402, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40)
read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x16a2)
ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]})
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 2 (id=3272):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x1)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x100000}}, 0x1c}}, 0x0)
ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x25, &(0x7f0000000300)=[{0x20, '\x00', @data=0x9, 0x5}, {0x37, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x2, @uvalue=0xfef}, {0x0, @uvalue=0x3}, {0x1, @uvalue=0x7}]}, 0xfffffff5}]})

kernel console output (not intermixed with test programs):

, setting to 1024
[ 1183.754445][ T4349] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1183.783696][ T4349] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1183.793467][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1183.896173][ T4349] usb 5-1: config 0 descriptor??
[ 1183.902147][T14417] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1183.974545][   T41] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1184.202329][   T41] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[ 1184.212372][   T41] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1184.223448][   T41] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1184.237228][   T41] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1184.246407][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.275215][   T41] usb 3-1: config 0 descriptor??
[ 1184.291866][   T41] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1184.348495][ T4285] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[ 1184.370587][ T4349] usb 5-1: USB disconnect, device number 46
[ 1184.816260][   T14] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0
[ 1185.031141][   T14] hid-generic 0000:0000:0000.0052: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1185.976438][T14435] fido_id[14435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1186.247932][   T41] hid (null): unknown global tag 0xe
[ 1186.296606][   T41] hid-generic 0004:A35D:0000.0053: unknown main item tag 0x7
[ 1186.304268][   T41] hid-generic 0004:A35D:0000.0053: unknown main item tag 0x7
[ 1186.318940][   T41] hid-generic 0004:A35D:0000.0053: unknown global tag 0xe
[ 1186.328182][   T41] hid-generic 0004:A35D:0000.0053: item 0 4 1 14 parsing failed
[ 1186.341688][   T41] hid-generic: probe of 0004:A35D:0000.0053 failed with error -22
[ 1187.500643][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2600'.
[ 1187.730368][   T14] usb 3-1: USB disconnect, device number 36
[ 1188.864373][T14464] ubi: mtd0 is already attached to ubi31
[ 1189.874658][ T4349] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1189.986109][   T14] hid (null): unknown global tag 0xe
[ 1189.993615][   T14] hid-generic 0004:A35D:0000.0054: unknown main item tag 0x7
[ 1190.116845][ T4349] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1190.216561][ T4349] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1190.594765][   T14] hid-generic 0004:A35D:0000.0054: unknown main item tag 0x7
[ 1190.639046][   T14] hid-generic 0004:A35D:0000.0054: unknown global tag 0xe
[ 1190.984684][ T4349] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1191.014025][   T14] hid-generic 0004:A35D:0000.0054: item 0 4 1 14 parsing failed
[ 1191.034498][ T4349] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1191.071580][   T14] hid-generic: probe of 0004:A35D:0000.0054 failed with error -22
[ 1191.083206][ T4349] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1192.945500][T14495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2612'.
[ 1192.974572][T14495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1193.768549][   T14] hid (null): unknown global tag 0xe
[ 1193.777799][   T14] hid-generic 0004:A35D:0000.0055: unknown main item tag 0x7
[ 1193.991911][   T14] hid-generic 0004:A35D:0000.0055: unknown main item tag 0x7
[ 1194.274608][   T41] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1194.361122][   T14] hid-generic 0004:A35D:0000.0055: unknown global tag 0xe
[ 1194.382769][   T14] hid-generic 0004:A35D:0000.0055: item 0 4 1 14 parsing failed
[ 1194.396451][   T14] hid-generic: probe of 0004:A35D:0000.0055 failed with error -22
[ 1194.476495][   T41] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[ 1194.500911][   T41] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1194.962204][   T41] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1195.018119][   T41] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1195.035007][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.058796][   T41] usb 3-1: config 0 descriptor??
[ 1195.136309][   T41] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1195.691747][T14516] ubi: mtd0 is already attached to ubi31
[ 1196.345330][ T4349] usb 5-1: string descriptor 0 read error: -32
[ 1196.356516][ T4349] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1196.378870][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1196.534425][ T4349] usb 5-1: can't set config #1, error -32
[ 1197.981669][   T41] usb 5-1: USB disconnect, device number 47
[ 1198.438268][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2620'.
[ 1198.953366][T14527] [U] ø
[ 1199.268421][T10866] usb 3-1: USB disconnect, device number 37
[ 1204.014696][T14576] ubi31: detaching mtd0
[ 1204.325426][T14576] ubi31: mtd0 is detached
[ 1204.684590][T10866] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1204.959440][T10866] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1205.025193][T10866] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1205.067633][T10866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1205.121705][T10866] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1205.262487][T10866] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1205.490316][T10866] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1205.854056][T10866] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1205.920359][T10866] usb 2-1: Product: syz
[ 1205.934273][T10866] usb 2-1: Manufacturer: syz
[ 1206.192799][T10866] cdc_wdm 2-1:1.0: skipping garbage
[ 1206.571101][T10866] cdc_wdm 2-1:1.0: skipping garbage
[ 1206.598798][T10866] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1206.605646][T10866] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1209.559641][T14618] ubi31: attaching mtd0
[ 1209.575684][T14618] ubi31: scanning is finished
[ 1210.215261][T14618] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1210.447112][T14628] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1210.447112][T14628]    program syz.0.2645 not setting count and/or reply_len properly
[ 1210.940672][ T4313] usb 2-1: USB disconnect, device number 36
[ 1211.326199][T14629] xt_socket: unknown flags 0x4
[ 1213.482338][T14646] block nbd1: NBD_DISCONNECT
[ 1213.504477][T14646] block nbd1: Send disconnect failed -32
[ 1213.532453][T14646] block nbd1: Disconnected due to user request.
[ 1213.560656][T14646] block nbd1: shutting down sockets
[ 1214.923133][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2652'.
[ 1214.949710][T14655] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1215.168629][   T14] hid (null): unknown global tag 0xe
[ 1215.530019][   T14] hid-generic 0004:A35D:0000.0056: unknown main item tag 0x7
[ 1215.592398][   T14] hid-generic 0004:A35D:0000.0056: unknown main item tag 0x7
[ 1215.754415][   T14] hid-generic 0004:A35D:0000.0056: unknown global tag 0xe
[ 1215.764698][   T14] hid-generic 0004:A35D:0000.0056: item 0 4 1 14 parsing failed
[ 1215.772925][   T14] hid-generic: probe of 0004:A35D:0000.0056 failed with error -22
[ 1216.731296][T14667] fuse: Bad value for 'group_id'
[ 1217.591883][T14676] can0: slcan on ptm0.
[ 1217.794447][T14679] xt_TCPMSS: Only works on TCP SYN packets
[ 1217.962054][T14673] can0 (unregistered): slcan off ptm0.
[ 1218.318471][ T4313] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1218.547344][ T4313] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1218.573721][ T4313] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1218.598997][ T4313] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1218.742957][ T4313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1218.756947][ T4313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1219.532616][ T4313] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1220.053236][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1220.092874][ T4313] usb 5-1: Product: syz
[ 1220.122646][ T4313] usb 5-1: Manufacturer: syz
[ 1220.185334][ T4313] cdc_wdm 5-1:1.0: skipping garbage
[ 1220.283957][ T4313] cdc_wdm 5-1:1.0: skipping garbage
[ 1220.677367][ T4313] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1220.683410][ T4313] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1220.804525][T14715] fuse: Unknown parameter '0x0000000000000004'
[ 1222.601971][T14736] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1222.997279][   T41] hid (null): unknown global tag 0xe
[ 1223.021734][   T41] hid-generic 0004:A35D:0000.0057: unknown main item tag 0x7
[ 1223.461878][   T41] hid-generic 0004:A35D:0000.0057: unknown main item tag 0x7
[ 1223.484283][   T41] hid-generic 0004:A35D:0000.0057: unknown global tag 0xe
[ 1223.510516][   T41] hid-generic 0004:A35D:0000.0057: item 0 4 1 14 parsing failed
[ 1223.549220][   T41] hid-generic: probe of 0004:A35D:0000.0057 failed with error -22
[ 1223.762341][   T41] usb 5-1: USB disconnect, device number 48
[ 1224.175657][T14758] block nbd3: NBD_DISCONNECT
[ 1224.197323][T14758] block nbd3: Disconnected due to user request.
[ 1224.204821][T14758] block nbd3: shutting down sockets
[ 1225.702222][T14770] fuse: Unknown parameter '0x0000000000000004'
[ 1226.713499][T14789] overlayfs: missing 'lowerdir'
[ 1226.855953][T14793] xt_TCPMSS: Only works on TCP SYN packets
[ 1227.127742][T14796] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1229.774203][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2686'.
[ 1230.091860][T14811] [U] ø
[ 1230.471639][T14821] block nbd3: NBD_DISCONNECT
[ 1230.512630][T14821] block nbd3: Disconnected due to user request.
[ 1230.519427][T14821] block nbd3: shutting down sockets
[ 1231.525545][ T4349] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0
[ 1231.549016][ T4349] hid-generic 0000:0000:0000.0058: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1232.057679][T14833] fido_id[14833]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1232.090532][T14836] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1232.090532][T14836]    program syz.3.2692 not setting count and/or reply_len properly
[ 1232.348762][T14841] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1232.348762][T14841]    program syz.4.2693 not setting count and/or reply_len properly
[ 1233.017578][T14844] can0: slcan on ptm0.
[ 1233.394934][T14842] can0 (unregistered): slcan off ptm0.
[ 1235.834658][T14380] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0
[ 1235.858458][T14380] hid-generic 0000:0000:0000.0059: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1235.879120][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'.
[ 1236.056554][T14854] [U] ø
[ 1236.334923][T14880] fuse: Unknown parameter '0x0000000000000004'
[ 1236.417780][T14876] fido_id[14876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1237.510568][T14889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2705'.
[ 1238.067848][T14902] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1238.067848][T14902]    program syz.3.2707 not setting count and/or reply_len properly
[ 1238.762637][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.783581][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.340556][T14912] block nbd2: shutting down sockets
[ 1239.982176][T14922] can0: slcan on ptm0.
[ 1240.346840][T14916] can0 (unregistered): slcan off ptm0.
[ 1240.835189][T14926] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1243.018048][T14949] fuse: Unknown parameter '0x0000000000000004'
[ 1243.608034][T14953] ubi31: attaching mtd0
[ 1243.618635][T14953] ubi31: scanning is finished
[ 1244.244467][T14953] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1245.391072][T14960] [U] ø
[ 1245.774265][T14964] block nbd3: NBD_DISCONNECT
[ 1245.864639][ T4539] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[ 1245.874590][T14964] block nbd3: Disconnected due to user request.
[ 1245.881367][T14964] block nbd3: shutting down sockets
[ 1246.096543][ T4539] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1246.117533][T14971] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1246.124090][T14971] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1246.129275][ T4539] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1246.154509][T14971] vhci_hcd vhci_hcd.0: Device attached
[ 1246.177623][ T4539] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1246.187236][T14975] vhci_hcd: connection closed
[ 1246.187548][ T4297] vhci_hcd: stop threads
[ 1246.194358][ T4539] usb 1-1: Product: syz
[ 1246.210903][ T4539] usb 1-1: Manufacturer: syz
[ 1246.215932][ T4539] usb 1-1: SerialNumber: syz
[ 1246.320406][ T4539] usb 1-1: config 0 descriptor??
[ 1246.339066][ T4539] gspca_main: conex-2.14.0 probing 0572:0041
[ 1247.558280][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1247.568302][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1247.678888][ T4297] vhci_hcd: release socket
[ 1247.686953][ T4297] vhci_hcd: disconnect device
[ 1250.789570][ T4280] usb 1-1: USB disconnect, device number 35
[ 1251.765719][T15011] [U] ø
[ 1258.071610][   T41] hid (null): unknown global tag 0xe
[ 1258.274879][   T41] hid-generic 0004:A35D:0000.005A: unknown main item tag 0x7
[ 1258.274910][   T41] hid-generic 0004:A35D:0000.005A: unknown main item tag 0x7
[ 1258.274937][   T41] hid-generic 0004:A35D:0000.005A: unknown global tag 0xe
[ 1258.274951][   T41] hid-generic 0004:A35D:0000.005A: item 0 4 1 14 parsing failed
[ 1258.275367][   T41] hid-generic: probe of 0004:A35D:0000.005A failed with error -22
[ 1260.316542][T15084] xt_socket: unknown flags 0x4
[ 1263.167728][T15116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1263.175408][T15116] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1263.185542][T15116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1263.193098][T15116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1263.784715][T15129] ubi31: attaching mtd0
[ 1263.795591][T15129] ubi31: scanning is finished
[ 1264.425856][T15129] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1266.585218][ T4313] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0
[ 1266.625526][ T4313] hid-generic 0000:0000:0000.005B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1266.752384][T15156] fuse: Unknown parameter 'grou00000000000000000000'
[ 1267.040321][T15164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2774'.
[ 1267.076226][T15164] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1267.402870][T15155] fido_id[15155]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1268.013253][T15175] can0: slcan on ptm0.
[ 1268.568561][T15186] block nbd2: NBD_DISCONNECT
[ 1268.613572][T15186] block nbd2: Disconnected due to user request.
[ 1268.620645][T15186] block nbd2: shutting down sockets
[ 1268.682665][T15189] tmpfs: Unknown parameter '®Üʧ©¤sø 5÷¸ÑmÐöËÿqd^Sƒ}»Ý.�‹§õ¡eÓ:žàÖgõŸ§jyƒÃwР³ö~„ðt€e|ŠTF'
[ 1270.369167][T15191] [U] ø
[ 1270.898432][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1270.905831][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1270.913998][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1270.921475][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1270.954725][T15172] can0 (unregistered): slcan off ptm0.
[ 1271.440709][   T41] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0
[ 1271.491526][   T41] hid-generic 0000:0000:0000.005C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1272.219677][T15214] fido_id[15214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1272.504257][T15228] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1272.504257][T15228]    program syz.1.2789 not setting count and/or reply_len properly
[ 1279.912382][T15268] [U] ø
[ 1282.873606][ T4280] hid (null): unknown global tag 0xe
[ 1283.051929][ T4280] hid-generic 0004:A35D:0000.005D: unknown main item tag 0x7
[ 1283.360393][ T4280] hid-generic 0004:A35D:0000.005D: unknown main item tag 0x7
[ 1283.481324][ T4280] hid-generic 0004:A35D:0000.005D: unknown global tag 0xe
[ 1283.520552][ T4280] hid-generic 0004:A35D:0000.005D: item 0 4 1 14 parsing failed
[ 1283.552605][ T4280] hid-generic: probe of 0004:A35D:0000.005D failed with error -22
[ 1283.617614][ T4313] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0
[ 1283.645794][ T4313] hid-generic 0000:0000:0000.005E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1283.983963][T15309] fido_id[15309]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1289.958336][ T4349] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0
[ 1289.990434][ T4349] hid-generic 0000:0000:0000.005F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1291.532248][T15361] fido_id[15361]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1291.595829][T15369] xt_socket: unknown flags 0x4
[ 1293.404461][ T4349] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1293.601662][ T4349] usb 5-1: device descriptor read/64, error -71
[ 1294.185070][T15385] [U] ø
[ 1294.324382][ T4349] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1294.504416][ T4349] usb 5-1: device descriptor read/64, error -71
[ 1294.635084][ T4349] usb usb5-port1: attempt power cycle
[ 1295.084485][ T4349] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1295.158086][ T4349] usb 5-1: device descriptor read/8, error -71
[ 1295.434759][ T4349] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1295.661542][ T4349] usb 5-1: device descriptor read/8, error -71
[ 1295.795274][ T4349] usb usb5-port1: unable to enumerate USB device
[ 1297.484566][ T4349] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1297.563399][T15401] can0: slcan on ptm0.
[ 1297.764499][ T4349] usb 5-1: Using ep0 maxpacket: 8
[ 1297.827045][ T4349] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1298.196678][T15396] can0 (unregistered): slcan off ptm0.
[ 1298.224812][ T4349] usb 5-1: config 7 has an invalid interface number: 58 but max is 0
[ 1298.239896][ T4349] usb 5-1: config 7 has no interface number 0
[ 1298.247340][ T4349] usb 5-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1298.358824][ T4349] usb 5-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1299.115429][T15426] [U] ø
[ 1299.173748][ T4349] usb 5-1: config 7 interface 58 has no altsetting 0
[ 1299.186519][ T4349] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1299.224719][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.264876][ T4349] usb 5-1: Product: syz
[ 1299.295200][ T4349] usb 5-1: Manufacturer: syz
[ 1299.299844][ T4349] usb 5-1: SerialNumber: syz
[ 1300.018471][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.025087][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.064708][ T4349] usb 5-1: USB disconnect, device number 53
[ 1301.308194][   T14] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1301.856770][   T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1301.877901][   T14] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1301.918042][   T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1301.946481][   T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1302.002782][   T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1302.599224][   T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1302.632157][   T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1302.664476][   T14] usb 1-1: Product: syz
[ 1302.694561][   T14] usb 1-1: Manufacturer: syz
[ 1302.770235][   T14] cdc_wdm 1-1:1.0: skipping garbage
[ 1302.790143][   T14] cdc_wdm 1-1:1.0: skipping garbage
[ 1302.854232][   T14] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1302.874799][   T14] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1306.014572][ T4539] usb 1-1: USB disconnect, device number 36
[ 1307.498729][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1308.198434][T15511] [U] ø
[ 1308.314826][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1308.323468][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1308.331635][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1308.344623][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1308.352842][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1308.406630][T15517] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2851'.
[ 1308.563692][T15515] lo speed is unknown, defaulting to 1000
[ 1310.657349][T14369] Bluetooth: hci3: command 0x0409 tx timeout
[ 1310.884090][T15515] chnl_net:caif_netlink_parms(): no params data found
[ 1311.261733][T15515] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1311.319104][T15515] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1311.340693][T15515] device bridge_slave_0 entered promiscuous mode
[ 1311.357896][T15515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1312.088085][T15515] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.096352][T15515] device bridge_slave_1 entered promiscuous mode
[ 1312.130835][T15515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1312.166701][T15515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1312.282457][T15515] team0: Port device team_slave_0 added
[ 1312.302250][T15515] team0: Port device team_slave_1 added
[ 1312.361406][T15515] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1312.426411][T15515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1312.734445][T14369] Bluetooth: hci3: command 0x041b tx timeout
[ 1312.996647][T15515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1313.156722][T15515] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1313.163694][T15515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1313.232229][T15515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1313.314559][T15551] can0: slcan on ptm0.
[ 1313.654494][T15551] can0 (unregistered): slcan off ptm0.
[ 1313.656350][T15515] device hsr_slave_0 entered promiscuous mode
[ 1313.734831][T15515] device hsr_slave_1 entered promiscuous mode
[ 1313.838386][T15515] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1314.055613][T15515] Cannot create hsr debugfs directory
[ 1314.173592][T15567] xt_socket: unknown flags 0x4
[ 1314.874612][T14369] Bluetooth: hci3: command 0x040f tx timeout
[ 1315.148214][T15515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1315.319429][   T26] kauditd_printk_skb: 25 callbacks suppressed
[ 1315.319438][   T26] audit: type=1326 audit(1772830550.934:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1315.516370][T15515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1315.599667][   T26] audit: type=1326 audit(1772830550.984:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1316.128549][T15594] ubi31: attaching mtd0
[ 1316.138878][T15594] ubi31: scanning is finished
[ 1316.770123][   T26] audit: type=1326 audit(1772830550.994:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1316.793091][T15594] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1316.848129][   T26] audit: type=1326 audit(1772830551.014:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1316.910645][   T26] audit: type=1326 audit(1772830551.044:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1316.954414][T14369] Bluetooth: hci3: command 0x0419 tx timeout
[ 1317.206069][   T26] audit: type=1326 audit(1772830551.044:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1317.284394][   T26] audit: type=1326 audit(1772830551.044:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1317.978203][   T26] audit: type=1326 audit(1772830551.054:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1318.046216][T15515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1318.087079][   T26] audit: type=1326 audit(1772830551.104:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1318.174062][   T26] audit: type=1326 audit(1772830551.104:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f574739c799 code=0x7ffc0000
[ 1318.308424][T15515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1318.949671][T15515] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1319.036988][T15515] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1319.069846][T15515] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1319.106253][T15515] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1320.724609][T15515] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1320.797769][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1320.852330][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1320.875242][T15515] 8021q: adding VLAN 0 to HW filter on device team0
[ 1320.927647][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1320.947201][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1321.010066][T13086] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1321.017234][T13086] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1321.062341][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1321.099469][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1321.111110][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1321.132760][T13086] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1321.139964][T13086] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1321.173451][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1321.202230][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1321.230828][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1321.277696][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1321.321086][T15515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1321.389998][T15515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1321.463302][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1321.665247][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1321.786592][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1321.929594][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1321.990076][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1322.035424][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1322.061289][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1322.102961][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1323.454722][T15646] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1325.547182][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1325.559546][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1325.621933][T15515] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1325.722861][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1325.741205][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1326.772879][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1326.813696][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1326.867715][T15515] device veth0_vlan entered promiscuous mode
[ 1326.879992][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1326.909914][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1326.933469][T15515] device veth1_vlan entered promiscuous mode
[ 1327.137764][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1327.150634][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1327.193927][   T14] hid (null): unknown global tag 0xe
[ 1327.195192][T15515] device veth0_macvtap entered promiscuous mode
[ 1327.295674][   T14] hid-generic 0004:A35D:0000.0060: unknown main item tag 0x7
[ 1327.451883][   T14] hid-generic 0004:A35D:0000.0060: unknown main item tag 0x7
[ 1327.482622][T15515] device veth1_macvtap entered promiscuous mode
[ 1327.514201][   T14] hid-generic 0004:A35D:0000.0060: unknown global tag 0xe
[ 1327.788536][   T14] hid-generic 0004:A35D:0000.0060: item 0 4 1 14 parsing failed
[ 1327.797666][T14234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1327.825677][T14234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1327.844028][   T14] hid-generic: probe of 0004:A35D:0000.0060 failed with error -22
[ 1327.955517][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1327.966671][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1327.977425][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1328.138089][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1328.188986][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1328.236181][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1328.318758][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1328.362695][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1328.899273][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1328.930766][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.399427][T15515] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1329.411583][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1329.445934][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1329.500353][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1329.524586][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.575435][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1329.620937][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.651378][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1329.751620][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.782000][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1329.811181][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.836471][T15515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1329.847372][T15515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1329.866899][T15515] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1329.882858][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1330.013513][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1330.144840][T15515] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.211222][T15515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.281760][T15515] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.343921][T15515] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.355187][T15699] netlink: 'syz.4.2894': attribute type 4 has an invalid length.
[ 1330.581487][T15699] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2894'.
[ 1330.599930][T15699] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1330.854770][   T14] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0
[ 1330.956754][   T14] hid-generic 0000:0000:0000.0061: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1331.145035][T10872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1331.152894][T10872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1331.267147][T15708] fido_id[15708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1331.692388][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1331.999519][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1332.018952][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1332.072601][T14234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1332.784447][T15722] ubi31: attaching mtd0
[ 1332.795011][T15722] ubi31: scanning is finished
[ 1333.427546][T15722] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1336.241673][T15745] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1336.248223][T15745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1336.278891][T15745] vhci_hcd vhci_hcd.0: Device attached
[ 1336.291432][T15746] vhci_hcd: connection closed
[ 1336.291671][T13086] vhci_hcd: stop threads
[ 1336.306926][T13086] vhci_hcd: release socket
[ 1336.311492][T13086] vhci_hcd: disconnect device
[ 1338.301286][   T41] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0
[ 1338.331818][   T41] hid-generic 0000:0000:0000.0062: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1339.528141][T15768] fido_id[15768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1340.876320][T15789] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1340.876320][T15789]    program syz.4.2917 not setting count and/or reply_len properly
[ 1341.515563][T14369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1341.526014][T14369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1341.542219][T14369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1341.564969][T14369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1341.583767][T14369] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1341.591143][T14369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1341.690962][T15790] lo speed is unknown, defaulting to 1000
[ 1342.782024][T15795] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[ 1343.464441][   T41] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1343.966344][T15812] ubi31: attaching mtd0
[ 1343.977347][T15812] ubi31: scanning is finished
[ 1344.593626][ T4285] Bluetooth: hci5: command 0x0409 tx timeout
[ 1344.602019][T15812] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1344.765156][   T41] usb 4-1: no configurations
[ 1344.769803][   T41] usb 4-1: can't read configurations, error -22
[ 1344.922703][T15790] chnl_net:caif_netlink_parms(): no params data found
[ 1344.944472][   T41] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1345.135205][   T41] usb 4-1: no configurations
[ 1345.139845][   T41] usb 4-1: can't read configurations, error -22
[ 1345.154674][   T41] usb usb4-port1: attempt power cycle
[ 1345.296498][T15790] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1345.344501][T15790] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1345.362978][T15790] device bridge_slave_0 entered promiscuous mode
[ 1345.574497][   T41] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1345.597008][T15790] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1345.604133][T15790] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1345.626527][   T41] usb 4-1: no configurations
[ 1345.631134][   T41] usb 4-1: can't read configurations, error -22
[ 1345.669327][T15790] device bridge_slave_1 entered promiscuous mode
[ 1345.764928][T15790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1345.788338][T15790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1345.804518][   T41] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1345.855922][   T41] usb 4-1: no configurations
[ 1345.860549][   T41] usb 4-1: can't read configurations, error -22
[ 1345.887269][   T41] usb usb4-port1: unable to enumerate USB device
[ 1346.089161][ T4436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.179074][T15790] team0: Port device team_slave_0 added
[ 1346.300098][T15790] team0: Port device team_slave_1 added
[ 1346.379117][ T4436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.448262][T15790] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1346.473333][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1346.544720][T15790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1346.674533][ T4285] Bluetooth: hci5: command 0x041b tx timeout
[ 1347.508151][ T4436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.566618][T15790] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1347.595057][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1347.711361][T15790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1348.121658][T14440] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0
[ 1348.197737][T14440] hid-generic 0000:0000:0000.0063: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1348.301017][T15836] fuse: Bad value for 'fd'
[ 1348.328440][ T4436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.523893][T15790] device hsr_slave_0 entered promiscuous mode
[ 1348.540790][T15834] fido_id[15834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1348.592460][T15790] device hsr_slave_1 entered promiscuous mode
[ 1348.604700][T15841] xt_TCPMSS: Only works on TCP SYN packets
[ 1348.633873][T15790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1348.707046][T15790] Cannot create hsr debugfs directory
[ 1348.714984][ T4285] Bluetooth: hci5: command 0x040f tx timeout
[ 1349.498976][T15849] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1349.498976][T15849]    program syz.2.2930 not setting count and/or reply_len properly
[ 1350.794493][ T4285] Bluetooth: hci5: command 0x0419 tx timeout
[ 1351.406948][T15860] ubi31: attaching mtd0
[ 1351.417898][T15860] ubi31: scanning is finished
[ 1352.048366][T15860] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1353.561652][T15883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2937'.
[ 1353.606958][T15881] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1354.418486][T14440] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1354.794831][T15897] block nbd1: NBD_DISCONNECT
[ 1354.799621][T15897] block nbd1: Send disconnect failed -32
[ 1354.837298][T15897] block nbd1: Disconnected due to user request.
[ 1354.916660][T15897] block nbd1: shutting down sockets
[ 1355.012780][T14440] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1355.031814][T14440] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1355.072349][T14440] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1355.110702][T14440] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1355.143401][T14440] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1355.282858][T14440] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1355.292412][T14440] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1355.321987][T14440] usb 3-1: Product: syz
[ 1355.328416][T14440] usb 3-1: Manufacturer: syz
[ 1355.394939][T14440] cdc_wdm 3-1:1.0: skipping garbage
[ 1355.400192][T14440] cdc_wdm 3-1:1.0: skipping garbage
[ 1355.491720][T14440] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1355.545243][T14440] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1355.938318][T15918] xt_TCPMSS: Only works on TCP SYN packets
[ 1356.741844][T15790] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1356.896525][T15790] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1356.932535][T15790] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1357.635315][T15790] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1357.888284][ T4436] device hsr_slave_0 left promiscuous mode
[ 1357.949679][ T4436] device hsr_slave_1 left promiscuous mode
[ 1357.998984][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1358.067063][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1358.127245][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1358.194453][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1358.266648][ T4436] device bridge_slave_1 left promiscuous mode
[ 1358.274852][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1358.328009][ T4436] device bridge_slave_0 left promiscuous mode
[ 1358.334242][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1358.524298][ T4436] device veth1_macvtap left promiscuous mode
[ 1358.565503][ T4436] device veth0_macvtap left promiscuous mode
[ 1358.583068][ T4436] device veth1_vlan left promiscuous mode
[ 1358.589125][ T4436] device veth0_vlan left promiscuous mode
[ 1361.525334][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.990745][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.341645][ T4539] usb 3-1: USB disconnect, device number 38
[ 1362.441382][T15966] block nbd4: NBD_DISCONNECT
[ 1362.457661][T15966] block nbd4: Disconnected due to user request.
[ 1362.464061][T15966] block nbd4: shutting down sockets
[ 1363.361832][ T4436] team0 (unregistering): Port device team_slave_1 removed
[ 1363.423907][ T4436] team0 (unregistering): Port device team_slave_0 removed
[ 1363.481835][ T4436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1363.538972][ T4436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1363.971148][ T4436] bond0 (unregistering): Released all slaves
[ 1365.089964][T15971] [U] ø
[ 1365.138809][T15974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2952'.
[ 1365.278928][T15790] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1365.362793][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1365.393410][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1365.411522][T15983] xt_TCPMSS: Only works on TCP SYN packets
[ 1365.421199][T15790] 8021q: adding VLAN 0 to HW filter on device team0
[ 1365.461214][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1365.482731][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1365.500277][T11987] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1365.507434][T11987] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1365.568945][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1365.604214][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1365.627276][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1365.652884][T11987] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1365.660015][T11987] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1365.739143][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1365.774139][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1365.908818][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1366.391615][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1366.501748][T15790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1366.640810][T15790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1366.783062][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1366.793904][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1367.288556][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1367.388894][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1367.453486][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1367.484121][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1367.511643][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1367.569683][T11987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1368.116067][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1368.144142][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1368.179299][T15790] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1368.231209][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1368.283708][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1368.794446][T14440] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1368.831681][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1368.882673][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1368.940139][T15790] device veth0_vlan entered promiscuous mode
[ 1368.965662][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1368.987434][T14440] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1368.998321][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1369.022816][T14440] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1369.046568][T15790] device veth1_vlan entered promiscuous mode
[ 1369.625647][T14440] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1369.684453][T14440] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1369.695938][T14440] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1369.714078][T14440] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1369.731725][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1369.739334][T14440] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1369.775279][T14440] usb 4-1: Product: syz
[ 1369.779516][T14440] usb 4-1: Manufacturer: syz
[ 1369.787347][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1369.832148][T14440] cdc_wdm 4-1:1.0: skipping garbage
[ 1369.856635][T14440] cdc_wdm 4-1:1.0: skipping garbage
[ 1369.890613][T14440] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1369.975471][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1369.983644][T14440] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1369.998173][T15790] device veth0_macvtap entered promiscuous mode
[ 1370.104267][T15790] device veth1_macvtap entered promiscuous mode
[ 1370.206310][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1370.236265][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1370.271529][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1370.480279][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1370.632217][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1370.680672][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1370.952259][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1371.028063][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1371.044387][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1371.064175][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1371.124194][T15790] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1371.146799][T16024] block nbd4: shutting down sockets
[ 1371.179446][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1371.191047][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1371.274714][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1371.304744][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1371.437183][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1371.477618][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1371.504500][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1371.544471][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1371.846686][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1372.555852][T16027] [U] ø
[ 1373.944768][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.960699][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1373.972148][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.984270][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1373.995471][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.012956][T15790] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1374.037306][T16032] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2963'.
[ 1374.151415][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1374.219658][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1374.685574][T15790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.839458][T15790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.850299][T15790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1374.861623][T15790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1376.054797][ T4436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1376.070588][ T4436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1376.082385][ T4539] usb 4-1: USB disconnect, device number 51
[ 1376.223791][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1377.106761][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1377.135543][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1377.598946][T16062] ubi31: attaching mtd0
[ 1377.609439][T16062] ubi31: scanning is finished
[ 1378.249271][T16062] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1378.373350][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1380.227593][T16078] kernel profiling enabled (shift: 9)
[ 1381.815201][T16091] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2978'.
[ 1381.967801][T16072] [U] ø
[ 1385.590467][T16126] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1385.590467][T16126]    program syz.2.2989 not setting count and/or reply_len properly
[ 1386.459671][   T14] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0
[ 1386.536162][   T14] hid-generic 0000:0000:0000.0064: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1387.036719][T16133] fido_id[16133]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1388.122233][T16147] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2994'.
[ 1388.758588][T16140] [U] ø
[ 1389.239192][   T14] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0
[ 1389.352664][   T14] hid-generic 0000:0000:0000.0065: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1390.097573][T16153] fido_id[16153]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1392.179908][T16178] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1392.179908][T16178]    program syz.2.3003 not setting count and/or reply_len properly
[ 1392.588162][T16180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1392.601156][T16180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1392.609205][T16180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1392.943170][T14369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1392.955035][T14369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1392.965025][T14369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1392.985528][T14369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1392.994664][T14369] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1393.005001][T14369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1393.050355][T16185] lo speed is unknown, defaulting to 1000
[ 1394.348972][T16185] chnl_net:caif_netlink_parms(): no params data found
[ 1394.837607][T16185] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1394.870718][T16185] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1395.619216][ T4285] Bluetooth: hci1: command 0x0409 tx timeout
[ 1395.630850][T16185] device bridge_slave_0 entered promiscuous mode
[ 1395.642060][T16185] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1395.649303][T16185] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1395.717200][T16185] device bridge_slave_1 entered promiscuous mode
[ 1395.789128][T16185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1395.833760][T16185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1396.095342][T16213] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1396.095342][T16213]    program syz.4.3011 not setting count and/or reply_len properly
[ 1396.345746][T16185] team0: Port device team_slave_0 added
[ 1396.379757][T16185] team0: Port device team_slave_1 added
[ 1396.455761][T16185] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1396.472908][T16185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1396.577060][T16185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1396.668555][T16185] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1396.694430][T16185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1397.183895][T16185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1397.299562][T16185] device hsr_slave_0 entered promiscuous mode
[ 1397.326243][T16185] device hsr_slave_1 entered promiscuous mode
[ 1397.373119][T16185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1397.383123][T16185] Cannot create hsr debugfs directory
[ 1397.534024][T16219] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1397.534024][T16219]    program syz.4.3014 not setting count and/or reply_len properly
[ 1397.674499][ T4285] Bluetooth: hci1: command 0x041b tx timeout
[ 1397.934589][   T41] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1398.048309][T16185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1398.132688][   T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1398.150742][   T41] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1398.164766][   T41] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1398.181596][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.204646][   T41] usb 3-1: config 0 descriptor??
[ 1398.916609][T14440] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0
[ 1398.925512][T14440] hid-generic 0000:0000:0000.0066: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1399.864129][ T4285] Bluetooth: hci1: command 0x040f tx timeout
[ 1400.386442][T16243] ubi31: attaching mtd0
[ 1400.392832][T16243] ubi31: scanning is finished
[ 1401.012996][T16243] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1401.077234][T16234] fido_id[16234]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1401.106296][T16185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.217328][   T14] usb 3-1: USB disconnect, device number 39
[ 1401.312855][T16185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.500417][T16185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.882943][T16185] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1401.920478][T14369] Bluetooth: hci1: command 0x0419 tx timeout
[ 1402.095509][T16185] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1402.102753][T16185] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1402.131677][T16185] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1402.925238][T16259] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1402.925238][T16259]    program syz.2.3023 not setting count and/or reply_len properly
[ 1403.245197][T16185] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1403.359655][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1403.375281][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1403.431350][T16185] 8021q: adding VLAN 0 to HW filter on device team0
[ 1403.446222][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1403.465947][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1403.498664][T13086] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1403.505840][T13086] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1403.726385][T16267] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1403.726385][T16267]    program syz.3.3025 not setting count and/or reply_len properly
[ 1403.956807][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1404.026234][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1404.143056][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1404.171696][T13086] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1404.178849][T13086] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1404.299111][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1405.283785][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1405.395883][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1405.440509][T16276] binder_alloc: 16274: binder_alloc_buf, no vma
[ 1405.445642][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1405.458663][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1405.549264][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1405.565563][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1405.627118][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1405.655033][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1405.698307][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1405.727472][T16283] mmap: syz.4.3033 (16283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1405.766341][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1405.851701][T16185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1406.620283][   T14] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0
[ 1406.672279][   T14] hid-generic 0000:0000:0000.0067: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1406.684402][T16287] netlink: 'syz.2.3032': attribute type 10 has an invalid length.
[ 1407.070642][T16287] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1407.992660][T16185] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1407.995070][T16307] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1407.995070][T16307]    program syz.2.3037 not setting count and/or reply_len properly
[ 1408.088277][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1408.100212][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1408.430872][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1408.695615][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1408.811201][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1408.835442][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1408.853811][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1408.897609][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1409.693723][T16185] device veth0_vlan entered promiscuous mode
[ 1409.934518][T16322] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1409.934518][T16322]    program syz.3.3040 not setting count and/or reply_len properly
[ 1410.407047][T16185] device veth1_vlan entered promiscuous mode
[ 1410.561670][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1410.600715][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1410.657495][T16185] device veth0_macvtap entered promiscuous mode
[ 1410.677430][T16185] device veth1_macvtap entered promiscuous mode
[ 1411.120009][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1411.132053][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1411.208681][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1411.276691][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1411.294530][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1411.320244][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1411.784504][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1411.829476][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1411.882639][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1411.933950][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1411.978536][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1412.020318][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1412.050852][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1412.087787][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1412.128359][T16185] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1412.184264][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3046'.
[ 1412.219910][T16339] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1412.229073][T16339] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1412.237861][T16339] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1412.246595][T16339] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1412.446646][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1412.480107][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1412.559231][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1412.593715][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1412.614599][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1412.779627][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1413.112964][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1413.123906][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1413.172447][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1413.203299][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1413.252039][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1413.314246][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1413.344433][T16185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1413.355360][T16185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1413.402460][T14440] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1413.431137][T16185] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1413.470655][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3046'.
[ 1413.494608][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1413.597070][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1413.619312][T14440] usb 3-1: Using ep0 maxpacket: 8
[ 1413.671179][T16185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1413.694454][T16185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1413.723147][T14440] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1413.773938][T16185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.135381][T14440] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1414.668945][T14440] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[ 1414.685817][T16185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.907738][T14440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1414.972534][T14440] usb 3-1: config 0 descriptor??
[ 1415.107278][T11648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1415.125587][T11648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1415.155889][T13086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1415.163798][T13086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1415.172812][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1415.238209][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1418.245943][T16384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1418.455487][T16375] syz.0.3054 sent an empty control message without MSG_MORE.
[ 1418.763075][T14369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1418.773524][T14369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1418.782330][T14369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1418.790191][T14369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1418.798910][T14369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1418.826419][T14369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1419.671006][T16388] lo speed is unknown, defaulting to 1000
[ 1419.983451][T14440] usb 3-1: can't set config #0, error -71
[ 1419.994657][T14440] usb 3-1: USB disconnect, device number 40
[ 1421.610904][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[ 1422.260653][T16388] chnl_net:caif_netlink_parms(): no params data found
[ 1422.485427][T16388] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1422.494592][T16388] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.544803][T16388] device bridge_slave_0 entered promiscuous mode
[ 1422.604047][T16388] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1422.651641][T16388] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1422.713093][T16388] device bridge_slave_1 entered promiscuous mode
[ 1422.845163][T16388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1422.877805][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.884130][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.955957][T16388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1423.022775][T16388] team0: Port device team_slave_0 added
[ 1423.088377][T16388] team0: Port device team_slave_1 added
[ 1423.154674][T16388] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1423.161806][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1423.295246][T16388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1423.326612][T16388] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1423.333623][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1423.370923][T16388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1423.674569][ T4285] Bluetooth: hci0: command 0x041b tx timeout
[ 1424.609019][T16388] device hsr_slave_0 entered promiscuous mode
[ 1424.744936][T16388] device hsr_slave_1 entered promiscuous mode
[ 1425.104561][T16388] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1425.112170][T16388] Cannot create hsr debugfs directory
[ 1425.754801][ T4285] Bluetooth: hci0: command 0x040f tx timeout
[ 1426.191950][T16388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1426.621055][T16388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1427.870136][T16448] ubi31: attaching mtd0
[ 1427.882172][T16448] ubi31: scanning is finished
[ 1428.521815][ T4285] Bluetooth: hci0: command 0x0419 tx timeout
[ 1428.568513][T16448] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1429.366893][T16388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1429.594412][T16456] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1429.594412][T16456]    program syz.1.3073 not setting count and/or reply_len properly
[ 1429.948434][T16388] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1430.054838][T14984] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 1430.259623][T14984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1430.392673][T14984] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1430.502849][T14984] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1430.608141][T14984] usb 4-1: Product: syz
[ 1430.666933][T14984] usb 4-1: Manufacturer: syz
[ 1430.702462][T14984] usb 4-1: SerialNumber: syz
[ 1430.735706][T14984] usb 4-1: config 0 descriptor??
[ 1430.770538][T14984] gspca_main: conex-2.14.0 probing 0572:0041
[ 1430.974249][   T26] kauditd_printk_skb: 12 callbacks suppressed
[ 1430.974264][   T26] audit: type=1400 audit(1772830666.584:768): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=16467 comm="syz.1.3078"
[ 1431.080505][T16471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1431.098304][T16471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.617499][   T26] audit: type=1326 audit(1772830666.614:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1431.772861][T16388] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1431.790754][   T26] audit: type=1326 audit(1772830666.614:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1431.813115][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1431.885101][T16388] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1431.929809][T16388] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1431.960675][   T26] audit: type=1326 audit(1772830666.614:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1431.985824][T16388] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1432.330150][   T26] audit: type=1326 audit(1772830666.614:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1432.756656][   T26] audit: type=1326 audit(1772830666.624:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1433.234052][   T26] audit: type=1326 audit(1772830666.624:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1433.245522][T16388] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1433.285051][   T26] audit: type=1326 audit(1772830666.804:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1433.479672][   T26] audit: type=1326 audit(1772830666.814:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1433.611020][   T26] audit: type=1326 audit(1772830666.814:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16463 comm="syz.0.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d9c799 code=0x7ffc0000
[ 1433.666768][T16388] 8021q: adding VLAN 0 to HW filter on device team0
[ 1433.712726][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1433.754993][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1433.868325][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1433.900022][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1433.916879][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1433.923964][ T4783] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1433.950802][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1433.970608][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1433.984127][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1433.991293][ T4783] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1434.026828][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1434.043094][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1434.056577][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1434.073650][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1434.092293][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1434.123275][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1434.161439][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1434.693651][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1434.765554][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1434.817149][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1434.939081][T16388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1434.992304][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1435.001335][   T41] usb 4-1: USB disconnect, device number 52
[ 1435.045400][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1438.414712][T16526] ubi31: attaching mtd0
[ 1438.425216][T16526] ubi31: scanning is finished
[ 1439.072463][T16526] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1439.142139][   T41] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1439.204676][T14440] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1439.213008][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1439.223506][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1439.249378][T16388] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1439.395927][   T41] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1439.415353][T14440] usb 4-1: Using ep0 maxpacket: 8
[ 1439.422570][T14440] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1439.424620][   T41] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1439.463133][   T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1439.464143][T14440] usb 4-1: config 7 has an invalid interface number: 58 but max is 0
[ 1439.496319][   T41] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1439.534403][   T41] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1439.560622][T14440] usb 4-1: config 7 has no interface number 0
[ 1439.577853][   T41] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1439.598175][T14440] usb 4-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1439.608092][   T41] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1439.632981][T14440] usb 4-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1439.652134][   T41] usb 3-1: Product: syz
[ 1439.673830][   T41] usb 3-1: Manufacturer: syz
[ 1439.684714][T14440] usb 4-1: config 7 interface 58 has no altsetting 0
[ 1439.695542][   T41] cdc_wdm 3-1:1.0: skipping garbage
[ 1439.717225][T14440] usb 4-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1439.717551][   T41] cdc_wdm 3-1:1.0: skipping garbage
[ 1439.742536][T14440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1439.774591][   T41] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1439.780577][   T41] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1439.784377][T14440] usb 4-1: Product: syz
[ 1439.790677][T14440] usb 4-1: Manufacturer: syz
[ 1439.867907][T14440] usb 4-1: SerialNumber: syz
[ 1439.955797][   T41] usb 3-1: USB disconnect, device number 41
[ 1440.106561][T16523] overlayfs: missing 'workdir'
[ 1440.129148][T16523] comedi comedi0: dt2815: I/O port conflict (0x4f27,2)
[ 1440.171474][T14440] usb 4-1: USB disconnect, device number 53
[ 1440.416385][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1440.441072][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1440.465280][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1440.474295][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1440.510925][T16388] device veth0_vlan entered promiscuous mode
[ 1440.527539][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1440.551786][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1440.578076][T16388] device veth1_vlan entered promiscuous mode
[ 1441.455652][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1441.522662][T16552] xt_socket: unknown flags 0x4
[ 1441.532148][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1441.606291][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1441.652652][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1441.797056][T16388] device veth0_macvtap entered promiscuous mode
[ 1442.141545][T16388] device veth1_macvtap entered promiscuous mode
[ 1442.223017][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1442.259546][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.304855][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1442.348705][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.419713][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1442.451502][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.477274][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1442.489177][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.500515][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1442.512126][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.526032][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1442.537990][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.548321][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1442.560154][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.591233][T16388] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1442.673928][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1442.694936][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1442.722482][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1442.756355][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1442.807087][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1442.837689][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1442.862122][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1443.152205][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1443.179771][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1443.190399][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1443.201113][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1443.216647][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1443.227290][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1443.240172][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1443.252132][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1443.265586][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1443.277375][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1443.289531][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1443.314052][T16388] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1443.436089][T16388] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1443.508192][T16388] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.167525][T16388] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.197134][T16388] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.224760][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1444.658693][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1444.896229][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1444.904100][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1444.952927][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1445.076658][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1445.115804][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.136415][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1446.462345][T16584] block nbd2: NBD_DISCONNECT
[ 1446.569738][ T4539] hid (null): unknown global tag 0xe
[ 1446.642587][ T4539] hid-generic 0004:A35D:0000.0068: unknown main item tag 0x7
[ 1446.650711][ T4539] hid-generic 0004:A35D:0000.0068: unknown main item tag 0x7
[ 1446.664666][ T4539] hid-generic 0004:A35D:0000.0068: unknown global tag 0xe
[ 1446.681870][ T4539] hid-generic 0004:A35D:0000.0068: item 0 4 1 14 parsing failed
[ 1446.705158][ T4539] hid-generic: probe of 0004:A35D:0000.0068 failed with error -22
[ 1447.206771][T16584] block nbd2: Disconnected due to user request.
[ 1447.213043][T16584] block nbd2: shutting down sockets
[ 1447.287827][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3053'.
[ 1447.356257][T16600] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1449.976006][T16624] ubi31: attaching mtd0
[ 1449.980772][T16624] ubi31: scanning is finished
[ 1450.101474][T16624] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1450.109230][T16624] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1450.116599][T16624] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1450.123614][T16624] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1450.131163][T16624] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1450.138062][T16624] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1450.146203][T16624] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 425705129
[ 1450.156503][T16624] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1450.218153][T16632] ubi31: background thread "ubi_bgt31d" started, PID 16632
[ 1450.999248][T16637] xt_socket: unknown flags 0x4
[ 1451.015601][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1451.025820][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1451.035802][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1451.043425][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1451.052503][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1451.064857][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1451.116574][T16638] lo speed is unknown, defaulting to 1000
[ 1451.661924][T16638] chnl_net:caif_netlink_parms(): no params data found
[ 1451.931824][T16647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'.
[ 1451.985943][T16647] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1452.625985][T16638] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1452.699789][T16638] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1452.777547][T16638] device bridge_slave_0 entered promiscuous mode
[ 1452.813528][T16638] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1452.844639][T16638] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1452.852920][T16638] device bridge_slave_1 entered promiscuous mode
[ 1452.867712][T16655] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1453.105588][T16638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1453.114667][T14369] Bluetooth: hci2: command 0x0409 tx timeout
[ 1453.140025][T16638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1453.140058][ T4280] hid (null): unknown global tag 0xe
[ 1453.401616][ T4280] hid-generic 0004:A35D:0000.0069: unknown main item tag 0x7
[ 1453.582024][ T4280] hid-generic 0004:A35D:0000.0069: unknown main item tag 0x7
[ 1454.130196][T16667] ubi31: detaching mtd0
[ 1454.753435][ T4280] hid-generic 0004:A35D:0000.0069: unknown global tag 0xe
[ 1454.764470][ T4280] hid-generic 0004:A35D:0000.0069: item 0 4 1 14 parsing failed
[ 1454.772861][ T4280] hid-generic: probe of 0004:A35D:0000.0069 failed with error -22
[ 1454.781631][T16667] ubi31: mtd0 is detached
[ 1454.845698][T16638] team0: Port device team_slave_0 added
[ 1454.865740][T16638] team0: Port device team_slave_1 added
[ 1455.092505][T16638] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1455.122816][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1455.194676][ T4285] Bluetooth: hci2: command 0x041b tx timeout
[ 1455.245423][T16638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1455.334644][T16638] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1455.341632][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1455.476736][T16638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1455.694948][T16638] device hsr_slave_0 entered promiscuous mode
[ 1455.735113][T16638] device hsr_slave_1 entered promiscuous mode
[ 1455.745891][T16638] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1455.783921][T16638] Cannot create hsr debugfs directory
[ 1457.514151][ T4285] Bluetooth: hci2: command 0x040f tx timeout
[ 1457.897949][T16638] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1457.982060][ T4280] hid (null): unknown global tag 0xe
[ 1457.996579][ T4280] hid-generic 0004:A35D:0000.006A: unknown main item tag 0x7
[ 1458.487639][ T4280] hid-generic 0004:A35D:0000.006A: unknown main item tag 0x7
[ 1458.514427][ T4280] hid-generic 0004:A35D:0000.006A: unknown global tag 0xe
[ 1458.521564][ T4280] hid-generic 0004:A35D:0000.006A: item 0 4 1 14 parsing failed
[ 1458.555072][ T4280] hid-generic: probe of 0004:A35D:0000.006A failed with error -22
[ 1458.666997][T16638] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1459.427548][T16700] ubi31: attaching mtd0
[ 1459.432313][T16700] ubi31: scanning is finished
[ 1459.480139][T16700] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1459.487994][T16700] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1459.495701][T16700] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1459.502741][T16700] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1459.510229][T16700] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1459.517143][T16700] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1459.525246][T16700] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 425705129
[ 1459.535283][T16700] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1459.595772][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[ 1459.629014][T16703] ubi31: background thread "ubi_bgt31d" started, PID 16703
[ 1459.905141][T16638] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1460.898241][T16638] bond0: (slave netdevsim0): Releasing backup interface
[ 1461.424418][T16638] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1461.620286][ T4539] hid (null): unknown global tag 0xe
[ 1461.746584][ T4539] hid-generic 0004:A35D:0000.006B: unknown main item tag 0x7
[ 1462.075314][ T4539] hid-generic 0004:A35D:0000.006B: unknown main item tag 0x7
[ 1462.082749][ T4539] hid-generic 0004:A35D:0000.006B: unknown global tag 0xe
[ 1462.126649][ T4539] hid-generic 0004:A35D:0000.006B: item 0 4 1 14 parsing failed
[ 1462.161332][ T4539] hid-generic: probe of 0004:A35D:0000.006B failed with error -22
[ 1462.885805][T16638] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1462.944132][T16638] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1462.997337][T16638] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1463.039951][T16638] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1463.063427][T16729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1463.294575][ T4280] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1463.304795][T16638] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1463.561305][T16735] block nbd1: NBD_DISCONNECT
[ 1463.598129][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1463.634707][ T4280] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1463.693183][ T4280] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1463.709467][T16738] block nbd1: Disconnected due to user request.
[ 1463.716371][T16738] block nbd1: shutting down sockets
[ 1464.075701][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1464.359536][ T4280] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1464.392014][ T4280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1464.409055][T16638] 8021q: adding VLAN 0 to HW filter on device team0
[ 1464.416813][ T4280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1464.455300][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1464.477835][ T4280] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1464.502844][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1464.518380][ T4280] usb 4-1: Product: syz
[ 1464.522551][ T4280] usb 4-1: Manufacturer: syz
[ 1464.529542][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1464.569090][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1464.576318][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1464.595219][ T4280] cdc_wdm 4-1:1.0: skipping garbage
[ 1464.600489][ T4280] cdc_wdm 4-1:1.0: skipping garbage
[ 1464.628941][ T4280] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1464.644085][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1464.653445][ T4280] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1464.675391][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1464.684100][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1464.691293][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1464.798694][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1464.994530][T16745] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1464.994530][T16745]    program syz.0.3142 not setting count and/or reply_len properly
[ 1465.358012][ T4349] usb 4-1: USB disconnect, device number 54
[ 1465.370026][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1465.417821][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1465.455079][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1465.486752][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1465.516460][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1465.543384][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1465.579035][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1465.595685][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1465.604121][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1465.635473][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1465.646724][T15029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1466.434946][ T4285] Bluetooth: hci5: command 0x0406 tx timeout
[ 1467.661953][T16763] ubi31: detaching mtd0
[ 1468.281062][T16763] ubi31: mtd0 is detached
[ 1468.362758][T12855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1468.380765][T12855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1468.437145][T16638] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1468.525257][T12855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1468.574066][T12855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1469.136924][T16638] device veth0_vlan entered promiscuous mode
[ 1469.167546][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1469.195894][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1469.220815][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1469.245381][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1469.289916][T16638] device veth1_vlan entered promiscuous mode
[ 1469.385852][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1469.403278][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1469.443125][T16638] device veth0_macvtap entered promiscuous mode
[ 1469.898620][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1469.937255][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1469.957398][T15198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1470.014152][T16638] device veth1_macvtap entered promiscuous mode
[ 1470.104910][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1470.124767][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1470.208546][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1470.235399][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1471.151804][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1471.182167][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1471.214507][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1471.232733][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1471.271599][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1471.294288][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1471.312080][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1471.334677][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1471.357332][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1471.379968][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1471.404650][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1471.415550][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1471.441786][T16638] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1471.476619][T16572] hid (null): unknown global tag 0xe
[ 1471.487958][T16572] hid-generic 0004:A35D:0000.006C: unknown main item tag 0x7
[ 1471.504657][T16772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1471.741714][T16572] hid-generic 0004:A35D:0000.006C: unknown main item tag 0x7
[ 1471.939408][T16572] hid-generic 0004:A35D:0000.006C: unknown global tag 0xe
[ 1471.955287][T16772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1471.974537][T16572] hid-generic 0004:A35D:0000.006C: item 0 4 1 14 parsing failed
[ 1471.982767][T16572] hid-generic: probe of 0004:A35D:0000.006C failed with error -22
[ 1471.995378][T16772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1472.042957][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1472.108205][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1472.269267][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1472.919311][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1472.934748][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1472.954634][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1473.004968][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1473.084440][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1473.109954][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1473.129234][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1473.150919][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1473.165869][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1473.175997][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1473.194644][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1473.211192][T16638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1473.223816][T16638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1473.239243][T16638] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1473.328086][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1473.567480][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1473.867670][T16638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.903610][T16799] block nbd4: NBD_DISCONNECT
[ 1473.908996][T16799] block nbd4: Send disconnect failed -32
[ 1473.933865][T16799] block nbd4: Disconnected due to user request.
[ 1473.956521][T16638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1473.996476][T16638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1474.018688][T16638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1474.104459][T16799] block nbd4: shutting down sockets
[ 1474.934982][T16805] ubi31: attaching mtd0
[ 1474.939771][T16805] ubi31: scanning is finished
[ 1475.073193][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1475.081493][T16805] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1475.089155][T16805] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1475.096472][T16805] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1475.103486][T16805] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1475.110976][T16805] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1475.118057][T16805] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1475.126228][T16805] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 425705129
[ 1475.136298][T16805] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1475.206238][T16808] ubi31: background thread "ubi_bgt31d" started, PID 16808
[ 1475.276648][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1475.285465][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1475.428970][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1475.439047][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1475.475045][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1475.748261][T16817] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1475.748261][T16817]    program syz.0.3159 not setting count and/or reply_len properly
[ 1476.124732][T16809] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1476.524682][T16809] usb 3-1: Using ep0 maxpacket: 8
[ 1476.561019][T16809] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1476.580582][T16809] usb 3-1: config 7 has an invalid interface number: 58 but max is 0
[ 1476.609505][T16809] usb 3-1: config 7 has no interface number 0
[ 1476.637546][T16809] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1476.664366][T16809] usb 3-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1477.152723][T16830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1477.171987][T16830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1477.181035][T16830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1477.812525][T16809] usb 3-1: config 7 interface 58 has no altsetting 0
[ 1477.871164][T16809] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1477.946255][T16809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.954665][T16809] usb 3-1: Product: syz
[ 1477.958855][T16809] usb 3-1: Manufacturer: syz
[ 1477.963461][T16809] usb 3-1: SerialNumber: syz
[ 1478.191309][T16819] overlayfs: missing 'workdir'
[ 1478.239069][T16819] comedi comedi0: dt2815: I/O port conflict (0x4f27,2)
[ 1478.329108][T16809] usb 3-1: USB disconnect, device number 42
[ 1479.404583][   T41] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[ 1479.673083][   T41] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.716793][   T41] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1479.736113][   T41] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1479.744764][   T41] usb 2-1: Product: syz
[ 1479.750172][   T41] usb 2-1: Manufacturer: syz
[ 1479.755239][   T41] usb 2-1: SerialNumber: syz
[ 1479.783572][   T41] usb 2-1: config 0 descriptor??
[ 1479.791778][   T41] gspca_main: conex-2.14.0 probing 0572:0041
[ 1480.497598][T16848] ubi: mtd0 is already attached to ubi31
[ 1481.320600][T16852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1481.470528][T16852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.573968][T16572] usb 2-1: USB disconnect, device number 37
[ 1484.658038][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.664453][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.864206][T16884] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1485.014259][T16889] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1485.154504][T14440] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1485.594797][T14440] usb 2-1: Using ep0 maxpacket: 8
[ 1486.036597][T14440] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1486.073340][T14440] usb 2-1: config 7 has an invalid interface number: 58 but max is 0
[ 1486.106357][T14440] usb 2-1: config 7 has no interface number 0
[ 1486.112460][T14440] usb 2-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1486.183883][T14440] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1486.314393][T14440] usb 2-1: config 7 interface 58 has no altsetting 0
[ 1486.404187][T14440] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1487.617783][T14440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.645563][T14440] usb 2-1: Product: syz
[ 1487.655071][T14440] usb 2-1: Manufacturer: syz
[ 1487.735120][T14440] usb 2-1: SerialNumber: syz
[ 1487.758152][T16899] xt_socket: unknown flags 0x4
[ 1487.885112][T14440] usb 2-1: USB disconnect, device number 38
[ 1491.514533][ T4285] Bluetooth: hci3: command 0x0406 tx timeout
[ 1491.568648][T16938] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1492.624411][T14440] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1492.804410][T14440] usb 5-1: Using ep0 maxpacket: 8
[ 1493.772446][T14440] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1494.290297][T14440] usb 5-1: config 7 has an invalid interface number: 58 but max is 0
[ 1494.342992][T14440] usb 5-1: config 7 has no interface number 0
[ 1494.360074][T14440] usb 5-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1494.392691][T14440] usb 5-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1494.426808][T14440] usb 5-1: config 7 interface 58 has no altsetting 0
[ 1494.442117][T14440] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1494.454507][T14440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.471657][T14440] usb 5-1: Product: syz
[ 1494.492058][T14440] usb 5-1: Manufacturer: syz
[ 1494.510198][T14440] usb 5-1: SerialNumber: syz
[ 1494.719163][T16964] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1494.740490][T16945] overlayfs: workdir and upperdir must be separate subtrees
[ 1494.903688][T14380] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1494.933386][T16945] comedi comedi0: dt2815: I/O port conflict (0x4f27,2)
[ 1495.067141][T14440] usb 5-1: USB disconnect, device number 54
[ 1495.121424][T14380] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1495.150744][T14380] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1495.203212][T14380] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1495.332225][T14380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1495.393287][T14380] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1495.453477][T14380] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1495.474771][T14380] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1495.503544][T14380] usb 1-1: Product: syz
[ 1495.512111][T14380] usb 1-1: Manufacturer: syz
[ 1495.557427][T14380] cdc_wdm 1-1:1.0: skipping garbage
[ 1495.964560][T14380] cdc_wdm 1-1:1.0: skipping garbage
[ 1495.992255][T16977] xt_socket: unknown flags 0x4
[ 1496.145015][T14380] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1496.155001][T14380] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1497.885384][T16990] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1498.089844][ T4313] usb 1-1: USB disconnect, device number 37
[ 1500.469779][T17012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1501.305043][T17022] block nbd3: NBD_DISCONNECT
[ 1501.310292][T17022] block nbd3: Disconnected due to user request.
[ 1501.316711][T17022] block nbd3: shutting down sockets
[ 1501.444729][T14380] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1502.333279][T14380] usb 3-1: Using ep0 maxpacket: 8
[ 1502.346672][T14380] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1502.480506][T14380] usb 3-1: config 7 has an invalid interface number: 58 but max is 0
[ 1502.950226][T17033] ubi: mtd0 is already attached to ubi31
[ 1503.014945][T14380] usb 3-1: config 7 has no interface number 0
[ 1503.031929][T14380] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1503.049333][T14380] usb 3-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1503.063561][T14380] usb 3-1: config 7 interface 58 has no altsetting 0
[ 1503.073934][T14380] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1503.094649][T14380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.114542][T14380] usb 3-1: Product: syz
[ 1503.119548][T14380] usb 3-1: Manufacturer: syz
[ 1503.124633][T14380] usb 3-1: SerialNumber: syz
[ 1503.345054][T17018] overlayfs: workdir and upperdir must be separate subtrees
[ 1503.364533][T16890] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1503.513253][T17042] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1503.835761][T17018] comedi comedi0: dt2815: I/O port conflict (0x4f27,2)
[ 1503.889254][T14380] usb 3-1: USB disconnect, device number 43
[ 1504.737408][T16890] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1504.771876][T16890] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1504.812858][T16890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1504.848138][T16890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1505.276114][T16890] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1506.096395][T17056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1506.517626][T16890] usb 2-1: string descriptor 0 read error: -71
[ 1506.550161][T16890] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1506.577227][T16890] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1506.626925][T17065] xt_socket: unknown flags 0x4
[ 1506.633505][T16890] usb 2-1: can't set config #1, error -71
[ 1506.651401][T14440] hid (null): unknown global tag 0xe
[ 1506.658172][T14440] hid-generic 0004:A35D:0000.006D: unknown main item tag 0x7
[ 1506.677295][T16890] usb 2-1: USB disconnect, device number 39
[ 1506.918847][T14440] hid-generic 0004:A35D:0000.006D: unknown main item tag 0x7
[ 1507.166327][T14440] hid-generic 0004:A35D:0000.006D: unknown global tag 0xe
[ 1507.208058][T14440] hid-generic 0004:A35D:0000.006D: item 0 4 1 14 parsing failed
[ 1507.235227][T17071] block nbd1: NBD_DISCONNECT
[ 1507.245286][T17071] block nbd1: Disconnected due to user request.
[ 1507.251637][T17071] block nbd1: shutting down sockets
[ 1507.273734][T14440] hid-generic: probe of 0004:A35D:0000.006D failed with error -22
[ 1508.815153][T17096] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1509.963261][T17097] vivid-004: disconnect
[ 1510.014600][T16890] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1510.234431][T16890] usb 2-1: Using ep0 maxpacket: 8
[ 1510.241815][T16890] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1510.274262][T16890] usb 2-1: config 7 has an invalid interface number: 58 but max is 0
[ 1510.311167][T16890] usb 2-1: config 7 has no interface number 0
[ 1510.340174][T16890] usb 2-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1510.382748][T16890] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1511.102984][T16890] usb 2-1: config 7 interface 58 has no altsetting 0
[ 1511.118848][T16890] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1511.133540][T16890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1511.718043][T16890] usb 2-1: Product: syz
[ 1511.750577][T16890] usb 2-1: Manufacturer: syz
[ 1511.823338][T16890] usb 2-1: SerialNumber: syz
[ 1512.069611][T17099] overlayfs: workdir and upperdir must be separate subtrees
[ 1512.152574][T17114] comedi comedi0: dt2815: I/O port conflict (0x4f27,2)
[ 1512.264780][T16890] usb 2-1: USB disconnect, device number 40
[ 1512.623804][T14440] hid (null): unknown global tag 0xe
[ 1512.638784][T14440] hid-generic 0004:A35D:0000.006E: unknown main item tag 0x7
[ 1513.048196][T14440] hid-generic 0004:A35D:0000.006E: unknown main item tag 0x7
[ 1513.086299][T17124] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1513.102190][T14440] hid-generic 0004:A35D:0000.006E: unknown global tag 0xe
[ 1513.109903][T14440] hid-generic 0004:A35D:0000.006E: item 0 4 1 14 parsing failed
[ 1513.121183][T14440] hid-generic: probe of 0004:A35D:0000.006E failed with error -22
[ 1513.345021][T17131] block nbd1: NBD_DISCONNECT
[ 1513.392271][T17130] block nbd1: Disconnected due to user request.
[ 1513.398606][T17130] block nbd1: shutting down sockets
[ 1514.466545][ T4280] hid (null): unknown global tag 0xe
[ 1514.479737][T17089] vivid-004: reconnect
[ 1514.833139][ T4280] hid-generic 0004:A35D:0000.006F: unknown main item tag 0x7
[ 1514.946954][ T4280] hid-generic 0004:A35D:0000.006F: unknown main item tag 0x7
[ 1514.978742][ T4280] hid-generic 0004:A35D:0000.006F: unknown global tag 0xe
[ 1515.024396][ T4280] hid-generic 0004:A35D:0000.006F: item 0 4 1 14 parsing failed
[ 1515.042085][ T4280] hid-generic: probe of 0004:A35D:0000.006F failed with error -22
[ 1516.020627][ T4280] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[ 1516.129481][T17160] autofs4:pid:17160:autofs_fill_super: called with bogus options
[ 1516.876014][ T4280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.909352][ T4280] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[ 1517.026876][ T4280] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[ 1517.126175][T14369] Bluetooth: hci1: command 0x0406 tx timeout
[ 1517.699767][T16890] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1517.714118][ T4280] usb 5-1: Product: syz
[ 1517.726546][ T4280] usb 5-1: Manufacturer: syz
[ 1517.798727][ T4280] usb 5-1: SerialNumber: syz
[ 1517.851192][ T4280] usb 5-1: config 0 descriptor??
[ 1517.867327][ T4280] gspca_main: conex-2.14.0 probing 0572:0041
[ 1517.884483][T16890] usb 2-1: Using ep0 maxpacket: 8
[ 1517.891456][T16890] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1517.945037][T16890] usb 2-1: config 7 has an invalid interface number: 58 but max is 0
[ 1517.985756][T16809] hid (null): unknown global tag 0xe
[ 1518.064027][T16890] usb 2-1: config 7 has no interface number 0
[ 1518.066875][T16809] hid-generic 0004:A35D:0000.0070: unknown main item tag 0x7
[ 1518.081106][T16890] usb 2-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1518.091162][T16890] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1518.104261][T16890] usb 2-1: config 7 interface 58 has no altsetting 0
[ 1518.468845][T16890] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1518.480430][T16890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.488836][T16890] usb 2-1: Product: syz
[ 1518.493082][T16890] usb 2-1: Manufacturer: syz
[ 1518.555057][T16890] usb 2-1: SerialNumber: syz
[ 1518.636760][T17175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1518.646224][T17175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1518.744157][T16809] hid-generic 0004:A35D:0000.0070: unknown main item tag 0x7
[ 1518.884866][T17164] overlayfs: workdir and upperdir must be separate subtrees
[ 1518.889390][T16809] hid-generic 0004:A35D:0000.0070: unknown global tag 0xe
[ 1519.249030][T16809] hid-generic 0004:A35D:0000.0070: item 0 4 1 14 parsing failed
[ 1519.273994][T16809] hid-generic: probe of 0004:A35D:0000.0070 failed with error -22
[ 1519.379571][T16890] usb 2-1: USB disconnect, device number 41
[ 1521.041372][T17194] ubi: mtd0 is already attached to ubi31
[ 1521.389053][T17201] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1521.533620][T17198] block nbd1: shutting down sockets
[ 1521.692463][T16809] usb 5-1: USB disconnect, device number 55
[ 1523.615996][T10866] hid (null): unknown global tag 0xe
[ 1524.070927][T10866] hid-generic 0004:A35D:0000.0071: unknown main item tag 0x7
[ 1524.078639][T10866] hid-generic 0004:A35D:0000.0071: unknown main item tag 0x7
[ 1524.092200][T10866] hid-generic 0004:A35D:0000.0071: unknown global tag 0xe
[ 1524.099693][T10866] hid-generic 0004:A35D:0000.0071: item 0 4 1 14 parsing failed
[ 1524.122518][T10866] hid-generic: probe of 0004:A35D:0000.0071 failed with error -22
[ 1524.393845][T11762] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1524.884419][T11762] usb 2-1: Using ep0 maxpacket: 8
[ 1524.892401][T11762] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1525.044475][T11762] usb 2-1: config 7 has an invalid interface number: 58 but max is 0
[ 1525.052696][T11762] usb 2-1: config 7 has no interface number 0
[ 1525.785810][T17247] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[ 1525.854577][T11762] usb 2-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0
[ 1525.885131][T11762] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1525.908672][T17253] ==================================================================
[ 1525.916752][T17253] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[ 1525.923945][T17253] Read of size 8 at addr ffff8881401a9818 by task syz.2.3272/17253
[ 1525.931826][T17253] 
[ 1525.934141][T17253] CPU: 0 PID: 17253 Comm: syz.2.3272 Not tainted syzkaller #0
[ 1525.941594][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1525.951716][T17253] Call Trace:
[ 1525.954992][T17253]  <TASK>
[ 1525.957915][T17253]  dump_stack_lvl+0x188/0x24e
[ 1525.962589][T17253]  ? read_lock_is_recursive+0x10/0x10
[ 1525.967961][T17253]  ? show_regs_print_info+0x12/0x12
[ 1525.973167][T17253]  ? load_image+0x400/0x400
[ 1525.977659][T17253]  ? _raw_spin_lock_irqsave+0xbc/0x100
[ 1525.983109][T17253]  ? __virt_addr_valid+0x188/0x540
[ 1525.988221][T17253]  ? __virt_addr_valid+0x465/0x540
[ 1525.993341][T17253]  ? dvb_device_open+0xc6/0x370
[ 1525.998208][T17253]  print_report+0xa8/0x210
[ 1526.002616][T17253]  kasan_report+0x10b/0x140
[ 1526.007109][T17253]  ? dvb_device_open+0xc6/0x370
[ 1526.011985][T17253]  dvb_device_open+0xc6/0x370
[ 1526.016741][T17253]  ? do_raw_spin_unlock+0x11d/0x230
[ 1526.021930][T17253]  chrdev_open+0x5c5/0x6a0
[ 1526.026352][T17253]  ? cd_forget+0x160/0x160
[ 1526.030755][T17253]  ? fsnotify_perm+0x39b/0x550
[ 1526.035502][T17253]  ? cd_forget+0x160/0x160
[ 1526.039905][T17253]  do_dentry_open+0x7e9/0x10d0
[ 1526.044665][T17253]  path_openat+0x2635/0x2ee0
[ 1526.049243][T17253]  ? verify_lock_unused+0x140/0x140
[ 1526.054434][T17253]  ? do_syscall_64+0x4c/0xa0
[ 1526.059033][T17253]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1526.065092][T17253]  ? do_filp_open+0x430/0x430
[ 1526.069756][T17253]  do_filp_open+0x1f1/0x430
[ 1526.074247][T17253]  ? vfs_tmpfile+0x480/0x480
[ 1526.078824][T17253]  ? _raw_spin_unlock+0x24/0x40
[ 1526.083657][T17253]  ? alloc_fd+0x58f/0x630
[ 1526.087992][T17253]  do_sys_openat2+0x150/0x4b0
[ 1526.092658][T17253]  ? up_read+0x20/0x20
[ 1526.096723][T17253]  ? do_sys_open+0xe0/0xe0
[ 1526.101150][T17253]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1526.107127][T17253]  ? lock_chain_count+0x20/0x20
[ 1526.111969][T17253]  __x64_sys_openat+0x135/0x160
[ 1526.116813][T17253]  do_syscall_64+0x4c/0xa0
[ 1526.121216][T17253]  ? clear_bhb_loop+0x60/0xb0
[ 1526.125877][T17253]  ? clear_bhb_loop+0x60/0xb0
[ 1526.130540][T17253]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1526.136419][T17253] RIP: 0033:0x7f039e55cfce
[ 1526.140824][T17253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1526.160419][T17253] RSP: 002b:00007f039c7f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1526.168848][T17253] RAX: ffffffffffffffda RBX: 00007f039c7f66c0 RCX: 00007f039e55cfce
[ 1526.176810][T17253] RDX: 0000000000040002 RSI: 00007f039c7f5c00 RDI: ffffffffffffff9c
[ 1526.184771][T17253] RBP: 00007f039c7f5c00 R08: 0000000000000000 R09: 0000000000000000
[ 1526.192816][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1526.201119][T17253] R13: 00007f039e816038 R14: 00007f039e815fa0 R15: 00007ffc90d9ebf8
[ 1526.209078][T17253]  </TASK>
[ 1526.212086][T17253] 
[ 1526.214398][T17253] Allocated by task 1:
[ 1526.218470][T17253]  kasan_set_track+0x4b/0x70
[ 1526.223049][T17253]  __kasan_kmalloc+0x8e/0xa0
[ 1526.227625][T17253]  dvb_register_device+0x311/0x2150
[ 1526.232811][T17253]  dvb_register_frontend+0x645/0x920
[ 1526.238076][T17253]  vidtv_bridge_probe+0x9a1/0xf70
[ 1526.243078][T17253]  platform_probe+0x137/0x1c0
[ 1526.247740][T17253]  really_probe+0x2aa/0xc70
[ 1526.252227][T17253]  __driver_probe_device+0x18c/0x330
[ 1526.257496][T17253]  driver_probe_device+0x4f/0x420
[ 1526.262504][T17253]  __driver_attach+0x44a/0x6e0
[ 1526.267257][T17253]  bus_for_each_dev+0x182/0x1f0
[ 1526.272089][T17253]  bus_add_driver+0x30a/0x5a0
[ 1526.276746][T17253]  driver_register+0x32d/0x430
[ 1526.281491][T17253]  vidtv_bridge_init+0x39/0x67
[ 1526.286317][T17253]  do_one_initcall+0x26a/0x840
[ 1526.291066][T17253]  do_initcall_level+0x137/0x1e4
[ 1526.296009][T17253]  do_initcalls+0x4b/0x8a
[ 1526.300323][T17253]  kernel_init_freeable+0x415/0x5be
[ 1526.305509][T17253]  kernel_init+0x19/0x1b0
[ 1526.309833][T17253]  ret_from_fork+0x1f/0x30
[ 1526.314245][T17253] 
[ 1526.316553][T17253] Freed by task 17247:
[ 1526.320595][T17253]  kasan_set_track+0x4b/0x70
[ 1526.325169][T17253]  kasan_save_free_info+0x2d/0x50
[ 1526.330182][T17253]  ____kasan_slab_free+0x126/0x1e0
[ 1526.335279][T17253]  slab_free_freelist_hook+0x131/0x1a0
[ 1526.340721][T17253]  __kmem_cache_free+0xb6/0x1f0
[ 1526.345552][T17253]  dvb_device_open+0x2e7/0x370
[ 1526.350302][T17253]  chrdev_open+0x5c5/0x6a0
[ 1526.354702][T17253]  do_dentry_open+0x7e9/0x10d0
[ 1526.359446][T17253]  path_openat+0x2635/0x2ee0
[ 1526.364045][T17253]  do_filp_open+0x1f1/0x430
[ 1526.368532][T17253]  do_sys_openat2+0x150/0x4b0
[ 1526.373215][T17253]  __x64_sys_openat+0x135/0x160
[ 1526.378064][T17253]  do_syscall_64+0x4c/0xa0
[ 1526.382472][T17253]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1526.388352][T17253] 
[ 1526.390659][T17253] The buggy address belongs to the object at ffff8881401a9800
[ 1526.390659][T17253]  which belongs to the cache kmalloc-256 of size 256
[ 1526.404696][T17253] The buggy address is located 24 bytes inside of
[ 1526.404696][T17253]  256-byte region [ffff8881401a9800, ffff8881401a9900)
[ 1526.417869][T17253] 
[ 1526.420176][T17253] The buggy address belongs to the physical page:
[ 1526.426575][T17253] page:ffffea0005006a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1401a8
[ 1526.436792][T17253] head:ffffea0005006a00 order:1 compound_mapcount:0 compound_pincount:0
[ 1526.445098][T17253] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff)
[ 1526.453168][T17253] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888017441b40
[ 1526.461744][T17253] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 1526.470315][T17253] page dumped because: kasan: bad access detected
[ 1526.476723][T17253] page_owner tracks the page as allocated
[ 1526.482421][T17253] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9138133431, free_ts 0
[ 1526.502051][T17253]  post_alloc_hook+0x173/0x1a0
[ 1526.506811][T17253]  get_page_from_freelist+0x1a1e/0x1ab0
[ 1526.512362][T17253]  __alloc_pages+0x1ec/0x4f0
[ 1526.516956][T17253]  alloc_page_interleave+0x24/0x1e0
[ 1526.522186][T17253]  alloc_slab_page+0x5d/0x160
[ 1526.527110][T17253]  new_slab+0x87/0x2c0
[ 1526.531168][T17253]  ___slab_alloc+0xbc6/0x1240
[ 1526.535849][T17253]  __kmem_cache_alloc_node+0x1a0/0x260
[ 1526.541288][T17253]  kmalloc_trace+0x26/0xe0
[ 1526.545692][T17253]  bus_add_driver+0xda/0x5a0
[ 1526.550262][T17253]  driver_register+0x32d/0x430
[ 1526.555014][T17253]  usb_register_driver+0x202/0x3d0
[ 1526.560109][T17253]  do_one_initcall+0x26a/0x840
[ 1526.564859][T17253]  do_initcall_level+0x137/0x1e4
[ 1526.569786][T17253]  do_initcalls+0x4b/0x8a
[ 1526.574098][T17253]  kernel_init_freeable+0x415/0x5be
[ 1526.579277][T17253] page_owner free stack trace missing
[ 1526.584620][T17253] 
[ 1526.586921][T17253] Memory state around the buggy address:
[ 1526.592592][T17253]  ffff8881401a9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1526.600646][T17253]  ffff8881401a9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1526.608685][T17253] >ffff8881401a9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1526.616723][T17253]                             ^
[ 1526.621551][T17253]  ffff8881401a9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1526.629590][T17253]  ffff8881401a9900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1526.637632][T17253] ==================================================================
[ 1526.672578][T11762] usb 2-1: config 7 interface 58 has no altsetting 0
[ 1527.108232][T17253] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1527.115443][T17253] CPU: 1 PID: 17253 Comm: syz.2.3272 Not tainted syzkaller #0
[ 1527.122883][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1527.132932][T17253] Call Trace:
[ 1527.136290][T17253]  <TASK>
[ 1527.139207][T17253]  dump_stack_lvl+0x188/0x24e
[ 1527.143880][T17253]  ? memcpy+0x3c/0x60
[ 1527.147892][T17253]  ? show_regs_print_info+0x12/0x12
[ 1527.153089][T17253]  ? load_image+0x400/0x400
[ 1527.157582][T17253]  panic+0x2e5/0x730
[ 1527.161466][T17253]  ? bpf_jit_dump+0xd0/0xd0
[ 1527.165956][T17253]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 1527.171927][T17253]  ? _raw_spin_unlock+0x40/0x40
[ 1527.176767][T17253]  check_panic_on_warn+0x80/0xa0
[ 1527.181704][T17253]  ? dvb_device_open+0xc6/0x370
[ 1527.186568][T17253]  end_report+0x66/0x110
[ 1527.190802][T17253]  kasan_report+0x118/0x140
[ 1527.195310][T17253]  ? dvb_device_open+0xc6/0x370
[ 1527.200184][T17253]  dvb_device_open+0xc6/0x370
[ 1527.204862][T17253]  ? do_raw_spin_unlock+0x11d/0x230
[ 1527.210052][T17253]  chrdev_open+0x5c5/0x6a0
[ 1527.214463][T17253]  ? cd_forget+0x160/0x160
[ 1527.218870][T17253]  ? fsnotify_perm+0x39b/0x550
[ 1527.223629][T17253]  ? cd_forget+0x160/0x160
[ 1527.228042][T17253]  do_dentry_open+0x7e9/0x10d0
[ 1527.232808][T17253]  path_openat+0x2635/0x2ee0
[ 1527.237400][T17253]  ? verify_lock_unused+0x140/0x140
[ 1527.242593][T17253]  ? do_syscall_64+0x4c/0xa0
[ 1527.247179][T17253]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1527.253242][T17253]  ? do_filp_open+0x430/0x430
[ 1527.257915][T17253]  do_filp_open+0x1f1/0x430
[ 1527.262418][T17253]  ? vfs_tmpfile+0x480/0x480
[ 1527.267006][T17253]  ? _raw_spin_unlock+0x24/0x40
[ 1527.271847][T17253]  ? alloc_fd+0x58f/0x630
[ 1527.276175][T17253]  do_sys_openat2+0x150/0x4b0
[ 1527.280848][T17253]  ? up_read+0x20/0x20
[ 1527.284910][T17253]  ? do_sys_open+0xe0/0xe0
[ 1527.289320][T17253]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1527.295294][T17253]  ? lock_chain_count+0x20/0x20
[ 1527.300140][T17253]  __x64_sys_openat+0x135/0x160
[ 1527.304988][T17253]  do_syscall_64+0x4c/0xa0
[ 1527.309402][T17253]  ? clear_bhb_loop+0x60/0xb0
[ 1527.314076][T17253]  ? clear_bhb_loop+0x60/0xb0
[ 1527.318756][T17253]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1527.324645][T17253] RIP: 0033:0x7f039e55cfce
[ 1527.329060][T17253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1527.348678][T17253] RSP: 002b:00007f039c7f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1527.357090][T17253] RAX: ffffffffffffffda RBX: 00007f039c7f66c0 RCX: 00007f039e55cfce
[ 1527.365055][T17253] RDX: 0000000000040002 RSI: 00007f039c7f5c00 RDI: ffffffffffffff9c
[ 1527.373024][T17253] RBP: 00007f039c7f5c00 R08: 0000000000000000 R09: 0000000000000000
[ 1527.380984][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1527.388949][T17253] R13: 00007f039e816038 R14: 00007f039e815fa0 R15: 00007ffc90d9ebf8
[ 1527.396919][T17253]  </TASK>
[ 1527.400273][T17253] Kernel Offset: disabled
[ 1527.404586][T17253] Rebooting in 86400 seconds..