last executing test programs:

3m29.567718724s ago: executing program 1 (id=1718):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
close(0x3)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
signalfd4(r1, &(0x7f0000000000)={[0x0, 0x5]}, 0x8, 0x80800)

3m29.30695076s ago: executing program 1 (id=1723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa030, 0x10003}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xb, 0x12, r4, 0x0)
munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000040)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r5}, 0x38)

3m28.092978707s ago: executing program 1 (id=1736):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x10001, 0xfffffffe, 0x0, 0x0, 0x40], [0x0, 0x2], [0x4, 0x3, 0x0, 0x1, 0x3, 0x9]], '\x00', [{0x0, 0xc278}, {0x7, 0x0, 0x0, 0x1}, {0xfffffc00, 0x0, 0x0, 0x1}, {0x0, 0x80000}, {}, {0x0, 0x4000}, {0x0, 0x400}, {0x0, 0x9}], '\x00', 0x6ad})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x7}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r2, &(0x7f0000000300)="b30e3415fb87ba2f6b90542b8546f1c9335d09563f1695bb21b401d9d23c0cfc5e946de8b34f6fa865da9b312ab93f28a3e0290b1ea881786e1e8a5b6c12dd24bc7102ff70279645f917fccf563a812e3bec944abfe4b076838be4b464ac51ebd14b503ec00c100d82c1a5a43fcc96a82fd51cea1c145131c64ef285a98a6d4017c241259467fd57f7c5dc9f3269d3e33aa0016aff6253c57167ab40afb08c672525037d7559edd38aa84276c8b0748ad7d0da81ced21b3f7c37434d503cf0fafa68940ce3591f12625ff82eeb6f7207ab150600b427f5d355d871a57e1100cd57f4bd5350", 0xe5)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0)

3m27.975215952s ago: executing program 1 (id=1737):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x364, 0x0, 0x11, 0x148, 0x1d4, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff000000, 'hsr0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x6, 0x2, 0x46}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xcc, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

3m27.855432785s ago: executing program 1 (id=1740):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000)
r1 = epoll_create(0x40000a67)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xe0000011})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_CREATE_VM(r5, 0x400454d8, 0x110e22fffb)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xffffffff})
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x1ff, 0x514, 0x9, 0x0, 0x5, 0xfff9})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0e000000030601040057cacbac512b3eb30005000100070000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = epoll_create1(0x80000)
r9 = fcntl$dupfd(r7, 0x406, r8)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000340))
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0x10})
socket$inet(0x2, 0x5, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0xa, &(0x7f0000000380)=[{0x1, 0x1, 0x8, 0x2}, {0x633, 0x5, 0x0, 0x7}, {0x5265, 0xdf, 0x8, 0x6}, {0x7, 0x0, 0x4, 0x1}, {0xb, 0x6, 0x1, 0xfffffffd}, {0x1, 0x7f, 0x6, 0xf911}, {0x8001, 0x8, 0x7f, 0xad47}, {0x6, 0xf8, 0xa5, 0x47}, {0xffff, 0x6, 0x2, 0x6}, {0x7fff, 0x5, 0x3, 0xd}]})

3m27.551259357s ago: executing program 1 (id=1745):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r1=>0x0}, 0x6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x1, 0x2, 0x4, 0x0, 0xfffffffffffffffc, 0x8}, @jmp={0x5, 0x1, 0x1, 0x5, 0x8, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000280)='syzkaller\x00', 0x87, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x10, 0xfffffa42, 0xe}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r0, r0, r0], &(0x7f0000000380)=[{0x0, 0x4, 0x5, 0xc}, {0x2, 0x3, 0xd, 0x2}], 0x10, 0xd485}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @exit, @func, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x78, &(0x7f00000001c0)=""/120, 0x41000, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2, 0x5, &(0x7f00000005c0)=[r0, r0], &(0x7f0000000600)=[{0x3, 0x3, 0x9, 0x7}, {0x2, 0x1}, {0x3, 0x5, 0x4, 0x9}, {0x0, 0x2, 0x3, 0xb}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fbff00000000000000800000850000007500000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

3m12.1829613s ago: executing program 32 (id=1745):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r1=>0x0}, 0x6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x1, 0x2, 0x4, 0x0, 0xfffffffffffffffc, 0x8}, @jmp={0x5, 0x1, 0x1, 0x5, 0x8, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000280)='syzkaller\x00', 0x87, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x10, 0xfffffa42, 0xe}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r0, r0, r0], &(0x7f0000000380)=[{0x0, 0x4, 0x5, 0xc}, {0x2, 0x3, 0xd, 0x2}], 0x10, 0xd485}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @exit, @func, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x78, &(0x7f00000001c0)=""/120, 0x41000, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2, 0x5, &(0x7f00000005c0)=[r0, r0], &(0x7f0000000600)=[{0x3, 0x3, 0x9, 0x7}, {0x2, 0x1}, {0x3, 0x5, 0x4, 0x9}, {0x0, 0x2, 0x3, 0xb}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fbff00000000000000800000850000007500000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

3m10.144806887s ago: executing program 3 (id=1796):
syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x28002)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x3, 0x2, 0x6, 0x8f}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xc, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x10006, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x20000a, 0x6, 0x3, 0x8000007, 0x80004, 0x8, 0x3ff, 0x0, 0x0, 0xfd71, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0x74, 0x5, 0x0, 0x0, 0x7, 0x2f, 0x9, 0x1, 0x66abcbd2, 0x0, 0x5, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0x2000b, 0x4, 0x9, 0x367e, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x10001, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x7, 0xb, 0x6, 0x6, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0xb, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950beaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xa, 0x5, 0x4, 0x5, 0x6, 0x0, 0xb9, 0x7, 0xefa, 0x2, 0x4184, 0x6, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a8, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x9, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x81, 0x803, 0xd7, 0x200, 0xb, 0x7]}, 0x45c)
syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000380))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./file1\x00', 0x840c2, 0x0)
ftruncate(r5, 0xfffdffff)
sendfile(r4, r5, 0x0, 0x80001d00c0d1)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42)
r7 = socket(0x1, 0x1, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000005", @ANYRES16=r9, @ANYBLOB="01002cbd700000000000010000001c0007800c000180080001", @ANYRES32=r7, @ANYBLOB="0c00018808000100", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0)

3m8.866980047s ago: executing program 3 (id=1802):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) (async)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000005c0), 0x4) (async, rerun: 64)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8223f0ffff74c43824cee84400007ffe18c99e70d67b732f9b5702de81f5227339", 0x44}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d21609000a3164ae439862807a158983661a6d23", 0x17}, {&(0x7f0000000040)="df3b46a133000000000000", 0xb}, {&(0x7f0000000600)="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", 0xe8f}], 0x5}, 0x40041) (async, rerun: 64)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11)

3m8.787445326s ago: executing program 3 (id=1804):
socket(0x10, 0x3, 0x4) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fchmodat(0xffffffffffffffff, 0x0, 0x30)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0xfff3, 0x3, 0x3ff}) (async)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) (async)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) (async)
waitid(0x1, r0, 0x0, 0x2, 0x0)
waitid(0x0, r0, 0x0, 0x2, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

3m7.897669742s ago: executing program 3 (id=1809):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x4000)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r2)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

3m3.885924325s ago: executing program 3 (id=1824):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x240081, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x240081, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4)

3m3.796340016s ago: executing program 3 (id=1827):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) (async)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) (async)
write$dsp(r2, &(0x7f0000002000)='`', 0x88020)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000180), 0x36, 0x0, 0x1, 0x401}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048005}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r6)
sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x70b}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xfffffe7e, 0x4a, &(0x7f00000002c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x5, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x7, 0x0, 0x22}, 0x4c)

2m48.726271266s ago: executing program 33 (id=1827):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) (async)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) (async)
write$dsp(r2, &(0x7f0000002000)='`', 0x88020)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000180), 0x36, 0x0, 0x1, 0x401}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048005}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r6)
sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x70b}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xfffffe7e, 0x4a, &(0x7f00000002c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x5, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x7, 0x0, 0x22}, 0x4c)

5.555176491s ago: executing program 4 (id=2931):
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000000640)="056bf119e39200a0bc1832cef2aabe9ea128ad450b691d26de8e58e1526bca9d63da4fe0fb46cab860011955d71c7d65c38bfdf680c4c65ee5082b57b426009d1f0d0b9cf8e48a8dd722107a7f2740da9ba71c10f542b8480d7d67e4cf9538ec08b2623915a49dcd6c864432", 0x1}, 0x38) (async)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @broadcast}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300})
r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0xd9, 0x420000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601030000000000000000030000000c000780080006400000000209000200737e7a310000000005000400000000000500050003000000050001000700000015000300686173683a69702c706f72742c6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000540)={0x6, {{0xa, 0x4e22, 0x9, @remote, 0x2}}}, 0x84)

5.401433168s ago: executing program 4 (id=2934):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x38, 0x0, 0xff}, [@IFA_LABEL={0x14, 0x3, 'gre0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc)
setresuid(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@multicast2, @in=@loopback, 0x1, 0x394, 0x4e23, 0xd, 0x0, 0xa0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x8000, 0xfffffffffffffff5}, {0x6, 0x0, 0x40000001f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x40810)
syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r5, 0x0, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
modify_ldt$write2(0x11, &(0x7f0000000080)={0x200003, 0x20001000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
epoll_create(0x5)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5.104849441s ago: executing program 2 (id=2938):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgid(0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
socket(0x2, 0x80805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"})

4.524773316s ago: executing program 4 (id=2939):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, &(0x7f00000003c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x4, 0x192, 0x0, 0x0, 0x1000, 0xffffffff, r1}})
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f00000001c0)) (async)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f00000001c0))
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r4, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fddbdf25370000001a04450005000000080009000200000008100b000400000008000c00a60a0000"], 0x34}, 0x1, 0x0, 0x0, 0x4cc5}, 0x0)
mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x4004, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=virtio,posix']) (async)
mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x4004, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=virtio,posix'])
read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0x2020)
fcntl$dupfd(r3, 0x406, r3)

3.654846896s ago: executing program 2 (id=2940):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x553, 0xd, 0x7, 0x8, 0x6, 0xcb8}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB="f14d00", @ANYRES16=r2, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00b2007365636f6e646e616d650000"], 0x44}}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
creat(&(0x7f0000000100)='./file0\x00', 0x104)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c, 0x0}}], 0x1, 0x20040005)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15880400001b000000000005001000040000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
socket$inet_sctp(0x2, 0x1, 0x84)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
socket$xdp(0x2c, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

3.324375376s ago: executing program 4 (id=2942):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x82cb000})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f00000000c0)='/sys/fs/smackfs/access\x00', 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x81, 0x77d, 0x2, 0x14, 0xc0000000000}, 0x0, &(0x7f0000000180)={0x8, 0xfffd, 0x8, 0x9, 0xfffffffffffffff7, 0xa, 0x3733951d, 0x1}, 0x0, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

2.314961945s ago: executing program 0 (id=2945):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0xc00, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094)

2.25469438s ago: executing program 0 (id=2946):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x111000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f00000001c0), 0x12)
fcntl$getownex(r1, 0x10, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000100)={'\x00', 0xd, 0xb3d, 0xffffff48, 0x5, 0x2, <r2=>0x0})
sched_setscheduler(r2, 0x3, &(0x7f00000000c0)=0x7)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r4 = socket$alg(0x26, 0x5, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r5, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118)
accept4(r4, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff})
io_setup(0x8f0, &(0x7f0000002400))

1.734994927s ago: executing program 2 (id=2949):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) (async)
ioctl$SIOCSIFMTU(r4, 0x8931, &(0x7f0000000080)={'dummy0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00', 0x3}, 0x90)
r5 = epoll_create1(0x0)
epoll_pwait(r5, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x0, 0xfffffff4]}, 0x8)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) (async)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10})

1.634645924s ago: executing program 4 (id=2950):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000003600)=[{{&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001a00)=""/161, 0xa1}, 0xa95}, {{&(0x7f0000001ac0)=@x25, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b40)=""/45, 0x2d}, {&(0x7f0000001b80)=""/255, 0xff}, {&(0x7f0000001c80)=""/44, 0x2c}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)=""/180, 0xb4}, {&(0x7f0000001dc0)=""/7, 0x7}], 0x6, &(0x7f0000001e40)=""/195, 0xc3}, 0x9902}, {{&(0x7f0000001f40)=@can, 0x80, &(0x7f0000002240), 0x2000000000000172, &(0x7f0000002280)=""/51, 0x33}, 0x9}, {{&(0x7f00000022c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002340)=""/196, 0xc4}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000003440)=""/232, 0xe8}], 0x3, &(0x7f0000003580)=""/72, 0x48}, 0x9}], 0x4, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0x2000})
ppoll(&(0x7f0000000980)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=<r6=>r5, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00", @ANYRES16, @ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.394987815s ago: executing program 0 (id=2952):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfa, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4000850)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum, @struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x8000, [{0x4, 0x1, 0x1000000}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0xfff, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x200, 0x3, 0x4, 0x80000000000000, 0x6a9, 0x4}, 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESET(r2, 0x5100)

1.334694719s ago: executing program 5 (id=2954):
setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) (async)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) (async)
syz_open_dev$usbfs(0x0, 0x6, 0x501200) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) (rerun: 32)
ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f00000001c0)={&(0x7f0000000140)="61d864cce1766698584308e72ebbe85ee0268ae8ce832356a6cf399d307910e219015304f35626f4", 0x28, &(0x7f0000000180)=""/44, 0x2c}) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) (async)
r2 = socket$inet6(0xa, 0x5, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mount(0x0, 0x0, 0x0, 0x8, 0x0)
chdir(0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 32)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) (async)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) (async)
r3 = syz_usb_connect$uac3(0x1, 0xe6, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x3, 0x1, 0x3, 0x40, 0x8, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x27}, [@processing_unit={0x1d, 0x24, 0x9, 0x3, 0x1, [0x0, 0x2, 0x2, 0x3, 0x1, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x9647, 0x2, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0xc, 0x81, {0xa, 0x25, 0x25, 0x80000000, 0x2, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x5, 0x1, "19ff"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x7, 0x7, "342631b708151c"}, @as_header={0x17, 0x24, 0x1, 0x0, 0xfffffffe, 0xfff, 0x3, 0x10, 0xc0, 0x16, 0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x80, 0xb}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xe8, 0x9, 0x4, {0xa, 0x25, 0x25, 0x8, 0x4, 0x6971}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x2, 0x9d, 0x9, 0x10, 0x7}, 0x3f, &(0x7f0000000440)={0x5, 0xf, 0x3f, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x2, 0xf000, 0x7, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x64, "45fd08d55f7b35ba73054b706b3734dd"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6a, 0x7, 0x2, 0x101, 0xe5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xfe, 0x4, 0x5af, 0x4}]}, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf01d}}, {0x94, &(0x7f0000000540)=@string={0x94, 0x3, "6f037371996fe32127a689bfad3960b53475a79f21b3fa9abb21499dde6390d25594ea8ea00a955dca6a2c44a8c9755a2135d136640ddfaca785bbc0ec0d69ce3b16921d8e1a8a28c7c1dd7a9ff6676fd39460850cdc4909178ba00d70009caeaa621b8d9913cd27647bff5bf699cdf7149d8de72f8ed2285be8755bca928d9e87839a05744a20621e5ce4e40878f5399ac0"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3009}}]})
syz_usb_control_io$uac3(r3, &(0x7f0000000740)={0xc, &(0x7f0000000680)={0x40, 0x1, 0x77, {0x77, 0xc, "07a6bca8683e71947277ae7075fdee9597b4567f1835664f6bc60f18ed0ba37a9af2728bf94976f1787c9d6183d0e9cdef3dc5ec9b4ec2da6c72921fc07120258ff3c8b3eba6ee169879b57a53f33498aa8a0a9bb57b911295b63b8758136d3214d8c6d39cb4def04e1d72a88b9c2d1d77c51c65c3"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000a00)={0x24, &(0x7f0000000780)={0x40, 0xc, 0xa5, "96419e8760b16e1626edc92aee374e42d5ef5c4048a48129baececda1af94aeb07e0c8637ec81fcf6e6cc4d661d4b622e971d8540432393ff417493edec025963548a4543b570ffd30c2118dd6b37f1c8f3272eb17eab0955b7550fabae261920e570f333af7d5f58fcf8ac218d60e9449acc051266dfdf5c9ec895ea6073c1be2a4c279c3157e202e14c3f3b8c47d98a7c72b5cf047459a6642ac44ac47c572d36b61d72a"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xa4}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000900)={0x20, 0x82, 0x2, 'HQ'}, &(0x7f0000000940)={0x20, 0x83, 0x1, 'H'}, &(0x7f0000000980)={0x20, 0x84, 0x4, "942adb64"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "7f12df"}})
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x20008800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xff, 0x1, 0x100}, 0x49) (async)
mmap$IORING_OFF_SQES(0x0, 0x0, 0x1000001, 0x100010, r0, 0x10000000) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x884, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x2, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xce}}}, &(0x7f0000001540)='GPL\x00'}, 0x90)

1.33249595s ago: executing program 5 (id=2955):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x31)
chdir(0x0)
creat(0x0, 0x59)
socket(0x5, 0xa, 0x7afd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)
fanotify_mark(r1, 0x1, 0x1000, r1, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.00431413s ago: executing program 2 (id=2956):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async, rerun: 32)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async, rerun: 32)
lstat64(0x0, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xffffffffffffff57, 0x30, 0x1, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_ct={0x9c, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x5c, 0x6, "cdf2db26cd5c327e9d21e266aa81ab924e8c019a4d038d07682382814957ad41c21548da51c75be5f741ca2cb9c0be21c40ba616c885aee039176dadd579a05d070aac5fabdd94f9c4830533305904194e1b821dc3efce3a"}, {0xfffffffffffffeca, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0xa77}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x8b1}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x100, 0x3000, 0xffffffffffffffff, 0x0, 0x3}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}]}, {0x0, 0x6, "0a2e33dc49979dec674869be965b6b9366bff86d01f5421c7e9c217ddbe9a6c2fa318bb4a70f1dbc8fb4c4f4986a14a639c506539f653b6e2f665d16d9d55af57f341f86c95ebbda9da59916320e68ce61ea649730fc59d5c12c0b7f24cb88376eb3d54cee711e3484fd06629a26663863b9c1764121dc9626de2e1fc20ef3562669c0c503abcb3451a35b7b8319e06dd84bfbbbc8780400adf78c7ed870e2efb6bce6bdc6eabfe2c69d12cc3c379fb759169fb316b28f05581be4dd55f1bcce348e18243d"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async, rerun: 64)
r0 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@loopback, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x0, 0x0, 0x0, 0x8000000000000000, 0x4500247}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0xf2dde497ae0c5159, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64)
syz_usbip_server_init(0x6) (rerun: 64)
setgroups(0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x88) (async)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000100)=0x26)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0x55af)
inotify_init1(0x800) (async)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0x4020565b, &(0x7f0000000180)={0x6})

425.434249ms ago: executing program 4 (id=2957):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
lseek(r1, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
socket(0x2, 0x80805, 0x0)
openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x100, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
socket(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
futex(0x0, 0x8, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000bc0)}}, {{&(0x7f0000000c40), 0x6e, &(0x7f0000000f40)=[{0x0}, {&(0x7f0000000e40)=""/28, 0x1c}], 0x2, &(0x7f0000000f80)=[@cred={{0x18}}, @cred={{0x18}}], 0x30}}], 0x2, 0x41, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0xb, &(0x7f0000006680))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])

420.222712ms ago: executing program 0 (id=2958):
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x3b75c0, 0x54)
close(r0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000340)={0x26, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x2)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/161, 0xa1}, {&(0x7f0000000100)=""/64, 0x40}], 0x2, 0x7, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000000c0)="63d1ed8e11dc377883c22b356f4a", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)

334.392216ms ago: executing program 5 (id=2959):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00')
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000040)={{}, "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"}) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000040)={{}, "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"})
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000001040)={0x3, <r1=>r0, 'id0\x00'})
fsetxattr$security_ima(r1, &(0x7f00000010c0), &(0x7f0000001100)=@v2={0x3, 0x0, 0x2, 0x0, 0xc2, "e4c505b9d6fd1f89dd53219c02340ca8109f13ee191454a3656cf84ada34eb7a4aa133f086ed520afdbf568255b8dcd482a53044a275025ce0dee383afd68f141384de88b2be5b5ee3f354d7043240e26f9b6419b5d1b25e7c404f1fb726b603afaefecc71deecf1bf91220afb99e70c0dadac59c78e4906edf944e90f863687cb276b91a38d3312998db6f0bbc16b9d22161177aa6952f1867340c4219ef28393ee71d7ead5129aa0a791c2cd3bcc08c201bfa30cd952f4b47c9e27640492058ff9"}, 0xcb, 0x1)
lsm_get_self_attr(0x65, &(0x7f0000001200)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000002240)=0x1020, 0x0)
ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000002280)={0x3, 0xa, 0x6, 0x1, 0x4, 0x9})
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000002d00)={0x0, 0xf0c4, 0x2, 0x2, 0x1d9, 0x0, r1}, &(0x7f0000002d80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1270, 0x20, 0x1, 0xdb, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c56, 0x4000, 0x1, 0x2a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4a6, 0x100040, 0x2, 0x171}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x414d, 0x0, 0x2, 0xb6, 0x0, r1}}], 0x4, &(0x7f0000004000)={0x2e, 0x0, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x50d}, 0x0, 0x0, '\x00', {0x2, 0x8e7, 0x0, &(0x7f0000003000)=@buf_1k="444da387765eafdebafd8ac5bf193b7481d77b6c71c4c2a0c25a35b446fa91bd6371f35b65ee12761180cf7c8fa85ecddbca6bc3a6101acf206420f6ba5700b338dd2a9388fa7acec37f64537c8564c7da54f2f022ed213e2c9b6a8f94b0959429a60b9aaf81d19792675d81b28660302099a04c4555337d61e2c81fc11af962232934c2ed82d5a75a7c67159402fcd9204bdd05fd56bd60a07cca728bd66cb95847c8ca69bab2644713534c07962469ffa5463b117f7b6f5894edb00761886601fe29aae19184e76cccf1052d8d6ab90eb59f3725c5e20cccf0e546cc1bd1fca038b57edac1c6a07c04687628be36c6679e8969e0bc6e4a97ef958bfb9adffdc2f6349c2ff8cf09bc27dc0c2bba0c26738837b20eace57b06268e2e53f32cd50137c7372edc62e5b7d4d1df1e98ec1831a43615fa5772a6648257ba51a142ff746c8c38fe7319dcd1df072cd00c4bb430d7058f981aff09c8fc68973dd391ea4d064cca7bfab75aed6186eb7b782ec1b286497494cf00d3a45c93d119f527f1c88dbb39c773f50e5b69b30b450e306d2fa063e71f99ece705466541618a83d4dbf2bbc5be1cc5b91a3aeb9571d69af72902e677020f843b26f88be2e42fcddb4596e2dea6363453dfbf5cde39f4289e94386c38ffc7024f5ed2de82d8cd8b84d60b336c32a1a1591d697e9b29a820f728676d63882e69c605aff7abf82b51e3c2c77b1d6a0572d047c209a50964dc88a4171fe94c94bf6ab620df681a04eade42fbd76d8107f5f7d89a344ea06ca010b27cdf481b5fbe0334772bddb768bf3b82e35d3c809541626f7fa006a98fd2172915029dfcfa83945f167c793209858f02d35e7bed48f9ba0753c228b1794713c2c872be8f3d9b79b52216cde60d369233a5e2ae62a746115374d9237a78c302bb3351624ae14316727b606e6245c1684a5a34ece29a68af676a9ae1c6c5525e28cde3deb3e05bf25585ca8045066ac49e349d95f9d4a716a384793d69445fed75e6e22833dab39535a7df1df933564bc8c9fa5abbd56e5dccc5e87284d4a7abcfb31030c2f00242d5e8db0a729561783ff132d61d3a92b1da59fcff421d95508908028c9ce674ca643473110791cbde87cec2007bd17c2c37a7260df685bef994e233fc336313c2e8bde0006a7169404868fbb909e1ff3b089dee539cee2e26d90b4d3ef8eee0d852050b9ca0898d940e5db23296cb0340bb3c22a7343e30f8173a866d28d3c3ffe09581151bdd4e494a8affa19af222524d86013566d22667366abadc06d44daa94aa2e2bc4bd77376f486c4fd663be14f67aa8307baefaf23f50e9cc06e2a431accf01d8b458b09f6475985fd86a3b4853dc7046f874c81c4be7a83165faa74b73365593339135277b3120aa9b29e80ffee9b2242c29a186ec2bb11af4a7bc74a431074afd08a983"}}, &(0x7f0000004080)) (async)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000002d00)={0x0, 0xf0c4, 0x2, 0x2, 0x1d9, 0x0, r1}, &(0x7f0000002d80)=[{0x0, 0x0, <r2=>0xffffffffffffffff, {0x0, 0x1270, 0x20, 0x1, 0xdb, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c56, 0x4000, 0x1, 0x2a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4a6, 0x100040, 0x2, 0x171}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x414d, 0x0, 0x2, 0xb6, 0x0, r1}}], 0x4, &(0x7f0000004000)={0x2e, 0x0, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x50d}, 0x0, 0x0, '\x00', {0x2, 0x8e7, 0x0, &(0x7f0000003000)=@buf_1k="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"}}, &(0x7f0000004080))
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4038587a, &(0x7f0000004240)={{<r3=>r1, &(0x7f00000040c0)='id0\x00', 0x200040, &(0x7f0000004100)={@_ha_fsid={[0xfffffffa, 0x6ac]}, {0x1ff, 0x0, 0x8001, 0x7}}, 0x7, &(0x7f0000004140), &(0x7f0000004180)=0x5}, {[0x55e, 0xd, 0x1, 0x101]}, 0x9, 0x54, &(0x7f00000041c0)=""/84})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000004280)={'bond0\x00', @local}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000004280)={'bond0\x00', @local})
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000042c0)={0x9})
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004540)={0x18, 0x13, &(0x7f0000004300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa26f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0xd, 0x3, 0x0, 0xfffffffffffffff8, 0x8}, @alu={0x7, 0x1, 0x6, 0xa, 0x4, 0x40, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000043c0)='syzkaller\x00', 0x1, 0x66, &(0x7f0000004400)=""/102, 0x41100, 0x8, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000004480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000044c0)=[r3, r1, r3, r1, r0], &(0x7f0000004500)=[{0x3, 0x4, 0xd, 0x3}, {0x5, 0x1, 0xe, 0x5}, {0x3, 0x2, 0xc, 0xa}], 0x10, 0x2}, 0x94)
syz_extract_tcp_res$synack(&(0x7f0000004600)={<r4=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000004640)={0x41424344, <r5=>0x41424344}, 0x4, 0x7fffffff)
write$tun(r0, &(0x7f0000004680)={@void, @void, @ipv6=@tcp={0xd, 0x6, "e02555", 0x21f, 0x6, 0x1, @local, @empty, {[@fragment={0x33, 0x0, 0x5, 0x1, 0x0, 0x19, 0x66}, @dstopts={0xbc, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xca}, @enc_lim={0x4, 0x1, 0xfc}, @enc_lim={0x4, 0x1, 0x9}]}, @fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0x18, 0x65}, @routing={0x5e, 0x4, 0x0, 0xf, 0x0, [@mcast2, @mcast1]}, @fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x16, 0x68}, @srh={0x2b, 0xc, 0x4, 0x6, 0x6, 0x0, 0xa, [@local, @mcast1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @private0]}, @fragment={0x87, 0x0, 0x10, 0x1, 0x0, 0x2, 0x65}, @routing={0x2b, 0x10, 0x0, 0x7, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1, @local, @remote, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}], {{0x4e20, 0x4e24, r4, r5, 0x1, 0x0, 0xe, 0x20, 0xed, 0x0, 0x9, {[@sack={0x5, 0xa, [0x1, 0x3]}, @timestamp={0x8, 0xa, 0x37, 0xffffffc0}, @mptcp=@generic={0x2, 0xf, "54968a511802434b6ff48c3fec"}]}}, {"6ab1f05cf91d1cfd46092ac37a9cd15cd05583dcc8c62d1be1bf690b3b570648a4473270b6e52bc6bad2138b7e23c7dda6037f791e024574276466fdc8a2602ed7b62b1da4edd0400bd5ca531ef19e2b0c79463d08d1af54d96981f8994c325ee6331631b9c008f329cd12a774bbf2cbb40ccdc4ab7e79bc0e0c4b77dbcf09801fd87aa5abe1cf04a1a4b5a6a6267ce244227c1c9a66b4"}}}}}, 0x247)
syz_clone(0x4100, &(0x7f0000004900)="da1d8f4518f5fe22080a4a30be194a2c3d7eac52c8d794945c007c7ca554465448210a4e88f0c7f047fdcf84d9609d194c02b99c465483875dd999aa8d755be3392ec46a69d4fb9f02c5e995", 0x4c, &(0x7f0000004980), &(0x7f00000049c0), &(0x7f0000004a00)="dee1dd7569d090c202c66abde0aaafc8dc6e9a02ac647646710f0a93658d3d89a3629fb7b8ceb01eb4c3f52faf1f3219d99a01689b91f3d30c14080817b550e6e9590f6867dc574f5c5b75f18fedaa3577440fff2e2b629f4f549f96c5c23bc4dd01ef4385c7ffc8ca9e9980763448c4ced65cf5067cb418317b5ed8a4bc69e8") (async)
syz_clone(0x4100, &(0x7f0000004900)="da1d8f4518f5fe22080a4a30be194a2c3d7eac52c8d794945c007c7ca554465448210a4e88f0c7f047fdcf84d9609d194c02b99c465483875dd999aa8d755be3392ec46a69d4fb9f02c5e995", 0x4c, &(0x7f0000004980), &(0x7f00000049c0), &(0x7f0000004a00)="dee1dd7569d090c202c66abde0aaafc8dc6e9a02ac647646710f0a93658d3d89a3629fb7b8ceb01eb4c3f52faf1f3219d99a01689b91f3d30c14080817b550e6e9590f6867dc574f5c5b75f18fedaa3577440fff2e2b629f4f549f96c5c23bc4dd01ef4385c7ffc8ca9e9980763448c4ced65cf5067cb418317b5ed8a4bc69e8")
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000004a80)={'veth0_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}})
lsm_get_self_attr(0x67, &(0x7f0000004ac0)={0x0, 0x0, 0xa7, 0x87, ""/135}, &(0x7f0000004b80)=0xa7, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000004bc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2f}) (async)
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000004bc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2f})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000004c00)={<r6=>0x0, 0x5, 0x7}, &(0x7f0000004c40)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000004c80)={r6, 0x7c82}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000004c80)={r6, 0x7c82}, 0x8)
syz_emit_vhci(&(0x7f0000004cc0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
lsm_get_self_attr(0x66, &(0x7f0000004d00)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000005d40)=0x1020, 0x0) (async)
lsm_get_self_attr(0x66, &(0x7f0000004d00)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000005d40)=0x1020, 0x0)
syz_open_dev$vcsn(&(0x7f0000005d80), 0x1, 0x2) (async)
r7 = syz_open_dev$vcsn(&(0x7f0000005d80), 0x1, 0x2)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000005dc0)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000005e00)={{0xffffffffffffffff, 0x3, 0x6, 0x2, 0xe}})
write$yama_ptrace_scope(r7, &(0x7f0000005e40)='3\x00', 0x2)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000005e80)={0x0, 0xa1, "a5700191714d37c1aa25dac05b43bc954346d3d031090401eb1cc8cae0fbee9955b6e3f0abbe0b2e4a615bcf09bf1d4aeb575cf4343ea22e0ecf57874b74a060958ef4623d717cbf58798c25557b5324e3597585ae7b52968584592b541e44cb7d66dba55b7fea43abad03f0f774a73a4b56d0655b864b9723c1fed60b55b83011165db4dbf9b29e7aedfc7bd2020fa1113606c18d80caeeb8fbcc2c317fdf2bfb"}, &(0x7f0000005f40)=0xa9) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000005e80)={<r8=>0x0, 0xa1, "a5700191714d37c1aa25dac05b43bc954346d3d031090401eb1cc8cae0fbee9955b6e3f0abbe0b2e4a615bcf09bf1d4aeb575cf4343ea22e0ecf57874b74a060958ef4623d717cbf58798c25557b5324e3597585ae7b52968584592b541e44cb7d66dba55b7fea43abad03f0f774a73a4b56d0655b864b9723c1fed60b55b83011165db4dbf9b29e7aedfc7bd2020fa1113606c18d80caeeb8fbcc2c317fdf2bfb"}, &(0x7f0000005f40)=0xa9)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000005f80)=@assoc_value={r8, 0x9}, &(0x7f0000005fc0)=0x8)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000006b80)=@nat={'nat\x00', 0x19, 0x3, 0xb3a, [0x80006040, 0x0, 0x0, 0x8000619a, 0x80006298], 0x0, &(0x7f0000006000), &(0x7f0000006040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x14, 0x18, 'pimreg\x00', 'vcan0\x00', 'geneve1\x00', 'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, [0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xaa, 0xfa, 0x12a, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x9, {0x7}}}}], [@common=@redirect={'redirect\x00', 0x4, {{0xfffffffffffffffc}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @snat={'snat\x00', 0xc, {{@broadcast, 0x10}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x9, 0x4b, 0x8917, 'veth1\x00', 'macvlan0\x00', 'veth1_to_bridge\x00', 'wlan0\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @random="739b77712843", [0xff, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0xc, {{@multicast, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0xa, 0x88a8, 'bond0\x00', 'macsec0\x00', 'veth1_to_team\x00', 'pimreg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0x0, 0x95f2bf714bf84aaf, 0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff], 0x882, 0x882, 0x8b2, [@mark_m={{'mark_m\x00', 0x0, 0xc}, {{0x1, 0x6, 0x2, 0x2}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x7}, {0xd, 0x3}, {0x72, 0x1}, {0x9, 0x2}, {0x40, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x4}, {0x75e, 0x3}, {0xfd91, 0x3}, {0x644c7afe, 0x2}], [{0x100, 0x7}, {0x7, 0x1}, {0xf, 0x2}, {0x2, 0xaf}, {0x1, 0x78ce}, {0xff, 0xffff}, {0x81, 0x10000}, {0x200, 0xb8b}, {0x9, 0x2}, {0x3, 0x5}, {0xfffff4c4, 0xfff}], 0x5, 0x6}, {[{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0xfffffffc}, {0x1000, 0x2}, {0xaa, 0x3}, {0x1, 0x3}, {0x9, 0x3}, {0xb6, 0x3}, {0x1, 0x1}, {0xfff, 0x1}], [{0x7fffffff, 0x6}, {0x3, 0x59f6}, {0xfff, 0x80}, {0x200, 0x7}, {0xb, 0x7ff}, {0x1, 0x7}, {0x3cce2ba8, 0x8001}, {0x80000001, 0x1}, {0xb, 0x6}, {0x761, 0x9}, {0xc, 0x3}], 0x5, 0x4}, {[{0x0, 0x3}, {0x4, 0x3}, {0x6}, {0x3, 0x3}, {0x81}, {0x6, 0x2}, {0x5, 0x2}, {0xd, 0x3}, {0x6, 0x2}, {0x8}, {0x2, 0x1}], [{0xff, 0x7}, {0x80, 0x4}, {0x80000000, 0x1}, {0x5, 0x5}, {0xfff, 0xd1}, {0x7, 0xe4}, {0x6, 0x9}, {0xff, 0xfffffff9}, {0x7, 0x2}, {0x3937dd39, 0x1}, {0x8, 0x2}], 0x5, 0x1}, {[{0x5, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0x16, 0x2}, {0x3, 0x3}, {0x101}, {0x8}, {0x0, 0x1}, {0x54c}, {0x8, 0x3}, {0xb4, 0x2}], [{0x4, 0x7}, {0x6, 0x736a}, {0x1, 0x3ff}, {0x3, 0xe003}, {0x6, 0x80000000}, {0x0, 0x81}, {0xfe, 0x401}, {0x6, 0x2}, {0xfa, 0x6}, {0xcc5}, {0x8, 0xff}], 0x2, 0xa}, {[{0x7ff, 0x3}, {0x8, 0x1}, {0x3}, {0xffffffff}, {}, {0x6, 0x1}, {0x4, 0x2}, {0x31, 0x3}, {0x100, 0x1}, {0xd}, {0x2, 0x3}], [{0xffffffff, 0x6}, {0xfffffffb, 0x6}, {0x0, 0x1}, {0xa2, 0xfffffff7}, {0x2, 0x8}, {0xfffff801, 0xa}, {0x5, 0x6}, {0x9}, {0xfffffff9, 0x94c}, {0x400, 0x7}, {0x8ef, 0x4}], 0x4, 0x3}, {[{0xffffffff, 0x1}, {}, {0x0, 0x2}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0x3}, {0x101, 0x3}, {0xf, 0x1}, {0x0, 0x1}, {}, {0xfffffffb}], [{0x3e, 0x3}, {0xb, 0x10}, {0x0, 0x7}, {0x3, 0x9}, {0x80, 0x2}, {0x10, 0x6}, {0x3, 0x9}, {0x0, 0x3}, {0x3, 0x2}, {0x4, 0x2}, {0x5, 0x10000}], 0x4}, {[{0x0, 0x3}, {0x3, 0x2}, {0x9}, {0x0, 0x3}, {0x17, 0x1}, {0x401, 0x1}, {0x1000000, 0x3}, {0xc76, 0x1}, {0x5}, {0x4}, {0x1, 0x2}], [{0x4, 0x1000}, {0xffffff00, 0xffff7c61}, {0x0, 0x445d}, {0x8, 0x4}, {0x7fffffff, 0x8001}, {0x4}, {0x8, 0x13b}, {0x7, 0x6}, {0x7, 0x9}, {0x0, 0xfff}, {0x400, 0x4}], 0x7}, {[{0xa, 0x2}, {0xab, 0x3}, {0x571, 0x1}, {0x77, 0x1}, {0x800, 0x3}, {0x7}, {0xffff, 0x1}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x3}], [{0x9, 0xcb}, {0xfffffffa, 0x9}, {0x942, 0xa}, {0xffffffff, 0x8}, {0x5, 0x7f}, {0xc975, 0x1}, {0x7, 0x401}, {0x455, 0x45d}, {0x73, 0x75}, {0x64, 0x8}, {0xc8aa}], 0xa, 0x4}, {[{0x947fcb2, 0x2}, {0xc}, {0xbf93, 0x3}, {0x6, 0x2}, {0xffffffff, 0x1}, {0x7fff, 0x3}, {0x10001, 0x3}, {0x8, 0x2}, {0x5, 0x2}, {0x4, 0x1}, {0x5, 0x3}], [{0x8, 0x5}, {0x4, 0x3ff}, {0x57, 0x7}, {0x80000001, 0xfffffb28}, {0xffff, 0x6}, {0x90000000, 0xc0d}, {0x7, 0x80000001}, {0x5, 0x9}, {0x6}, {0x8, 0xb2}, {0xa3d}], 0x8, 0xb}, {[{0xfffffffb, 0x3}, {0x1e, 0x2}, {0x4, 0x3}, {0x1e}, {0xce3}, {0x8, 0x3}, {0x1448}, {0x7, 0x3}, {0x9, 0x1}, {0x9b, 0x1}, {0x5, 0x1}], [{0x6}, {0x6, 0x24579c38}, {0xfffffffc, 0xc}, {0x7, 0x2}, {0x2755f39e, 0x5}, {0x3412, 0x3}, {0x10000, 0x4e4c08b0}, {0x401, 0x5}, {0x4, 0x3ff}, {0xffffffff, 0x80000000}, {0x5, 0x7ff}], 0x2, 0x1}, {[{0x7, 0x3}, {0x2a9}, {0xc3}, {0x800, 0x2}, {0x8000000, 0x1}, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0x1}, {0xb00, 0x3}, {0x7}, {0x8}], [{0x3838, 0x7}, {0x5, 0xdf}, {0x8001, 0xffff}, {0x6, 0x80000001}, {0x5, 0x3}, {0x9, 0x101}, {0x7, 0xec7}, {0x3ff, 0x7}, {0x0, 0x6}, {0xf9be, 0x80000001}, {0x800, 0x2}], 0xa, 0x7}], 0xa}}}], [], @arpreply={'arpreply\x00', 0xc, {{@random='Z#Px5d', 0xffffffffffffffff}}}}]}]}, 0xb8a) (async)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000006b80)=@nat={'nat\x00', 0x19, 0x3, 0xb3a, [0x80006040, 0x0, 0x0, 0x8000619a, 0x80006298], 0x0, &(0x7f0000006000), &(0x7f0000006040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x14, 0x18, 'pimreg\x00', 'vcan0\x00', 'geneve1\x00', 'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, [0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xaa, 0xfa, 0x12a, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x9, {0x7}}}}], [@common=@redirect={'redirect\x00', 0x4, {{0xfffffffffffffffc}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}], @snat={'snat\x00', 0xc, {{@broadcast, 0x10}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x9, 0x4b, 0x8917, 'veth1\x00', 'macvlan0\x00', 'veth1_to_bridge\x00', 'wlan0\x00', @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @random="739b77712843", [0xff, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@snat={'snat\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0xc, {{@multicast, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x5, 0xa, 0x88a8, 'bond0\x00', 'macsec0\x00', 'veth1_to_team\x00', 'pimreg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0x0, 0x95f2bf714bf84aaf, 0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff], 0x882, 0x882, 0x8b2, [@mark_m={{'mark_m\x00', 0x0, 0xc}, {{0x1, 0x6, 0x2, 0x2}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x7}, {0xd, 0x3}, {0x72, 0x1}, {0x9, 0x2}, {0x40, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x4}, {0x75e, 0x3}, {0xfd91, 0x3}, {0x644c7afe, 0x2}], [{0x100, 0x7}, {0x7, 0x1}, {0xf, 0x2}, {0x2, 0xaf}, {0x1, 0x78ce}, {0xff, 0xffff}, {0x81, 0x10000}, {0x200, 0xb8b}, {0x9, 0x2}, {0x3, 0x5}, {0xfffff4c4, 0xfff}], 0x5, 0x6}, {[{0x1, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0xfffffffc}, {0x1000, 0x2}, {0xaa, 0x3}, {0x1, 0x3}, {0x9, 0x3}, {0xb6, 0x3}, {0x1, 0x1}, {0xfff, 0x1}], [{0x7fffffff, 0x6}, {0x3, 0x59f6}, {0xfff, 0x80}, {0x200, 0x7}, {0xb, 0x7ff}, {0x1, 0x7}, {0x3cce2ba8, 0x8001}, {0x80000001, 0x1}, {0xb, 0x6}, {0x761, 0x9}, {0xc, 0x3}], 0x5, 0x4}, {[{0x0, 0x3}, {0x4, 0x3}, {0x6}, {0x3, 0x3}, {0x81}, {0x6, 0x2}, {0x5, 0x2}, {0xd, 0x3}, {0x6, 0x2}, {0x8}, {0x2, 0x1}], [{0xff, 0x7}, {0x80, 0x4}, {0x80000000, 0x1}, {0x5, 0x5}, {0xfff, 0xd1}, {0x7, 0xe4}, {0x6, 0x9}, {0xff, 0xfffffff9}, {0x7, 0x2}, {0x3937dd39, 0x1}, {0x8, 0x2}], 0x5, 0x1}, {[{0x5, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0x16, 0x2}, {0x3, 0x3}, {0x101}, {0x8}, {0x0, 0x1}, {0x54c}, {0x8, 0x3}, {0xb4, 0x2}], [{0x4, 0x7}, {0x6, 0x736a}, {0x1, 0x3ff}, {0x3, 0xe003}, {0x6, 0x80000000}, {0x0, 0x81}, {0xfe, 0x401}, {0x6, 0x2}, {0xfa, 0x6}, {0xcc5}, {0x8, 0xff}], 0x2, 0xa}, {[{0x7ff, 0x3}, {0x8, 0x1}, {0x3}, {0xffffffff}, {}, {0x6, 0x1}, {0x4, 0x2}, {0x31, 0x3}, {0x100, 0x1}, {0xd}, {0x2, 0x3}], [{0xffffffff, 0x6}, {0xfffffffb, 0x6}, {0x0, 0x1}, {0xa2, 0xfffffff7}, {0x2, 0x8}, {0xfffff801, 0xa}, {0x5, 0x6}, {0x9}, {0xfffffff9, 0x94c}, {0x400, 0x7}, {0x8ef, 0x4}], 0x4, 0x3}, {[{0xffffffff, 0x1}, {}, {0x0, 0x2}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0x3}, {0x101, 0x3}, {0xf, 0x1}, {0x0, 0x1}, {}, {0xfffffffb}], [{0x3e, 0x3}, {0xb, 0x10}, {0x0, 0x7}, {0x3, 0x9}, {0x80, 0x2}, {0x10, 0x6}, {0x3, 0x9}, {0x0, 0x3}, {0x3, 0x2}, {0x4, 0x2}, {0x5, 0x10000}], 0x4}, {[{0x0, 0x3}, {0x3, 0x2}, {0x9}, {0x0, 0x3}, {0x17, 0x1}, {0x401, 0x1}, {0x1000000, 0x3}, {0xc76, 0x1}, {0x5}, {0x4}, {0x1, 0x2}], [{0x4, 0x1000}, {0xffffff00, 0xffff7c61}, {0x0, 0x445d}, {0x8, 0x4}, {0x7fffffff, 0x8001}, {0x4}, {0x8, 0x13b}, {0x7, 0x6}, {0x7, 0x9}, {0x0, 0xfff}, {0x400, 0x4}], 0x7}, {[{0xa, 0x2}, {0xab, 0x3}, {0x571, 0x1}, {0x77, 0x1}, {0x800, 0x3}, {0x7}, {0xffff, 0x1}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x3}], [{0x9, 0xcb}, {0xfffffffa, 0x9}, {0x942, 0xa}, {0xffffffff, 0x8}, {0x5, 0x7f}, {0xc975, 0x1}, {0x7, 0x401}, {0x455, 0x45d}, {0x73, 0x75}, {0x64, 0x8}, {0xc8aa}], 0xa, 0x4}, {[{0x947fcb2, 0x2}, {0xc}, {0xbf93, 0x3}, {0x6, 0x2}, {0xffffffff, 0x1}, {0x7fff, 0x3}, {0x10001, 0x3}, {0x8, 0x2}, {0x5, 0x2}, {0x4, 0x1}, {0x5, 0x3}], [{0x8, 0x5}, {0x4, 0x3ff}, {0x57, 0x7}, {0x80000001, 0xfffffb28}, {0xffff, 0x6}, {0x90000000, 0xc0d}, {0x7, 0x80000001}, {0x5, 0x9}, {0x6}, {0x8, 0xb2}, {0xa3d}], 0x8, 0xb}, {[{0xfffffffb, 0x3}, {0x1e, 0x2}, {0x4, 0x3}, {0x1e}, {0xce3}, {0x8, 0x3}, {0x1448}, {0x7, 0x3}, {0x9, 0x1}, {0x9b, 0x1}, {0x5, 0x1}], [{0x6}, {0x6, 0x24579c38}, {0xfffffffc, 0xc}, {0x7, 0x2}, {0x2755f39e, 0x5}, {0x3412, 0x3}, {0x10000, 0x4e4c08b0}, {0x401, 0x5}, {0x4, 0x3ff}, {0xffffffff, 0x80000000}, {0x5, 0x7ff}], 0x2, 0x1}, {[{0x7, 0x3}, {0x2a9}, {0xc3}, {0x800, 0x2}, {0x8000000, 0x1}, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0x1}, {0xb00, 0x3}, {0x7}, {0x8}], [{0x3838, 0x7}, {0x5, 0xdf}, {0x8001, 0xffff}, {0x6, 0x80000001}, {0x5, 0x3}, {0x9, 0x101}, {0x7, 0xec7}, {0x3ff, 0x7}, {0x0, 0x6}, {0xf9be, 0x80000001}, {0x800, 0x2}], 0xa, 0x7}], 0xa}}}], [], @arpreply={'arpreply\x00', 0xc, {{@random='Z#Px5d', 0xffffffffffffffff}}}}]}]}, 0xb8a)

274.808198ms ago: executing program 2 (id=2960):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x111000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f00000001c0), 0x12)
fcntl$getownex(r1, 0x10, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000100)={'\x00', 0xd, 0xb3d, 0xffffff48, 0x5, 0x2, <r2=>0x0})
sched_setscheduler(r2, 0x3, &(0x7f00000000c0)=0x7)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r4 = socket$alg(0x26, 0x5, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r5, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118)
accept4(r4, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff})
io_setup(0x8f0, &(0x7f0000002400))

274.202637ms ago: executing program 0 (id=2961):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000010180)='ns/time\x00')
close(0xffffffffffffffff) (async, rerun: 32)
r2 = socket(0x10, 0x2, 0x0) (rerun: 32)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x10201) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) (async)
fdatasync(r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2a, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x1}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb4, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x6e6bb8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}}, 0x0) (async)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

214.072058ms ago: executing program 5 (id=2962):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000100000208000a400000000008000640ffffff110900010073797a3000000000080005400000001c0900020073797a3200000000140000001000010000000000000000000384000a2e017ef9ad54d4e81dfbcc87f7bf427ed1ad53a187bd3afe8a5a961b0b70b911e5a29120de8e0c1154c8bf0a77404d31a85d89b76898f6be2347c38817795c312baed7a001bee8"], 0x6c}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r2, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="a6", 0x1}], 0x1}}], 0x1, 0x4010)
signalfd4(r2, &(0x7f00000001c0)={[0x0, 0x8]}, 0x8, 0x80800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r3, 0xe)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0)

133.814869ms ago: executing program 5 (id=2963):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000500)='n', 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2e, 0x0, 0x1, 0x7ea}, 0x28)
r7 = socket(0x27, 0x803, 0x5)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94)
bind$packet(r7, &(0x7f0000000140)={0x11, 0x1a, r8, 0x1, 0x8, 0x6, @remote}, 0x14)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000300)={@empty, r8}, 0x14)
r9 = dup2(r0, r0)
openat(r9, &(0x7f00000000c0)='./file0\x00', 0x80002, 0x11)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r8, @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000)

127.102529ms ago: executing program 0 (id=2964):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25ac1e000103000000000000000000000000000000000000000000ffffe000000200000000000000000200000000000000", @ANYBLOB="b91887e573615785ec5a0c769695c5a5fc5f6a5cb78c7228c591c392ac8cb0b1e9ede3c26f89f9b64d09a226d1fa6e867fb209d682a0fa894bab2bdfb119aa314cfd104ed53d44fc", @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000001000000000000000000000000000002000000000000000300000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000700000000000000010000004400050000000000000000000000000000000000000000022b0000000000000000000000000000000000000000000000033500000100000000000000ffffffff00000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0)
pipe(0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x2) (async)
listen(r3, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x1b7b, 0x0) (async)
io_uring_setup(0x1b7b, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x54000, 0x1000, &(0x7f0000001000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4) (async)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000206010800000071dbaba20000000000050005ae35cc880005000100f70000000d000409000000000000000073797a3400000020f32897d9ebe1de3d5f10574aa74120511267b85a5db9335aa3728afef0993e9104ffbcbfb3fcc22f22c3b6f26403041981154b1500c8557c46db2006b44cd471178155857e652aee069c20dcd475"], 0x38}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x200000) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x200000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)

2.507166ms ago: executing program 5 (id=2965):
landlock_restrict_self(0xffffffffffffffff, 0x1)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/fs/cgroup', 0x0, 0x0)
symlinkat(&(0x7f0000000200)='./bus\x00', r0, &(0x7f0000000240)='./file0\x00')
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000)
mkdir(&(0x7f0000000400)='./file0\x00', 0x1c2)
mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1d7)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}]})
chdir(&(0x7f0000000000)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010528bd7100fedbdf25020202000900010073797a310073797a3000000000bf01000005000000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x9, 0x7fff0000}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000004c0addad960a924fbbb620f1e14a6f6d0bfdec30342f1b2289c21539d6cd03fb3a893e499935210b0b5870c5c50559b9c50bb8ad7c7e63e5bcf6b795e27ea33d698dff02e41163eec4e7f5ec0e25e946a1c92f0072847f73a285927a6a1ea12bb2237a4ecefdab3af530b25e294f5189274b4fa2577d98974815b4d2b87ebd2393ed5802511060da826e1e50e83bdb50a153555be3044f2849973465e35c0ca1cda2950a6bd4d422b5de", @ANYBLOB="6a48d8367d319c5faaa2df0a8b1b3197ca4b0d69c60b7f2b8fbbde84ab8bc8c081c370a6d8afeab2", @ANYBLOB="010028bd7000000000000100000030000180060001000a00000008000500000000000c000700126900000000000007000600646800000800080004000000"], 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x0, 0x7fff, 0x6})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
rmdir(&(0x7f00000002c0)='./bus\x00')
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000700010000e20000000000000700000018720db8dd03d6ceb49498aab476a033abf9d42c8e14cbc50492ca3269ebe2c5b67f846c37122e9719b7703e1e44cebc57ce6db5353a87e21c9bae76c818bf4b88fd343e248a445e3ebc83b904426bf7abcb1eb307554d9c2deb0abaf882df6c9df1cd61edfe61d063993f23affc494f6f23aafe57164a8968", @ANYRES32=r9, @ANYBLOB="000002000a000200aaaaaaaaaabb0000"], 0x28}}, 0x4000800)
splice(r7, 0x0, r5, &(0x7f0000000180)=0x6, 0x40, 0x8)

0s ago: executing program 2 (id=2966):
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x101380)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000040)={0x1, 0x1, 0x5, 0xd7000000, 0x363, 0xa4d})
syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x7, 0x40, 0x51, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "db91"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1d8, 0x100, 0x3}, {0x6, 0x24, 0x1a, 0x9}, [@obex={0x5, 0x24, 0x15, 0x6552}, @country_functional={0x12, 0x24, 0x7, 0x7, 0x80, [0x200, 0x9, 0x9, 0x1000, 0x9, 0x2]}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x7, 0xbf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfd, 0xfc, 0x1b}}, {{0x9, 0x5, 0x3, 0x2, 0xfb9789f4a82ca818, 0x9, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x6, 0x1, 0x6f, 0xf7, 0x8}, 0x42, &(0x7f0000000180)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "4cad7db59d0fa05ba73a3b5ea0d07bd0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x36, 0x800}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0xf, 0xff0f, 0x200, [0xc00f, 0x6, 0xff0000, 0xff]}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80a}}]})
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000280)={&(0x7f0000ff7000/0x3000)=nil, 0x5, 0x4, 0x1})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0xa, <r1=>r0})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000300)={0x1, 0x2, 0x8, 0x2, 0x5d45})
fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, <r2=>0x0})
capset(&(0x7f0000000380)={0x19980330, r2}, &(0x7f00000003c0)={0x81, 0x381, 0x4, 0x7f, 0x4, 0x200})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x0, 0x3000000, 0x1010, r1, 0x0)
ioctl$SG_BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000400)={'\x00', 0x8, 0x5, 0x400, 0x0, 0x0, r2})
r3 = syz_open_dev$vbi(&(0x7f0000000440), 0x0, 0x2)
ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000480)={0x2, 0xabf, 0xfffffffffffff67b, 0xf, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000004c0)={0x0, 0x80000, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0086401, &(0x7f0000000600)={0xf0, &(0x7f0000000500)=""/240})
mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x2, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf9, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x9, 0xe}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x2, 0xd6, 0xbd, 0x8, 0x3}, 0x71, &(0x7f0000000700)={0x5, 0xf, 0x71, 0x3, [@generic={0x5e, 0x10, 0x2, "247f5458cf1b03a7ca9ee54f13e4c97165845c7791e0892081d753ea748448ba0f00333b6bc3094f126313274089183aead3de7c26e60b9d1fa40acd7ebdb3733cfca15fcdcd088a8bc81f04b76fce61a4d1ea36ef5b54aac42de3"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x7, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x4}]}, 0x4, [{0xb8, &(0x7f0000000780)=@string={0xb8, 0x3, "e082b3d31e18b73b862e98d182b46336a780c681a65a499a9adb8355a8b8d3d9c3dee2717b9ab0674e7a275b67677b98d1158e56fa7d916b6fbe0137d5cf966665d43e6b85de35fdeaf5f1df8cecc34aa309fc64fcf30860602adb2855183bcaa657a9ce921c87a241f51a6382b0ce944d90c5c314a65c7c3109ee0bfe3259462b87f30bc2cb34dbf5e327f36b0a262965b368f1b25bf85843e48bdf3587264a2f45486c941ad005e227e35828a633d1800081ee2375"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x447}}, {0xb7, &(0x7f0000000880)=@string={0xb7, 0x3, "7444c6429077e418e87b2e742aeb6d592eecdce8e7ae5ff6091151ae294dd569a5587466d2f1365fca809f43e7d1a5520a860d9f6d3e1a408d2fa985ce44afd48d7034e28d65c615254160f1e7bd6290100efeeb198778c3df188abe1c61d67670fdf7e9e444a670007829464f5557e0af75ef00c25b59a828e649d69180087aff6f771332dd20c47b3f93ca511c717d4428bd4ef85bde4251689a87529a2c843c9bf0020d9119610a13547946795de05d78deeff9"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc0a}}]})
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f00000009c0)=0x9)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000a00)={<r5=>0xffffffffffffffff}, 0x13d, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000a80)={0x15, 0x110, 0xfa00, {r5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @ib={0x1b, 0x6, 0x1, {"73d73119462e3200294e6d4c715c6d71"}, 0x7, 0x7fffffffffffffff, 0x8}}}, 0x118)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[{}, {}, {}, {}], &(0x7f0000000d40)=[<r6=>0x0], &(0x7f0000000d80)=[0x0], 0x4, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000f40)={&(0x7f0000000e40)=[0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[<r7=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0], 0x2, 0x9, 0x4, 0x2})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000f80)={0x101, r6, r7})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f00000010c0)={<r8=>r0, &(0x7f0000000fc0)='}\'\x00', 0x2000, &(0x7f0000001000)={@align=0x10000, {0x81, 0x66e, 0x4, 0xfffffffffffffff7}}, 0x0, &(0x7f0000001040), &(0x7f0000001080)=0x5})
ioctl$DRM_IOCTL_MARK_BUFS(r8, 0x40186417, &(0x7f0000001100)={0x4, 0x1, 0xfffffff1, 0x2, 0x3, 0xb5})
ioctl$VIDIOC_G_CTRL(r8, 0xc008561b, &(0x7f0000001140)={0x7ff, 0x2})
ppoll(&(0x7f0000001180)=[{}, {r3, 0x8000}, {r0, 0xc2}, {0xffffffffffffffff, 0x11}, {0xffffffffffffffff, 0x1}, {r1, 0x9134}, {r8, 0x412}, {r1, 0x2020}, {r8, 0xc000}], 0x9, &(0x7f0000001240), &(0x7f0000001280)={[0x1, 0x10]}, 0x8)

kernel console output (not intermixed with test programs):

terface with an up link
[  447.736009][T14117] bond7: entered promiscuous mode
[  447.742780][T14117] bond8: entered promiscuous mode
[  447.751734][T14117] 8021q: adding VLAN 0 to HW filter on device bond7
[  449.210509][T14120] lo speed is unknown, defaulting to 1000
[  449.529333][T14128] IPVS: length: 235 != 8
[  450.071907][   T10] usb 46-1: device descriptor read/8, error -110
[  450.714385][T14154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  450.751511][   T10] usb usb46-port1: attempt power cycle
[  451.283154][T14163] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2078'.
[  451.478780][   T10] usb usb46-port1: unable to enumerate USB device
[  451.631080][T14143] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  451.739622][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'.
[  452.152851][T14182] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  452.155674][T14182] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  452.164261][T14182] vhci_hcd vhci_hcd.0: Device attached
[  452.228509][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'.
[  452.232663][T14177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.236055][T14177] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.289652][T14177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.292984][T14177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.466984][  T845] usb 46-1: SetAddress Request (6) to port 0
[  452.474203][  T845] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd
[  452.509129][T14189] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  452.683819][T14189] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  452.847250][T14197] xt_CT: No such helper "pptp"
[  452.987443][T14186] vhci_hcd: connection reset by peer
[  453.019081][T10474] vhci_hcd vhci_hcd.4: stop threads
[  453.025124][T10474] vhci_hcd vhci_hcd.4: release socket
[  453.032022][T10474] vhci_hcd vhci_hcd.4: disconnect device
[  454.797205][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'.
[  454.825139][T14247] 8021q: adding VLAN 0 to HW filter on device bond4
[  454.890849][T14250] syzkaller0: entered promiscuous mode
[  454.893485][T14250] syzkaller0: entered allmulticast mode
[  455.918130][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2102'.
[  456.015111][T14267] 8021q: adding VLAN 0 to HW filter on device bond1
[  456.651825][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'.
[  456.654756][T14280] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2105'.
[  456.658335][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'.
[  456.661726][T14280] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2105'.
[  456.665150][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'.
[  456.996439][T14284] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  457.003573][T14284] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  457.587872][  T845] usb 46-1: device descriptor read/8, error -110
[  457.786315][   T42] kauditd_printk_skb: 3355 callbacks suppressed
[  457.786374][   T42] audit: type=1800 audit(1784755963.152:18663): pid=14301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2108" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  457.990305][  T845] usb usb46-port1: attempt power cycle
[  458.280939][T14323] 9pnet_virtio: no channels available for device syz
[  458.292010][T14323] netlink: 'syz.5.2115': attribute type 11 has an invalid length.
[  458.296404][T14322] netlink: 'syz.5.2115': attribute type 11 has an invalid length.
[  458.303515][T14323] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2115'.
[  458.307841][T14322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2115'.
[  458.308686][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2116'.
[  458.315797][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'.
[  458.565330][  T845] usb usb46-port1: unable to enumerate USB device
[  458.674205][T14335] fuse: Unknown parameter 'ørZk”ý¢?ÿ{öщé¼ÙÛl·£rï0„ž™Mn(MmÑtµ	—Ã¥í2Ýöâ´Ê«b†[ja¸–8o'
[  458.739818][T14335] lo speed is unknown, defaulting to 1000
[  459.071039][T14339] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  459.085102][T14339] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  459.225948][T14346] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2121'.
[  459.686681][T14373] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  459.731247][ T3270] ip6_tunnel: K xmit: Local address not yet configured!
[  459.785386][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'.
[  460.287844][ T3270] ip6_tunnel: K xmit: Local address not yet configured!
[  460.314847][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'.
[  460.487096][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'.
[  461.070881][ T5760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  461.082923][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  461.087094][ T5760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  461.092600][ T5760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  461.095546][ T5760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  461.324302][ T5842] usb 5-1: USB disconnect, device number 7
[  461.701000][T14434] openvswitch: netlink: Message has 1 unknown bytes.
[  461.703819][T14434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.810895][T14417] lo speed is unknown, defaulting to 1000
[  462.427829][   T42] audit: type=1326 audit(1784755967.792:18664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  462.456069][   T42] audit: type=1326 audit(1784755967.802:18665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  462.476465][T14417] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.483447][T14417] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.486663][T14417] bridge_slave_0: entered allmulticast mode
[  462.489564][   T42] audit: type=1326 audit(1784755967.802:18666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  462.491411][T14417] bridge_slave_0: entered promiscuous mode
[  462.508156][T14417] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.511313][T14417] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.514479][T14417] bridge_slave_1: entered allmulticast mode
[  462.519693][T14417] bridge_slave_1: entered promiscuous mode
[  462.553499][T14417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.562126][T14417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.562611][   T42] audit: type=1326 audit(1784755967.932:18667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f17008 code=0x7ffc0000
[  462.582883][   T42] audit: type=1326 audit(1784755967.932:18668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  462.592962][T14417] team0: Port device team_slave_0 added
[  462.600337][T14417] team0: Port device team_slave_1 added
[  462.604067][   T42] audit: type=1326 audit(1784755967.932:18669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  462.630952][ T5826] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  462.659063][ T5826] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.692660][T14417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.695723][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.706805][T14417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.797829][   T55] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  462.853831][T14464] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  462.856584][T14464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  462.867655][T14464] vhci_hcd vhci_hcd.0: Device attached
[  462.908683][T14468] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  462.952352][   T55] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  462.954716][T14417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.956477][   T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.963216][   T55] usb 7-1: Product: syz
[  462.963974][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.965031][   T55] usb 7-1: Manufacturer: syz
[  462.977953][   T55] usb 7-1: SerialNumber: syz
[  462.984055][T14417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.988677][   T55] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  463.066854][ T5826] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.066914][ T5842] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  463.073878][ T5826] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.161181][  T845] usb 48-1: SetAddress Request (2) to port 0
[  463.163918][  T845] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[  463.173911][T14468] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  463.199221][ T5760] Bluetooth: hci0: command tx timeout
[  463.216068][T14417] hsr_slave_0: entered promiscuous mode
[  463.220232][T14417] hsr_slave_1: entered promiscuous mode
[  463.274258][   T42] audit: type=1326 audit(1784755968.642:18670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71172eb code=0x7ffc0000
[  463.297769][   T42] audit: type=1326 audit(1784755968.652:18671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  463.310533][   T42] audit: type=1326 audit(1784755968.652:18672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  463.319439][   T42] audit: type=1326 audit(1784755968.662:18673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  463.328930][   T42] audit: type=1326 audit(1784755968.662:18674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  463.338040][   T42] audit: type=1326 audit(1784755968.672:18675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  463.346803][   T42] audit: type=1326 audit(1784755968.672:18676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  463.355801][   T42] audit: type=1326 audit(1784755968.682:18677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  463.364846][   T42] audit: type=1326 audit(1784755968.682:18678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  463.373796][   T42] audit: type=1326 audit(1784755968.682:18679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.2.2148" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71172eb code=0x7ffc0000
[  463.449955][ T5826] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.461980][ T5826] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.517779][T14466] vhci_hcd: connection reset by peer
[  463.520350][T10474] vhci_hcd vhci_hcd.5: stop threads
[  463.522341][T10474] vhci_hcd vhci_hcd.5: release socket
[  463.524551][T10474] vhci_hcd vhci_hcd.5: disconnect device
[  463.688758][ T5826] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.691900][ T5826] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.736818][T14455] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  463.739972][T14455] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  463.752901][T14455] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  463.766014][T14455] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  463.770386][T14455] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  463.786390][T14455] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  463.828771][ T6464] usb 7-1: USB disconnect, device number 36
[  464.159275][ T5842] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  464.165455][ T5842] ath9k_htc: Failed to initialize the device
[  464.173203][ T6464] usb 7-1: ath9k_htc: USB layer deinitialized
[  464.279923][ T5826] bond1 (unregistering): Released all slaves
[  464.304086][ T5826] bond2 (unregistering): (slave veth5): Releasing active interface
[  464.320563][ T5826] bond2 (unregistering): Released all slaves
[  464.348854][ T5826] bond0 (unregistering): Released all slaves
[  464.360165][ T5826] bond3 (unregistering): Released all slaves
[  464.371934][ T5826] bond4 (unregistering): Released all slaves
[  464.548159][ T5826] : left promiscuous mode
[  464.776153][T14495] sctp_transport_update_pmtu: 37 callbacks suppressed
[  464.776169][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.784808][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.790157][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.816948][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.868463][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.875989][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.877903][ T5459] 8021q: adding VLAN 0 to HW filter on device eth6
[  464.884313][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.891261][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.902207][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  464.912220][T14495] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  465.750782][ T5760] Bluetooth: hci1: command 0x0c1a tx timeout
[  465.827643][ T5760] Bluetooth: hci0: command 0x040f tx timeout
[  465.847090][T14417] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  465.859565][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  465.862490][T14417] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  465.866600][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  465.882909][T14417] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  465.888163][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  465.891223][T14417] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  465.895700][T14417] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  466.003274][T14520] Cannot find add_set index 0 as target
[  466.038963][   T58] libceph: connect (1)[c::]:6789 error -22
[  466.041551][   T58] libceph: mon0 (1)[c::]:6789 connect error
[  466.055901][T14529] ceph: No mds server is up or the cluster is laggy
[  466.233812][T14417] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.273212][T14417] 8021q: adding VLAN 0 to HW filter on device team0
[  466.312710][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.315844][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.385784][ T5826] virt_wifi0: left promiscuous mode
[  466.394154][ T5826] veth1_macvtap: left promiscuous mode
[  466.396589][ T5826] veth0_macvtap: left promiscuous mode
[  466.974567][ T5826] team0 (unregistering): Port device team_slave_1 removed
[  466.985947][ T5826] team0 (unregistering): Port device team_slave_0 removed
[  467.084098][ T5826] team0 (unregistering): Port device dummy0 removed
[  467.131531][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.134678][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.149067][ T3270] lo speed is unknown, defaulting to 1000
[  467.151758][ T3270] syz2: Port: 1 Link DOWN
[  467.173313][T14553] syzkaller0: entered promiscuous mode
[  467.175805][T14553] syzkaller0: entered allmulticast mode
[  467.201343][ T1180] smbdirect: ib_dev[syz2] removed
[  467.252785][T14552] lo: entered allmulticast mode
[  467.266219][T14552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  467.431961][T14417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  467.436599][T14417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  467.640939][ T5826] IPVS: stop unused estimator thread 0...
[  467.686578][ T6464] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  467.707687][   T55] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  467.840067][ T5760] Bluetooth: hci1: command 0x0c1a tx timeout
[  467.869200][   T55] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  467.877647][   T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.883332][   T55] usb 7-1: Product: syz
[  467.884980][   T55] usb 7-1: Manufacturer: syz
[  467.891799][   T55] usb 7-1: SerialNumber: syz
[  467.902969][   T55] usb 7-1: config 0 descriptor??
[  467.907663][ T5760] Bluetooth: hci0: command 0x040f tx timeout
[  467.970849][T14417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.047792][ T6464] usb 10-1: Using ep0 maxpacket: 32
[  468.109134][T14417] veth0_vlan: entered promiscuous mode
[  468.117252][   T55] usb 7-1: USB disconnect, device number 37
[  468.122145][T14417] veth1_vlan: entered promiscuous mode
[  468.238277][  T845] usb 48-1: device descriptor read/8, error -110
[  468.261474][ T6464] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  468.285579][ T6464] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  468.288199][T12375] udevd[12375]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  468.289573][ T6464] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  468.299957][ T6464] usb 10-1: Product: syz
[  468.302473][ T6464] usb 10-1: Manufacturer: syz
[  468.304632][ T6464] usb 10-1: SerialNumber: syz
[  468.324443][ T6464] usb 10-1: config 0 descriptor??
[  468.331913][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2164'.
[  468.334708][T14574] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  468.335719][T14571] tipc: Invalid UDP bearer configuration
[  468.338875][T14571] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  468.352173][ T6464] hub 10-1:0.0: bad descriptor, ignoring hub
[  468.354887][ T6464] hub 10-1:0.0: probe with driver hub failed with error -5
[  468.357841][T14417] veth0_macvtap: entered promiscuous mode
[  468.364484][T14417] veth1_macvtap: entered promiscuous mode
[  468.403885][T14417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.414748][T14417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.448065][T10474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.452681][T10474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.461094][T10474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.465648][T10474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.662766][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.666392][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.697240][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.701501][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.772100][  T845] usb usb48-port1: attempt power cycle
[  468.877985][   T10] usb 10-1: USB disconnect, device number 3
[  469.265311][T14619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2172'.
[  469.271196][T14619] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2172'.
[  469.317273][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2173'.
[  469.320314][T14622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2173'.
[  469.348604][  T845] usb usb48-port1: unable to enumerate USB device
[  469.404914][T14631] overlayfs: failed to resolve './file2': -2
[  469.415311][T14631] sit1: entered promiscuous mode
[  469.490723][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  469.520504][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2176'.
[  469.532408][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  469.538241][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  469.544436][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  469.917657][ T5760] Bluetooth: hci1: command 0x0c1a tx timeout
[  469.989495][ T5760] Bluetooth: hci0: command 0x040f tx timeout
[  470.341098][ T1180] Bluetooth: hci3: Frame reassembly failed (-84)
[  470.346020][T14661] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2
[  470.373693][   T42] kauditd_printk_skb: 32 callbacks suppressed
[  470.373711][   T42] audit: type=1326 audit(1784755975.742:18712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14651 comm="syz.2.2182" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x0
[  470.493355][T14663] netlink: 'syz.0.2184': attribute type 1 has an invalid length.
[  470.500131][T14663] veth0: entered promiscuous mode
[  470.501815][T14663] veth0: entered allmulticast mode
[  470.542539][T14663] macvlan2: entered promiscuous mode
[  470.547146][T14663] macvlan2: entered allmulticast mode
[  470.659916][T14663] vlan2: entered promiscuous mode
[  470.661585][T14663] bridge0: entered promiscuous mode
[  470.730566][T14677] Bluetooth: MGMT ver 1.23
[  470.736453][T14677] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  471.918052][T14719] /dev/sr0: Can't open blockdev
[  472.142496][T14735] syzkaller0: entered promiscuous mode
[  472.144990][T14735] syzkaller0: entered allmulticast mode
[  472.397915][ T5760] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  472.401310][ T5107] Bluetooth: hci3: command 0x1003 tx timeout
[  472.887764][   T58] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  473.017619][   T58] usb 10-1: device descriptor read/64, error -71
[  473.257620][   T58] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  473.304558][T14772] veth1_to_bond: entered allmulticast mode
[  473.324397][T14772] veth1_to_bond: left allmulticast mode
[  473.389527][   T58] usb 10-1: device descriptor read/64, error -71
[  473.497940][   T58] usb usb10-port1: attempt power cycle
[  473.837674][   T58] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  473.858278][   T58] usb 10-1: device descriptor read/8, error -71
[  474.097633][   T58] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  474.118454][   T58] usb 10-1: device descriptor read/8, error -71
[  474.228210][   T58] usb usb10-port1: unable to enumerate USB device
[  474.500367][T14786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  474.503152][T14786] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  474.506587][T14786] vhci_hcd vhci_hcd.0: Device attached
[  474.701010][T14791] vhci_hcd: connection closed
[  474.701372][T10474] vhci_hcd vhci_hcd.0: stop threads
[  474.708933][T10474] vhci_hcd vhci_hcd.0: release socket
[  474.718277][T10474] vhci_hcd vhci_hcd.0: disconnect device
[  474.788244][ T5842] usb 38-1: enqueue for inactive port 0
[  475.334581][ T5842] usb usb38-port1: attempt power cycle
[  475.364950][T14813] kAFS: unable to lookup cell 'syz1'
[  476.310031][ T5842] usb usb38-port1: unable to enumerate USB device
[  476.433576][T14829] PKCS7: Unknown OID: [4] 0.0
[  476.438500][T14829] PKCS7: Only support pkcs7_signedData type
[  476.922975][T14846] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  477.272033][T14862] __nla_validate_parse: 11 callbacks suppressed
[  477.272051][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2236'.
[  477.374709][T14868] program syz.5.2237 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  477.852933][T14886] can0: slcan on ttyS3.
[  477.967576][T14886] can0 (unregistered): slcan off ttyS3.
[  479.725940][T14912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.799195][T14917] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  479.945179][T14912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.085739][T14912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.186356][T14930] overlayfs: workdir and upperdir must be separate subtrees
[  480.250528][T14912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.268517][   T42] audit: type=1326 audit(1784755985.642:18713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.5.2254" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x0
[  480.395715][T10474] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.407012][T10474] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.418528][T10474] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.430032][T10474] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.942853][T14939] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  480.945593][T14939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  480.949409][T14939] vhci_hcd vhci_hcd.0: Device attached
[  481.037267][T14945] nft_compat: unsupported protocol 0
[  481.077084][T14947] trusted_key: encrypted_key: insufficient parameters specified
[  481.191417][T14940] vhci_hcd: connection closed
[  481.193633][T10474] vhci_hcd vhci_hcd.0: stop threads
[  481.201632][T10474] vhci_hcd vhci_hcd.0: release socket
[  481.205642][T10474] vhci_hcd vhci_hcd.0: disconnect device
[  481.247707][ T6464] usb 38-1: enqueue for inactive port 0
[  481.741293][ T6464] usb usb38-port1: attempt power cycle
[  482.152881][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'.
[  482.165345][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'.
[  482.318648][ T6464] usb usb38-port1: unable to enumerate USB device
[  482.359230][T14974] nbd0: detected capacity change from 0 to 63
[  482.375659][   T65] block nbd0: Receive control failed (result -32)
[  482.377256][ T1308] block nbd0: Send control failed (result -32)
[  482.382117][ T1308] block nbd0: Request send failed, requeueing
[  482.403184][ T5995] block nbd0: Dead connection, failed to find a fallback
[  482.405571][ T5995] block nbd0: shutting down sockets
[  482.407414][ T5995] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.417033][ T5995] buffer_io_error: 468 callbacks suppressed
[  482.417049][ T5995] Buffer I/O error on dev nbd0, logical block 0, async page read
[  482.422726][ T5995] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.427400][ T5995] Buffer I/O error on dev nbd0, logical block 1, async page read
[  482.431055][ T5995] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.434185][ T5995] Buffer I/O error on dev nbd0, logical block 2, async page read
[  482.436876][ T5995] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.439928][ T5995] Buffer I/O error on dev nbd0, logical block 3, async page read
[  482.450873][ T5995] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.453768][ T5995] Buffer I/O error on dev nbd0, logical block 0, async page read
[  482.456278][ T5995] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.459854][ T5995] Buffer I/O error on dev nbd0, logical block 1, async page read
[  482.462899][ T5995] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.466533][ T5995] Buffer I/O error on dev nbd0, logical block 2, async page read
[  482.469633][ T5995] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.472694][ T5995] Buffer I/O error on dev nbd0, logical block 3, async page read
[  482.475191][ T5995] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.478255][ T5995] Buffer I/O error on dev nbd0, logical block 0, async page read
[  482.480683][ T5995] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.483643][ T5995] Buffer I/O error on dev nbd0, logical block 1, async page read
[  482.487599][T12890] ldm_validate_partition_table(): Disk read failed.
[  482.491257][T12890] Dev nbd0: unable to read RDB block 0
[  482.494728][T12890]  nbd0: unable to read partition table
[  482.588805][T12890] ldm_validate_partition_table(): Disk read failed.
[  482.591827][T12890] Dev nbd0: unable to read RDB block 0
[  482.598132][T12890]  nbd0: unable to read partition table
[  482.607033][T14981] lo speed is unknown, defaulting to 1000
[  482.612402][T14981] lo speed is unknown, defaulting to 1000
[  482.660135][T14981] lo speed is unknown, defaulting to 1000
[  482.672894][T14981] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  482.681783][T14981] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  482.689939][T14981] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  482.701139][T14987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  482.744577][T14981] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  482.840202][T14981] lo speed is unknown, defaulting to 1000
[  482.850068][T14981] lo speed is unknown, defaulting to 1000
[  482.896109][T14981] lo speed is unknown, defaulting to 1000
[  482.924577][T14981] lo speed is unknown, defaulting to 1000
[  482.927756][ T3270] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  482.932832][T14981] lo speed is unknown, defaulting to 1000
[  483.179951][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2272'.
[  483.206017][ T3270] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  483.469337][T14993] [U] 
[  483.745783][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2276'.
[  483.834790][ T3270] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  483.838858][ T3270] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  483.842256][ T3270] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.863872][ T3270] usb 10-1: config 0 descriptor??
[  483.874827][ T3270] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  483.877840][ T3270] dvb-usb: bulk message failed: -22 (3/0)
[  483.891288][ T3270] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  483.899671][ T3270] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  483.902753][ T3270] usb 10-1: media controller created
[  483.906120][ T3270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  483.928136][ T3270] dvb-usb: bulk message failed: -22 (6/0)
[  483.932888][ T3270] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  483.939938][ T3270] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input40
[  483.957387][ T3270] dvb-usb: schedule remote query interval to 150 msecs.
[  483.960605][ T3270] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  484.121758][ T3270] dvb-usb: bulk message failed: -22 (1/0)
[  484.123648][ T3270] dvb-usb: error while querying for an remote control event.
[  484.150630][ T6464] libceph: connect (1)[c::]:6789 error -101
[  484.153170][ T6464] libceph: mon0 (1)[c::]:6789 connect error
[  484.200298][T15016] ceph: No mds server is up or the cluster is laggy
[  484.293916][ T3270] dvb-usb: bulk message failed: -22 (1/0)
[  484.297409][ T3270] dvb-usb: error while querying for an remote control event.
[  484.457680][ T5927] dvb-usb: bulk message failed: -22 (1/0)
[  484.460256][ T5927] dvb-usb: error while querying for an remote control event.
[  484.506520][ T6464] usb 10-1: USB disconnect, device number 8
[  484.541102][ T6464] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  484.749263][T15026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  485.183240][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  486.543057][   T42] audit: type=1326 audit(1784755991.912:18714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15079 comm="syz.5.2295" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe5fec code=0x0
[  486.553655][T15078] overlayfs: workdir and upperdir must reside under the same mount
[  486.576273][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'.
[  486.594497][T15081] nfs: Unknown parameter '
'
[  486.924524][T15084] IPv6: A: Disabled Multicast RS
[  487.000940][T15086] lo speed is unknown, defaulting to 1000
[  487.640889][T15112] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  487.643735][T15112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  487.648871][T15112] vhci_hcd vhci_hcd.0: Device attached
[  487.662326][T15114] vhci_hcd: connection closed
[  487.662645][ T9015] vhci_hcd vhci_hcd.5: stop threads
[  487.667823][ T9015] vhci_hcd vhci_hcd.5: release socket
[  487.673695][ T9015] vhci_hcd vhci_hcd.5: disconnect device
[  487.753196][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'.
[  487.773260][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'.
[  487.814542][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'.
[  488.154696][T15128] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2306'.
[  488.594609][T15137] lo speed is unknown, defaulting to 1000
[  488.598337][   T42] audit: type=1326 audit(1784755993.972:18715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.5.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000
[  488.607091][   T42] audit: type=1326 audit(1784755993.972:18716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.5.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe5fec code=0x7ffc0000
[  488.615950][   T42] audit: type=1326 audit(1784755993.972:18717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.5.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000
[  488.787646][   T42] audit: type=1326 audit(1784755993.982:18718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15141 comm="syz.5.2310" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe5fec code=0x7ffc0000
[  489.067730][T15152] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[  489.500019][T15162] netlink: 'syz.4.2312': attribute type 1 has an invalid length.
[  489.551508][T15162] 8021q: adding VLAN 0 to HW filter on device bond2
[  489.598982][T15164] 8021q: adding VLAN 0 to HW filter on device bond2
[  489.604640][T15164] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  489.609022][T15162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2312'.
[  489.618688][T15164] bond2: (slave wireguard0): Error -95 calling set_mac_address
[  491.240162][T15195] ptrace attach of ""[15197] was attempted by "/syz-executor exec"[15195]
[  491.590186][T15193] tipc: Resetting bearer <eth:team0>
[  491.603677][   T42] audit: type=1800 audit(1784755996.972:18719): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2315" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  491.766239][ T5799] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.770414][ T3270] lo speed is unknown, defaulting to 1000
[  491.775396][ T5799] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.779828][ T3270] syz2: Port: 1 Link DOWN
[  491.787206][ T5799] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  491.787245][ T5799] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  492.338530][T15204] lo speed is unknown, defaulting to 1000
[  493.598765][ T3270] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  493.759569][ T3270] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  493.764393][ T3270] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  493.769339][ T3270] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  493.773990][ T3270] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.790299][T15240] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  493.799017][ T3270] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  494.352026][T15257] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2333'.
[  495.019463][ T1365] usb 9-1: USB disconnect, device number 13
[  495.154117][T15269] sctp: [Deprecated]: syz.5.2340 (pid 15269) Use of struct sctp_assoc_value in delayed_ack socket option.
[  495.154117][T15269] Use struct sctp_sack_info instead
[  495.178216][ T3270] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  495.343131][ T3270] usb 5-1: config 0 has an invalid interface number: 143 but max is 0
[  495.346605][ T3270] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[  495.351200][ T3270] usb 5-1: config 0 has no interface number 0
[  495.353961][ T3270] usb 5-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30
[  495.358721][ T3270] usb 5-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149
[  495.364264][ T3270] usb 5-1: config 0 interface 143 has no altsetting 0
[  495.374619][ T3270] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  495.379218][ T3270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.382574][ T3270] usb 5-1: Product: syz
[  495.384494][ T3270] usb 5-1: Manufacturer: syz
[  495.386426][ T3270] usb 5-1: SerialNumber: syz
[  495.392215][ T3270] usb 5-1: config 0 descriptor??
[  495.571140][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'.
[  495.574928][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'.
[  495.591569][T10474] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  495.595368][T10474] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  495.603336][T10474] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  495.610847][T10474] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  495.627175][ T3270] usb 5-1: USB disconnect, device number 8
[  495.785675][T15286] syzkaller0: entered promiscuous mode
[  495.788181][T15286] syzkaller0: entered allmulticast mode
[  495.836906][ T6464] IPVS: starting estimator thread 0...
[  495.947725][T15287] IPVS: using max 28 ests per chain, 67200 per kthread
[  496.006968][T15293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  497.946440][T15316] random: crng reseeded on system resumption
[  498.062356][T15323] xt_HMARK: spi-set and port-set can't be combined
[  498.564498][T15344] lo speed is unknown, defaulting to 1000
[  498.626375][T15347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2360'.
[  499.617821][ T3270] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  499.704088][T15378] openvswitch: netlink: Geneve option length err (len 856, max 255).
[  499.770390][ T3270] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  499.773946][ T3270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  499.778834][ T3270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  499.783001][ T3270] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  499.791609][ T3270] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  499.799216][ T3270] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  499.819938][ T3270] usb 5-1: Product: syz
[  499.822209][ T3270] usb 5-1: Manufacturer: syz
[  499.904216][ T3270] cdc_wdm 5-1:1.0: skipping garbage
[  499.906729][ T3270] cdc_wdm 5-1:1.0: skipping garbage
[  499.957394][ T3270] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  499.960323][ T3270] cdc_wdm 5-1:1.0: Unknown control protocol
[  499.997998][ T5842] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  500.148205][ T5842] usb 10-1: Using ep0 maxpacket: 16
[  500.176472][ T5842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.184343][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2367'.
[  500.190786][ T5842] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  500.205991][ T5842] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  500.212963][ T5842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.221416][ T5842] usb 10-1: config 0 descriptor??
[  500.243227][ T6464] usb 5-1: USB disconnect, device number 9
[  500.257383][T15394] netlink: 'syz.4.2373': attribute type 16 has an invalid length.
[  500.263150][T15394] netlink: 'syz.4.2373': attribute type 3 has an invalid length.
[  500.269573][T15394] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2373'.
[  500.287457][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'.
[  500.505017][T15394] veth3: entered allmulticast mode
[  500.549615][T15394] bond3: (slave veth3): Enslaving as an active interface with an up link
[  500.633379][T15399] bond3 (unregistering): (slave veth3): Releasing backup interface
[  500.641539][T15399] bond3 (unregistering): Released all slaves
[  502.558160][   T42] audit: type=1326 audit(1784756263.937:18720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15437 comm="syz.2.2384" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f16fec code=0x0
[  502.716996][   T42] audit: type=1326 audit(1784756264.087:18721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.727813][   T42] audit: type=1326 audit(1784756264.087:18722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.735263][   T42] audit: type=1326 audit(1784756264.087:18723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.745167][   T42] audit: type=1326 audit(1784756264.087:18724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.758233][   T42] audit: type=1326 audit(1784756264.087:18725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.767605][   T42] audit: type=1326 audit(1784756264.087:18726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.774339][   T42] audit: type=1326 audit(1784756264.087:18727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.781144][   T42] audit: type=1326 audit(1784756264.087:18728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.789071][   T42] audit: type=1326 audit(1784756264.087:18729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.2.2385" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f16fec code=0x7ffc0000
[  502.833499][ T5842] usbhid 10-1:0.0: can't add hid device: -71
[  502.838575][ T5842] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  502.857900][ T5842] usb 10-1: USB disconnect, device number 9
[  502.992433][T15460] Malformed UNC in devname
[  502.992433][T15460] 
[  502.992671][T15459] CIFS: VFS: UNC: path must begin with // or \\
[  502.994743][T15460] CIFS: VFS: Malformed UNC in devname
[  502.996714][T15459] Malformed UNC in devname
[  502.996714][T15459] 
[  503.001275][T15459] CIFS: VFS: Malformed UNC in devname
[  504.067614][ T5842] page_pool_release_retry() stalled pool shutdown: id 47, 50 inflight 181 sec
[  504.623113][T15483] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  504.694997][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'.
[  504.771720][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'.
[  504.880797][T15487] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.886237][T15487] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.023736][T15487] veth0: left promiscuous mode
[  505.026478][T15487] veth0: left allmulticast mode
[  505.084123][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  505.111732][T15487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  505.444096][T15487] vlan2: left promiscuous mode
[  505.446349][T15487] bridge0: left promiscuous mode
[  505.460267][T15490] geneve2: entered promiscuous mode
[  505.473546][T10474] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.476299][T10474] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 45584 - 0
[  505.479990][T10474] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.484834][T10474] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 45584 - 0
[  505.513125][T10474] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.518063][T10474] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 45584 - 0
[  505.523433][T10474] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.528548][T10474] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 45584 - 0
[  505.547680][ T3270] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  505.702389][ T3270] usb 10-1: unable to get BOS descriptor or descriptor too short
[  505.708422][ T3270] usb 10-1: config 129 has an invalid interface number: 135 but max is 0
[  505.714120][ T3270] usb 10-1: config 129 has an invalid interface number: 5 but max is 0
[  505.720252][ T3270] usb 10-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  505.724312][ T3270] usb 10-1: config 129 has no interface number 0
[  505.731795][ T3270] usb 10-1: config 129 has no interface number 1
[  505.737183][ T3270] usb 10-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  505.742898][ T3270] usb 10-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  505.749100][ T3270] usb 10-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  505.755588][ T3270] usb 10-1: config 129 interface 135 has no altsetting 0
[  505.759220][ T3270] usb 10-1: config 129 interface 5 has no altsetting 0
[  505.765551][ T3270] usb 10-1: string descriptor 0 read error: -22
[  505.768604][ T3270] usb 10-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  505.772673][T15505] netlink: 'syz.2.2403': attribute type 8 has an invalid length.
[  505.772673][ T3270] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.787204][ T3270] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  505.791162][ T3270] usb 10-1: MIDIStreaming interface descriptor not found
[  506.515831][T15525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2407'.
[  506.721960][T15477] Set syz1 is full, maxelem 65536 reached
[  506.778011][  T845] usb 10-1: USB disconnect, device number 10
[  507.088436][   T55] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  507.248503][   T55] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  507.253369][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.259269][   T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.264415][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.269515][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.273552][   T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.278349][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.282809][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.286936][   T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.304627][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.309122][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.313038][   T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.327592][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.331518][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.336898][   T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.346319][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.353928][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.364622][   T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.372441][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.386842][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.390902][   T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.396952][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.403411][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  507.417396][   T55] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  507.422073][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  507.430482][   T55] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  507.434423][   T55] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  507.438528][   T55] usb 5-1: Product: syz
[  507.440361][   T55] usb 5-1: Manufacturer: syz
[  507.442391][   T55] usb 5-1: SerialNumber: syz
[  507.460893][   T55] usb 5-1: config 0 descriptor??
[  507.491430][   T55] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  507.697048][ T5995] blk_print_req_error: 122 callbacks suppressed
[  507.697070][ T5995] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  507.703880][ T5995] buffer_io_error: 138 callbacks suppressed
[  507.703898][ T5995] Buffer I/O error on dev nbd0, logical block 0, async page read
[  507.711364][ T5995] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  507.715213][ T5995] Buffer I/O error on dev nbd0, logical block 1, async page read
[  507.718725][ T5995] Buffer I/O error on dev nbd0, logical block 2, async page read
[  507.722279][ T5995] Buffer I/O error on dev nbd0, logical block 3, async page read
[  507.740860][ T5995] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  507.744917][ T5995] Buffer I/O error on dev nbd0, logical block 0, async page read
[  507.756538][ T5158] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  507.756766][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'.
[  507.760002][ T5158] Buffer I/O error on dev nbd0, logical block 1, async page read
[  507.766238][ T5158] Buffer I/O error on dev nbd0, logical block 2, async page read
[  507.769187][ T5158] Buffer I/O error on dev nbd0, logical block 3, async page read
[  507.781078][ T5995] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  507.785030][ T5995] Buffer I/O error on dev nbd0, logical block 0, async page read
[  507.788566][ T5995] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  507.792701][ T5995] Buffer I/O error on dev nbd0, logical block 1, async page read
[  507.796388][ T5158] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  507.801625][ T5158] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  507.805903][ T5158] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  507.810142][ T5158] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  507.816708][T15544] ldm_validate_partition_table(): Disk read failed.
[  507.826358][T15544] Dev nbd0: unable to read RDB block 0
[  507.839720][T15544]  nbd0: unable to read partition table
[  508.120798][T15587] netlink: 'syz.4.2423': attribute type 11 has an invalid length.
[  508.719730][T15600] lo speed is unknown, defaulting to 1000
[  509.689384][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2434'.
[  509.693120][T15622] netlink: 'syz.5.2434': attribute type 30 has an invalid length.
[  509.707431][   T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  509.715396][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2434'.
[  509.715832][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  509.720656][T15622] netlink: 'syz.5.2434': attribute type 30 has an invalid length.
[  509.723334][   T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  509.730576][   T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  509.929354][   T58] usb 5-1: USB disconnect, device number 10
[  509.958049][   T58] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  510.029558][T15644] syz.0.2440: attempt to access beyond end of device
[  510.029558][T15644] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[  510.046437][T15644] gfs2: error -5 reading superblock
[  510.098271][T15647] fuse: Bad value for 'fd'
[  510.098857][T15646] fuse: Bad value for 'fd'
[  510.109062][T15644] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  510.343089][T15659] sctp: [Deprecated]: syz.5.2446 (pid 15659) Use of int in max_burst socket option deprecated.
[  510.343089][T15659] Use struct sctp_assoc_value instead
[  510.450045][T15664] pim6reg99999999: entered allmulticast mode
[  510.533283][T15663] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2449'.
[  511.280982][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'.
[  511.282229][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2458'.
[  511.832024][T15711] siw: device registration error -23
[  511.839029][T15711] 9pnet_virtio: no channels available for device c:::
[  512.110869][T15713] batman_adv: batadv0: Adding interface: dummy0
[  512.113576][T15713] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.126841][T15713] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  512.206414][   T42] kauditd_printk_skb: 16 callbacks suppressed
[  512.206433][   T42] audit: type=1326 audit(1784756273.577:18746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.220559][   T42] audit: type=1326 audit(1784756273.597:18747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.237672][   T42] audit: type=1326 audit(1784756273.597:18748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.246508][   T42] audit: type=1326 audit(1784756273.597:18749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.258015][   T42] audit: type=1326 audit(1784756273.597:18750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.266934][   T42] audit: type=1326 audit(1784756273.597:18751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.276317][   T42] audit: type=1326 audit(1784756273.597:18752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.285284][   T42] audit: type=1326 audit(1784756273.597:18753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.294406][   T42] audit: type=1326 audit(1784756273.607:18754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  512.303275][   T42] audit: type=1326 audit(1784756273.607:18755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.4.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  513.564054][T15764] syz.2.2480: attempt to access beyond end of device
[  513.564054][T15764] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[  513.569792][T15764] gfs2: error -5 reading superblock
[  513.613437][T15769] fuse: Bad value for 'fd'
[  513.628569][T15764] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  513.911121][ T5107] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  513.958876][T15779] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  513.961613][T15779] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  513.966322][T15779] vhci_hcd vhci_hcd.0: Device attached
[  514.006727][T15779] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  514.074407][T15779] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  514.111115][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'.
[  514.218686][T15781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2486'.
[  514.228591][   T58] usb 38-1: SetAddress Request (23) to port 0
[  514.247356][   T58] usb 38-1: new SuperSpeed USB device number 23 using vhci_hcd
[  514.537291][T15782] vhci_hcd: connection reset by peer
[  514.544142][   T12] vhci_hcd vhci_hcd.0: stop threads
[  514.550049][   T12] vhci_hcd vhci_hcd.0: release socket
[  514.555363][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  514.607795][T15799] tmpfs: Bad value for 'mpol'
[  514.662251][T15804] 9p: Bad value for 'wfdno'
[  515.097810][ T6464] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  515.262641][ T6464] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  515.267149][ T6464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.270673][ T6464] usb 7-1: Product: syz
[  515.272399][ T6464] usb 7-1: Manufacturer: syz
[  515.274355][ T6464] usb 7-1: SerialNumber: syz
[  515.388340][T15829] block nbd1: server does not support multiple connections per device.
[  515.392219][T15829] block nbd1: shutting down sockets
[  515.421653][T15835] overlayfs: workdir and upperdir must reside under the same mount
[  516.251281][ T6464] rtl8150 7-1:1.0: couldn't reset the device
[  516.257756][ T6464] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[  516.274053][ T6464] usb 7-1: USB disconnect, device number 38
[  516.398519][T15848] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  516.557766][ T1180] wlan0: Trigger new scan to find an IBSS to join
[  516.748462][ T6464] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  516.917595][ T6464] usb 5-1: Using ep0 maxpacket: 8
[  516.926023][ T6464] usb 5-1: config 1 has an invalid interface number: 98 but max is 1
[  516.932294][ T6464] usb 5-1: config 1 has an invalid interface number: 69 but max is 1
[  516.938365][ T6464] usb 5-1: config 1 has an invalid interface number: 243 but max is 1
[  516.945413][ T6464] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  516.952797][ T6464] usb 5-1: config 1 has no interface number 0
[  516.957861][ T6464] usb 5-1: config 1 has no interface number 1
[  516.962641][ T6464] usb 5-1: config 1 has no interface number 2
[  516.966536][ T6464] usb 5-1: config 1 interface 98 altsetting 6 endpoint 0xD has invalid wMaxPacketSize 0
[  516.978050][ T6464] usb 5-1: config 1 interface 98 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8
[  516.982323][ T6464] usb 5-1: config 1 interface 98 altsetting 6 endpoint 0x2 has an invalid bInterval 248, changing to 11
[  516.988205][ T6464] usb 5-1: config 1 interface 69 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  516.995619][ T6464] usb 5-1: config 1 interface 69 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0
[  517.006072][ T6464] usb 5-1: config 1 interface 69 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[  517.014957][ T6464] usb 5-1: config 1 interface 69 altsetting 9 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  517.022641][ T6464] usb 5-1: config 1 interface 69 altsetting 9 has 5 endpoint descriptors, different from the interface descriptor's value: 9
[  517.030186][ T6464] usb 5-1: config 1 interface 243 altsetting 98 has a duplicate endpoint with address 0x4, skipping
[  517.035210][ T6464] usb 5-1: config 1 interface 243 altsetting 98 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  517.040702][ T6464] usb 5-1: config 1 interface 243 altsetting 98 endpoint 0xF has an invalid bInterval 68, changing to 7
[  517.045522][ T6464] usb 5-1: config 1 interface 243 altsetting 98 has 4 endpoint descriptors, different from the interface descriptor's value: 2
[  517.052060][ T6464] usb 5-1: config 1 interface 98 has no altsetting 0
[  517.054942][ T6464] usb 5-1: config 1 interface 69 has no altsetting 0
[  517.058508][ T6464] usb 5-1: config 1 interface 243 has no altsetting 0
[  517.064192][ T6464] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=b3.d1
[  517.068610][ T6464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.072424][ T6464] usb 5-1: Product: syz
[  517.074387][ T6464] usb 5-1: Manufacturer: syz
[  517.076430][ T6464] usb 5-1: SerialNumber: syz
[  517.082660][T15853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  517.110071][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2509'.
[  517.547691][T13749] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  517.737591][T13749] usb 7-1: Using ep0 maxpacket: 32
[  517.744821][T13749] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  517.752794][T13749] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  517.756764][T13749] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  517.760274][T13749] usb 7-1: Product: syz
[  517.762191][T13749] usb 7-1: Manufacturer: syz
[  517.764205][T13749] usb 7-1: SerialNumber: syz
[  517.768667][T13749] usb 7-1: config 0 descriptor??
[  517.771389][T15873] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  517.775884][T13749] hub 7-1:0.0: bad descriptor, ignoring hub
[  517.778334][T13749] hub 7-1:0.0: probe with driver hub failed with error -5
[  518.193595][T15885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  518.196416][T15885] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  518.199979][T15885] vhci_hcd vhci_hcd.0: Device attached
[  518.243659][T15887] vhci_hcd: connection closed
[  518.244223][ T5799] vhci_hcd vhci_hcd.0: stop threads
[  518.244761][ T6464] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware
[  518.246295][ T5799] vhci_hcd vhci_hcd.0: release socket
[  518.251809][   T10] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  518.254115][ T5799] vhci_hcd vhci_hcd.0: disconnect device
[  518.256103][ T6464] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  518.260590][   T10] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  518.266863][ T6464] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware
[  518.271803][ T6464] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  518.280651][ T6464] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware
[  518.285081][ T6464] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  518.293626][ T6464] usb 5-1: USB disconnect, device number 11
[  518.604503][T15873] usb 7-1: reset high-speed USB device number 39 using dummy_hcd
[  518.750478][T15873] usb 7-1: device descriptor read/64, error -71
[  519.017826][T15873] usb 7-1: reset high-speed USB device number 39 using dummy_hcd
[  519.024321][T15901] Invalid ELF header magic: != ELF
[  519.168582][T15873] usb 7-1: device descriptor read/64, error -71
[  519.357907][   T58] usb 38-1: device descriptor read/8, error -110
[  519.421967][T15873] usb 7-1: reset high-speed USB device number 39 using dummy_hcd
[  519.448488][T15873] usb 7-1: device descriptor read/8, error -71
[  519.606012][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'.
[  519.618883][T15913] kvm: MWAIT instruction emulated as NOP!
[  519.677798][ T1180] wlan0: Trigger new scan to find an IBSS to join
[  519.698820][T15873] usb 7-1: reset high-speed USB device number 39 using dummy_hcd
[  519.718407][T15873] usb 7-1: device descriptor read/8, error -71
[  519.789245][   T58] usb usb38-port1: attempt power cycle
[  519.902898][ T3270] usb 7-1: USB disconnect, device number 39
[  520.047619][ T3270] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  520.177778][ T3270] usb 7-1: device descriptor read/64, error -71
[  520.464781][   T58] usb usb38-port1: unable to enumerate USB device
[  520.713372][T15932] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  520.716199][T15932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  520.720832][T15932] vhci_hcd vhci_hcd.0: Device attached
[  520.745652][T15932] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  520.914833][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.927614][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.982849][T15940] netlink: 'syz.5.2526': attribute type 1 has an invalid length.
[  521.043512][T15940] vlan2: entered allmulticast mode
[  521.045746][T15940] bond0: entered allmulticast mode
[  521.051752][T15940] bond_slave_0: entered allmulticast mode
[  521.054308][T15940] bond_slave_1: entered allmulticast mode
[  521.061065][   T58] usb 42-1: SetAddress Request (22) to port 0
[  521.067125][   T58] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd
[  521.348069][T15934] vhci_hcd: connection reset by peer
[  521.353780][   T12] vhci_hcd vhci_hcd.2: stop threads
[  521.356056][   T12] vhci_hcd vhci_hcd.2: release socket
[  521.370035][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  522.418541][T15981] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  522.490038][   T42] kauditd_printk_skb: 14 callbacks suppressed
[  522.490058][   T42] audit: type=1326 audit(1784756283.867:18770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15984 comm="syz.0.2542" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0
[  522.542727][T15983] lo speed is unknown, defaulting to 1000
[  522.546749][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'.
[  522.548045][ T5987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.853704][T16011] netlink: 'syz.5.2548': attribute type 1 has an invalid length.
[  522.856241][T16011] netlink: 396 bytes leftover after parsing attributes in process `syz.5.2548'.
[  522.867676][T16010] lo speed is unknown, defaulting to 1000
[  522.987439][T16010] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2548'.
[  523.001902][T16010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  523.933428][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'.
[  523.938520][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'.
[  523.943520][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'.
[  524.019711][T16033] program syz.5.2554 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  524.338789][T16048] batman_adv: batadv0: Removing interface: dummy0
[  524.392451][T16048] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  525.553258][T16053] lo speed is unknown, defaulting to 1000
[  526.149495][   T58] usb 42-1: device descriptor read/8, error -110
[  526.252856][T16068] 9pnet_virtio: no channels available for device syz
[  526.363500][T16068] lo speed is unknown, defaulting to 1000
[  527.434434][   T58] usb usb42-port1: attempt power cycle
[  527.482185][T16095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.008660][   T58] usb usb42-port1: unable to enumerate USB device
[  528.193347][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'.
[  528.197418][T16107] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  528.490918][T16119] Unknown status report in ack skb
[  528.700789][T16121] lo speed is unknown, defaulting to 1000
[  529.659010][T16127] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  529.661781][T16127] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  530.257177][T16127] vhci_hcd vhci_hcd.0: Device attached
[  530.393712][T16139] rdma_rxe: rxe_newlink: failed to add wg2
[  530.517801][   T58] usb 48-1: SetAddress Request (6) to port 0
[  530.520371][   T58] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd
[  530.544505][T16130] vhci_hcd: connection closed
[  530.544983][   T13] vhci_hcd vhci_hcd.5: stop threads
[  530.550212][T16145] 9p: Bad value for 'rfdno'
[  530.554422][   T13] vhci_hcd vhci_hcd.5: release socket
[  530.576288][   T13] vhci_hcd vhci_hcd.5: disconnect device
[  530.577047][T16145] SET target dimension over the limit!
[  531.370771][T16160] netlink: 'syz.0.2588': attribute type 1 has an invalid length.
[  531.502181][T16160] 8021q: adding VLAN 0 to HW filter on device bond1
[  532.268064][T16177] lo speed is unknown, defaulting to 1000
[  532.519736][T16181] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[  533.550065][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'.
[  533.830229][T13749] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  533.873597][T16197] binder: BINDER_SET_CONTEXT_MGR already set
[  533.879079][T16197] binder: 16196:16197 ioctl 4018620d 80004a80 returned -16
[  533.917171][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'.
[  533.997723][T13749] usb 10-1: Using ep0 maxpacket: 32
[  534.013527][T13749] usb 10-1: unable to get BOS descriptor or descriptor too short
[  534.025138][T13749] usb 10-1: string descriptor 0 read error: -22
[  534.027991][T13749] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  534.030975][T13749] usb 10-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3
[  534.056315][T13749] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  534.059050][T13749] dw2102: su3000_power_ctrl: 1, initialized 0
[  534.061126][T13749] dvb-usb: bulk message failed: -22 (2/0)
[  534.132763][T13749] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  534.164664][T13749] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  534.167846][   T55] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  534.176014][T13749] usb 10-1: media controller created
[  534.178672][T13749] dvb-usb: bulk message failed: -22 (6/0)
[  534.184576][T13749] dw2102: i2c transfer failed.
[  534.190513][T13749] dvb-usb: bulk message failed: -22 (6/0)
[  534.193236][T13749] dw2102: i2c transfer failed.
[  534.195517][T13749] dvb-usb: bulk message failed: -22 (6/0)
[  534.198303][T13749] dw2102: i2c transfer failed.
[  534.200795][T13749] dvb-usb: bulk message failed: -22 (6/0)
[  534.203447][T13749] dw2102: i2c transfer failed.
[  534.205786][T13749] dvb-usb: bulk message failed: -22 (6/0)
[  534.208698][T13749] dw2102: i2c transfer failed.
[  534.211253][T13749] dvb-usb: bulk message failed: -22 (6/0)
[  534.213903][T13749] dw2102: i2c transfer failed.
[  534.216188][T13749] dvb-usb: MAC address: 02:02:02:02:02:02
[  534.253210][T16189] dvb-usb: bulk message failed: -22 (5/0)
[  534.263370][T16189] dw2102: i2c transfer failed.
[  534.269619][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.276262][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.307970][   T55] usb 5-1: device descriptor read/64, error -71
[  534.340491][T13749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  534.557635][   T55] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  534.572844][T13749] dvb-usb: bulk message failed: -22 (3/0)
[  534.575551][T13749] dw2102: command 0x0e transfer failed.
[  534.578636][T13749] dvb-usb: bulk message failed: -22 (3/0)
[  534.581099][T13749] dw2102: command 0x0e transfer failed.
[  534.708795][   T55] usb 5-1: device descriptor read/64, error -71
[  534.721224][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'.
[  534.807096][T16205] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.820307][   T55] usb usb5-port1: attempt power cycle
[  534.821108][T16205] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.908982][T13749] dvb-usb: bulk message failed: -22 (3/0)
[  534.912074][T13749] dw2102: command 0x0e transfer failed.
[  534.917143][T13749] dvb-usb: bulk message failed: -22 (3/0)
[  534.919720][T13749] dw2102: command 0x0e transfer failed.
[  534.920816][T16205] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.922090][T13749] dvb-usb: bulk message failed: -22 (1/0)
[  534.926049][T16205] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.932247][T13749] dw2102: command 0x51 transfer failed.
[  534.957256][T13749] DVB: Unable to find symbol ds3000_attach()
[  534.959744][T13749] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  534.969920][T16211] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  534.974562][T16211] 
@0Ù: renamed from bond_slave_1 (while UP)
[  535.043512][T16217] 9p: Bad value for 'rfdno'
[  535.047748][T13749] rc_core: IR keymap rc-su3000 not found
[  535.050301][T13749] Registered IR keymap rc-empty
[  535.056065][T13749] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0
[  535.063112][T13749] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input43
[  535.075043][T13749] dvb-usb: schedule remote query interval to 150 msecs.
[  535.082253][T13749] dw2102: su3000_power_ctrl: 0, initialized 1
[  535.089116][T13749] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  535.099266][T13749] usb 10-1: USB disconnect, device number 11
[  535.152113][T16205] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.156544][T16205] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.178013][   T55] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  535.182314][T13749] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  535.215471][T16213] lo speed is unknown, defaulting to 1000
[  535.229504][   T55] usb 5-1: device descriptor read/8, error -71
[  535.308978][T16205] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  535.313203][T16205] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.330904][T16217] wg1: entered promiscuous mode
[  535.335444][T16217] wg1: entered allmulticast mode
[  535.444796][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  535.448399][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.488806][   T55] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  535.511247][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  535.514765][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.518495][   T55] usb 5-1: device descriptor read/8, error -71
[  535.543371][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  535.546835][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.566537][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  535.570134][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.597797][   T58] usb 48-1: device descriptor read/8, error -110
[  535.627892][   T55] usb usb5-port1: unable to enumerate USB device
[  536.099936][   T58] usb usb48-port1: attempt power cycle
[  536.515113][T16229] ptrace attach of ""[16231] was attempted by "/syz-executor exec"[16229]
[  536.554379][   T42] audit: type=1800 audit(2000000009.049:18771): pid=16229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2606" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  536.965484][T16234] lo speed is unknown, defaulting to 1000
[  537.683485][T16253] netlink: 'syz.2.2611': attribute type 5 has an invalid length.
[  537.707609][T16253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2611'.
[  537.720279][T16237] netlink: 'syz.0.2609': attribute type 2 has an invalid length.
[  537.729188][   T58] usb usb48-port1: unable to enumerate USB device
[  537.734337][T16253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2611'.
[  537.743172][T16253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2611'.
[  537.914804][T16237] : entered promiscuous mode
[  538.508474][T16265] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  538.548795][T16276] netlink: 'syz.0.2616': attribute type 5 has an invalid length.
[  538.552209][T16276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2616'.
[  539.100580][T16295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2621'.
[  540.477866][ T5760] Bluetooth: hci1: command 0x0c1a tx timeout
[  541.612174][T16402] IPVS: set_ctl: invalid protocol: 0 1.0.1.0:2816
[  541.620091][T16402] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  541.628083][T16404] loop9: detected capacity change from 0 to 8
[  541.731102][T16404] Dev loop9: unable to read RDB block 8
[  541.750058][T16404]  loop9: unable to read partition table
[  541.757075][T16404] loop9: partition table beyond EOD, truncated
[  541.760527][T16404] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5)
[  541.777633][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  541.783682][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  541.788746][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  541.792988][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  541.805924][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  542.163179][T16422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'.
[  542.457201][T16409] lo speed is unknown, defaulting to 1000
[  542.804697][T16409] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.808869][T16409] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.812410][T16409] bridge_slave_0: entered allmulticast mode
[  542.817004][T16409] bridge_slave_0: entered promiscuous mode
[  542.825075][T16409] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.828682][T16409] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.831738][T16409] bridge_slave_1: entered allmulticast mode
[  542.836004][T16409] bridge_slave_1: entered promiscuous mode
[  542.892659][T16409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.909754][T16409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.942867][T16409] team0: Port device team_slave_0 added
[  542.948946][T16409] team0: Port device team_slave_1 added
[  542.986796][T16409] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.990101][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.001278][T16409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  543.008243][T16409] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.011691][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.023266][T16409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.081650][T16409] hsr_slave_0: entered promiscuous mode
[  543.085493][T16409] hsr_slave_1: entered promiscuous mode
[  543.089446][T16409] debugfs: 'hsr0' already exists in 'hsr'
[  543.092113][T16409] Cannot create hsr debugfs directory
[  543.134723][T16455] binder: 16453:16455 ioctl c4009420 80002240 returned -22
[  543.146643][T16455] binder: 16453:16455 ioctl c4009420 80002e40 returned -22
[  543.299128][T16409] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.302492][T16409] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.413895][T16409] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.423955][T16409] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.523095][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.532463][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.540691][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.544157][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.555209][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.562868][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.570607][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.572012][T16409] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.573700][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.578012][T16409] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.581446][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.590582][   T55] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0
[  543.622716][   T55] hid-generic 0006:0008:0001.0009: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0
[  543.685013][T16409] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.689459][T16409] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.715667][T16482] input: syz1 as /devices/virtual/input/input44
[  543.744605][T16481] netlink: 'syz.4.2668': attribute type 23 has an invalid length.
[  543.908024][ T5760] Bluetooth: hci3: command tx timeout
[  543.911812][T16409] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  543.917161][T16491] netlink: 'syz.0.2669': attribute type 34 has an invalid length.
[  543.918527][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  543.920655][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2669'.
[  543.923310][T16409] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  543.934706][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  543.955292][T16409] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  543.960023][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  543.963005][T16409] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  543.969996][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  544.051534][T16409] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.067827][T16409] 8021q: adding VLAN 0 to HW filter on device team0
[  544.075549][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.077968][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.088174][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.090578][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.322304][T16464] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  544.482085][T16409] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.521009][T16409] veth0_vlan: entered promiscuous mode
[  544.531296][T16409] veth1_vlan: entered promiscuous mode
[  544.565692][T16409] veth0_macvtap: entered promiscuous mode
[  544.572598][T16409] veth1_macvtap: entered promiscuous mode
[  544.588755][T16409] batman_adv: batadv0: Interface activated: batadv_slave_0
[  544.596003][T16409] batman_adv: batadv0: Interface activated: batadv_slave_1
[  544.617048][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.620304][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.626079][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.633752][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.756916][  T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.780667][  T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.820429][  T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.824294][  T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.845365][T16521] netlink: 'syz.0.2675': attribute type 3 has an invalid length.
[  544.846115][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2673'.
[  544.851098][T16521] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2675'.
[  544.934485][T16523] lo speed is unknown, defaulting to 1000
[  545.147619][ T5842] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  545.297972][ T5842] usb 7-1: Using ep0 maxpacket: 8
[  545.304026][ T5842] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  545.310819][ T5842] usb 7-1: config 0 has no interface number 0
[  545.313679][ T5842] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  545.319819][ T5842] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  545.324782][ T5842] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  545.330323][ T5842] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  545.335882][ T5842] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  545.341890][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.354762][ T5842] usb 7-1: config 0 descriptor??
[  545.365551][ T5842] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  545.619920][T16547] lo speed is unknown, defaulting to 1000
[  545.763666][ T5842] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  545.987686][ T5760] Bluetooth: hci3: command tx timeout
[  545.997753][ T5842] usb 5-1: Using ep0 maxpacket: 8
[  546.108572][ T5842] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  546.112542][ T5842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.117385][ T5842] usb 5-1: config 0 has no interface number 0
[  546.255459][T16561] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2686'.
[  546.274462][ T5842] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  546.283614][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.289247][ T5842] usb 5-1: Product: syz
[  546.291336][ T5842] usb 5-1: Manufacturer: syz
[  546.294590][ T5842] usb 5-1: SerialNumber: syz
[  546.435593][ T5842] usb 5-1: config 0 descriptor??
[  546.463536][ T5896] usb 7-1: USB disconnect, device number 42
[  546.485576][ T5896] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  546.542987][ T5842] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22
[  547.032688][ T5842] usb 5-1: USB disconnect, device number 16
[  547.866141][   T42] audit: type=1326 audit(2000000020.369:18772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  547.881797][   T42] audit: type=1326 audit(2000000020.369:18773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  547.910580][   T42] audit: type=1326 audit(2000000020.369:18774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efec code=0x7ffc0000
[  547.944963][   T42] audit: type=1326 audit(2000000020.369:18775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  547.964951][   T42] audit: type=1326 audit(2000000020.369:18776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16607 comm="syz.0.2699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000
[  548.067689][ T5760] Bluetooth: hci3: command tx timeout
[  548.588002][T16630] overlayfs: failed to resolve './file0': -2
[  549.025204][T16640] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  549.031382][T16640] vfat: Unknown parameter 'discardi#'
[  549.360335][ T5799] bridge_slave_1: left allmulticast mode
[  549.362696][ T5799] bridge_slave_1: left promiscuous mode
[  549.373298][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.384306][ T5799] bridge_slave_0: left allmulticast mode
[  549.386930][ T5799] bridge_slave_0: left promiscuous mode
[  549.392829][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.703767][ T5799] bond6 (unregistering): (slave ip6gretap1): Releasing active interface
[  549.812758][ T5799] erspan0 (unregistering): left promiscuous mode
[  549.888844][ T5799] bond7 (unregistering): (slave gretap2): Releasing backup interface
[  549.945727][ T5799] .` (unregistering): (slave bridge0): Releasing backup interface
[  549.985652][ T5799] bond1 (unregistering): (slave .`): Releasing backup interface
[  549.996700][ T5799] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  550.003252][ T5799] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  550.008324][ T5799] .` (unregistering): Released all slaves
[  550.016384][ T5799] bond1 (unregistering): Released all slaves
[  550.028355][ T5799] bond0 (unregistering): Released all slaves
[  550.043961][ T5799] bond2 (unregistering): Released all slaves
[  550.056353][ T5799] bond3 (unregistering): (slave veth3): Releasing active interface
[  550.060971][ T5799] bond3 (unregistering): Released all slaves
[  550.072239][ T5799] bond4 (unregistering): Released all slaves
[  550.085746][ T5799] bond5 (unregistering): Released all slaves
[  550.096448][ T5799] bond6 (unregistering): Released all slaves
[  550.104305][ T5799] bond7 (unregistering): (slave bond8): Releasing backup interface
[  550.106688][ T5799] bond8 (unregistering): left promiscuous mode
[  550.111118][ T5799] bond7 (unregistering): Released all slaves
[  550.119685][ T5799] bond8 (unregistering): Released all slaves
[  550.126796][ T5799] bond9 (unregistering): Released all slaves
[  550.147578][ T5760] Bluetooth: hci3: command tx timeout
[  550.183101][T16663] lo speed is unknown, defaulting to 1000
[  550.478715][ T5799] tipc: Disabling bearer <eth:team0>
[  550.526533][T16674] syz_tun: entered allmulticast mode
[  550.532933][ T5799] tipc: Left network mode
[  550.871488][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2718'.
[  550.967773][T16685] batman_adv: batadv0: Adding interface: macsec1
[  550.970415][T16685] batman_adv: batadv0: The MTU of interface macsec1 is too small (1418) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.980793][T16685] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active
[  550.990974][T16673] syz_tun: left allmulticast mode
[  551.742296][ T5799] dummy0: left promiscuous mode
[  551.804871][ T5799] hsr_slave_0: left promiscuous mode
[  551.826324][ T5799] hsr_slave_1: left promiscuous mode
[  551.982801][ T5799] veth1_macvtap: left promiscuous mode
[  551.987275][ T5799] veth0_macvtap: left promiscuous mode
[  552.021127][ T5799] veth1_vlan: left promiscuous mode
[  552.027143][ T5799] veth0_vlan: left promiscuous mode
[  552.499368][T16706] fuse: Unknown parameter '0$0x0000000000000005'
[  552.501920][T16707] fuse: Unknown parameter '0$0x0000000000000005'
[  552.505378][T16706] fuse: Bad value for 'group_id'
[  552.507401][T16706] fuse: Bad value for 'group_id'
[  552.562848][ T5799] team0 (unregistering): Port device team_slave_1 removed
[  552.576197][ T5799] team0 (unregistering): Port device team_slave_0 removed
[  552.844198][T16720] lo speed is unknown, defaulting to 1000
[  553.276699][T16731] lo speed is unknown, defaulting to 1000
[  553.756571][T16744] input: syz0 as /devices/virtual/input/input45
[  554.859202][T16773] netlink: 'syz.0.2742': attribute type 21 has an invalid length.
[  554.862554][T16773] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2742'.
[  554.866959][T16773] netlink: 'syz.0.2742': attribute type 4 has an invalid length.
[  554.870084][T16771] overlayfs: failed lookup in lower (newroot/206, name='file1', err=-40): overlapping layers
[  554.870406][T16773] netlink: 'syz.0.2742': attribute type 3 has an invalid length.
[  554.878817][T16773] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2742'.
[  555.170629][T16791] xt_hashlimit: invalid rate
[  555.181420][   T42] audit: type=1326 audit(2000000027.679:18777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.190576][   T42] audit: type=1326 audit(2000000027.679:18778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.199637][   T42] audit: type=1326 audit(2000000027.679:18779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.207935][   T42] audit: type=1326 audit(2000000027.679:18780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.216990][   T42] audit: type=1326 audit(2000000027.679:18781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.230186][   T42] audit: type=1326 audit(2000000027.679:18782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.240774][   T42] audit: type=1326 audit(2000000027.679:18783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.252409][   T42] audit: type=1326 audit(2000000027.679:18784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.272833][   T42] audit: type=1326 audit(2000000027.679:18785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.283373][   T42] audit: type=1326 audit(2000000027.679:18786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  555.575666][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  555.579073][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  555.586245][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  555.599828][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  555.735220][T16829] lo speed is unknown, defaulting to 1000
[  556.067879][T16839] overlayfs: failed to clone upperpath
[  556.157928][T16841] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  557.009079][T16880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2767'.
[  557.012857][T16880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2767'.
[  557.096211][T16882] 8021q: adding VLAN 0 to HW filter on device bond3
[  557.171874][T16885] ip6gretap0: entered promiscuous mode
[  557.181107][T16886] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2768'.
[  557.567721][ T6464] usb 7-1: new low-speed USB device number 43 using dummy_hcd
[  557.723535][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2775'.
[  557.727114][T16908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2775'.
[  557.728971][ T6464] usb 7-1: device descriptor read/64, error -71
[  557.739006][T16910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2776'.
[  557.774331][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2775'.
[  557.777772][T16912] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2775'.
[  557.817103][T16914] overlayfs: failed to clone lowerpath
[  557.833687][T16908] ubi: mtd0 is already attached to ubi16
[  557.884403][T16908] binder: 16907:16908 ioctl c0306201 80000680 returned -14
[  557.967667][ T6464] usb 7-1: new low-speed USB device number 44 using dummy_hcd
[  558.107911][ T6464] usb 7-1: device descriptor read/64, error -71
[  558.219659][ T6464] usb usb7-port1: attempt power cycle
[  558.600501][ T6464] usb 7-1: new low-speed USB device number 45 using dummy_hcd
[  558.639826][ T6464] usb 7-1: device descriptor read/8, error -71
[  558.887653][ T6464] usb 7-1: new low-speed USB device number 46 using dummy_hcd
[  558.908365][ T6464] usb 7-1: device descriptor read/8, error -71
[  559.018748][ T6464] usb usb7-port1: unable to enumerate USB device
[  559.024552][T16952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  559.027328][T16952] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  559.030586][T16931] Set syz1 is full, maxelem 65536 reached
[  559.033696][T16952] vhci_hcd vhci_hcd.0: Device attached
[  559.307682][T13749] usb 38-1: SetAddress Request (27) to port 0
[  559.310907][T13749] usb 38-1: new SuperSpeed USB device number 27 using vhci_hcd
[  559.480991][T16968] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2793'.
[  559.562753][T16953] vhci_hcd: connection reset by peer
[  559.570494][   T12] vhci_hcd vhci_hcd.0: stop threads
[  559.572253][   T12] vhci_hcd vhci_hcd.0: release socket
[  559.574067][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  560.509727][T17003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2802'.
[  560.782494][T17007] binder: Binderfs stats mode cannot be changed during a remount
[  560.814870][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.818665][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.822408][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.826093][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.830347][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.834118][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.838047][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.841703][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.845396][T17006] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  560.860555][T16985] lo speed is unknown, defaulting to 1000
[  561.165806][   T65] block nbd1: Receive control failed (result -1)
[  561.280628][   T65] block nbd2: Receive control failed (result -1)
[  561.604473][T17029] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  561.607375][T17029] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  561.613636][T17029] vhci_hcd vhci_hcd.0: Device attached
[  561.664149][T17029] rdma_rxe: rxe_newlink: failed to add wg2
[  561.760703][ T5927] IPVS: starting estimator thread 0...
[  561.795584][T17057] fuse: fd is not a fuse device
[  561.819303][T17052] netlink: 'syz.2.2812': attribute type 10 has an invalid length.
[  561.827270][T17052] dummy0: entered promiscuous mode
[  561.867887][T17055] IPVS: using max 27 ests per chain, 64800 per kthread
[  562.087021][T17042] vhci_hcd: connection closed
[  562.115345][T10488] vhci_hcd vhci_hcd.0: stop threads
[  562.132579][T10488] vhci_hcd vhci_hcd.0: release socket
[  562.151657][T10488] vhci_hcd vhci_hcd.0: disconnect device
[  562.200584][T17067] __nla_validate_parse: 3 callbacks suppressed
[  562.200608][T17067] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2817'.
[  562.675183][T17075] bond4: Unable to set up delay as MII monitoring is disabled
[  562.721046][T17075] bond4 (unregistering): Released all slaves
[  562.961707][  T167] Bluetooth: hci2: Frame reassembly failed (-84)
[  563.250106][T17091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  563.250135][T17091] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  563.251591][T17091] vhci_hcd vhci_hcd.0: Device attached
[  563.413555][T17096] xt_connbytes: Forcing CT accounting to be enabled
[  563.479298][T17101] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.482223][T17101] 8021q: adding VLAN 0 to HW filter on device team0
[  563.491495][T17101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.497769][T16518] usb 41-1: new high-speed USB device number 3 using vhci_hcd
[  563.539086][T17108] fuse: Unknown parameter 'fd0x0000000000000007'
[  563.573968][T17101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  563.585257][T17101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  563.604030][T17101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  563.616483][T17101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  563.797749][T16823] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.800730][T16823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.809311][T16823] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.812057][T16823] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.937941][T17092] vhci_hcd: connection reset by peer
[  563.948231][ T5799] vhci_hcd vhci_hcd.2: stop threads
[  563.950512][ T5799] vhci_hcd vhci_hcd.2: release socket
[  563.954843][ T5799] vhci_hcd vhci_hcd.2: disconnect device
[  564.387652][T13749] usb 38-1: device descriptor read/8, error -110
[  564.746187][T17127] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0)
[  564.798481][T13749] usb usb38-port1: attempt power cycle
[  564.934460][T17129] ebtables: wrong size: *len 168, entries_size 48, replsz 48
[  565.029686][ T5107] Bluetooth: hci2: command 0x1003 tx timeout
[  565.039436][ T5760] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  565.270531][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2834'.
[  565.275913][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2834'.
[  565.288311][T17133] netlink: 'syz.5.2833': attribute type 7 has an invalid length.
[  565.291378][T17141] 9p: Bad value for 'rfdno'
[  565.293739][T17141] 9p: Bad value for 'rfdno'
[  565.374842][T13749] usb usb38-port1: unable to enumerate USB device
[  565.609598][T17150] tmpfs: Group quota block hardlimit too large.
[  565.878928][ T5760] Bluetooth: hci1: unexpected event 0x07 length: 7 < 255
[  565.879021][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2838'.
[  566.204958][T17162] netlink: 'syz.5.2840': attribute type 1 has an invalid length.
[  566.211611][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2842'.
[  566.219882][T17163] net_ratelimit: 26 callbacks suppressed
[  566.219900][T17163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  566.247786][ T6464] lo speed is unknown, defaulting to 1000
[  566.250361][ T6464] syz2: Port: 1 Link ACTIVE
[  566.307814][ T1365] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  566.437622][ T1365] usb 5-1: device descriptor read/64, error -71
[  566.473764][T17175] netlink: 'syz.2.2844': attribute type 21 has an invalid length.
[  566.687620][ T1365] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  566.827820][ T1365] usb 5-1: device descriptor read/64, error -71
[  566.938155][ T1365] usb usb5-port1: attempt power cycle
[  567.050888][T17193] netlink: 'syz.2.2850': attribute type 1 has an invalid length.
[  567.140751][T17196] gretap1: entered promiscuous mode
[  567.287796][ T1365] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  567.308350][ T1365] usb 5-1: device descriptor read/8, error -71
[  567.440391][T17200] lo speed is unknown, defaulting to 1000
[  567.565444][T17204] 9p: Bad value for 'wfdno'
[  567.567886][ T1365] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  567.590207][ T1365] usb 5-1: device descriptor read/8, error -71
[  567.708086][ T1365] usb usb5-port1: unable to enumerate USB device
[  567.732245][T17206] overlayfs: missing 'workdir'
[  567.826263][T17211] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  567.830387][T17211] overlayfs: failed to set xattr on upper
[  567.832929][T17211] overlayfs: ...falling back to redirect_dir=nofollow.
[  567.835663][T17211] overlayfs: ...falling back to index=off.
[  567.839194][T17211] overlayfs: ...falling back to uuid=null.
[  567.951095][T17215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2854'.
[  567.984441][T17216] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  568.480509][T17219] tmpfs: Bad value for 'nr_blocks'
[  568.603229][T17221] lo: entered allmulticast mode
[  568.633074][T17220] lo: left allmulticast mode
[  568.733870][T17228] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  568.736678][T17228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  568.740169][T16518] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  568.743162][T17228] vhci_hcd vhci_hcd.0: Device attached
[  568.752702][T17228] EXT4-fs (sr0): VFS: Can't find ext4 filesystem
[  568.822722][T17242] wg2 speed is unknown, defaulting to 1000
[  568.834479][T17228] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  568.835110][T17242] wg2 speed is unknown, defaulting to 1000
[  568.840143][T17242] wg2 speed is unknown, defaulting to 1000
[  568.851270][T17245] netlink: 'syz.5.2865': attribute type 1 has an invalid length.
[  568.892345][T17245] 8021q: adding VLAN 0 to HW filter on device bond3
[  568.935140][T17245] bond3: (slave gretap1): making interface the new active one
[  568.939614][T17245] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  568.956247][T17245] netlink: 'syz.5.2865': attribute type 10 has an invalid length.
[  568.961336][T17245] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2865'.
[  569.069717][T17250] 9p: Bad value for 'wfdno'
[  569.081170][ T6464] wg2 speed is unknown, defaulting to 1000
[  569.087615][T17242] infiniband syz0: set down
[  569.092910][T17242] infiniband syz0: added wg2
[  569.119125][T17242] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  569.124080][T17242] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  569.129575][T17242] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  569.147228][T17242] RDS/IB: syz0: added
[  569.152250][T17242] smc: adding ib device syz0 with port count 1
[  569.154498][T17242] smc:    ib device syz0 port 1 has no pnetid
[  569.160635][   T58] wg2 speed is unknown, defaulting to 1000
[  569.177602][T17242] wg2 speed is unknown, defaulting to 1000
[  569.337219][T17242] wg2 speed is unknown, defaulting to 1000
[  569.370780][T17237] vhci_hcd: connection closed
[  569.371807][ T5799] vhci_hcd vhci_hcd.2: stop threads
[  569.376452][ T5799] vhci_hcd vhci_hcd.2: release socket
[  569.379454][ T5799] vhci_hcd vhci_hcd.2: disconnect device
[  569.471068][T17242] wg2 speed is unknown, defaulting to 1000
[  569.597281][T17242] wg2 speed is unknown, defaulting to 1000
[  569.690176][T17242] wg2 speed is unknown, defaulting to 1000
[  569.789336][T17273] syzkaller1: entered promiscuous mode
[  569.791184][T17273] syzkaller1: entered allmulticast mode
[  570.001209][T13749] usb usb42-port1: attempt power cycle
[  570.025635][T17286] netlink: 'syz.2.2877': attribute type 10 has an invalid length.
[  570.063160][T17286] team0 (unregistering): Port device team_slave_0 removed
[  570.096706][T17286] team0 (unregistering): Port device team_slave_1 removed
[  570.567641][ T3270] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  570.585973][T13749] usb usb42-port1: unable to enumerate USB device
[  570.717719][ T3270] usb 7-1: Using ep0 maxpacket: 8
[  570.721847][ T3270] usb 7-1: config 1 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  570.725375][ T3270] usb 7-1: config 1 interface 0 altsetting 65 bulk endpoint 0x82 has invalid maxpacket 16
[  570.729057][ T3270] usb 7-1: config 1 interface 0 altsetting 65 bulk endpoint 0x3 has invalid maxpacket 32
[  570.732238][ T3270] usb 7-1: config 1 interface 0 has no altsetting 0
[  570.741090][ T3270] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  570.743931][ T3270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.746489][ T3270] usb 7-1: Product: ꥯ鈩궊殳냿Ṉ�酦ꪢ㠺剞ද鶉㸈〼봢阥隭✕隚➼莠Ⓚ톗㋖�㄰ꢫ꺬举粱╦힭䷘痢좤칒鄅瑶ヮ�斫
[  570.751592][ T3270] usb 7-1: Manufacturer: ш
[  570.753032][ T3270] usb 7-1: SerialNumber: ꒪᧎멘�漎襀⛞懲ई押섥�먵Ǹ⯽턄ꬕ�캆ⱈ飯ዔ첼勺塌☈쎌㰢럥ᛵ樀֚ﰴ꠼໱悃˕饿䶒뛊�燼촵뉯↛囂Ể㌨냆�辥璸Պ㼅ટ쎉︽洧뒘졭�䱭�ﻷљஎ椇�ᜧ괻뜂
[  570.763872][T17304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  570.767767][T17304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  570.998747][ T3270] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  571.008298][ T3270] usb 7-1: USB disconnect, device number 47
[  571.140181][T17320] bond4 (unregistering): Released all slaves
[  572.258708][T17337] x_tables: duplicate underflow at hook 1
[  572.268291][T17337] hub 8-0:1.0: USB hub found
[  572.272383][T17337] hub 8-0:1.0: 1 port detected
[  572.619860][T17372] netlink: 'syz.2.2897': attribute type 1 has an invalid length.
[  572.652659][T17372] 8021q: adding VLAN 0 to HW filter on device bond1
[  572.663327][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2897'.
[  572.832418][T17401] input: syz1 as /devices/virtual/input/input46
[  573.070678][T17413] netlink: 'syz.4.2908': attribute type 1 has an invalid length.
[  573.095577][T17413] 8021q: adding VLAN 0 to HW filter on device bond4
[  573.126810][T17413] bond4: (slave geneve2): making interface the new active one
[  573.137796][ T1365] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  573.142304][T17413] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  573.146070][ T5799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.155949][ T5799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.160243][ T3270] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  573.166712][ T5799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.171389][T17413] overlayfs: failed to clone upperpath
[  573.180133][ T5799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.267644][ T1365] usb 7-1: device descriptor read/64, error -71
[  573.298190][T17424] overlayfs: failed to clone upperpath
[  573.322666][ T3270] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  573.336766][ T3270] usb 10-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.40
[  573.341374][ T3270] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.344797][ T3270] usb 10-1: Product: syz
[  573.346631][ T3270] usb 10-1: Manufacturer: င
[  573.349268][ T3270] usb 10-1: SerialNumber: syz
[  573.353870][ T3270] usb 10-1: rejected 1 configuration due to insufficient available bus power
[  573.362076][ T3270] usb 10-1: no configuration chosen from 1 choice
[  573.517807][ T1365] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  573.657959][ T1365] usb 7-1: device descriptor read/64, error -71
[  573.768112][ T1365] usb usb7-port1: attempt power cycle
[  574.117705][ T1365] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  574.139396][ T1365] usb 7-1: device descriptor read/8, error -71
[  574.387736][ T1365] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  574.408490][ T1365] usb 7-1: device descriptor read/8, error -71
[  574.518005][ T1365] usb usb7-port1: unable to enumerate USB device
[  575.015044][   T42] kauditd_printk_skb: 24 callbacks suppressed
[  575.015059][   T42] audit: type=1326 audit(2000000047.509:18811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.026211][   T42] audit: type=1326 audit(2000000047.509:18812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.037530][   T42] audit: type=1326 audit(2000000047.519:18813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71772eb code=0x7ffc0000
[  575.044129][   T42] audit: type=1326 audit(2000000047.519:18814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.051014][   T42] audit: type=1326 audit(2000000047.519:18815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.057767][   T42] audit: type=1326 audit(2000000047.519:18816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.064396][   T42] audit: type=1326 audit(2000000047.519:18817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.071172][   T42] audit: type=1326 audit(2000000047.519:18818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.078128][   T42] audit: type=1326 audit(2000000047.519:18819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.084722][   T42] audit: type=1326 audit(2000000047.519:18820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17436 comm="syz.4.2915" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000
[  575.946067][ T3270] usb 10-1: USB disconnect, device number 12
[  576.063982][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'.
[  576.385195][T17474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'.
[  576.449505][T17474] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  576.453924][T17474] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 45584 - 0
[  576.788017][T17474] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  576.791617][T17474] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 45584 - 0
[  576.997033][T17474] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  577.001755][T17474] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 45584 - 0
[  577.187062][T17474] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  577.214160][T17474] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 45584 - 0
[  577.526131][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  577.543657][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 45584 - 0
[  577.569221][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  577.577869][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 45584 - 0
[  577.634812][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  577.643588][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 45584 - 0
[  577.715293][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  577.719018][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 45584 - 0
[  578.077841][   T58] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  578.217846][   T58] usb 5-1: device descriptor read/64, error -71
[  578.477760][   T58] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  578.617666][   T58] usb 5-1: device descriptor read/64, error -71
[  578.800373][   T58] usb usb5-port1: attempt power cycle
[  579.726341][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2941'.
[  579.757758][   T58] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  579.772136][T17530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2941'.
[  579.840554][   T58] usb 5-1: device descriptor read/8, error -71
[  579.906661][T17533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2940'.
[  580.068659][ T5107] Bluetooth: hci3: command 0x0405 tx timeout
[  580.108010][   T58] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  580.170940][   T58] usb 5-1: device descriptor read/8, error -71
[  580.290605][   T58] usb usb5-port1: unable to enumerate USB device
[  580.885957][T17546] tmpfs: Bad value for 'mpol'
[  581.365098][T17557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  581.586537][T17558] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2948'.
[  581.594687][T17563] netlink: 'syz.4.2950': attribute type 2 has an invalid length.
[  581.751505][T17560] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  581.828986][T17575] netlink: 'syz.0.2952': attribute type 1 has an invalid length.
[  582.613633][T17591] overlayfs: failed to clone upperpath
[  582.951363][T17607] netlink: 'syz.0.2961': attribute type 1 has an invalid length.
[  583.016899][T17607] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  583.126883][T17619] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2964'.
[  583.216537][ T1041] (NULL device *): [UEAGLE-ATM] firmware is not available
[  583.219858][ T1041] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI
[  583.223671][T17623] overlayfs: missing 'workdir'
[  583.224882][ T1041] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  583.224906][ T1041] CPU: 0 UID: 0 PID: 1041 Comm: kworker/0:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  583.234837][ T1041] Tainted: [L]=SOFTLOCKUP
[  583.236650][ T1041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  583.240798][ T1041] Workqueue: events request_firmware_work_func
[  583.243352][ T1041] RIP: 0010:kasan_byte_accessible+0x15/0x30
[  583.245747][ T1041] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 ce d0 41 09 66 66 2e 0f 1f 84 00 00 00
[  583.253485][ T1041] RSP: 0018:ffffc9000670f9f0 EFLAGS: 00010082
[  583.255750][ T1041] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  583.258951][ T1041] RDX: 0000000000000000 RSI: ffffffff8bba344a RDI: dffffc0000000004
[  583.262096][ T1041] RBP: 0000000000000020 R08: 0000000000000001 R09: 0000000000000000
[  583.265249][ T1041] R10: ffffffff91226f97 R11: 0000000000000000 R12: ffffffff8bba344a
[  583.268554][ T1041] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[  583.272159][ T1041] FS:  0000000000000000(0000) GS:ffff888096bed000(0000) knlGS:0000000000000000
[  583.275916][ T1041] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  583.278575][ T1041] CR2: 00000000f7198950 CR3: 000000006b4bb000 CR4: 0000000000352ef0
[  583.281906][ T1041] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084
[  583.284980][ T1041] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  583.287540][ T1041] Call Trace:
[  583.288667][ T1041]  <TASK>
[  583.289943][ T1041]  __kasan_check_byte+0x13/0x50
[  583.292035][ T1041]  lock_acquire+0x132/0x370
[  583.293952][ T1041]  ? _raw_spin_lock_irqsave+0x52/0x60
[  583.296262][ T1041]  _raw_spin_lock_irqsave+0x3a/0x60
[  583.298500][ T1041]  ? complete+0x1d/0x200
[  583.300328][ T1041]  complete+0x1d/0x200
[  583.302112][ T1041]  uea_upload_pre_firmware.cold+0x2e/0xfa
[  583.304532][ T1041]  ? __pfx_uea_upload_pre_firmware+0x10/0x10
[  583.307144][ T1041]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  583.309658][ T1041]  ? __pfx_uea_upload_pre_firmware+0x10/0x10
[  583.312179][ T1041]  request_firmware_work_func+0x13f/0x440
[  583.314555][ T1041]  ? __pfx_request_firmware_work_func+0x10/0x10
[  583.317277][ T1041]  ? rcu_is_watching+0x12/0xc0
[  583.319341][ T1041]  process_one_work+0xa23/0x1940
[  583.321495][ T1041]  ? __pfx_process_one_work+0x10/0x10
[  583.323775][ T1041]  ? __pfx_request_firmware_work_func+0x10/0x10
[  583.326377][ T1041]  worker_thread+0x5ef/0xe50
[  583.328348][ T1041]  ? __pfx_worker_thread+0x10/0x10
[  583.330564][ T1041]  ? kthread+0x13a/0x450
[  583.332368][ T1041]  ? __pfx_worker_thread+0x10/0x10
[  583.334211][ T1041]  kthread+0x370/0x450
[  583.335516][ T1041]  ? __pfx_kthread+0x10/0x10
[  583.337105][ T1041]  ret_from_fork+0x72b/0xd50
[  583.338923][ T1041]  ? __pfx_ret_from_fork+0x10/0x10
[  583.341124][ T1041]  ? __switch_to+0x800/0x10f0
[  583.343009][ T1041]  ? __pfx_kthread+0x10/0x10
[  583.344910][ T1041]  ret_from_fork_asm+0x1a/0x30
[  583.346988][ T1041]  </TASK>
[  583.348335][ T1041] Modules linked in:
[  583.349896][ T1041] ---[ end trace 0000000000000000 ]---
[  583.351973][ T1041] RIP: 0010:kasan_byte_accessible+0x15/0x30
[  583.354293][ T1041] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 ce d0 41 09 66 66 2e 0f 1f 84 00 00 00
[  583.362332][ T1041] RSP: 0018:ffffc9000670f9f0 EFLAGS: 00010082
[  583.364937][ T1041] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  583.368305][ T1041] RDX: 0000000000000000 RSI: ffffffff8bba344a RDI: dffffc0000000004
[  583.371638][ T1041] RBP: 0000000000000020 R08: 0000000000000001 R09: 0000000000000000
[  583.374973][ T1041] R10: ffffffff91226f97 R11: 0000000000000000 R12: ffffffff8bba344a
[  583.378332][ T1041] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[  583.381677][ T1041] FS:  0000000000000000(0000) GS:ffff888096bed000(0000) knlGS:0000000000000000
[  583.385464][ T1041] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  583.388347][ T1041] CR2: 00000000f7198950 CR3: 000000006b4bb000 CR4: 0000000000352ef0
[  583.391754][ T1041] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084
[  583.395159][ T1041] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  583.398605][ T1041] Kernel panic - not syncing: Fatal exception
[  583.402115][ T1041] Kernel Offset: disabled
[  583.403995][ T1041] Rebooting in 86400 seconds..