last executing test programs:

19m0.415738312s ago: executing program 0 (id=553):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0x1a, r0, 0xba, 0x0)
sched_setscheduler(r0, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[])
fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)

18m58.991525131s ago: executing program 0 (id=559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
io_uring_setup(0x1abf, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000010301010000000000000000020000000c0002"], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x804)

18m58.329798087s ago: executing program 0 (id=562):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x84}}, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000340), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x8a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00')
read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020)
preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0)
read$FUSE(r4, &(0x7f0000004400)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d)
open$dir(&(0x7f0000000000)='./file1\x00', 0x80, 0x1c9)
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f00000001c0))

18m57.342551361s ago: executing program 2 (id=564):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@bridge_getlink={0x20, 0x12, 0x1, 0x20, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8000, 0x8400}}, 0x20}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000006700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000001008000300000039300200fcffffff18000000c5ff01060000000005000000105ee10e6de20000a78b30001000000018260000", @ANYRES32=r2, @ANYBLOB="00000000040000008520000004000000bf91000000000000b70200000000000085002e306da1ceed0fb5131024267fd7132a000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fchdir(0xffffffffffffffff)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51})
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100))
lseek(0xffffffffffffffff, 0x8000000000000001, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x63)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3})
syz_emit_ethernet(0x42, 0x0, 0x0)

18m56.597242616s ago: executing program 2 (id=566):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000480)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
io_setup(0x2, &(0x7f0000000000)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x0, 0x0, 0x7}])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2a0, 0x178, 0x178, 0x2a0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x62666fe4d74687b2, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='thermal_power_allocator\x00'}, 0x18)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
pipe(&(0x7f0000000080))

18m55.402927735s ago: executing program 2 (id=568):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xd2ec0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fallocate(0xffffffffffffffff, 0xa, 0x44, 0x3e8a)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r3 = fanotify_init(0xf00, 0x1)
fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0)
fallocate(r1, 0x0, 0x1000000, 0x3)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0)
socket$inet6(0xa, 0x3, 0x3f)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)

18m54.954678661s ago: executing program 0 (id=569):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x4000004, 0x5d031, 0xffffffffffffffff, 0x0)
gettid()
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000000100000007"], 0x1010fe)
mount(0x0, 0x0, &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e)

18m54.080606279s ago: executing program 0 (id=573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
io_uring_setup(0x1abf, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000010301010000000000000000020000000c0002"], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x804)

18m54.07959673s ago: executing program 2 (id=574):
pipe(&(0x7f0000000d00)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)
ioctl$FICLONE(r0, 0x40049409, r0)
splice(r0, 0x0, r2, 0x0, 0x714f, 0x0)

18m53.068555382s ago: executing program 0 (id=577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0xfffffffc, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d, 0x65d, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x42)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)

18m52.459758227s ago: executing program 2 (id=578):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x100000001, 0xf, 0x7fffffffffffffff, 0x25, 0xfffffffffffffffb, 0x5, 0x7, 0x100000001, 0x3, 0x1, 0x9, 0xfffffffffffffff7, 0x7fffffff, 0x8000000000000000, 0x3ff], 0xeeee8000, 0x344251})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000006000040"])

18m51.871869351s ago: executing program 2 (id=581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x3, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x613)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x3, 0x9, 0x4, 0x4000, 0x800, {0x77359400}, {0x6, 0x0, 0x2, 0x7, 0x4, 0x8, "2264fa66"}, 0x4, 0x2, {&(0x7f0000000200)=[{0x4a74, 0x6, {0x0}, 0x100}, {0x5, 0xbc, {0x0}, 0x5}]}, 0x28})
read$FUSE(0xffffffffffffffff, &(0x7f0000002340)={0x2020}, 0xffaa)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40)

18m34.080689598s ago: executing program 32 (id=577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0xfffffffc, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d, 0x65d, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_open_pts(0xffffffffffffffff, 0x42)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)

18m33.907060983s ago: executing program 33 (id=581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x3, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x613)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x3, 0x9, 0x4, 0x4000, 0x800, {0x77359400}, {0x6, 0x0, 0x2, 0x7, 0x4, 0x8, "2264fa66"}, 0x4, 0x2, {&(0x7f0000000200)=[{0x4a74, 0x6, {0x0}, 0x100}, {0x5, 0xbc, {0x0}, 0x5}]}, 0x28})
read$FUSE(0xffffffffffffffff, &(0x7f0000002340)={0x2020}, 0xffaa)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40)

3m57.771431268s ago: executing program 3 (id=2510):
socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0))
r1 = timerfd_create(0x8, 0x80000)
timerfd_settime(r1, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
readv(r1, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6000}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

3m57.308884464s ago: executing program 3 (id=2513):
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f00000003c0)=""/189)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x200000)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x6}}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}})

3m56.51717484s ago: executing program 3 (id=2516):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x9, &(0x7f0000000080)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf01}, 0x94)

3m55.382935042s ago: executing program 3 (id=2517):
socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x3, 0x6)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)}}, 0xee)

3m53.361749608s ago: executing program 3 (id=2521):
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2a, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0xecf86c37d53049cc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$kcm(0xa, 0x2, 0x3a)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)

3m51.741446974s ago: executing program 3 (id=2525):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000000), 0x0)

3m36.283211169s ago: executing program 34 (id=2525):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
getsockopt$sock_int(r5, 0x1, 0x13, &(0x7f0000000000), 0x0)

18.544018327s ago: executing program 4 (id=2981):
socket$nl_route(0x10, 0x3, 0x0)
syz_usbip_server_init(0x5)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x0, 0x80000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
cachestat(r3, &(0x7f0000000040), &(0x7f0000000080), 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfffffffffffffffe, 0x29c042)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r6, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0)

14.310384561s ago: executing program 4 (id=2993):
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)

13.307924259s ago: executing program 4 (id=2994):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40)

12.743329944s ago: executing program 7 (id=2997):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
sched_getattr(0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r3, 0x0, 0x400000002000000, 0x2)

12.160603382s ago: executing program 4 (id=2998):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800)
io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x1c780, 0x44)
pread64(0xffffffffffffffff, &(0x7f0000000640)=""/237, 0xed, 0x4eb)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 'id1\x00'})
dup2(r0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

10.996636107s ago: executing program 7 (id=3001):
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r0}, 0x1e)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x3, 0x0, 0x2, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000440)=0x8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x0, 0x26, 0x0, 0x0, 0xffffffff}, 0x28)
writev(r3, &(0x7f0000000840)=[{0x0}], 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x14)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f00", 0x59)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0xffffffffffffffff)
r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r6)
socket$netlink(0x10, 0x3, 0x15)

10.640606038s ago: executing program 7 (id=3002):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x4000004, 0x5d031, 0xffffffffffffffff, 0x0)
gettid()
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x3, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x19, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x9, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0x2, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000000100000007"], 0x1010fe)
mount(0x0, 0x0, &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x455, 0x8000003, 0xffffffffffffffff, 0x0)

10.567202501s ago: executing program 1 (id=3003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x1bdc, 0x0, 0x1, 0x7d, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1bbc, 0xb9, 0x0, 0x1, [@beacon_params, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x299, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7ff0}, @broadcast, @device_a, @random="d9c7a6da523b", {0x7, 0x9}}, 0x3, @random=0x1, 0x2000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0x2, 0x8, 0xfffd, 0x4}}, @void, @val={0x5, 0x6, {0x4, 0x64, 0x40, "0042cd"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x7, 0xb, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x7}}, @void, [{0xdd, 0x81, "329cdf1f677c5292d6120061f9022754f493bbd5a6407e862b6f9ccb5ee5abd436a06021de9b896a5888d96ba3255599153a98fcb2e4f530f292c2daa81e3463920082758e546d48d58d4870ec4cec2c2d6e898ee2e989d3e5aa6587e42dc2c0fc44f0ceb105aaa2ba37774d585cfd18a4bf30b532d05049769eccb177a8167644"}, {0xdd, 0x6, "3d49adcd200d"}, {0xdd, 0x12, "e9dc134c1340c276d5f0e94555cca1366074"}, {0xdd, 0x28, "b5c2f3e647161d8bcc8e0633ab2dd51fe6618447a349d98f50c9070c90175d07f29a1bc9900678b6"}, {0xdd, 0x65, "dcd02d4b97cc9904e26bc416c48bac6e9368d8a6c02bc0bcfc851f5342187075e3780656be6b1a40749c1acf0d38a5a256fc400f77a08d42362bcd0190e978b7f8079d0403993686f4457a37f42cfcbadb26876625f0741ce4c5b37391080b6f56432ce2fc"}, {0xdd, 0xdc, "3c79b939fdff4265af2d97cb6e9a1fef8e6fbee34e832fce524f8149381ce950b18bef2281c9cfe939a6485d3927ac2b455c29764f97fa19247b7ffd1272f1f6e32e275273721527eb3fd576aa1dab37c512b97868ad5317e4afbb3daffd2c941350372b9e464ef27b7797efa11713f674f50bdefa275ddd9c876b09d5bd811e7dec6a9c6ec8ab7948f6956138e8c84fb8e6683191bdb2237c1498c8c517bfbea8161acaf0fa3be3bb24a02c89361d377fecae624d97f0bbf298fab59157cee8420f54a74c429d50572d28384aea41f98b0d1f0a21605a07f3ff6af3"}, {0xdd, 0x16, "6487ef44901439ff7557527e71da0c18bd28207b107e"}]}}, @NL80211_ATTR_IE={0x58, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0x1b}, @chsw_timing={0x68, 0x4, {0xe5a1, 0x57}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x15, @val="9acf2831ebcd243011e6a8f1024ea4b6"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6f, 0x0, @device_b, 0x4e11, @value=@device_b, 0x3, 0xb5, @device_b, 0xfffffffc}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x1}}]}, @NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x1b, 0x1}, {0xc}, {0x5}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x3c, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x36, @device_b, 0xfffffffc, @value=@device_b, 0x3, 0x5, @device_b, 0x9}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x3, 0x0, {0x3, 0x9, 0x0, 0x3fe, 0x0, 0x0, 0x1}, 0x6, 0x4, 0xb4}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x56, 0x7f, [@random_vendor={0xdd, 0x26, "f1784e05e96abebe1de18145a531010fd76d6dc9f2bbdde9da6a4313e864e83d96bc8ddddfa3"}, @dsss={0x3, 0x1, 0x8c}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xff, @device_a, 0x400, @value, 0x2, 0x1, @device_a, 0x10000}}]}, @NL80211_ATTR_PROBE_RESP={0x3e1, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1074, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xfc4, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xaa, 0x3, "2d21eabefcd779e94099b1b55d00d0c4dcb2d4ba5adbf47efe49392904f93e83ec3eb374dd328ff62d6f2202d1ed988661e0866ca84259ab027c855314b8bc5f7cc21792adaad9bf282e2940956b301b73e134cd339f22d8875e00123c42c2bb7d995a08262274473f982c97497e9063e4421587a0a5d8eb1c48e479603c1124bda8e18a1452ad2b452564b528cfd794e53c117d539ed8c3e5d485373bea741d852054327a02"}]}, @NL80211_ATTR_BEACON_HEAD={0x34a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @random="b25972e0d06a", {0x5, 0x8}}, 0x7, @random=0x2, 0x8000, @void, @val={0x1, 0x4, [{0x60, 0x1}, {0xc}, {0x60, 0x1}, {0x16, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x45}, @val={0x5, 0x88, {0x9, 0x99, 0x2, "c1e0b04574b62f21ee93832cf8322f0b23a5f7c13945e70e7665ed72822ae7eb95bc81907ae786c5fc1657a24dd354b72d4cd28265e96cf629b028a69ee236a295147004f138466c5064fb03bc477262078dfc26e7f1f7c49344d1e341d050ea2406f84cc51c08a499ccb63f09787569db063b3911b07851f624bd4b3ba99f82cec6820df3"}}, @val={0x25, 0x3, {0x1, 0xb4, 0xfd}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x1c, "9ed626babf77cbd2f3e100a1f262c42b55de8ee5652c9fbbffe45323"}, {0xdd, 0x3b, "0d95df8e466e332165b0483831135440b3ac74ead7fed0c735cdb91eb70696b97d97cf928aee986d49bd36f2ccdfbde4c027c40a52d538448fb6bd"}, {0xdd, 0x81, "4e0f16a2d083faabc847903bea56dc05c3455080a74711d7a46b00465f9879622399d32a778b7abc04769adcad3391f16fcde94f177503d1dfc9a48ed391cbb6edc16e1279ad006c5e053ac680653ee02cf7cdc87b4b3a31e6746144603325c0918e505494ba39036610dc09ae990f4b11af756eeb5cfb3b4f76ccdb171c951081"}, {0xdd, 0xa8, "a5425006ba3c4fb3d21ae53cd1d3ab4ba72afc88e04706b5c1a61cf2ad62c35ec9ff0fa2d232013516118f4607e5e713095082285634c8d42ccbd29cc8876407cd15ac8697cce0638a63203512dea1024e4d313c897634e78b14f6c2fb2cc9a7fe832e9eb1c4112828c984b1915eb6da5caa4da2ffcef80de96b7bd7362cb0bd31f35515db40e9d37d397db09df1de8b1350dc06f0c5b96aa4fee8bf0bc9e2934976e5b1008b35b6"}, {0xdd, 0xf4, "2a89078b2967d1b43b9cb4bb0e92dd558085f3f9e28146802676d68bddd4bb9f411bda33f03c60989528e096b5ae072a3af7839a1a9ccf03677db8f7c72ecc2a4f71ba35ee36ca5cce17d615cd42f50660b00cb331b55dbf02c84b9cb3cc0ee02854538ddf78f52d740cb38815cfdbbf7f098812b4c31d93d78f1c8017653af812166aadfe076981dd695440f56c7606f6d7fc7007fd20e35114a63692bd110757d6ba03d8813feaabc4cd4c5c70044f1f5b264ae18ab9a858ee0cbdd8b9b8ec2a2dd7fe51feb5bfcd75d87ed09ff49c77939200a83c20d6a3818eb45d3a89267bbc894f8bc14b6514098c71da13e2e110a6aa86"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x7, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x2, 0x1, 0x7ff, 0x0, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x4, 0x2, 0x5, 0x6, 0x7fff, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x5, 0xcc]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0xfff, 0x7, 0xa, 0x9, 0x5, 0x4, 0x1000, 0x6, 0x6, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x9, 0x9]}]}, @chandef_params]}, 0x1bdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2)
fcntl$addseals(r4, 0x409, 0x8)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

9.170717298s ago: executing program 1 (id=3004):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000})

9.148986564s ago: executing program 7 (id=3005):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010000, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x29f, 0x200, 0x0, 0x0}, {0x4, 0x6000, 0x0, 0x0}], 0x2})

8.893961119s ago: executing program 1 (id=3006):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0})

8.182276086s ago: executing program 1 (id=3007):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/196, 0xc4}], 0x1)
shutdown(r5, 0x0)

6.256354765s ago: executing program 5 (id=3010):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="f81da85b6eb73d7efae6dc5fedb3bdc4321d31f81d5fb67acf37aca1dae3ac9912892ee476427a4bbd411e4c0036bababb0e6be02c4eb7e0a3f8ab12fea481114fe0205162e00d1e3912292836c4ccdf73852960582592c8c027869bcd79550fa18ecd713844cebe898000"/117, 0x75, 0xfffffffffffffffe)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000340)={0xa000001c})

6.097724814s ago: executing program 4 (id=3011):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x1800848, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc0e776df92a744de0460c42690f2f2770749d8c7824b149b2ea7af7357f19d85a21309b0b67191b00fd99ba8e60c9aa77f07a8d682ead5a4966f93839c7feefe634d", @ANYRESHEX=r3, @ANYRESHEX])
r4 = msgget$private(0x0, 0x790)
msgsnd(r4, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ff"], 0x8, 0x0)

6.007589457s ago: executing program 1 (id=3012):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RELDISP(r0, 0x5605)
syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f00000045c0)='./file0\x00', 0x6000, 0x0, &(0x7f0000004600))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x90}}, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

5.203862425s ago: executing program 5 (id=3013):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1e)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000240)={0x18, 0x2, {0x1}}, 0x1e)

5.16146341s ago: executing program 7 (id=3014):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
timer_create(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r2, &(0x7f0000000000)={0x200, 0x2d, 0x9, 0x3a, 0x10, 0x2c}, 0x48)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2404c805)
write$rfkill(r0, &(0x7f0000000080)={0xfd, 0x0, 0x3, 0x1}, 0x8)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f41f00660000007f00000001"], 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r4}, 0x38)

4.71506765s ago: executing program 6 (id=3015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x1bdc, 0x0, 0x1, 0x7d, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @chandef_params, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1bbc, 0xb9, 0x0, 0x1, [@beacon_params, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x299, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7ff0}, @broadcast, @device_a, @random="d9c7a6da523b", {0x7, 0x9}}, 0x3, @random=0x1, 0x2000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0x2, 0x8, 0xfffd, 0x4}}, @void, @val={0x5, 0x6, {0x4, 0x64, 0x40, "0042cd"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x7, 0xb, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x7}}, @void, [{0xdd, 0x81, "329cdf1f677c5292d6120061f9022754f493bbd5a6407e862b6f9ccb5ee5abd436a06021de9b896a5888d96ba3255599153a98fcb2e4f530f292c2daa81e3463920082758e546d48d58d4870ec4cec2c2d6e898ee2e989d3e5aa6587e42dc2c0fc44f0ceb105aaa2ba37774d585cfd18a4bf30b532d05049769eccb177a8167644"}, {0xdd, 0x6, "3d49adcd200d"}, {0xdd, 0x12, "e9dc134c1340c276d5f0e94555cca1366074"}, {0xdd, 0x28, "b5c2f3e647161d8bcc8e0633ab2dd51fe6618447a349d98f50c9070c90175d07f29a1bc9900678b6"}, {0xdd, 0x65, "dcd02d4b97cc9904e26bc416c48bac6e9368d8a6c02bc0bcfc851f5342187075e3780656be6b1a40749c1acf0d38a5a256fc400f77a08d42362bcd0190e978b7f8079d0403993686f4457a37f42cfcbadb26876625f0741ce4c5b37391080b6f56432ce2fc"}, {0xdd, 0xdc, "3c79b939fdff4265af2d97cb6e9a1fef8e6fbee34e832fce524f8149381ce950b18bef2281c9cfe939a6485d3927ac2b455c29764f97fa19247b7ffd1272f1f6e32e275273721527eb3fd576aa1dab37c512b97868ad5317e4afbb3daffd2c941350372b9e464ef27b7797efa11713f674f50bdefa275ddd9c876b09d5bd811e7dec6a9c6ec8ab7948f6956138e8c84fb8e6683191bdb2237c1498c8c517bfbea8161acaf0fa3be3bb24a02c89361d377fecae624d97f0bbf298fab59157cee8420f54a74c429d50572d28384aea41f98b0d1f0a21605a07f3ff6af3"}, {0xdd, 0x16, "6487ef44901439ff7557527e71da0c18bd28207b107e"}]}}, @NL80211_ATTR_IE={0x58, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0x1b}, @chsw_timing={0x68, 0x4, {0xe5a1, 0x57}}, @peer_mgmt={0x75, 0x16, {0x1, 0x2, @void, @val=0x15, @val="9acf2831ebcd243011e6a8f1024ea4b6"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x6f, 0x0, @device_b, 0x4e11, @value=@device_b, 0x3, 0xb5, @device_b, 0xfffffffc}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x1}}]}, @NL80211_ATTR_IE={0x63, 0x2a, [@supported_rates={0x1, 0x3, [{0x1b, 0x1}, {0xc}, {0x5}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x3c, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x36, @device_b, 0xfffffffc, @value=@device_b, 0x3, 0x5, @device_b, 0x9}}, @ht={0x2d, 0x1a, {0x10, 0x3, 0x3, 0x0, {0x3, 0x9, 0x0, 0x3fe, 0x0, 0x0, 0x1}, 0x6, 0x4, 0xb4}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x56, 0x7f, [@random_vendor={0xdd, 0x26, "f1784e05e96abebe1de18145a531010fd76d6dc9f2bbdde9da6a4313e864e83d96bc8ddddfa3"}, @dsss={0x3, 0x1, 0x8c}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xff, @device_a, 0x400, @value, 0x2, 0x1, @device_a, 0x10000}}]}, @NL80211_ATTR_PROBE_RESP={0x3e1, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1074, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xfc4, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xaa, 0x3, "2d21eabefcd779e94099b1b55d00d0c4dcb2d4ba5adbf47efe49392904f93e83ec3eb374dd328ff62d6f2202d1ed988661e0866ca84259ab027c855314b8bc5f7cc21792adaad9bf282e2940956b301b73e134cd339f22d8875e00123c42c2bb7d995a08262274473f982c97497e9063e4421587a0a5d8eb1c48e479603c1124bda8e18a1452ad2b452564b528cfd794e53c117d539ed8c3e5d485373bea741d852054327a02"}]}, @NL80211_ATTR_BEACON_HEAD={0x34a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @broadcast, @device_a, @random="b25972e0d06a", {0x5, 0x8}}, 0x7, @random=0x2, 0x8000, @void, @val={0x1, 0x4, [{0x60, 0x1}, {0xc}, {0x60, 0x1}, {0x16, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x45}, @val={0x5, 0x88, {0x9, 0x99, 0x2, "c1e0b04574b62f21ee93832cf8322f0b23a5f7c13945e70e7665ed72822ae7eb95bc81907ae786c5fc1657a24dd354b72d4cd28265e96cf629b028a69ee236a295147004f138466c5064fb03bc477262078dfc26e7f1f7c49344d1e341d050ea2406f84cc51c08a499ccb63f09787569db063b3911b07851f624bd4b3ba99f82cec6820df3"}}, @val={0x25, 0x3, {0x1, 0xb4, 0xfd}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x1c, "9ed626babf77cbd2f3e100a1f262c42b55de8ee5652c9fbbffe45323"}, {0xdd, 0x3b, "0d95df8e466e332165b0483831135440b3ac74ead7fed0c735cdb91eb70696b97d97cf928aee986d49bd36f2ccdfbde4c027c40a52d538448fb6bd"}, {0xdd, 0x81, "4e0f16a2d083faabc847903bea56dc05c3455080a74711d7a46b00465f9879622399d32a778b7abc04769adcad3391f16fcde94f177503d1dfc9a48ed391cbb6edc16e1279ad006c5e053ac680653ee02cf7cdc87b4b3a31e6746144603325c0918e505494ba39036610dc09ae990f4b11af756eeb5cfb3b4f76ccdb171c951081"}, {0xdd, 0xa8, "a5425006ba3c4fb3d21ae53cd1d3ab4ba72afc88e04706b5c1a61cf2ad62c35ec9ff0fa2d232013516118f4607e5e713095082285634c8d42ccbd29cc8876407cd15ac8697cce0638a63203512dea1024e4d313c897634e78b14f6c2fb2cc9a7fe832e9eb1c4112828c984b1915eb6da5caa4da2ffcef80de96b7bd7362cb0bd31f35515db40e9d37d397db09df1de8b1350dc06f0c5b96aa4fee8bf0bc9e2934976e5b1008b35b6"}, {0xdd, 0xf4, "2a89078b2967d1b43b9cb4bb0e92dd558085f3f9e28146802676d68bddd4bb9f411bda33f03c60989528e096b5ae072a3af7839a1a9ccf03677db8f7c72ecc2a4f71ba35ee36ca5cce17d615cd42f50660b00cb331b55dbf02c84b9cb3cc0ee02854538ddf78f52d740cb38815cfdbbf7f098812b4c31d93d78f1c8017653af812166aadfe076981dd695440f56c7606f6d7fc7007fd20e35114a63692bd110757d6ba03d8813feaabc4cd4c5c70044f1f5b264ae18ab9a858ee0cbdd8b9b8ec2a2dd7fe51feb5bfcd75d87ed09ff49c77939200a83c20d6a3818eb45d3a89267bbc894f8bc14b6514098c71da13e2e110a6aa86"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x0, 0x7, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x2, 0x1, 0x7ff, 0x0, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x4, 0x2, 0x5, 0x6, 0x7fff, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x5, 0xcc]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0xfff, 0x7, 0xa, 0x9, 0x5, 0x4, 0x1000, 0x6, 0x6, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x9, 0x9]}]}, @chandef_params]}, 0x1bdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xa6l\a\xb0\xf5\xa9^a\xf0h\x16\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xb4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\x00\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1UAA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97cy\xef\xbc\x1a\xbf\xc4\xdd\xe2\x9eBk\x1d\x8eg>\x87\x0e:\x9f\x88\xc0\x9ay\xffQ\xd6\xaf\xf5\xc1\xf3{\x91\xfc\x02t\'H \x97', 0x2)
fcntl$addseals(r4, 0x409, 0x8)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

4.651185078s ago: executing program 5 (id=3016):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x4000004, 0x5d031, 0xffffffffffffffff, 0x0)
gettid()
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x3, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x19, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x9, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0x2, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000000100000007"], 0x1010fe)
mount(0x0, 0x0, &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x455, 0x8000003, 0xffffffffffffffff, 0x0)

3.615710174s ago: executing program 6 (id=3017):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500), 0x4)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100)
syz_open_dev$vcsu(0x0, 0x1, 0x200)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)

3.25313691s ago: executing program 5 (id=3018):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x7}, 0x8)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r4}, &(0x7f0000000200)=0x8)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
setrlimit(0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300), &(0x7f0000000040), 0x0, r8, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300})

2.515595048s ago: executing program 6 (id=3019):
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)

2.203431753s ago: executing program 5 (id=3020):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000180)=0xfedc)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1e)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000240)={0x18, 0x2, {0x1}}, 0x1e)

1.449860489s ago: executing program 6 (id=3021):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0)
ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r0, 0x4, 0x0, &(0x7f00000001c0))
epoll_create1(0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x1800848, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc0e776df92a744de0460c42690f2f2770749d8c7824b149b2ea7af7357f19d85a21309b0b67191b00fd99ba8e60c9aa77f07a8d682ead5a4966f93839c7feefe634d", @ANYRESHEX=r5, @ANYRESHEX, @ANYBLOB=',cache=fscache,msize=0x00000000000007ff,fscache,cache=mmap,fscache,cache=none,cache=mmap,access=user,version=9p2000.u,\x00'])
r8 = msgget$private(0x0, 0x790)
msgsnd(r8, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0)
msgsnd(r8, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0)
msgsnd(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ff"], 0x8, 0x0)
msgrcv(r8, 0x0, 0x0, 0x0, 0x1000)

1.372005983s ago: executing program 5 (id=3022):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/196, 0xc4}], 0x1)
shutdown(r5, 0x0)

1.362435481s ago: executing program 7 (id=3023):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000"], 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000140), 0xd, 0x0, 0x0, &(0x7f0000000000), 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x10)

1.192850131s ago: executing program 4 (id=3024):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="f81da85b6eb73d7efae6dc5fedb3bdc4321d31f81d5fb67acf37aca1dae3ac9912892ee476427a4bbd411e4c0036bababb0e6be02c4eb7e0a3f8ab12fea481114fe0205162e00d1e3912292836c4ccdf73852960582592c8c027869bcd79550fa18ecd713844cebe898000"/117, 0x75, 0xfffffffffffffffe)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000340)={0xa000001c})

424.901918ms ago: executing program 6 (id=3025):
socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x68, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0)
setresuid(0xee01, 0x0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000180)={@local, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x24, 0x6, 0x0, @local, @local, {[@hopopts={0x5c, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}], {{0xfffe, 0x4002, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, <r6=>0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r6, r7, 0x4, 0x0, 0xffffffff, 0x3, {0xac7c, 0x1, 0x3, 0x68, 0xf4b, 0xdd, 0x22, 0x5, 0x412f, 0xe155, 0x1000, 0x7f, 0x2000200, 0xfffffffe, "fefe00051413000000fbff3fb42817e47f00"}})

35.653795ms ago: executing program 6 (id=3026):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RELDISP(r0, 0x5605)
syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000002140)='maps\x00')
read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
statx(0xffffffffffffffff, &(0x7f00000045c0)='./file0\x00', 0x6000, 0x0, &(0x7f0000004600))
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x90}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x165)
socket$netlink(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=3027):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r5, 0x84, 0x82, &(0x7f00000002c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xd0)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38)
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x10100, 0x0, 0xfffffffc}, 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00')
preadv(r9, &(0x7f0000000700)=[{&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000680)=""/65, 0x41}], 0x5, 0x401, 0x6c19)
r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x80, @local, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3ff, @private0, 0x6}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fa", 0x1}], 0x1}}], 0x2, 0x4040001)

kernel console output (not intermixed with test programs):

058'.
[  582.612821][T10052] hsr_slave_0: entered promiscuous mode
[  582.645292][T10052] hsr_slave_1: entered promiscuous mode
[  582.694806][T10052] debugfs: 'hsr0' already exists in 'hsr'
[  582.700891][T10052] Cannot create hsr debugfs directory
[  583.777731][T10219] ubi: mtd0 is already attached to ubi31
[  584.461056][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1063'.
[  587.846910][T10235] nvme_fabrics: missing parameter 'transport=%s'
[  588.120781][T10235] nvme_fabrics: missing parameter 'nqn=%s'
[  588.282198][ T3011] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.403204][T10099] chnl_net:caif_netlink_parms(): no params data found
[  588.495628][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1065'.
[  589.282594][ T3011] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.084591][ T3011] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.103391][T10260] xt_nat: multiple ranges no longer supported
[  590.142155][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  590.314259][ T5916] usb 5-1: Using ep0 maxpacket: 32
[  590.375311][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  590.484240][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  590.758856][ T5916] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  590.844634][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.868007][ T3011] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.006459][ T5916] usb 5-1: config 0 descriptor??
[  591.050981][T10099] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.077464][T10099] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.785001][T10099] bridge_slave_0: entered allmulticast mode
[  591.795798][T10099] bridge_slave_0: entered promiscuous mode
[  591.805664][T10099] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.814417][T10099] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.821775][T10099] bridge_slave_1: entered allmulticast mode
[  591.829922][T10099] bridge_slave_1: entered promiscuous mode
[  591.983865][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  592.013158][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.069064][ T5916] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  592.143827][T10099] team0: Port device team_slave_0 added
[  592.221275][T10278] ubi: mtd0 is already attached to ubi31
[  592.825920][T10099] team0: Port device team_slave_1 added
[  592.864262][T10253] input: syz1 as /devices/virtual/input/input6
[  593.351913][ T5979] usb 5-1: USB disconnect, device number 9
[  593.464593][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.472518][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.498423][    C1] vkms_vblank_simulate: vblank timer overrun
[  593.505406][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  594.063398][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  594.075313][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  594.133340][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  594.210222][ T3011] bridge_slave_1: left allmulticast mode
[  594.218158][ T3011] bridge_slave_1: left promiscuous mode
[  594.224079][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.295943][ T3011] bridge_slave_0: left allmulticast mode
[  594.301950][ T3011] bridge_slave_0: left promiscuous mode
[  594.307985][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.784694][T10296] netlink: 'syz.6.1080': attribute type 1 has an invalid length.
[  595.802536][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.815946][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.825869][ T3011] bond0 (unregistering): Released all slaves
[  595.856731][T10294] vlan2: entered allmulticast mode
[  595.870364][T10294] erspan0: entered allmulticast mode
[  595.907021][T10300] geneve2: entered promiscuous mode
[  595.912499][T10300] geneve2: entered allmulticast mode
[  596.156075][T10304] xt_nat: multiple ranges no longer supported
[  596.261743][T10099] hsr_slave_0: entered promiscuous mode
[  596.350090][T10099] hsr_slave_1: entered promiscuous mode
[  596.447108][T10099] debugfs: 'hsr0' already exists in 'hsr'
[  596.453683][T10099] Cannot create hsr debugfs directory
[  596.525233][T10310] tmpfs: Bad value for 'mpol'
[  596.992835][T10052] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  597.047402][T10052] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  597.173774][T10052] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  597.190200][T10052] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  597.270339][T10318] ubi: mtd0 is already attached to ubi31
[  598.219888][T10326] xt_nat: multiple ranges no longer supported
[  599.006976][ T3011] hsr_slave_0: left promiscuous mode
[  599.033631][ T3011] hsr_slave_1: left promiscuous mode
[  599.046501][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  599.056208][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.067364][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  599.075018][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.098968][ T3011] veth1_macvtap: left promiscuous mode
[  599.104662][ T3011] veth0_macvtap: left promiscuous mode
[  599.110396][ T3011] veth1_vlan: left promiscuous mode
[  599.115947][ T3011] veth0_vlan: left promiscuous mode
[  599.850472][ T5979] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  600.037758][ T5979] usb 7-1: Using ep0 maxpacket: 8
[  600.081429][ T5979] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  600.115017][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.495082][ T5979] usb 7-1: Product: syz
[  600.500135][ T5979] usb 7-1: Manufacturer: syz
[  600.504785][ T5979] usb 7-1: SerialNumber: syz
[  600.545728][ T5979] usb 7-1: config 0 descriptor??
[  600.764835][ T5979] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  601.045189][ T3011] team0 (unregistering): Port device team_slave_1 removed
[  601.102710][ T3011] team0 (unregistering): Port device team_slave_0 removed
[  601.957033][ T5979] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  602.310532][T10352] geneve2: entered promiscuous mode
[  602.315760][T10352] geneve2: entered allmulticast mode
[  602.757354][T10052] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.816987][T10052] 8021q: adding VLAN 0 to HW filter on device team0
[  602.936876][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.944096][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.377194][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.384439][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.414736][ T5916] usb 7-1: USB disconnect, device number 5
[  603.686663][T10372] xt_nat: multiple ranges no longer supported
[  604.728366][T10378] can0: slcan on ptm0.
[  605.011423][T10377] can0 (unregistered): slcan off ptm0.
[  605.339811][T10388] geneve2: entered promiscuous mode
[  605.345104][T10388] geneve2: entered allmulticast mode
[  606.212045][T10099] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  606.357213][T10099] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  607.177609][T10402] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1107'.
[  607.189844][T10402] netlink: zone id is out of range
[  607.195090][T10402] netlink: zone id is out of range
[  607.200564][T10402] netlink: zone id is out of range
[  607.205893][T10402] netlink: zone id is out of range
[  607.211549][T10402] netlink: zone id is out of range
[  607.216908][T10402] netlink: zone id is out of range
[  607.222536][T10402] netlink: zone id is out of range
[  607.227881][T10402] netlink: zone id is out of range
[  607.233149][T10402] netlink: zone id is out of range
[  607.239622][T10402] netlink: zone id is out of range
[  607.430683][T10099] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  607.681690][T10099] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  608.558055][ T5979] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  608.897865][ T5979] usb 5-1: Using ep0 maxpacket: 8
[  609.025792][ T5979] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  609.047311][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.056502][ T5979] usb 5-1: Product: syz
[  609.085338][ T5979] usb 5-1: Manufacturer: syz
[  609.111419][ T5979] usb 5-1: SerialNumber: syz
[  609.141047][ T5979] usb 5-1: config 0 descriptor??
[  609.167281][T10052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  609.306132][T10426] xt_nat: multiple ranges no longer supported
[  610.124437][ T5979] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  610.193659][T10099] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.213210][T10052] veth0_vlan: entered promiscuous mode
[  610.269446][T10099] 8021q: adding VLAN 0 to HW filter on device team0
[  610.280778][T10052] veth1_vlan: entered promiscuous mode
[  610.305655][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.313218][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.349196][T10431] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  610.355869][T10431] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  610.375764][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.383009][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.404984][T10431] vhci_hcd vhci_hcd.0: Device attached
[  610.464104][T10052] veth0_macvtap: entered promiscuous mode
[  610.481161][T10052] veth1_macvtap: entered promiscuous mode
[  610.677724][T10437] geneve2: entered promiscuous mode
[  610.683057][T10437] geneve2: entered allmulticast mode
[  611.039718][T10052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  611.047734][ T5897] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  611.117823][ T5923] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  611.183119][T10052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  611.231489][ T5897] usb 7-1: config 0 has no interfaces?
[  611.247260][ T5897] usb 7-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5
[  611.264304][ T3011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  611.293272][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.315256][ T3011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.332539][ T5897] usb 7-1: config 0 descriptor??
[  611.363443][ T3011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.401358][ T3011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.423302][ T5979] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  611.487813][ T6390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.496358][ T6390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.520870][T10099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.623855][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.636809][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.697779][ T5923] usb 45-1: device descriptor read/64, error -71
[  612.790955][ T5979] usb 5-1: USB disconnect, device number 10
[  612.837605][T10457] bridge0: entered promiscuous mode
[  612.847833][T10457] macvlan2: entered promiscuous mode
[  612.878376][ T5923] usb 45-1: new low-speed USB device number 3 using vhci_hcd
[  613.042610][T10467] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1117'.
[  613.897381][T10433] vhci_hcd: connection closed
[  613.923185][ T5897] usb 7-1: USB disconnect, device number 6
[  613.933223][   T24] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0
[  613.941870][ T3451] vhci_hcd: stop threads
[  613.941867][   T24] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0
[  613.946778][ T3451] vhci_hcd: release socket
[  613.953933][   T24] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0
[  613.978446][ T3451] vhci_hcd: disconnect device
[  613.993861][   T24] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  614.306996][T10099] veth0_vlan: entered promiscuous mode
[  614.352254][T10099] veth1_vlan: entered promiscuous mode
[  615.394376][T10099] veth0_macvtap: entered promiscuous mode
[  615.427012][T10099] veth1_macvtap: entered promiscuous mode
[  615.550528][T10491] xt_nat: multiple ranges no longer supported
[  616.355741][T10099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.435211][T10099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.902922][ T6390] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.916653][T10492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  616.938078][ T6390] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.972950][ T6390] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.002712][ T6390] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.200255][ T6390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.299522][ T6390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.342598][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.370353][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.538480][   T92] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  617.698008][   T92] usb 4-1: Using ep0 maxpacket: 8
[  617.711901][   T92] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  617.817150][   T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.835905][   T92] usb 4-1: Product: syz
[  617.850820][   T92] usb 4-1: Manufacturer: syz
[  617.856777][   T92] usb 4-1: SerialNumber: syz
[  618.425085][   T92] usb 4-1: config 0 descriptor??
[  618.487776][ T5923] vhci_hcd: vhci_device speed not set
[  618.640269][   T92] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  618.720009][T10515] overlayfs: failed to resolve './file1': -2
[  620.955474][   T92] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  620.994561][   T92] usb 4-1: USB disconnect, device number 8
[  621.210990][T10534] xt_nat: multiple ranges no longer supported
[  621.526721][T10536] geneve2: entered promiscuous mode
[  621.532359][T10536] geneve2: entered allmulticast mode
[  624.185566][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  624.192243][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  625.554153][ T5923] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  625.740725][T10580] overlayfs: failed to resolve './file1': -2
[  625.857689][ T5923] usb 4-1: Using ep0 maxpacket: 8
[  625.871839][ T5923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  625.897841][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.916321][ T5923] usb 4-1: Product: syz
[  625.926934][ T5923] usb 4-1: Manufacturer: syz
[  625.938608][ T5923] usb 4-1: SerialNumber: syz
[  625.962717][ T5923] usb 4-1: config 0 descriptor??
[  626.205166][ T5923] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  627.370763][ T5923] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  627.525112][T10604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1156'.
[  628.650243][ T5923] usb 4-1: USB disconnect, device number 9
[  628.910288][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1159'.
[  632.607160][T10628] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  632.620738][T10628] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  633.415603][T10622] nvme_fabrics: missing parameter 'transport=%s'
[  633.805364][T10632] overlayfs: failed to resolve './file1': -2
[  633.988901][T10622] nvme_fabrics: missing parameter 'nqn=%s'
[  638.078003][ T5916] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  638.099332][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  638.240020][ T5916] usb 6-1: Using ep0 maxpacket: 8
[  638.271066][ T5916] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  638.293787][   T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  638.294192][ T5916] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  638.370146][   T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  638.380520][ T5916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  638.478570][ T5916] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  638.505725][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  638.515989][ T5916] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  638.530534][   T24] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0
[  638.808040][   T24] usb 5-1: Product: syz
[  638.808215][ T5916] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  638.819970][T10670] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  638.844733][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.869301][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  639.112279][ T5916] usb 6-1: usb_control_msg returned -32
[  639.182959][ T5916] usbtmc 6-1:16.0: can't read capabilities
[  639.594434][ T5916] usb 5-1: USB disconnect, device number 11
[  641.436981][ T5923] usb 6-1: USB disconnect, device number 4
[  645.442381][T10717] macvlan3: entered promiscuous mode
[  651.736904][T10763] macvlan4: entered promiscuous mode
[  652.098242][T10767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1203'.
[  661.271743][T10819] geneve2: entered promiscuous mode
[  661.277044][T10819] geneve2: entered allmulticast mode
[  661.855438][T10825] xt_nat: multiple ranges no longer supported
[  665.575587][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.563089][T10866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1231'.
[  669.885288][T10868] nvme_fabrics: missing parameter 'transport=%s'
[  670.114546][T10868] nvme_fabrics: missing parameter 'nqn=%s'
[  675.455412][T10917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  678.778311][T10940] ubi: mtd0 is already attached to ubi31
[  684.176439][T10975] geneve2: entered promiscuous mode
[  684.181739][T10975] geneve2: entered allmulticast mode
[  684.249454][T10977] kernel profiling enabled (shift: 63)
[  684.255329][T10977] profiling shift: 63 too large
[  684.356172][T10980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  684.367703][T10980] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  685.765795][T10977] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  685.771819][T10977] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  685.899351][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  685.905651][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  685.947825][ T7276] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  686.377830][ T7276] usb 6-1: Using ep0 maxpacket: 32
[  686.399588][ T7276] usb 6-1: config 0 interface 0 has no altsetting 0
[  686.423142][ T7276] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  686.461518][ T7276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.493911][T10977] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  686.501056][T10977] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  686.511585][ T7276] usb 6-1: Product: syz
[  686.531202][ T7276] usb 6-1: Manufacturer: syz
[  686.563856][ T7276] usb 6-1: SerialNumber: syz
[  686.598193][ T7276] usb 6-1: config 0 descriptor??
[  687.045061][ T7276] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  687.664136][ T7276] usb 6-1: USB disconnect, device number 5
[  687.707734][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  688.467761][   T24] usb 4-1: Using ep0 maxpacket: 32
[  688.498935][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  688.542025][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  688.724947][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  688.963206][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.828875][   T24] usb 4-1: config 0 descriptor??
[  690.025496][T11027] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1270'.
[  690.664116][   T24] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  690.752895][T11008] input: syz1 as /devices/virtual/input/input7
[  690.833582][ T5916] usb 4-1: USB disconnect, device number 10
[  691.769702][T11049] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1278'.
[  691.779279][T11049] net_ratelimit: 72 callbacks suppressed
[  691.779326][T11049] netlink: zone id is out of range
[  691.790897][T11049] netlink: zone id is out of range
[  691.796245][T11049] netlink: zone id is out of range
[  691.801700][T11049] netlink: zone id is out of range
[  691.807265][T11049] netlink: zone id is out of range
[  691.812677][T11049] netlink: zone id is out of range
[  691.820054][T11049] netlink: zone id is out of range
[  691.827337][T11049] netlink: zone id is out of range
[  691.833049][T11049] netlink: zone id is out of range
[  691.840731][T11049] netlink: zone id is out of range
[  695.069045][T11077] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1286'.
[  697.484029][T11084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  697.644287][T11096] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1292'.
[  697.656289][T11096] net_ratelimit: 72 callbacks suppressed
[  697.656480][T11096] netlink: zone id is out of range
[  697.667518][T11096] netlink: zone id is out of range
[  697.672877][T11096] netlink: zone id is out of range
[  697.678790][T11096] netlink: zone id is out of range
[  697.684026][T11096] netlink: zone id is out of range
[  697.689710][T11096] netlink: zone id is out of range
[  697.695143][T11096] netlink: zone id is out of range
[  697.697801][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  697.700586][T11096] netlink: zone id is out of range
[  697.713266][T11096] netlink: zone id is out of range
[  697.718714][T11096] netlink: zone id is out of range
[  698.703287][   T24] usb 5-1: Using ep0 maxpacket: 32
[  698.972437][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.998535][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  699.450947][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  699.460306][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.488137][   T24] usb 5-1: config 0 descriptor??
[  700.550606][   T24] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  700.920282][   T24] usb 5-1: USB disconnect, device number 12
[  702.021332][T11127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1301'.
[  703.021929][T11129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1302'.
[  703.400690][T11136] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1303'.
[  703.426630][T11136] net_ratelimit: 72 callbacks suppressed
[  703.426674][T11136] netlink: zone id is out of range
[  703.437959][T11136] netlink: zone id is out of range
[  703.443388][T11136] netlink: zone id is out of range
[  703.449164][T11136] netlink: zone id is out of range
[  703.454618][T11136] netlink: zone id is out of range
[  703.460171][T11136] netlink: zone id is out of range
[  703.465375][T11136] netlink: zone id is out of range
[  703.470628][T11136] netlink: zone id is out of range
[  703.475820][T11136] netlink: zone id is out of range
[  703.767777][T11136] netlink: zone id is out of range
[  704.283197][T11153] geneve2: entered promiscuous mode
[  704.288480][T11153] geneve2: entered allmulticast mode
[  704.920573][T11156] geneve2: entered promiscuous mode
[  704.925842][T11156] geneve2: entered allmulticast mode
[  705.565617][T11147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  709.346605][T11193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  710.639331][T11203] geneve2: entered promiscuous mode
[  710.644595][T11203] geneve2: entered allmulticast mode
[  716.470825][T11226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.158098][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  723.583786][T11319] xt_nat: multiple ranges no longer supported
[  724.542088][T11332] netlink: 'syz.6.1355': attribute type 10 has an invalid length.
[  724.587039][T11332] 8021q: adding VLAN 0 to HW filter on device team0
[  724.612549][T11332] bond0: (slave team0): Enslaving as an active interface with an up link
[  726.937796][T11350] macvlan4: entered promiscuous mode
[  728.130991][T11359] xt_nat: multiple ranges no longer supported
[  733.156321][T11386] can0: slcan on ptm0.
[  733.468745][T11384] can0 (unregistered): slcan off ptm0.
[  734.498807][T11396] xt_nat: multiple ranges no longer supported
[  736.989183][T11418] xt_nat: multiple ranges no longer supported
[  739.018863][T11434] ubi: mtd0 is already attached to ubi31
[  747.078850][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  747.085245][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  748.089010][T11484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'.
[  749.701134][T11508] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1405'.
[  749.712554][T11508] net_ratelimit: 72 callbacks suppressed
[  749.712593][T11508] netlink: zone id is out of range
[  749.723606][T11508] netlink: zone id is out of range
[  749.728912][T11508] netlink: zone id is out of range
[  749.734170][T11508] netlink: zone id is out of range
[  749.740931][T11508] netlink: zone id is out of range
[  749.746246][T11508] netlink: zone id is out of range
[  749.753499][T11508] netlink: zone id is out of range
[  749.759142][T11508] netlink: zone id is out of range
[  749.764371][T11508] netlink: zone id is out of range
[  749.770291][T11508] netlink: zone id is out of range
[  751.769472][T11518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  752.629946][T11537] geneve2: entered promiscuous mode
[  752.635245][T11537] geneve2: entered allmulticast mode
[  756.862027][T11561] geneve2: entered promiscuous mode
[  756.867360][T11561] geneve2: entered allmulticast mode
[  757.981867][T11574] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1423'.
[  757.992238][T11574] net_ratelimit: 72 callbacks suppressed
[  757.992259][T11574] netlink: zone id is out of range
[  758.003539][T11574] netlink: zone id is out of range
[  758.009141][T11574] netlink: zone id is out of range
[  758.014766][T11574] netlink: zone id is out of range
[  758.020207][T11574] netlink: zone id is out of range
[  758.025495][T11574] netlink: zone id is out of range
[  758.036929][T11574] netlink: zone id is out of range
[  758.042512][T11574] netlink: zone id is out of range
[  758.048017][T11574] netlink: zone id is out of range
[  758.053302][T11574] netlink: zone id is out of range
[  758.711981][T11582] geneve2: entered promiscuous mode
[  758.719048][T11582] geneve2: entered allmulticast mode
[  765.269189][T11618] nvme_fabrics: missing parameter 'transport=%s'
[  765.497699][T11618] nvme_fabrics: missing parameter 'nqn=%s'
[  767.475030][T11641] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1439'.
[  767.597973][T11641] net_ratelimit: 72 callbacks suppressed
[  767.613569][T11641] netlink: zone id is out of range
[  767.618899][T11641] netlink: zone id is out of range
[  767.624125][T11641] netlink: zone id is out of range
[  767.772907][T11641] netlink: zone id is out of range
[  767.807721][T11641] netlink: zone id is out of range
[  767.813744][T11641] netlink: zone id is out of range
[  768.518063][T11641] netlink: zone id is out of range
[  768.523210][T11641] netlink: zone id is out of range
[  768.688080][T11641] netlink: zone id is out of range
[  768.693592][T11641] netlink: zone id is out of range
[  770.477675][ T5916] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  770.717880][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  770.730750][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0
[  770.757527][ T5916] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  770.787416][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.832547][ T5916] usb 4-1: Product: syz
[  770.836981][ T5916] usb 4-1: Manufacturer: syz
[  770.857181][ T5916] usb 4-1: SerialNumber: syz
[  771.272150][ T5916] usb 4-1: config 0 descriptor??
[  772.518912][ T5916] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  773.920397][   T10] usb 4-1: USB disconnect, device number 11
[  776.266282][T11707] macvlan5: entered promiscuous mode
[  777.080611][T11710] geneve2: entered promiscuous mode
[  777.085947][T11710] geneve2: entered allmulticast mode
[  777.560247][T11723] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1460'.
[  777.709032][T11723] net_ratelimit: 72 callbacks suppressed
[  777.709058][T11723] netlink: zone id is out of range
[  777.723103][T11723] netlink: zone id is out of range
[  778.357797][T11723] netlink: zone id is out of range
[  778.363027][T11723] netlink: zone id is out of range
[  778.460434][T11728] netlink: 'syz.1.1462': attribute type 10 has an invalid length.
[  778.506800][T11728] 8021q: adding VLAN 0 to HW filter on device team0
[  778.529317][T11728] bond0: (slave team0): Enslaving as an active interface with an up link
[  778.868154][T11723] netlink: zone id is out of range
[  778.873410][T11723] netlink: zone id is out of range
[  778.879067][T11723] netlink: zone id is out of range
[  778.884274][T11723] netlink: zone id is out of range
[  778.889540][T11723] netlink: zone id is out of range
[  778.894726][T11723] netlink: zone id is out of range
[  784.632216][T11774] fuse: Bad value for 'fd'
[  785.347109][T11795] overlayfs: missing 'lowerdir'
[  787.922679][T11813] overlayfs: failed to resolve './file0': -2
[  787.940346][T11814] netlink: 'syz.4.1487': attribute type 10 has an invalid length.
[  788.036169][T11814] 8021q: adding VLAN 0 to HW filter on device team0
[  788.044960][T11814] bond0: (slave team0): Enslaving as an active interface with an up link
[  789.744897][T11833] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1490'.
[  789.920297][T11833] net_ratelimit: 72 callbacks suppressed
[  789.920320][T11833] netlink: zone id is out of range
[  789.972841][T11833] netlink: zone id is out of range
[  789.992405][T11833] netlink: zone id is out of range
[  790.000622][T11833] netlink: zone id is out of range
[  790.010523][T11833] netlink: zone id is out of range
[  790.035523][T11833] netlink: zone id is out of range
[  790.306048][T11833] netlink: zone id is out of range
[  790.346167][T11833] netlink: zone id is out of range
[  791.047934][T11833] netlink: zone id is out of range
[  791.117718][T11833] netlink: zone id is out of range
[  796.270766][T11879] autofs: Unknown parameter 'fd0x0000000000000000'
[  797.561013][T11898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.418016][T11911] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1514'.
[  799.440114][T11911] net_ratelimit: 72 callbacks suppressed
[  799.440175][T11911] netlink: zone id is out of range
[  799.451564][T11911] netlink: zone id is out of range
[  799.457673][T11911] netlink: zone id is out of range
[  799.467392][T11911] netlink: zone id is out of range
[  799.473787][T11911] netlink: zone id is out of range
[  799.479343][T11911] netlink: zone id is out of range
[  799.484939][T11911] netlink: zone id is out of range
[  799.508001][T11911] netlink: zone id is out of range
[  799.518254][T11911] netlink: zone id is out of range
[  799.524335][T11911] netlink: zone id is out of range
[  803.114934][T11939] overlayfs: failed to get inode (-116)
[  803.136058][T11939] overlayfs: failed to get inode (-116)
[  803.752930][T11949] macvlan3: entered promiscuous mode
[  804.649800][T11951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  804.763031][T11955] netlink: 'syz.4.1525': attribute type 10 has an invalid length.
[  808.487995][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  808.494448][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  810.375687][T11997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  813.874670][T12029] ubi: mtd0 is already attached to ubi31
[  816.983657][T12058] xt_nat: multiple ranges no longer supported
[  817.361555][T12053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  817.600097][T12062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1551'.
[  819.727373][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'.
[  822.602472][T12106] xt_nat: multiple ranges no longer supported
[  823.475717][T12111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  824.037495][T12125] geneve2: entered promiscuous mode
[  824.042865][T12125] geneve2: entered allmulticast mode
[  826.282614][T12140] netlink: 'syz.6.1570': attribute type 10 has an invalid length.
[  829.228450][T12163] xt_nat: multiple ranges no longer supported
[  832.351305][T12184] netlink: 'syz.6.1582': attribute type 10 has an invalid length.
[  832.491089][T12190] xt_nat: multiple ranges no longer supported
[  834.005496][T12204] o2cb: This node has not been configured.
[  834.011714][T12204] o2cb: Cluster check failed. Fix errors before retrying.
[  834.018861][T12204] (syz.3.1588,12204,0):user_dlm_register:674 ERROR: status = -22
[  834.026575][T12204] (syz.3.1588,12204,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  834.245875][T12212] xt_nat: multiple ranges no longer supported
[  835.571657][T12222] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1592'.
[  835.580710][T12222] net_ratelimit: 72 callbacks suppressed
[  835.580722][T12222] netlink: zone id is out of range
[  835.591479][T12222] netlink: zone id is out of range
[  835.596755][T12222] netlink: zone id is out of range
[  835.601902][T12222] netlink: zone id is out of range
[  835.607003][T12222] netlink: zone id is out of range
[  835.612143][T12222] netlink: zone id is out of range
[  835.617256][T12222] netlink: zone id is out of range
[  835.622393][T12222] netlink: zone id is out of range
[  835.627501][T12222] netlink: zone id is out of range
[  835.632640][T12222] netlink: zone id is out of range
[  837.012778][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1597'.
[  837.527718][T12242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1598'.
[  837.954620][T12246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1599'.
[  838.591028][T12261] ubi: mtd0 is already attached to ubi31
[  842.487870][T12295] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1612'.
[  843.599250][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'.
[  844.156497][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1614'.
[  848.406230][T12341] netlink: 'syz.1.1621': attribute type 11 has an invalid length.
[  848.434755][T12341] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1621'.
[  849.299872][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1628'.
[  851.635865][T12398] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1639'.
[  852.704828][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1641'.
[  854.217666][   T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  854.477072][   T24] usb 4-1: Using ep0 maxpacket: 16
[  854.505837][   T24] usb 4-1: config index 0 descriptor too short (expected 65, got 36)
[  854.552937][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  854.585975][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  854.604596][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  854.622479][   T24] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  854.807711][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.806620][   T24] usb 4-1: config 0 descriptor??
[  857.053501][T12436] geneve2: entered promiscuous mode
[  857.058904][T12436] geneve2: entered allmulticast mode
[  857.482939][   T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9
[  857.555209][   T24] usb 4-1: USB disconnect, device number 12
[  858.574846][T12454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1654'.
[  859.179562][T12457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1655'.
[  860.158192][ T5916] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  860.391421][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  860.567898][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0
[  860.576716][ T5916] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  860.585960][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.604245][ T5916] usb 4-1: Product: syz
[  860.867695][ T5916] usb 4-1: Manufacturer: syz
[  860.882678][ T5916] usb 4-1: SerialNumber: syz
[  860.896495][ T5916] usb 4-1: config 0 descriptor??
[  861.312281][ T5916] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  863.144011][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1665'.
[  863.477739][ T5923] usb 4-1: USB disconnect, device number 13
[  864.118456][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1669'.
[  865.387835][T11159] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  865.568330][T11159] usb 6-1: Using ep0 maxpacket: 32
[  865.589509][T11159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  865.624721][T11159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  865.663309][T11159] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  865.672685][T11159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.694298][T11159] usb 6-1: config 0 descriptor??
[  866.647182][T11159] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  866.910225][ T5979] usb 6-1: USB disconnect, device number 6
[  868.800353][T12548] netlink: 'syz.5.1682': attribute type 10 has an invalid length.
[  869.183143][T12542] geneve2: entered promiscuous mode
[  869.188459][T12542] geneve2: entered allmulticast mode
[  869.338323][T12548] 8021q: adding VLAN 0 to HW filter on device team0
[  869.346457][T12548] bond0: (slave team0): Enslaving as an active interface with an up link
[  871.084586][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  871.097573][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  871.658442][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1684'.
[  872.589745][T12573] ubi: mtd0 is already attached to ubi31
[  875.240937][ T5979] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  875.248556][T11159] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  875.568424][T11159] usb 5-1: Using ep0 maxpacket: 32
[  875.573710][ T5979] usb 7-1: Using ep0 maxpacket: 32
[  875.584062][ T5979] usb 7-1: config 0 interface 0 has no altsetting 0
[  875.593151][T11159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  875.614983][T12596] geneve2: entered promiscuous mode
[  875.620283][T12596] geneve2: entered allmulticast mode
[  875.641181][ T5979] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  875.702687][T11159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  875.719857][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.757182][T11159] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  875.767695][ T5979] usb 7-1: Product: syz
[  875.785015][ T5979] usb 7-1: Manufacturer: syz
[  875.805536][T11159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.814808][ T5979] usb 7-1: SerialNumber: syz
[  875.841489][ T5979] usb 7-1: config 0 descriptor??
[  875.869321][T11159] usb 5-1: config 0 descriptor??
[  876.888018][ T5979] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  876.902865][T11159] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  877.684633][T11159] usb 5-1: USB disconnect, device number 13
[  877.964603][ T5979] usb 7-1: USB disconnect, device number 7
[  878.338542][T12617] geneve2: entered promiscuous mode
[  878.343976][T12617] geneve2: entered allmulticast mode
[  880.701179][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'.
[  885.337149][T12662] ubi: mtd0 is already attached to ubi31
[  886.208995][T12661] geneve2: entered promiscuous mode
[  886.214366][T12661] geneve2: entered allmulticast mode
[  887.335120][ T5979] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  889.366938][T12676] can0: slcan on ptm0.
[  889.484740][T12671] can0 (unregistered): slcan off ptm0.
[  890.297173][T12690] netlink: 'syz.3.1720': attribute type 11 has an invalid length.
[  890.305232][T12690] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1720'.
[  890.337833][T12687] tmpfs: Unknown parameter '
'
[  890.967181][T12696] input: syz1 as /devices/virtual/input/input10
[  891.009426][T12696] vivid-002: disconnect
[  891.594097][T12691] vivid-002: reconnect
[  896.033276][T12719] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1729'.
[  896.052655][T12719] net_ratelimit: 72 callbacks suppressed
[  896.058902][T12719] netlink: zone id is out of range
[  896.064481][T12719] netlink: zone id is out of range
[  896.070231][T12719] netlink: zone id is out of range
[  896.075805][T12719] netlink: zone id is out of range
[  896.081443][T12719] netlink: zone id is out of range
[  896.087392][T12719] netlink: zone id is out of range
[  896.093368][T12719] netlink: zone id is out of range
[  896.098901][T12719] netlink: zone id is out of range
[  896.104316][T12719] netlink: zone id is out of range
[  896.109879][T12719] netlink: zone id is out of range
[  900.774240][T12761] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1742'.
[  902.397269][ T5979] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  902.563208][T12781] geneve2: entered promiscuous mode
[  902.563265][T12781] geneve2: entered allmulticast mode
[  904.448409][ T5979] usb 7-1: Using ep0 maxpacket: 32
[  904.580056][ T5979] usb 7-1: device descriptor read/all, error -71
[  909.213070][T12815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1755'.
[  910.433450][T12837] xt_nat: multiple ranges no longer supported
[  910.690376][T12834] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1760'.
[  911.151954][T12834] nvme_fabrics: missing parameter 'transport=%s'
[  911.158420][T12834] nvme_fabrics: missing parameter 'nqn=%s'
[  913.202630][T12863] ubi: mtd0 is already attached to ubi31
[  914.288652][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1771'.
[  914.813094][T12872] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1772'.
[  914.825700][T12872] net_ratelimit: 154 callbacks suppressed
[  914.825719][T12872] netlink: zone id is out of range
[  914.852342][T12872] netlink: zone id is out of range
[  914.867543][T12872] netlink: zone id is out of range
[  914.876772][T12872] netlink: zone id is out of range
[  914.896455][T12872] netlink: zone id is out of range
[  914.906651][T12872] netlink: zone id is out of range
[  914.921306][T12872] netlink: zone id is out of range
[  914.927575][T12872] netlink: zone id is out of range
[  914.938594][T12872] netlink: zone id is out of range
[  914.950845][T12872] netlink: zone id is out of range
[  916.044871][T12885] autofs: Unknown parameter 'fd0x0000000000000000'
[  916.096325][T12891] geneve2: entered promiscuous mode
[  916.101613][T12891] geneve2: entered allmulticast mode
[  920.487014][T12929] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1787'.
[  920.497237][T12929] net_ratelimit: 72 callbacks suppressed
[  920.497284][T12929] netlink: zone id is out of range
[  920.508397][T12929] netlink: zone id is out of range
[  920.513598][T12929] netlink: zone id is out of range
[  920.518913][T12929] netlink: zone id is out of range
[  920.524172][T12929] netlink: zone id is out of range
[  920.529528][T12929] netlink: zone id is out of range
[  920.534711][T12929] netlink: zone id is out of range
[  920.540273][T12929] netlink: zone id is out of range
[  920.545712][T12929] netlink: zone id is out of range
[  920.551133][T12929] netlink: zone id is out of range
[  926.619245][T12965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1799'.
[  926.927757][ T5923] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  927.087840][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  927.183012][ T5923] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  927.512648][ T5923] usb 5-1: config 0 has no interface number 0
[  927.580704][ T5923] usb 5-1: config 0 interface 153 has no altsetting 0
[  927.782719][ T5923] usb 5-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0
[  927.795864][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.806767][ T5923] usb 5-1: Product: syz
[  927.811003][ T5923] usb 5-1: Manufacturer: syz
[  927.816081][ T5923] usb 5-1: SerialNumber: syz
[  927.833817][ T5923] usb 5-1: config 0 descriptor??
[  928.101235][ T5923] ti_usb_3410_5052 5-1:0.153: TI USB 3410 1 port adapter converter detected
[  928.215476][ T5923] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  928.607568][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1804'.
[  928.911100][T12967] wireguard0: entered promiscuous mode
[  928.929381][T12967] wireguard0: entered allmulticast mode
[  929.110444][T12987] netlink: 'syz.6.1805': attribute type 10 has an invalid length.
[  929.962082][   T10] usb 5-1: USB disconnect, device number 15
[  930.060076][   T10] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  930.078892][   T10] ti_usb_3410_5052 5-1:0.153: device disconnected
[  930.863576][T13003] macvlan3: entered promiscuous mode
[  931.362736][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  931.372059][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  931.717627][T13014] kernel profiling enabled (shift: 63)
[  931.723285][T13014] profiling shift: 63 too large
[  935.375098][T13039] netlink: 'syz.1.1817': attribute type 10 has an invalid length.
[  935.980980][T13044] netlink: 'syz.6.1820': attribute type 11 has an invalid length.
[  935.988996][T13044] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1820'.
[  937.908970][T13062] xt_nat: multiple ranges no longer supported
[  938.122693][T13064] vivid-001: disconnect
[  938.144858][T13060] vivid-001: reconnect
[  938.358492][T13063] kernel profiling enabled (shift: 63)
[  938.383653][T13063] profiling shift: 63 too large
[  940.708726][T13083] macvlan6: entered promiscuous mode
[  945.222446][T13114] Device name cannot be null; rc = [-22]
[  945.816774][T13116] xt_nat: multiple ranges no longer supported
[  946.507802][T13127] kernel profiling enabled (shift: 63)
[  946.513398][T13127] profiling shift: 63 too large
[  947.900214][T13135] netlink: 'syz.5.1845': attribute type 10 has an invalid length.
[  952.365827][T13168] xt_nat: multiple ranges no longer supported
[  955.018158][T13196] netlink: 'syz.4.1859': attribute type 10 has an invalid length.
[  955.109226][T13200] ubi: mtd0 is already attached to ubi31
[  958.772010][T13220] kernel profiling enabled (shift: 63)
[  958.777722][T13220] profiling shift: 63 too large
[  962.776239][T13264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1881'.
[  968.202959][T13298] kernel profiling enabled (shift: 63)
[  968.221808][T13298] profiling shift: 63 too large
[  972.925997][T13342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1901'.
[  980.968273][T13393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1913'.
[  982.533062][T13412] kernel profiling enabled (shift: 63)
[  983.570055][T13412] profiling shift: 63 too large
[  984.050516][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1923'.
[  984.974518][T13434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1926'.
[  987.976234][T13461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1932'.
[  989.044090][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1934'.
[  991.160133][T13491] kernel profiling enabled (shift: 63)
[  991.165713][T13491] profiling shift: 63 too large
[  992.928463][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  992.935237][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  993.496638][T13506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1944'.
[  995.047542][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  995.207605][   T10] usb 4-1: Using ep0 maxpacket: 32
[  995.215937][   T10] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  995.224510][   T10] usb 4-1: config 0 has no interface number 0
[  995.230726][   T10] usb 4-1: config 0 interface 153 has no altsetting 0
[  995.240789][   T10] usb 4-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0
[  995.257543][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.267630][   T10] usb 4-1: Product: syz
[  995.271843][   T10] usb 4-1: Manufacturer: syz
[  995.286739][   T10] usb 4-1: SerialNumber: syz
[  995.319193][   T10] usb 4-1: config 0 descriptor??
[  995.348044][   T10] ti_usb_3410_5052 4-1:0.153: TI USB 3410 1 port adapter converter detected
[  995.402249][T13522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  995.422776][   T10] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[  996.110585][T13514] wireguard0: entered promiscuous mode
[  996.116281][T13514] wireguard0: entered allmulticast mode
[  996.298466][   T10] usb 4-1: USB disconnect, device number 14
[  996.310089][   T10] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[  996.321442][   T10] ti_usb_3410_5052 4-1:0.153: device disconnected
[ 1000.204563][T13562] xt_nfacct: accounting object `syz1' does not exists
[ 1000.679085][T13571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1003.287575][T10435] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1003.482443][T10435] usb 5-1: Using ep0 maxpacket: 32
[ 1003.502503][T10435] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1004.186484][T10435] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1004.199475][T10435] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1004.208574][T10435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1004.237033][T10435] usb 5-1: config 0 descriptor??
[ 1004.275124][T10435] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1004.596267][T13598] Device name cannot be null; rc = [-22]
[ 1005.621060][T13612] kernel profiling enabled (shift: 63)
[ 1005.629583][T13612] profiling shift: 63 too large
[ 1005.912737][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1974'.
[ 1005.914494][T13614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1006.520337][ T5923] usb 5-1: USB disconnect, device number 16
[ 1006.615743][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'.
[ 1013.149252][T13677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1993'.
[ 1013.185789][T13684] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1995'.
[ 1013.590390][T13682] ubi: mtd0 is already attached to ubi31
[ 1019.956326][T13740] ubi: mtd0 is already attached to ubi31
[ 1021.108649][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2012'.
[ 1024.088380][T13772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2018'.
[ 1028.373984][T13812] netlink: 'syz.6.2030': attribute type 4 has an invalid length.
[ 1029.127813][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'.
[ 1029.485142][T13824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2034'.
[ 1029.984212][T13828] set match dimension is over the limit!
[ 1031.604709][T13849] netlink: 'syz.1.2041': attribute type 11 has an invalid length.
[ 1031.612781][T13849] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2041'.
[ 1033.870838][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2047'.
[ 1033.976364][T13870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2048'.
[ 1038.116661][T13897] netlink: 'syz.1.2054': attribute type 11 has an invalid length.
[ 1038.124655][T13897] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2054'.
[ 1038.828618][ T5923] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1039.352703][ T5923] usb 4-1: Using ep0 maxpacket: 32
[ 1039.370219][ T5923] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[ 1039.387521][ T5923] usb 4-1: config 0 has no interface number 0
[ 1039.393678][ T5923] usb 4-1: config 0 interface 153 has no altsetting 0
[ 1039.451955][ T5923] usb 4-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0
[ 1039.470925][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.491439][ T5923] usb 4-1: Product: syz
[ 1039.495657][ T5923] usb 4-1: Manufacturer: syz
[ 1039.517523][ T5923] usb 4-1: SerialNumber: syz
[ 1039.538544][ T5923] usb 4-1: config 0 descriptor??
[ 1039.558573][ T5923] ti_usb_3410_5052 4-1:0.153: TI USB 3410 1 port adapter converter detected
[ 1039.570398][T13912] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2059'.
[ 1039.584507][ T5923] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[ 1040.361514][T13905] wireguard1: entered promiscuous mode
[ 1040.380831][T13905] wireguard1: entered allmulticast mode
[ 1040.502229][ T5923] usb 4-1: USB disconnect, device number 15
[ 1040.538402][ T5923] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[ 1040.571984][ T5923] ti_usb_3410_5052 4-1:0.153: device disconnected
[ 1040.914169][T13926] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2062'.
[ 1045.256370][T13958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2071'.
[ 1046.948881][T13971] Device name cannot be null; rc = [-22]
[ 1047.962484][ T5923] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1048.299525][ T5923] usb 4-1: Using ep0 maxpacket: 32
[ 1048.325880][T13990] netlink: 'syz.1.2081': attribute type 10 has an invalid length.
[ 1048.499625][ T5923] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[ 1048.589977][ T5923] usb 4-1: config 0 has no interface number 0
[ 1048.674822][ T5923] usb 4-1: config 0 interface 153 has no altsetting 0
[ 1048.880041][ T5923] usb 4-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0
[ 1048.923110][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.964518][ T5923] usb 4-1: Product: syz
[ 1049.667572][ T5923] usb 4-1: Manufacturer: syz
[ 1049.672277][ T5923] usb 4-1: SerialNumber: syz
[ 1049.679887][ T5923] usb 4-1: config 0 descriptor??
[ 1049.709218][ T5923] ti_usb_3410_5052 4-1:0.153: TI USB 3410 1 port adapter converter detected
[ 1049.727896][ T5923] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[ 1049.986621][T13978] wireguard2: entered promiscuous mode
[ 1050.000790][T13978] wireguard2: entered allmulticast mode
[ 1051.282444][ T5923] usb 4-1: USB disconnect, device number 16
[ 1051.310334][ T5923] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[ 1051.344494][ T5923] ti_usb_3410_5052 4-1:0.153: device disconnected
[ 1051.644244][T14014] Device name cannot be null; rc = [-22]
[ 1052.591643][T14026] tipc: Started in network mode
[ 1052.770029][T14026] tipc: Node identity 4, cluster identity 4711
[ 1053.131404][T14026] tipc: Node number set to 4
[ 1054.736440][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.742858][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.306061][T14048] netlink: 'syz.5.2096': attribute type 10 has an invalid length.
[ 1061.748384][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2113'.
[ 1065.497930][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1065.669881][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1065.698586][   T10] usb 4-1: config 0 has an invalid interface number: 247 but max is 0
[ 1065.755795][   T10] usb 4-1: config 0 has no interface number 0
[ 1065.788043][   T10] usb 4-1: config 0 interface 247 has no altsetting 0
[ 1066.523653][   T10] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=f2.60
[ 1066.532814][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.541250][   T10] usb 4-1: Product: syz
[ 1066.545458][   T10] usb 4-1: Manufacturer: syz
[ 1066.550669][   T10] usb 4-1: SerialNumber: syz
[ 1066.558231][   T10] usb 4-1: config 0 descriptor??
[ 1066.571025][   T10] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[ 1066.589872][   T10] dvb-usb: bulk message failed: -22 (2/0)
[ 1066.600861][   T10] dvb-usb: will use the device's hardware PID filter (table count: 15).
[ 1066.628210][   T10] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[ 1066.647161][   T10] usb 4-1: media controller created
[ 1066.697716][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1066.736561][   T10] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[ 1066.756419][   T10] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[ 1066.767328][T14152] autofs: Unknown parameter 'fd0x0000000000000000'
[ 1066.782364][T14138] netlink: 'syz.3.2123': attribute type 10 has an invalid length.
[ 1066.791853][T14138] macvlan0: entered promiscuous mode
[ 1066.808330][T14138] macvlan0: entered allmulticast mode
[ 1066.847411][T14138] veth1_vlan: entered allmulticast mode
[ 1066.881871][T14138] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1067.200272][   T10] rc_core: IR keymap rc-dtt200u not found
[ 1067.206184][   T10] Registered IR keymap rc-empty
[ 1067.213298][   T10] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[ 1067.256944][   T10] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11
[ 1067.344149][   T10] dvb-usb: schedule remote query interval to 300 msecs.
[ 1067.351610][   T10] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[ 1067.509455][   T10] usb 4-1: USB disconnect, device number 17
[ 1067.785867][   T10] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
[ 1068.010445][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2128'.
[ 1069.421625][T14164] nvme_fabrics: missing parameter 'transport=%s'
[ 1069.581086][T14164] nvme_fabrics: missing parameter 'nqn=%s'
[ 1070.979195][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2132'.
[ 1071.831041][T14191] geneve2: entered promiscuous mode
[ 1071.941170][T14191] geneve2: entered allmulticast mode
[ 1074.095330][T14217] ubi: mtd0 is already attached to ubi31
[ 1074.458165][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2141'.
[ 1075.181043][T14219] nvme_fabrics: missing parameter 'transport=%s'
[ 1075.226640][T14219] nvme_fabrics: missing parameter 'nqn=%s'
[ 1076.732401][T14231] Device name cannot be null; rc = [-22]
[ 1078.699792][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2151'.
[ 1079.211981][T14232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1079.763367][T14254] Device name cannot be null; rc = [-22]
[ 1080.790935][T14271] bridge0: entered promiscuous mode
[ 1080.796950][T14271] macvlan2: entered promiscuous mode
[ 1081.432386][T14273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2157'.
[ 1082.672135][T14273] nvme_fabrics: missing parameter 'transport=%s'
[ 1082.917696][T14273] nvme_fabrics: missing parameter 'nqn=%s'
[ 1083.117918][T14282] netlink: 'syz.5.2159': attribute type 4 has an invalid length.
[ 1084.985700][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'.
[ 1085.238633][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2166'.
[ 1085.857490][T14296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.173800][T14327] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2171'.
[ 1089.382859][T14333] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2173'.
[ 1089.392086][T14333] net_ratelimit: 72 callbacks suppressed
[ 1089.392098][T14333] netlink: zone id is out of range
[ 1089.402902][T14333] netlink: zone id is out of range
[ 1089.408307][T14333] netlink: zone id is out of range
[ 1089.413397][T14333] netlink: zone id is out of range
[ 1089.418525][T14333] netlink: zone id is out of range
[ 1089.423638][T14333] netlink: zone id is out of range
[ 1089.428766][T14333] netlink: zone id is out of range
[ 1089.433878][T14333] netlink: zone id is out of range
[ 1089.439227][T14333] netlink: zone id is out of range
[ 1089.444336][T14333] netlink: zone id is out of range
[ 1092.224980][T14358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2182'.
[ 1093.097756][ T5950] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1093.377734][ T5950] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1093.418836][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.496582][ T5950] usb 6-1: config 0 descriptor??
[ 1093.567189][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2184'.
[ 1094.696231][T14380] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2187'.
[ 1094.705605][T14380] net_ratelimit: 76 callbacks suppressed
[ 1094.705640][T14380] netlink: zone id is out of range
[ 1094.716595][T14380] netlink: zone id is out of range
[ 1094.722005][T14380] netlink: zone id is out of range
[ 1094.727191][T14380] netlink: zone id is out of range
[ 1094.732518][T14380] netlink: zone id is out of range
[ 1094.737842][T14380] netlink: zone id is out of range
[ 1094.743018][T14380] netlink: zone id is out of range
[ 1094.748514][T14380] netlink: zone id is out of range
[ 1094.753778][T14380] netlink: zone id is out of range
[ 1094.759177][T14380] netlink: zone id is out of range
[ 1095.197700][ T5950] ath6kl: Failed to submit usb control message: -110
[ 1095.254615][ T5950] ath6kl: unable to send the bmi data to the device: -110
[ 1095.283036][ T5950] ath6kl: Unable to send get target info: -110
[ 1095.308668][ T5950] ath6kl: Failed to init ath6kl core: -110
[ 1095.333868][ T5950] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1095.387183][ T5950] usb 6-1: USB disconnect, device number 7
[ 1096.688387][ T5923] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1098.421250][ T5923] usb 4-1: config 241 has an invalid interface number: 0 but max is -1
[ 1098.430035][ T5923] usb 4-1: config 241 has 1 interface, different from the descriptor's value: 0
[ 1098.439243][ T5923] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9
[ 1098.457525][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.475984][ T5923] pcwd_usb: The device isn't a Human Interface Device
[ 1099.643500][T14420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2197'.
[ 1101.439452][T14425] nvme_fabrics: missing parameter 'transport=%s'
[ 1101.684872][T14425] nvme_fabrics: missing parameter 'nqn=%s'
[ 1101.897379][   T24] usb 4-1: USB disconnect, device number 18
[ 1102.579200][T14440] netlink: 'syz.5.2202': attribute type 11 has an invalid length.
[ 1102.587181][T14440] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2202'.
[ 1103.018272][T14444] syz.1.2200 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1103.902009][T14453] Device name cannot be null; rc = [-22]
[ 1104.727523][T14460] Device name cannot be null; rc = [-22]
[ 1104.962355][T14463] Device name cannot be null; rc = [-22]
[ 1107.818839][T14479] geneve2: entered promiscuous mode
[ 1107.840050][T14479] geneve2: entered allmulticast mode
[ 1109.531468][T14492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2215'.
[ 1111.351551][T14507] cifs: Bad value for 'port'
[ 1111.582911][T14512] Device name cannot be null; rc = [-22]
[ 1113.869144][T14538] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2231'.
[ 1115.651822][T14546] netlink: 'syz.3.2230': attribute type 4 has an invalid length.
[ 1115.698712][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.706614][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.557088][T14557] Device name cannot be null; rc = [-22]
[ 1118.083695][T14568] Device name cannot be null; rc = [-22]
[ 1120.307488][T14581] Device name cannot be null; rc = [-22]
[ 1121.118130][T14586] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2243'.
[ 1123.132870][T14603] Device name cannot be null; rc = [-22]
[ 1125.117520][ T5923] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1126.967488][ T5923] usb 5-1: Using ep0 maxpacket: 32
[ 1126.985249][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1127.014614][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1127.026348][ T5923] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1127.038222][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.056964][ T5923] usb 5-1: config 0 descriptor??
[ 1127.472908][ T5923] usbhid 5-1:0.0: can't add hid device: -71
[ 1127.499098][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1127.518605][ T5923] usb 5-1: USB disconnect, device number 17
[ 1130.322666][T14653] net_ratelimit: 76 callbacks suppressed
[ 1130.322708][T14653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1130.897366][T14663] Device name cannot be null; rc = [-22]
[ 1132.007605][T14671] fuse: Bad value for 'fd'
[ 1132.620056][T14672] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2269'.
[ 1135.047620][   T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1135.377498][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1135.384701][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1135.395942][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1135.406277][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1135.415494][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.442552][   T24] usb 4-1: config 0 descriptor??
[ 1135.865796][   T24] usbhid 4-1:0.0: can't add hid device: -71
[ 1135.896817][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1135.984292][   T24] usb 4-1: USB disconnect, device number 19
[ 1137.913901][T14716] fuse: Bad value for 'fd'
[ 1138.690882][T14726] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1140.413863][T14742] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2287'.
[ 1140.477568][T14743] ubi: mtd0 is already attached to ubi31
[ 1141.017527][T14742] netlink: zone id is out of range
[ 1141.022709][T14742] netlink: zone id is out of range
[ 1141.028493][T14742] netlink: zone id is out of range
[ 1141.033615][T14742] netlink: zone id is out of range
[ 1141.038770][T14742] netlink: zone id is out of range
[ 1141.043891][T14742] netlink: zone id is out of range
[ 1141.049008][T14742] netlink: zone id is out of range
[ 1141.054126][T14742] netlink: zone id is out of range
[ 1141.059291][T14742] netlink: zone id is out of range
[ 1141.064415][T14742] netlink: zone id is out of range
[ 1141.346518][T14749] Device name cannot be null; rc = [-22]
[ 1141.618189][T14751] can0: slcan on ptm1.
[ 1141.670219][T14750] can0 (unregistered): slcan off ptm1.
[ 1143.316592][T14771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2296'.
[ 1144.736751][T14770] nvme_fabrics: missing parameter 'transport=%s'
[ 1144.784527][T14770] nvme_fabrics: missing parameter 'nqn=%s'
[ 1144.789171][T14781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2299'.
[ 1145.312072][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'.
[ 1145.676458][T14793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2303'.
[ 1146.421228][T14799] ubi: mtd0 is already attached to ubi31
[ 1147.592170][T14794] nvme_fabrics: missing parameter 'transport=%s'
[ 1147.684556][T14794] nvme_fabrics: missing parameter 'nqn=%s'
[ 1148.204081][T14811] Device name cannot be null; rc = [-22]
[ 1149.732623][T14817] tmpfs: Unknown parameter 'grpquota 0
[ 1149.732623][T14817] '
[ 1149.741611][T14817] netlink: 'syz.3.2309': attribute type 11 has an invalid length.
[ 1149.749558][T14817] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2309'.
[ 1149.980720][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'.
[ 1150.504266][T14836] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2317'.
[ 1151.993238][T14848] Device name cannot be null; rc = [-22]
[ 1152.327478][ T5979] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1152.577492][ T5979] usb 4-1: Using ep0 maxpacket: 32
[ 1152.585194][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1153.337613][ T5979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1153.414959][ T5979] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1153.446483][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1153.659933][ T5979] usb 4-1: config 0 descriptor??
[ 1153.673164][ T5979] usb 4-1: can't set config #0, error -71
[ 1153.686877][ T5979] usb 4-1: USB disconnect, device number 20
[ 1153.813009][T14864] Device name cannot be null; rc = [-22]
[ 1154.371545][T14875] Device name cannot be null; rc = [-22]
[ 1156.998050][T14881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2330'.
[ 1158.170931][T14881] nvme_fabrics: missing parameter 'transport=%s'
[ 1158.177429][T14881] nvme_fabrics: missing parameter 'nqn=%s'
[ 1158.701280][T14900] Device name cannot be null; rc = [-22]
[ 1159.931339][T14895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1159.947477][ T5979] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1160.117462][ T5979] usb 5-1: Using ep0 maxpacket: 32
[ 1160.131916][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1160.208754][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1160.328183][ T5979] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1160.337266][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.377944][ T5979] usb 5-1: config 0 descriptor??
[ 1160.393513][T14911] [U] 
[ 1161.527671][ T5979] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[ 1161.663088][ T5979] usb 5-1: USB disconnect, device number 18
[ 1165.629024][T14947] wireguard1: entered promiscuous mode
[ 1165.638556][T14947] wireguard1: entered allmulticast mode
[ 1166.407032][T14960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2349'.
[ 1169.584807][T14960] nvme_fabrics: missing parameter 'transport=%s'
[ 1170.877828][T14960] nvme_fabrics: missing parameter 'nqn=%s'
[ 1173.747458][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1174.721386][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1174.839547][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1174.879556][T14998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2359'.
[ 1174.886135][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1175.230138][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1175.474124][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.486731][   T10] usb 5-1: config 0 descriptor??
[ 1175.615106][   T10] usbhid 5-1:0.0: can't add hid device: -71
[ 1175.640694][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1175.674822][T15006] binder: 15005:15006 ioctl c018620c 0 returned -14
[ 1175.687673][   T10] usb 5-1: USB disconnect, device number 19
[ 1178.504377][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1178.522836][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.767315][T15018] nvme_fabrics: missing parameter 'transport=%s'
[ 1179.775634][T15008] wireguard2: entered promiscuous mode
[ 1179.789512][T15008] wireguard2: entered allmulticast mode
[ 1179.817085][T15021] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2364'.
[ 1179.826047][T15018] nvme_fabrics: missing parameter 'nqn=%s'
[ 1181.208032][T15047] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2374'.
[ 1183.753699][T15071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'.
[ 1185.807718][T15072] nvme_fabrics: missing parameter 'transport=%s'
[ 1185.814468][T15072] nvme_fabrics: missing parameter 'nqn=%s'
[ 1190.946313][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2395'.
[ 1191.673637][T15130] nvme_fabrics: missing parameter 'transport=%s'
[ 1191.726683][T15130] nvme_fabrics: missing parameter 'nqn=%s'
[ 1193.086896][T15143] Device name cannot be null; rc = [-22]
[ 1194.042686][T15151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2400'.
[ 1196.600161][T15151] nvme_fabrics: missing parameter 'transport=%s'
[ 1196.675728][T15158] netlink: 'syz.3.2404': attribute type 10 has an invalid length.
[ 1196.714586][T15158] 8021q: adding VLAN 0 to HW filter on device team0
[ 1196.743224][T15158] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1197.058494][T15151] nvme_fabrics: missing parameter 'nqn=%s'
[ 1197.128833][T15160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2405'.
[ 1198.347527][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1198.644028][T15173] mmap: syz.4.2407 (15173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1198.827223][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2410'.
[ 1198.836436][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1198.858059][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1198.867474][   T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1198.876534][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1199.187488][   T10] usb 4-1: Product: syz
[ 1199.191698][   T10] usb 4-1: Manufacturer: syz
[ 1199.197297][   T10] usb 4-1: SerialNumber: syz
[ 1199.206017][   T10] usb 4-1: config 0 descriptor??
[ 1199.457551][   T92] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1199.617951][   T10] gs_usb 4-1:0.0: Configuring for 1 interfaces
[ 1199.652022][   T92] usb 6-1: Using ep0 maxpacket: 8
[ 1199.662733][   T92] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1199.679369][   T92] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1199.697565][   T92] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1199.712959][   T92] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1199.727480][   T92] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1199.736863][   T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1199.759176][   T92] usbtmc 6-1:16.0: bulk endpoints not found
[ 1200.444252][T13735] usb 4-1: USB disconnect, device number 21
[ 1201.550004][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2419'.
[ 1202.822382][T15206] nvme_fabrics: missing parameter 'transport=%s'
[ 1202.837319][T15206] nvme_fabrics: missing parameter 'nqn=%s'
[ 1202.890561][T15211] [U] 
[ 1202.925515][   T92] usb 6-1: USB disconnect, device number 8
[ 1203.887085][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2423'.
[ 1205.268592][T15221] nvme_fabrics: missing parameter 'transport=%s'
[ 1205.285233][T15221] nvme_fabrics: missing parameter 'nqn=%s'
[ 1205.826328][T15234] Device name cannot be null; rc = [-22]
[ 1210.059097][T15266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2437'.
[ 1210.475952][T15267] nvme_fabrics: missing parameter 'transport=%s'
[ 1210.531150][T15267] nvme_fabrics: missing parameter 'nqn=%s'
[ 1210.619897][T15259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2435'.
[ 1210.857579][T15259] nvme_fabrics: missing parameter 'transport=%s'
[ 1210.863968][T15259] nvme_fabrics: missing parameter 'nqn=%s'
[ 1211.264821][T15280] macvlan7: entered promiscuous mode
[ 1212.460341][T15286] sctp: [Deprecated]: syz.1.2441 (pid 15286) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1212.460341][T15286] Use struct sctp_sack_info instead
[ 1213.864249][T15301] Device name cannot be null; rc = [-22]
[ 1215.172475][T15313] Device name cannot be null; rc = [-22]
[ 1216.168705][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2449'.
[ 1216.753491][T15318] nvme_fabrics: missing parameter 'transport=%s'
[ 1216.776556][T15318] nvme_fabrics: missing parameter 'nqn=%s'
[ 1216.933708][T15330] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1216.965569][T15330] CIFS mount error: No usable UNC path provided in device string!
[ 1216.965569][T15330] 
[ 1216.984684][T15330] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1218.807542][   T92] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1219.499849][   T92] usb 4-1: Using ep0 maxpacket: 32
[ 1219.523668][   T92] usb 4-1: config 0 has an invalid interface number: 225 but max is 0
[ 1219.537423][   T92] usb 4-1: config 0 has no interface number 0
[ 1219.561012][   T92] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79
[ 1219.600064][   T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.839420][   T92] usb 4-1: Product: syz
[ 1219.931359][   T92] usb 4-1: Manufacturer: syz
[ 1219.977100][   T92] usb 4-1: SerialNumber: syz
[ 1220.107443][   T92] usb 4-1: config 0 descriptor??
[ 1220.156060][T15349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1220.929974][   T92] mos7840 4-1:0.225: required endpoints missing
[ 1221.045547][   T92] usb 4-1: USB disconnect, device number 22
[ 1222.029377][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2463'.
[ 1223.416556][T15361] nvme_fabrics: missing parameter 'transport=%s'
[ 1223.468775][T15361] nvme_fabrics: missing parameter 'nqn=%s'
[ 1223.504948][T15372] CIFS mount error: No usable UNC path provided in device string!
[ 1223.504948][T15372] 
[ 1223.520468][T15372] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1225.207693][T15386] autofs: Unknown parameter 'fd0x0000000000000000'
[ 1226.694228][T15401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1228.442954][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2478'.
[ 1230.216983][T15423] nvme_fabrics: missing parameter 'transport=%s'
[ 1230.406145][T15423] nvme_fabrics: missing parameter 'nqn=%s'
[ 1231.800661][T15443] Device name cannot be null; rc = [-22]
[ 1233.344458][T15462] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2487'.
[ 1236.700823][T15477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2490'.
[ 1237.022704][T15487] input: syz1 as /devices/virtual/input/input12
[ 1237.081016][T15488] vivid-000: disconnect
[ 1237.569527][T15480] vivid-000: reconnect
[ 1238.439644][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2497'.
[ 1238.818830][T15503] macvlan4: entered promiscuous mode
[ 1238.901324][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.907845][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.689578][T15513] Device name cannot be null; rc = [-22]
[ 1241.509003][T15518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2503'.
[ 1243.574139][T15533] geneve2: entered promiscuous mode
[ 1243.579657][T15533] geneve2: entered allmulticast mode
[ 1244.055331][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2505'.
[ 1245.577103][T15537] nvme_fabrics: missing parameter 'transport=%s'
[ 1245.597429][T15537] nvme_fabrics: missing parameter 'nqn=%s'
[ 1245.654773][T15542] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2509'.
[ 1247.333924][T15562] geneve2: entered promiscuous mode
[ 1247.339254][T15562] geneve2: entered allmulticast mode
[ 1247.897962][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1248.227478][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1248.236992][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1249.026793][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1249.043114][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1249.052422][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1249.647171][   T10] usb 5-1: config 0 descriptor??
[ 1249.998538][   T10] usbhid 5-1:0.0: can't add hid device: -71
[ 1250.004597][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1250.046998][   T10] usb 5-1: USB disconnect, device number 20
[ 1250.236089][T15578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2521'.
[ 1250.349884][T15579] macvlan4: entered promiscuous mode
[ 1253.074903][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2522'.
[ 1253.544400][T15585] nvme_fabrics: missing parameter 'transport=%s'
[ 1253.550898][T15585] nvme_fabrics: missing parameter 'nqn=%s'
[ 1256.157426][T15616] Device name cannot be null; rc = [-22]
[ 1256.367650][T15611] geneve2: entered promiscuous mode
[ 1256.372909][T15611] geneve2: entered allmulticast mode
[ 1256.847016][T15613] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2530'.
[ 1257.779369][T15634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2535'.
[ 1260.448145][T15652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2538'.
[ 1261.178558][T15655] netlink: 'syz.5.2539': attribute type 10 has an invalid length.
[ 1263.829406][T15664] geneve2: entered promiscuous mode
[ 1263.834698][T15664] geneve2: entered allmulticast mode
[ 1264.376639][T15672] macvlan3: entered promiscuous mode
[ 1264.719818][T15677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2545'.
[ 1264.926380][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2546'.
[ 1268.066949][T15701] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2551'.
[ 1270.121374][T15716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2555'.
[ 1270.631919][T15721] macvlan5: entered promiscuous mode
[ 1272.742700][T15717] nvme_fabrics: missing parameter 'transport=%s'
[ 1273.237842][T15717] nvme_fabrics: missing parameter 'nqn=%s'
[ 1274.110359][ T2997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1274.648820][ T2997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1274.696205][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1274.710792][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1274.722171][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1274.761726][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1274.775271][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1275.530604][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1275.614481][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1275.623006][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1275.633318][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1275.641093][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1275.726258][ T2997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1277.129434][T15761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2565'.
[ 1277.148800][ T2997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1277.681183][ T5857] Bluetooth: hci2: command tx timeout
[ 1278.599881][T15776] kernel profiling enabled (shift: 63)
[ 1278.605636][T15776] profiling shift: 63 too large
[ 1278.784347][ T2997] bridge_slave_1: left allmulticast mode
[ 1278.790800][ T2997] bridge_slave_1: left promiscuous mode
[ 1279.707545][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1279.757452][ T5857] Bluetooth: hci2: command tx timeout
[ 1279.798824][ T2997] bridge_slave_0: left allmulticast mode
[ 1279.804617][ T2997] bridge_slave_0: left promiscuous mode
[ 1279.951598][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1280.993244][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1281.004306][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1281.014858][ T2997] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[ 1281.023335][ T2997] veth1_vlan: left allmulticast mode
[ 1281.031352][ T2997] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1281.728142][ T2997] bond0 (unregistering): Released all slaves
[ 1281.745278][ T2997] bond1 (unregistering): Released all slaves
[ 1281.769017][ T2997] bond2 (unregistering): Released all slaves
[ 1281.849559][ T5857] Bluetooth: hci2: command tx timeout
[ 1281.942353][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2571'.
[ 1281.977708][T15792] macvlan5: entered promiscuous mode
[ 1281.988611][ T2997] tipc: Left network mode
[ 1281.994397][T15776] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1282.023423][T15776] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1283.144240][T15744] chnl_net:caif_netlink_parms(): no params data found
[ 1283.228825][T15811] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2577'.
[ 1284.195569][T15818] geneve2: entered promiscuous mode
[ 1284.213787][T15818] geneve2: entered allmulticast mode
[ 1284.522567][ T2997] hsr_slave_0: left promiscuous mode
[ 1284.557872][ T2997] hsr_slave_1: left promiscuous mode
[ 1284.565519][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1284.573526][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1284.587149][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1284.612664][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1284.656620][ T2997] veth1_macvtap: left promiscuous mode
[ 1284.667518][ T2997] veth0_macvtap: left promiscuous mode
[ 1284.673405][ T2997] veth1_vlan: left promiscuous mode
[ 1284.679040][ T2997] veth0_vlan: left promiscuous mode
[ 1289.613183][T15847] nvme_fabrics: missing parameter 'transport=%s'
[ 1289.619848][T15847] nvme_fabrics: missing parameter 'nqn=%s'
[ 1289.818974][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2586'.
[ 1290.529658][ T2997] team0 (unregistering): Port device team_slave_1 removed
[ 1290.566369][ T2997] team0 (unregistering): Port device team_slave_0 removed
[ 1291.484515][T15846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2584'.
[ 1291.541783][T15857] macvlan4: entered promiscuous mode
[ 1292.575110][T15879] ubi: mtd0 is already attached to ubi31
[ 1292.925994][T15744] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.938222][T15744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.945579][T15744] bridge_slave_0: entered allmulticast mode
[ 1292.957152][T15744] bridge_slave_0: entered promiscuous mode
[ 1292.980394][T15744] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1292.993221][T15744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1293.000613][T15744] bridge_slave_1: entered allmulticast mode
[ 1293.013515][T15744] bridge_slave_1: entered promiscuous mode
[ 1293.151131][T15744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1293.186928][T15744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1294.090734][T15744] team0: Port device team_slave_0 added
[ 1294.191598][T15744] team0: Port device team_slave_1 added
[ 1294.399880][T15744] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1294.420534][T15744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1294.518445][T15744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1294.548030][T15744] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1294.555112][T15744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1294.581279][T15744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1295.476879][T15744] hsr_slave_0: entered promiscuous mode
[ 1295.505221][T15744] hsr_slave_1: entered promiscuous mode
[ 1295.847372][T15903] kernel profiling enabled (shift: 63)
[ 1295.867838][T15903] profiling shift: 63 too large
[ 1296.376365][T15908] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2598'.
[ 1297.689239][T15744] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1297.700703][T15744] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1297.784011][T15744] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1297.821167][T15744] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1297.881925][T15919] netlink: 'syz.6.2601': attribute type 10 has an invalid length.
[ 1298.037233][T15744] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1298.084542][T15744] 8021q: adding VLAN 0 to HW filter on device team0
[ 1298.186663][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1298.193947][ T7437] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1298.220659][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1298.227974][ T7437] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1300.006576][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.016269][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.117530][T15946] ubi: mtd0 is already attached to ubi31
[ 1300.609581][T15939] macvlan5: entered promiscuous mode
[ 1300.899709][T15744] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1301.800283][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2608'.
[ 1303.231044][T15963] nvme_fabrics: missing parameter 'transport=%s'
[ 1303.238097][T15963] nvme_fabrics: missing parameter 'nqn=%s'
[ 1303.554340][T15971] kernel profiling enabled (shift: 63)
[ 1303.566421][T15971] profiling shift: 63 too large
[ 1303.616634][T15744] veth0_vlan: entered promiscuous mode
[ 1303.723002][T15744] veth1_vlan: entered promiscuous mode
[ 1306.049306][T15744] veth0_macvtap: entered promiscuous mode
[ 1306.565713][T15744] veth1_macvtap: entered promiscuous mode
[ 1306.606146][T15744] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1306.626000][T15744] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1306.745611][ T7437] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.768960][ T7437] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1307.659156][T15984] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2612'.
[ 1307.672216][ T7437] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1307.689972][ T7437] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1308.499735][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1308.533521][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1308.623524][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1308.674805][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1310.855054][T16012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1311.031862][T16022] macvlan6: entered promiscuous mode
[ 1314.013337][T16044] kernel profiling enabled (shift: 63)
[ 1314.260525][T16044] profiling shift: 63 too large
[ 1315.980798][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2635'.
[ 1316.084666][T16071] netlink: 'syz.5.2634': attribute type 10 has an invalid length.
[ 1318.954069][T16076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1320.678570][T16103] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2644'.
[ 1321.280274][ T7276] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1321.324610][T16116] netlink: 'syz.1.2649': attribute type 10 has an invalid length.
[ 1321.559820][ T7276] usb 6-1: Using ep0 maxpacket: 32
[ 1321.635268][ T7276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1321.947810][T16125] fuse: Bad value for 'fd'
[ 1322.114002][ T7276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1322.222445][T16120] kernel profiling enabled (shift: 63)
[ 1322.228369][T16120] profiling shift: 63 too large
[ 1322.249389][ T7276] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1322.587370][ T7276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1322.608316][ T7276] usb 6-1: config 0 descriptor??
[ 1324.108342][ T7276] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[ 1324.630184][ T7276] usb 6-1: USB disconnect, device number 9
[ 1324.996729][T16141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1325.020424][T16151] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2660'.
[ 1325.296294][T16155] netlink: 'syz.6.2662': attribute type 10 has an invalid length.
[ 1325.697570][T16160] geneve2: entered promiscuous mode
[ 1325.702892][T16160] geneve2: entered allmulticast mode
[ 1328.865609][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2667'.
[ 1329.717729][T16194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2673'.
[ 1330.622235][T16203] geneve2: entered promiscuous mode
[ 1330.627698][T16203] geneve2: entered allmulticast mode
[ 1333.566218][T16212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1335.299154][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'.
[ 1335.863323][T16243] netlink: 'syz.6.2687': attribute type 10 has an invalid length.
[ 1339.524494][T16270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1339.767104][T16279] wireguard0: entered promiscuous mode
[ 1339.777976][T16279] wireguard0: entered allmulticast mode
[ 1339.848451][   T92] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1340.003738][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2700'.
[ 1340.277369][   T92] usb 6-1: Using ep0 maxpacket: 32
[ 1340.284207][   T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1340.295398][   T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1340.354863][   T92] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1340.425423][   T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1340.494299][   T92] usb 6-1: config 0 descriptor??
[ 1341.130732][   T92] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[ 1341.347791][   T92] usb 6-1: USB disconnect, device number 10
[ 1344.807122][T16328] kernel profiling enabled (shift: 63)
[ 1345.145207][T16328] profiling shift: 63 too large
[ 1345.670522][T16011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.950912][T16011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.452277][T16011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.539849][T16330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1346.624229][T16011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.883921][T16338] overlayfs: failed to clone upperpath
[ 1347.070408][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1347.090191][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1347.099964][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1347.108290][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1347.116090][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1347.135382][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1347.145371][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1347.157916][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1347.166150][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1347.185250][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1347.486782][T16011] bridge_slave_1: left allmulticast mode
[ 1347.503410][T16011] bridge_slave_1: left promiscuous mode
[ 1347.511601][T16011] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1348.198609][T16011] bridge_slave_0: left allmulticast mode
[ 1348.204294][T16011] bridge_slave_0: left promiscuous mode
[ 1348.217808][T16011] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.277580][ T5856] Bluetooth: hci3: command tx timeout
[ 1349.793174][T16011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1349.804160][T16011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1349.816558][T16011] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1349.825648][T16011] bond0 (unregistering): Released all slaves
[ 1349.840540][T16011] bond1 (unregistering): Released all slaves
[ 1349.856142][T16011] bond2 (unregistering): Released all slaves
[ 1349.873916][T16011] bond3 (unregistering): Released all slaves
[ 1349.963868][T16358] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2722'.
[ 1351.920929][ T5856] Bluetooth: hci3: command tx timeout
[ 1352.146176][T16376] ubi: mtd0 is already attached to ubi31
[ 1353.999014][ T5856] Bluetooth: hci3: command tx timeout
[ 1354.463502][T16337] chnl_net:caif_netlink_parms(): no params data found
[ 1354.730600][ T7276] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1354.977472][ T7276] usb 8-1: Using ep0 maxpacket: 32
[ 1354.986885][ T7276] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[ 1355.007579][ T7276] usb 8-1: config 0 has no interface number 0
[ 1355.015736][ T7276] usb 8-1: config 0 interface 153 has no altsetting 0
[ 1355.032144][ T7276] usb 8-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0
[ 1355.047446][ T7276] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1355.055474][ T7276] usb 8-1: Product: syz
[ 1355.059724][ T7276] usb 8-1: Manufacturer: syz
[ 1355.064336][ T7276] usb 8-1: SerialNumber: syz
[ 1355.071897][ T7276] usb 8-1: config 0 descriptor??
[ 1355.080964][ T7276] ti_usb_3410_5052 8-1:0.153: required endpoints missing
[ 1355.116112][T16403] macvlan6: entered promiscuous mode
[ 1355.131551][T16011] hsr_slave_0: left promiscuous mode
[ 1355.138363][T16011] hsr_slave_1: left promiscuous mode
[ 1355.144407][T16011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1355.260025][T16011] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1355.298450][T16011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1355.349477][T16011] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1356.077403][ T5856] Bluetooth: hci3: command tx timeout
[ 1356.095672][T16011] veth1_macvtap: left promiscuous mode
[ 1356.101434][T16011] veth0_macvtap: left promiscuous mode
[ 1356.107332][T16011] veth1_vlan: left promiscuous mode
[ 1356.112731][T16011] veth0_vlan: left promiscuous mode
[ 1356.789909][T16011] team0 (unregistering): Port device team_slave_1 removed
[ 1356.842910][T16011] team0 (unregistering): Port device team_slave_0 removed
[ 1358.624064][T16337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1358.633351][T16337] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1358.640975][T16337] bridge_slave_0: entered allmulticast mode
[ 1358.652965][T16337] bridge_slave_0: entered promiscuous mode
[ 1358.728970][T16409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2735'.
[ 1358.828249][T16337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1358.861452][T16337] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1358.882914][T16337] bridge_slave_1: entered allmulticast mode
[ 1358.909030][T16337] bridge_slave_1: entered promiscuous mode
[ 1359.009788][T16394] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 1359.971872][T15995] usb 8-1: USB disconnect, device number 2
[ 1359.985450][T16337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1360.303948][T16337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1360.571409][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2742'.
[ 1360.699136][T16337] team0: Port device team_slave_0 added
[ 1360.805877][T16337] team0: Port device team_slave_1 added
[ 1360.882603][T16337] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1360.933859][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1361.036793][T16337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1361.057646][T16337] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1361.068764][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1361.098088][T16337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1361.221331][T16337] hsr_slave_0: entered promiscuous mode
[ 1361.243330][T16337] hsr_slave_1: entered promiscuous mode
[ 1361.265973][T16337] debugfs: 'hsr0' already exists in 'hsr'
[ 1361.361679][T16337] Cannot create hsr debugfs directory
[ 1361.443581][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.471570][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1365.190377][T16468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2749'.
[ 1367.520995][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2753'.
[ 1367.719019][T16486] macvlan7: entered promiscuous mode
[ 1369.636618][T16337] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1369.879655][T16337] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1369.979613][T16502] ubi: mtd0 is already attached to ubi31
[ 1372.129154][T16337] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1372.157734][T16337] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1373.713083][T16337] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1373.750442][T16337] 8021q: adding VLAN 0 to HW filter on device team0
[ 1373.785910][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1373.793178][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1374.055301][T15738] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1374.062677][T15738] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1374.149298][T16525] ubi: mtd0 is already attached to ubi31
[ 1375.887742][T16337] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1376.421494][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2767'.
[ 1376.716062][T16550] nvme_fabrics: missing parameter 'transport=%s'
[ 1376.887802][T16550] nvme_fabrics: missing parameter 'nqn=%s'
[ 1376.975129][T16337] veth0_vlan: entered promiscuous mode
[ 1377.156295][T16337] veth1_vlan: entered promiscuous mode
[ 1377.216305][T16337] veth0_macvtap: entered promiscuous mode
[ 1378.138931][T16562] wireguard1: entered promiscuous mode
[ 1378.146429][T16562] wireguard1: entered allmulticast mode
[ 1378.191139][T16337] veth1_macvtap: entered promiscuous mode
[ 1378.246855][T16337] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1378.268380][T16337] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1378.284354][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1378.302922][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1378.315592][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1378.338892][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1379.233424][T16577] overlayfs: failed to clone upperpath
[ 1379.564206][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1379.578185][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1379.725635][T16581] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2775'.
[ 1379.771182][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1379.792640][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1381.306576][T16592] ubi: mtd0 is already attached to ubi31
[ 1383.845056][T16610] Device name cannot be null; rc = [-22]
[ 1384.634405][T16621] bridge0: entered promiscuous mode
[ 1384.640099][T16621] macvlan2: entered promiscuous mode
[ 1384.991417][T16609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2781'.
[ 1386.028425][T16620] nvme_fabrics: missing parameter 'transport=%s'
[ 1386.061659][T16620] nvme_fabrics: missing parameter 'nqn=%s'
[ 1388.690255][T16656] ubi: mtd0 is already attached to ubi31
[ 1390.017312][T16662] Device name cannot be null; rc = [-22]
[ 1393.025566][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2799'.
[ 1394.904360][T16691] fuse: Bad value for 'fd'
[ 1395.440507][T16692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2805'.
[ 1396.263198][T16704] geneve2: entered promiscuous mode
[ 1396.268548][T16704] geneve2: entered allmulticast mode
[ 1397.212820][T16710] overlayfs: failed to clone upperpath
[ 1397.581416][T16719] Device name cannot be null; rc = [-22]
[ 1400.703015][T16737] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2818'.
[ 1400.712602][T16737] net_ratelimit: 76 callbacks suppressed
[ 1400.712640][T16737] netlink: zone id is out of range
[ 1400.724045][T16737] netlink: zone id is out of range
[ 1400.729297][T16737] netlink: zone id is out of range
[ 1400.734559][T16737] netlink: zone id is out of range
[ 1400.740704][T16737] netlink: zone id is out of range
[ 1400.745890][T16737] netlink: zone id is out of range
[ 1400.751236][T16737] netlink: zone id is out of range
[ 1400.756453][T16737] netlink: zone id is out of range
[ 1400.761787][T16737] netlink: zone id is out of range
[ 1400.767021][T16737] netlink: zone id is out of range
[ 1401.365320][T16745] Device name cannot be null; rc = [-22]
[ 1403.360144][T16741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1404.136951][T16767] geneve2: entered promiscuous mode
[ 1404.142361][T16767] geneve2: entered allmulticast mode
[ 1404.423526][T16775] netlink: 'syz.4.2827': attribute type 10 has an invalid length.
[ 1404.497698][ T7276] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1404.541781][T16775] 8021q: adding VLAN 0 to HW filter on device team0
[ 1404.601704][T16775] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1404.687769][ T7276] usb 6-1: Using ep0 maxpacket: 32
[ 1404.878877][ T7276] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1404.901352][ T7276] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1404.914190][ T7276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1404.955050][ T7276] usb 6-1: Product: syz
[ 1404.980549][ T7276] usb 6-1: Manufacturer: syz
[ 1405.001058][ T7276] usb 6-1: SerialNumber: syz
[ 1405.094796][ T7276] usb 6-1: config 0 descriptor??
[ 1405.593642][ T7276] gs_usb 6-1:0.0: Configuring for 1 interfaces
[ 1405.809479][ T7276] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[ 1405.986865][ T7276] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121
[ 1406.363791][T16785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2831'.
[ 1406.840091][T16791] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2832'.
[ 1406.851096][T16791] net_ratelimit: 76 callbacks suppressed
[ 1406.851135][T16791] netlink: zone id is out of range
[ 1406.862049][T16791] netlink: zone id is out of range
[ 1406.867422][T16791] netlink: zone id is out of range
[ 1406.872633][T16791] netlink: zone id is out of range
[ 1406.880079][T16791] netlink: zone id is out of range
[ 1406.886554][T16791] netlink: zone id is out of range
[ 1406.893351][T16791] netlink: zone id is out of range
[ 1406.900467][T16791] netlink: zone id is out of range
[ 1406.912008][T16791] netlink: zone id is out of range
[ 1406.917985][T16791] netlink: zone id is out of range
[ 1407.375653][ T5979] usb 6-1: USB disconnect, device number 11
[ 1408.106870][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'.
[ 1409.307520][ T5979] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1409.408342][T16804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1409.797977][ T5979] usb 6-1: Using ep0 maxpacket: 32
[ 1409.811982][ T5979] usb 6-1: config 0 has an invalid interface number: 153 but max is 0
[ 1409.822243][ T5979] usb 6-1: config 0 has no interface number 0
[ 1409.835794][ T5979] usb 6-1: config 0 interface 153 has no altsetting 0
[ 1409.845627][T16812] Device name cannot be null; rc = [-22]
[ 1410.034846][ T5979] usb 6-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0
[ 1410.044250][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.052414][ T5979] usb 6-1: Product: syz
[ 1410.065482][T16815] geneve2: entered promiscuous mode
[ 1410.070790][T16815] geneve2: entered allmulticast mode
[ 1410.088475][ T5979] usb 6-1: Manufacturer: syz
[ 1410.098103][ T5979] usb 6-1: SerialNumber: syz
[ 1410.147606][ T5979] usb 6-1: config 0 descriptor??
[ 1410.167748][ T5979] ti_usb_3410_5052 6-1:0.153: TI USB 3410 1 port adapter converter detected
[ 1410.193795][ T5979] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[ 1410.534224][T16801] wireguard0: entered promiscuous mode
[ 1410.795947][T16801] wireguard0: entered allmulticast mode
[ 1410.962336][ T5923] usb 6-1: USB disconnect, device number 12
[ 1411.182453][ T5923] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[ 1411.989835][ T5923] ti_usb_3410_5052 6-1:0.153: device disconnected
[ 1412.730067][T16836] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2845'.
[ 1412.739638][T16836] net_ratelimit: 76 callbacks suppressed
[ 1412.739673][T16836] netlink: zone id is out of range
[ 1412.750647][T16836] netlink: zone id is out of range
[ 1412.755827][T16836] netlink: zone id is out of range
[ 1412.761096][T16836] netlink: zone id is out of range
[ 1412.766324][T16836] netlink: zone id is out of range
[ 1412.771696][T16836] netlink: zone id is out of range
[ 1412.777015][T16836] netlink: zone id is out of range
[ 1412.782264][T16836] netlink: zone id is out of range
[ 1412.787529][T16836] netlink: zone id is out of range
[ 1412.792855][T16836] netlink: zone id is out of range
[ 1413.784796][ T5923] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1414.637262][ T5923] usb 6-1: Using ep0 maxpacket: 32
[ 1414.728519][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1414.847697][ T5923] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1414.898457][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.931836][ T5923] usb 6-1: Product: syz
[ 1415.063090][T16850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1415.073061][ T5923] usb 6-1: Manufacturer: syz
[ 1415.083742][ T5923] usb 6-1: SerialNumber: syz
[ 1415.096131][ T5923] usb 6-1: config 0 descriptor??
[ 1415.417675][T16860] Device name cannot be null; rc = [-22]
[ 1416.295810][ T5923] gs_usb 6-1:0.0: Couldn't send data format (err=-71)
[ 1417.006557][ T5923] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71
[ 1417.030925][ T5923] usb 6-1: USB disconnect, device number 13
[ 1418.294616][T16881] wireguard2: entered promiscuous mode
[ 1418.317411][T16881] wireguard2: entered allmulticast mode
[ 1419.520283][T16890] netlink: 'syz.5.2860': attribute type 4 has an invalid length.
[ 1422.260489][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2865'.
[ 1422.891955][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.947355][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.258330][T16918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1425.780146][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2879'.
[ 1427.584464][T16965] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2881'.
[ 1427.594967][T16965] net_ratelimit: 76 callbacks suppressed
[ 1427.600829][T16965] netlink: zone id is out of range
[ 1427.606140][T16965] netlink: zone id is out of range
[ 1427.611481][T16965] netlink: zone id is out of range
[ 1427.616774][T16965] netlink: zone id is out of range
[ 1427.622203][T16965] netlink: zone id is out of range
[ 1427.627532][T16965] netlink: zone id is out of range
[ 1427.633011][T16965] netlink: zone id is out of range
[ 1427.638546][T16965] netlink: zone id is out of range
[ 1427.644122][T16965] netlink: zone id is out of range
[ 1427.650788][T16965] netlink: zone id is out of range
[ 1429.062730][T16989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1429.070389][T16989] IPv6: NLM_F_CREATE should be set when creating new route
[ 1429.077913][T16989] IPv6: NLM_F_CREATE should be set when creating new route
[ 1429.085215][T16989] IPv6: NLM_F_CREATE should be set when creating new route
[ 1429.381295][T16976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1430.238099][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2893'.
[ 1432.398666][T17014] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2898'.
[ 1433.774966][T17026] geneve2: entered promiscuous mode
[ 1433.780233][T17026] geneve2: entered allmulticast mode
[ 1433.850508][T17030] binder: 17022:17030 ioctl c0306201 200000000540 returned -22
[ 1436.383131][T17035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1436.588512][T17049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1436.595801][T17049] IPv6: NLM_F_CREATE should be set when creating new route
[ 1436.603227][T17049] IPv6: NLM_F_CREATE should be set when creating new route
[ 1436.610566][T17049] IPv6: NLM_F_CREATE should be set when creating new route
[ 1437.967295][ T7276] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1438.211020][ T7276] usb 6-1: Using ep0 maxpacket: 32
[ 1438.236555][ T7276] usb 6-1: config 0 has an invalid interface number: 225 but max is 0
[ 1438.261384][ T7276] usb 6-1: config 0 has no interface number 0
[ 1438.277103][ T7276] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79
[ 1438.298458][ T7276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.320750][ T7276] usb 6-1: Product: syz
[ 1438.325088][ T7276] usb 6-1: Manufacturer: syz
[ 1438.336463][ T7276] usb 6-1: SerialNumber: syz
[ 1438.356763][ T7276] usb 6-1: config 0 descriptor??
[ 1438.366568][T17067] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2915'.
[ 1438.723218][T17080] Device name cannot be null; rc = [-22]
[ 1438.917198][    C1] hrtimer: interrupt took 38610 ns
[ 1439.149166][ T7276] mos7840 6-1:0.225: required endpoints missing
[ 1439.171948][ T5923] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1439.193291][ T7276] usb 6-1: USB disconnect, device number 14
[ 1439.377366][ T5923] usb 8-1: Using ep0 maxpacket: 32
[ 1439.400388][ T5923] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[ 1439.412331][ T5923] usb 8-1: config 0 has no interface number 0
[ 1439.418899][ T5923] usb 8-1: config 0 interface 153 has no altsetting 0
[ 1439.624725][ T5923] usb 8-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0
[ 1439.659548][ T5923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1439.676154][ T5923] usb 8-1: Product: syz
[ 1439.865404][ T5923] usb 8-1: Manufacturer: syz
[ 1439.874527][ T5923] usb 8-1: SerialNumber: syz
[ 1439.889718][ T5923] usb 8-1: config 0 descriptor??
[ 1440.165871][ T5923] ti_usb_3410_5052 8-1:0.153: TI USB 3410 1 port adapter converter detected
[ 1440.203668][ T5923] usb 8-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[ 1440.550472][T17070] wireguard0: entered promiscuous mode
[ 1440.572545][T17070] wireguard0: entered allmulticast mode
[ 1440.649466][T10435] usb 8-1: USB disconnect, device number 3
[ 1440.688437][T10435] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[ 1440.727796][T10435] ti_usb_3410_5052 8-1:0.153: device disconnected
[ 1441.154516][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2926'.
[ 1441.858189][T17116] geneve2: entered promiscuous mode
[ 1441.863454][T17116] geneve2: entered allmulticast mode
[ 1445.998037][T17154] cifs: Unknown parameter 'por'
[ 1446.301778][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2942'.
[ 1446.909321][T17160] geneve2: entered promiscuous mode
[ 1446.914608][T17160] geneve2: entered allmulticast mode
[ 1447.027100][T17164] sctp: [Deprecated]: syz.5.2943 (pid 17164) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1447.027100][T17164] Use struct sctp_sack_info instead
[ 1449.175129][T17181] bridge0: entered promiscuous mode
[ 1449.180439][T17181] macvlan2: entered promiscuous mode
[ 1449.382268][T17180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1449.389990][T17180] IPv6: NLM_F_CREATE should be set when creating new route
[ 1449.397274][T17180] IPv6: NLM_F_CREATE should be set when creating new route
[ 1449.404494][T17180] IPv6: NLM_F_CREATE should be set when creating new route
[ 1451.882774][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2953'.
[ 1452.821339][T17217] geneve2: entered promiscuous mode
[ 1452.826694][T17217] geneve2: entered allmulticast mode
[ 1453.411600][T17214] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2956'.
[ 1454.215397][T17219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1459.400144][T16574] libceph: connect (1)[c::]:6789 error -101
[ 1459.406245][T16574] libceph: mon0 (1)[c::]:6789 connect error
[ 1460.045779][T17260] ceph: No mds server is up or the cluster is laggy
[ 1460.083327][T17267] geneve2: entered promiscuous mode
[ 1460.089011][T17267] geneve2: entered allmulticast mode
[ 1461.789992][T17282] Device name cannot be null; rc = [-22]
[ 1464.624021][T17303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2979'.
[ 1465.175826][T17310] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[ 1465.182371][T17310] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1465.231721][T17310] vhci_hcd vhci_hcd.0: Device attached
[ 1465.507378][ T7276] usb 42-1: SetAddress Request (2) to port 0
[ 1465.560348][ T7276] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1466.554892][T17310] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1466.575384][T17310] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1467.435507][T17311] vhci_hcd: connection reset by peer
[ 1467.442300][T17329] Device name cannot be null; rc = [-22]
[ 1467.484096][ T7437] vhci_hcd: stop threads
[ 1467.492490][ T7437] vhci_hcd: release socket
[ 1467.529570][ T7437] vhci_hcd: disconnect device
[ 1469.455199][T17350] macvlan6: entered promiscuous mode
[ 1470.525373][T17360] fuse: Bad value for 'fd'
[ 1471.037373][ T5857] Bluetooth: hci3: command 0x0406 tx timeout
[ 1471.042156][ T7276] usb 42-1: device descriptor read/8, error -110
[ 1471.511869][T17366] Device name cannot be null; rc = [-22]
[ 1471.821334][ T7276] usb usb42-port1: attempt power cycle
[ 1472.598800][ T7276] usb usb42-port1: unable to enumerate USB device
[ 1474.500641][T17392] Device name cannot be null; rc = [-22]
[ 1474.677385][ T5950] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1474.967227][ T5950] usb 8-1: Using ep0 maxpacket: 16
[ 1475.087465][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1475.107777][ T5950] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1475.154428][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1475.169496][ T5950] usb 8-1: config 0 descriptor??
[ 1475.936893][ T5950] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1475.965043][ T5950] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1475.990305][ T5950] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1476.017010][ T5950] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1476.034102][ T5950] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0
[ 1476.056059][ T5950] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[ 1477.987803][T17417] 9pnet_fd: Insufficient options for proto=fd
[ 1478.065725][ T5950] usb 8-1: USB disconnect, device number 4
[ 1479.722530][T17429] kernel profiling enabled (shift: 63)
[ 1479.728450][T17429] profiling shift: 63 too large
[ 1480.522155][T17429] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1480.537527][T17429] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1480.664796][T17439] sctp: [Deprecated]: syz.5.3018 (pid 17439) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1480.664796][T17439] Use struct sctp_sack_info instead
[ 1482.196399][T17452] geneve2: entered promiscuous mode
[ 1482.201772][T17452] geneve2: entered allmulticast mode
[ 1483.065734][T17458] netlink: 'syz.7.3023': attribute type 4 has an invalid length.
[ 1483.659153][T17469] ------------[ cut here ]------------
[ 1483.664855][T17469] kernfs: can not remove 'bind', no directory
[ 1483.671398][T17469] WARNING: fs/kernfs/dir.c:1707 at kernfs_remove_by_name_ns+0xd1/0x130, CPU#1: syz.1.3027/17469
[ 1483.682129][T17469] Modules linked in:
[ 1483.686237][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.1.3027 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) 
[ 1483.698106][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1483.708262][T17469] RIP: 0010:kernfs_remove_by_name_ns+0xd1/0x130
[ 1483.714559][T17469] Code: 4c 89 f7 e8 c1 f2 ff ff 4c 89 f7 e8 69 9b ff ff 31 ed eb 2b e8 80 13 62 ff 90 48 c7 c7 80 48 9c 8b 4c 89 f6 e8 90 9a 25 ff 90 <0f> 0b 90 90 bd fe ff ff ff eb 12 e8 5f 13 62 ff bd fe ff ff ff 48
[ 1483.734284][T17469] RSP: 0018:ffffc90002e87a50 EFLAGS: 00010246
[ 1483.740459][T17469] RAX: cbed6b4516bf0f00 RBX: ffffffff8f3fbf80 RCX: 0000000000080000
[ 1483.748491][T17469] RDX: ffffc9000f334000 RSI: 0000000000003102 RDI: 0000000000003103
[ 1483.756493][T17469] RBP: 1ffff110042d4256 R08: 0000000000000003 R09: 0000000000000004
[ 1483.764628][T17469] R10: dffffc0000000000 R11: fffffbfff1bfa80c R12: 0000000000000000
[ 1483.772729][T17469] R13: dffffc0000000000 R14: ffffffff8c0a0360 R15: 0000000000000000
[ 1483.780798][T17469] FS:  00007f6f5e11d6c0(0000) GS:ffff888125ce2000(0000) knlGS:0000000000000000
[ 1483.789797][T17469] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1483.796414][T17469] CR2: 0000000000000000 CR3: 0000000062052000 CR4: 00000000003526f0
[ 1483.804577][T17469] Call Trace:
[ 1483.807905][T17469]  <TASK>
[ 1483.810841][T17469]  bus_remove_driver+0x198/0x2f0
[ 1483.815785][T17469]  comedi_device_detach+0x134/0x720
[ 1483.821051][T17469]  comedi_unlocked_ioctl+0xbd2/0xfc0
[ 1483.826364][T17469]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1483.832325][T17469]  ? __lock_acquire+0xab9/0xd20
[ 1483.837320][T17469]  ? __fget_files+0x2a/0x420
[ 1483.841919][T17469]  ? __fget_files+0x2a/0x420
[ 1483.846512][T17469]  ? __fget_files+0x3a0/0x420
[ 1483.851236][T17469]  ? __fget_files+0x2a/0x420
[ 1483.855883][T17469]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1483.860856][T17469]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1483.866666][T17469]  __se_sys_ioctl+0xf9/0x170
[ 1483.871310][T17469]  do_syscall_64+0xfa/0x3b0
[ 1483.875814][T17469]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1483.881056][T17469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1483.887207][T17469]  ? clear_bhb_loop+0x60/0xb0
[ 1483.891914][T17469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1483.897839][T17469] RIP: 0033:0x7f6f5d38e929
[ 1483.902275][T17469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1483.921885][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1483.927948][T17469] RSP: 002b:00007f6f5e11d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1483.936351][T17469] RAX: ffffffffffffffda RBX: 00007f6f5d5b5fa0 RCX: 00007f6f5d38e929
[ 1483.944403][T17469] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000a
[ 1483.952448][T17469] RBP: 00007f6f5d410ca1 R08: 0000000000000000 R09: 0000000000000000
[ 1483.960473][T17469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1483.968474][T17469] R13: 0000000000000000 R14: 00007f6f5d5b5fa0 R15: 00007ffedc13c888
[ 1483.976467][T17469]  </TASK>
[ 1483.979526][T17469] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1483.986797][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.1.3027 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) 
[ 1483.998330][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1484.008375][T17469] Call Trace:
[ 1484.011650][T17469]  <TASK>
[ 1484.014593][T17469]  dump_stack_lvl+0x99/0x250
[ 1484.019177][T17469]  ? __asan_memcpy+0x40/0x70
[ 1484.023761][T17469]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1484.028948][T17469]  ? __pfx__printk+0x10/0x10
[ 1484.033545][T17469]  vpanic+0x281/0x750
[ 1484.037521][T17469]  ? __pfx__printk+0x10/0x10
[ 1484.042124][T17469]  ? __pfx_vpanic+0x10/0x10
[ 1484.046623][T17469]  ? is_bpf_text_address+0x292/0x2b0
[ 1484.051901][T17469]  ? is_bpf_text_address+0x26/0x2b0
[ 1484.057106][T17469]  panic+0xb9/0xc0
[ 1484.060834][T17469]  ? __pfx_panic+0x10/0x10
[ 1484.065249][T17469]  __warn+0x334/0x4c0
[ 1484.069218][T17469]  ? kernfs_remove_by_name_ns+0xd1/0x130
[ 1484.074866][T17469]  ? kernfs_remove_by_name_ns+0xd1/0x130
[ 1484.080491][T17469]  report_bug+0x2be/0x4f0
[ 1484.084815][T17469]  ? kernfs_remove_by_name_ns+0xd1/0x130
[ 1484.090446][T17469]  ? kernfs_remove_by_name_ns+0xd1/0x130
[ 1484.096074][T17469]  ? kernfs_remove_by_name_ns+0xd3/0x130
[ 1484.101712][T17469]  handle_bug+0x84/0x160
[ 1484.105955][T17469]  exc_invalid_op+0x1a/0x50
[ 1484.110466][T17469]  asm_exc_invalid_op+0x1a/0x20
[ 1484.115306][T17469] RIP: 0010:kernfs_remove_by_name_ns+0xd1/0x130
[ 1484.121548][T17469] Code: 4c 89 f7 e8 c1 f2 ff ff 4c 89 f7 e8 69 9b ff ff 31 ed eb 2b e8 80 13 62 ff 90 48 c7 c7 80 48 9c 8b 4c 89 f6 e8 90 9a 25 ff 90 <0f> 0b 90 90 bd fe ff ff ff eb 12 e8 5f 13 62 ff bd fe ff ff ff 48
[ 1484.141153][T17469] RSP: 0018:ffffc90002e87a50 EFLAGS: 00010246
[ 1484.147221][T17469] RAX: cbed6b4516bf0f00 RBX: ffffffff8f3fbf80 RCX: 0000000000080000
[ 1484.155221][T17469] RDX: ffffc9000f334000 RSI: 0000000000003102 RDI: 0000000000003103
[ 1484.163197][T17469] RBP: 1ffff110042d4256 R08: 0000000000000003 R09: 0000000000000004
[ 1484.171159][T17469] R10: dffffc0000000000 R11: fffffbfff1bfa80c R12: 0000000000000000
[ 1484.179126][T17469] R13: dffffc0000000000 R14: ffffffff8c0a0360 R15: 0000000000000000
[ 1484.187104][T17469]  bus_remove_driver+0x198/0x2f0
[ 1484.192057][T17469]  comedi_device_detach+0x134/0x720
[ 1484.197268][T17469]  comedi_unlocked_ioctl+0xbd2/0xfc0
[ 1484.202556][T17469]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1484.208380][T17469]  ? __lock_acquire+0xab9/0xd20
[ 1484.213241][T17469]  ? __fget_files+0x2a/0x420
[ 1484.217824][T17469]  ? __fget_files+0x2a/0x420
[ 1484.222407][T17469]  ? __fget_files+0x3a0/0x420
[ 1484.227078][T17469]  ? __fget_files+0x2a/0x420
[ 1484.231680][T17469]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1484.236633][T17469]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1484.242438][T17469]  __se_sys_ioctl+0xf9/0x170
[ 1484.247046][T17469]  do_syscall_64+0xfa/0x3b0
[ 1484.251568][T17469]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1484.256765][T17469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1484.262823][T17469]  ? clear_bhb_loop+0x60/0xb0
[ 1484.267502][T17469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1484.273380][T17469] RIP: 0033:0x7f6f5d38e929
[ 1484.277782][T17469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1484.297375][T17469] RSP: 002b:00007f6f5e11d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1484.305775][T17469] RAX: ffffffffffffffda RBX: 00007f6f5d5b5fa0 RCX: 00007f6f5d38e929
[ 1484.313732][T17469] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000a
[ 1484.321690][T17469] RBP: 00007f6f5d410ca1 R08: 0000000000000000 R09: 0000000000000000
[ 1484.329654][T17469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1484.337618][T17469] R13: 0000000000000000 R14: 00007f6f5d5b5fa0 R15: 00007ffedc13c888
[ 1484.345625][T17469]  </TASK>
[ 1484.349022][T17469] Kernel Offset: disabled
[ 1484.353364][T17469] Rebooting in 86400 seconds..