last executing test programs:

6m16.115229361s ago: executing program 2 (id=459):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async, rerun: 64)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xc70, 0xf014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xbd, 0xa0, 0x9, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xfc3b, 0x25, 0x1, {0x22, 0x945}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xb, 0xbc, 0xf4}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0x40, 0x1, 0x40, 0xff, 0x7}, 0xf, &(0x7f0000000680)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2d1395b6fb7164fe, 0x3, 0x3, 0x7f}]}, 0x6, [{0x6d, &(0x7f0000000840)=@string={0x6d, 0x3, "ebcf721fc080a765fe679c70a02733b92acae22d2834508567c3a04c5b445c8c6e86827ba44b944d4b7b7b57735022d4a999d7caeabb200dae278c4f9f90e9cd2c39f89a3738b365bfd4d32d375779f237f038f8612ec1a3b3f3648ec32237e4cec6114bb1ec707311ddd5"}}, {0xfa, &(0x7f00000008c0)=@string={0xfa, 0x3, "4b6d66833eec623fb8079dd4bae9d5581fc2d34e219af17e842af65c902103c203055c5415e8bbb1b06cec2e7f486c3ae4d9aa76c6ef99e77cae71d835146f5e984ad7902dc08d5e892b5b86db1868904b9774103d7894e6158e7793ee741244b8bfcdd045259d6803fd2823e954021ad6866bc0ce8c9794d361e299af6406fb68de70a142fbc07728ccf9967b36b30db191dab8cca14ee3fb37ea85a906273140786f283e4e40bd95033e05e54da642b8ae6c7fa9cf2afd531c25657da00c377d69d2c6f40a40b6ea97aa8f5707cc08450bd255c783c7d0ce672e53832b7084a45cfe84929cb1fb61eba0eb55ef4b6a8c55bd613f0a2523"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x7d, &(0x7f0000000a00)=@string={0x7d, 0x3, "dca3b1bae5e0aed5b71aa75684901acbba094af55651cf03df5d18c833bcf492eafe7d74bd49248c0910fd4704602476d3388f27137a453e0ad96fedf11b9b22dd901bee3a9e674b7b974fc330ec007572cd5fb41c4997c044b3b70dc4ecd5f562a990a746ee4288b16ab978f4be25dca68788c85915b67d116eba"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42b}}, {0x52, &(0x7f0000000ac0)=@string={0x52, 0x3, "260b19406f2752d6220ad1b085830abb36857e1207c4341b5d46971209e20cf2566f9f9f2f65dcf6c8676e84cf5ef9e060698f70dec030970e7b0b6da709c0274c73dae20215fb333b010f90c7a147a9"}}]}) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x9, 0x67, {0x67, 0xb, "f00f944a8c08fe89f254944cfce7ef9f22c6f50ef0a6971331949f5bee1a63cf3c5d78839f09c8b9466bcac8aac4b87dcac77e0b359aeffaf4af0084209f44d40f0b0135d9470f5b0b09dc7161df2226e5000486c0587d4799ba595b483dae6a45b2165039"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000380)={0x20, 0x6, 0xf2, "36b137f1c64f0df36fc6d53da403b2f64fe3fdb4612af142c87785181d9520250c59dd42987c4b1623e6a1cd8b322b70e345755858d7f2f705c89ca8c9fcc473f476ad8cf5212cc69a154ccbd8ab5429c6ade795e0f6661a3083cd69245ad8a6276d0a8c24e31376697276bffd60e202e31063d1b95a0d96b23b4d2b9e56c88603387afd9a38ef6c1fca52ac196c417e1f46cfaae09efd40e3ba1559f3b1a79695bdcfb74b6108c2971e38e30b621f052d08a509b09b4a6a237ce8dfcb3762afa591543ea1ae8a7a96638f0037829636358c9fb51e8ec0163005d66974ac7e0fff83a19d7ca7f5adceb462c43045c8daf1fa"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xd4, 0x7, 0x3, 0x6, 0x9, 0x6, 0x2, 0x5, 0x400, 0x6, 0x6, 0xb55}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x93}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x800}, &(0x7f0000000540)={0x20, 0x89, 0x2}})

6m13.051100837s ago: executing program 2 (id=463):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/consoles\x00', 0x0, 0x0)
ftruncate(r1, 0x80000000) (async)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000002d40)={0x1, 0x1}, 0x8)
close(0x3)

6m12.88736058s ago: executing program 2 (id=465):
r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1)
socket(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000006b69ed17ea74000071e795b9ac5f5b18e90d13d2c080c84418f24ceb76b89728bf80295d5876d59faa2fd49c802ae8310a8168e239916f0ae191f7fcb479b856a03eaff4571f9c5dde71f1086600f8a8b92bd1e0c8e2d8529ba6525a42713cb961", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x30, r7, 0xd66771a5e8224ded, 0x0, 0x1, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffffff65, 0x52}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x30}}, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1)
close(r0)

6m11.894667545s ago: executing program 2 (id=469):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xe)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x2dbdfac4985c81ac, 0x5, {0x5, 0x2, "8453be"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000001700)=0x8000, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x132e000, 0x800, 0x0, 0x2}, 0x20)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000000080)={0x28, 0xb16405bdec0730cd, 0x0, 0x0, 0x2aae75, 0xfffffffffffffffe, 0xc, 0x2f98d6})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r8 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r8, 0xc034564b, &(0x7f0000000180)={0x0, 0x59455247, 0x10013d, 0xb4, 0x0, @stepwise={{0x3, 0xfffffff7}, {0xfffff488, 0x3}, {0x4, 0x60}}})

6m6.085321388s ago: executing program 2 (id=486):
ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000000))
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$int_out(r0, 0x2, &(0x7f00000000c0))
r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)
connect$rose(r1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null]}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x40}}, './file0\x00'})
ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000001c0)={0xffffffff, 0x2})
ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0x8004510b, &(0x7f0000000200))
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='gretap0\x00', 0x10)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000280)={0x8, 0x1, {<r3=>0x0}, {<r4=>0xee01}, 0x8, 0xd0})
getresuid(&(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000380)={0x2, 0x1, {r3}, {r6}, 0x8, 0xffffffffffff8661})
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r9=>0x0})
statx(r2, &(0x7f0000000480)='./file1\x00', 0x2000, 0x200, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r11=>r2, {r5, <r12=>0xffffffffffffffff}}, './file0\x00'})
getgroups(0x9, &(0x7f0000000600)=[0xee01, 0xee00, 0xee01, 0xee01, 0x0, 0x0, <r13=>0xffffffffffffffff, 0xee01, 0xee01])
stat(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
getresgid(&(0x7f0000000700), &(0x7f0000000740)=<r15=>0x0, &(0x7f0000000780))
r16 = getgid()
lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x7}, [{0x2, 0x1, r7}, {0x2, 0x0, r4}, {0x2, 0x2053f5f72b88d048, r4}, {0x2, 0x9, r6}], {0x4, 0x1}, [{0x8, 0x4, 0xee01}, {0x8, 0x1, r10}, {0x8, 0x4, 0xee01}, {0x8, 0x7, r12}, {0x8, 0x2, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}, {0x8, 0x33ee3f60d9a5051c, r16}], {}, {0x20, 0x2}}, 0x84, 0x3)
linkat(r2, &(0x7f0000000880)='./file0/file0/file0\x00', r11, &(0x7f00000008c0)='./file1\x00', 0x0)
sendmmsg$inet(r1, &(0x7f00000021c0)=[{{&(0x7f0000000900)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000940)="fe81819647bb248283f477124e94d84aded753b7bc63bf9ffc6febd7a6a96d8b47cad115bc51608cac1efdfef34eb1f145f3d7c9a67a0d2b3f1d0f786f654095b7f528ec9c8f105aac43b0530045cc28673a7be1ccf9bcb1b680794739f4b1a93f5155ac34e9f7896b9263b4b88d598d6ef399e74b7b9fbbbd523ff8ef6f24e9b0723d5a931cf6782aee5544fbd9402f468a06093cb4dd221d034eff3553befcf689a78d4b1000894e2b", 0xaa}, {&(0x7f0000000a00)="013e9d9ba51d7edf61f73d9f43bb5bb2204b747a27b063580e817a2b040521fda7c70d9824e1be2d1749c475482a0a24519f15b8fe60b7fcb4ec0762339e20821172a6395acf50d9f5851aba3a59adab133791272a353e165f85e7c4bddeb38a071597c930b9ba69a6f8243f99979397e08281ed762c11ec1d9ddcd21d7962b7180001450f6746d9ce075be03749903984a29c5e7671ddcaa672f420ae93790c5d5f91d3e12953d9791b765400a5042684efdf66e9c8dfc3324fa51edd2e84c4dc242b", 0xc3}, {&(0x7f0000000b00)="bd99b0a41f1a24b52568df497f43ecc575e540f9bf9d7c6aec3d321ee743ee0257580f203c6c0ec5b5279500ea812f81ad9dee9bd5e0d325decedb337ccd2507ee9ebdef4cbe568f00b5d1370accda5fe68d500568bbb27901c1d5b67768368aa8043b0890104c8320b8d49cbc4c3ae09fd9ef5f2e8dea4eb41a03530c0bba80972a0386e13721191a61611ea2078b53388cd13ede1688696d8379bfb478ae33217c0ba510384403fe2e8c847165ad10575bcafec4e8dae78cc1578d42b1045189de0f3963876a065168808fc04cc3af811bfd738b0fb5798aed8da06310b123d1983ac26945d936cc3fb5085d135477700ffdfc9f6bcc12f499fececdb7b9a0854383d14b140ab4d42d32686cf6c9c9c60ef93c503d1823a9741ad08e731ab56ceff36c38ddacf5da517dc8d5dc6cda9ee66969cd7f1d61c6fbf4bd6724fc104ea759a051565a1b5fd27f8573ce23d13bd795475adf220b488d0f5fa6fe65c1aa622c0bc2bafaab6970e6be67e9a5901dc4fbb3327f66907ff9f803e34753441c54b6127d31dbea8407d9ff4996b347cba82a8cd50d21e5dd1ca0ffb9472409329a830fdd22d1e41c8dceed39db28118b30fe86d1143d6601a5f5991c95466b3e6fa58e730c13e40cde616c454111bb4e3dcb169c97268b8963da27c91b1c138976a0182dc56963249e241ec78d46f03a301e218626238cc0d4544dd18dcd0fe11707223b39035faad41b80bc43e3ca8da3e05fa4698e6d6ced2e33ae7c5e10a29416551d8887a95d2e17b62f05e5f8801362e78de770260138b00f9bb706c0b41802e0bece2521884aead42351eddcd480f7febe2e84dedf3cf7ab7d27d7e06aec7cb4617f95487427d78fa292c3dba7eb5beba83f25e7e89c8ecd0255ebfce92ce5372041451cb814f9e28412c801e10aef8cf35057b9b8603b55cd6e9ea1e58898774a2b9c219bae54aacc94a60b96839fecca909cd3a5f14445567065d115c7388f971d985e1ed542b2e65776e6452dcfd31b5e5bc7ff10316e78ffc1a9e652c3ad4dbdb141eceb817d2e546e549f5bb47f2eb62ed6e69e5dd89775c1686d45d62e59cb2a22bb4c58c6b27f9e256aab15cb0a1621902101615e31c0956ca99cdd44e70e6fdfd5ed7cee7f712bdf2ba007a165d3021196eace7ac7e029b691bad5cb2d661d3d65b7400e22f02f76cfb214a14b8be119ba8619b78bddf1732058514213c9e3590c12a564a247f09eef6428cdf27aa23fbc8ef86602bd482fcb9a5794c85534ff38656564a96f2f8ae35395b3b73da30c17acd16107812317a83aaa41e24d6bb78c37e5ae23f040da797bcff3576c37e5afaa0dfaa83255516ec28e62a6c53b05438bb0ab2efb018296107a6b0ffdae175717d925f9399b923afc3f4c04f748e0cfd8107b052b468c5110de99ba6fa38e5d8ceb3bc4535da1ef236a92a1009a4a64b48c97b4bf864d986ccba74397322cc7b0e6755bf9eadc94103a89d81dfb2e6e836ea69f437ce4aa75b379dc0e99f943b014460a9b84b556ccb83466ce3627afbb0895080dd064e7b0db5cf251f3de11ba04129bf0ff108dd7d450da4eeb8bedd506d6fb6fa87f1601b7f5aba13650463a4553e00058923205ba46557923006dd344276be7b6c8422d82e57c397c3537e975001caf2fe4a2e5335482dc5e2b560180f5b2f45df797a039696f672c4bf383e263d5fbd0abc6f52f3172ecb4ab0c863ab08d6c0dfd3ccaae37a1cbac23a2d259b2001af8eaaf7c489bac5419672c51fa5e37c23a7d9d2988329c5cb101400a2edde9a4cc2c15ea8829c457903e3db137b7d06b5ef4248e0f34223dd3403ca9fae20719919c14d0fb63c5dbf550010a62cccdd2df300a64e356e734e5fb3ea0f2e6a561ed63366e2200378d4f86e4c42d429a79f024100a4be7ea95a51cc50d949f0aca763da9bddf35281c73ae2a6a80b7913a156abca3a2df67fbde0c8d4e34389791dc511cf3469f041b810c3dc329c4c40ce0843339a61f19578ab9ea3b4e0c07959e478218f9af4b9976e1ed77f797f14b26ff96b7867fdf63f519b170b90cd2a4687e4fe9e24d3253c1385d98e785abc699c010efc321ac152c713905ec3c6dd59bd897945e768cd6cbe5890737022130a4db3e452fffd84f603013fdb301df5bd9e3b8476a6b8008133d3826b952cd2a7e46a7e5dddf96fc3c40e84aace0e925bccdb7b2f1b6f95d4317cbec5529dd089c27ac8f3c0b6073f34d68db2f5c066864192c49b0e84d3014b4d34e1bf812ecee3f731507dd70da1bad13cf00f295f81adf477a9dede885e009d151a4485f91170ea9756422cc5a483b5f10e0dcb07c16aa7af72c7bfc62294d90fbf4d47b147686c7cf6d22ae9d14c4bd520a346049c13650ec6e0ded4f7e3a75f2d15719d8f985f75e75ec003f77889cf18a9388f05cb4d66a0761cdcaefe2efb846b57b7a237e7f07de8eee69a30873a3ebc7850459ccc5ca35199bcf1599457e2c5824239dde061979dbb0090c02cefe0853b2501446c07199b2db377ab73294f265f63d527083f1b1dad2ac5407c01b8a8f4e9ed5453cd7174fcb4ba749c622fb394cf722f99765e99382a681e5e9249f5643d5f34ba3f42ae85f7adb1f9f6239671e40e60143b57c4d44fe3154bf012c049cdf180329fb3ecc340018585e4a87d05df4ed3e6e57afbf2abbc51db3cb34ab61f02d2cdfa5d82afec2ab4a45c2ddadae90ad210e5d4d14afe25d68ed83e29a356977acf4e9d0a4affe23f989ea95a4ad506dd1409bd359a2926c44480992db219016a242d7939d0973eea2f31da91bcd9d5b1957794a6f5dacd77c3123f0de4658cc3f72c5a7e2aa7076e1cc9d67b0d465888c056ce94f70258900d5938a34edc26b20f700c8c57426ebf979c696f99ed950aafe47f07816d0512c28eba1c50a5ebba259663fe42d93e5b29fa8a03655e85fe535fff9c365f7bce14eb35f680ee8cfba8df6dc76694d8b0bec2027c186e7b13190d3f40338c0abef1d526319c2f7249e49ae21fc56573b6a7b7854fa2f1b25c0e906dbd5c8714001a30b2a71f619c1a4f1600da91d6ed2910a08f511b4fd18dabb1cb0399ef10f1326741ee31613aada6abf459a44c39631b7087bf48623a8ebc2fbc6407fcaab36c98adc2b9dc730b54cde88bcde839c3d96ed51f26d399ec018a7f960f751ae4db3d4fa5998e447d51084f447d287fa677725f76cf2bdde940edfe75680bf343333d6d1c8f9959bd878747ad69eef60fef2a6eba40ce648637e6cecc905ecaf87ea035a1eeafb8d261506a9be4205b340e56fa11d402ddd3aaa38f52e4ed19c59558b70263aafb425af6b1894937b9101607b0b848cacc7d6d307d18c7f754f5a09f473da129b2e71a32985d03bb378dd8310b75a561568a790fb89f3a8aa5ffc860507a299056061970056a62070bb07249e4477681913580adbf3904f9f53bcb6a95e38e7a749bbcfe50510b37911ae755fdc3d24fc15ed8fe60c8a9976185533e30d17d49f27d1e701c7fb4198230a81515b3a1f8a069f0dfc9db377a3a05009ca99b2e29b657e65f1d1f822a39cf4109182a9ea450556335d98a32930efe7ea59c02dd56a6ad37ddf849754a3b8be1ec87b7f186767dc744ccd1d690a34a90785820d3422898b3a120af53cf38ea3a5931f27bc4514e59f6075066b1982e463d64de8750d6d4f00511b9f9ec4b268f6bc3c448bc23bb99199ba89ba1c7b6695eaaff847f7cdbed69ccd45b36a6ec921a0ee12b362462cb994a19ba18ce0a0c925d5c1b812b8c10ecfdfb7878d5cfea5263b5d8af8eb966191c4bb9edc5109ba8407535f37d4a14fe7525ddddbaa40ddde6ae52099d8da8ec3e93dd15e682e00d9789e34489b5e9cb0e362e2d5e093ce87dd3d32f95f11d7c2d6906d8199c715acc25154e12ff8ff1aa5bb214a35aa58fedc4db0fb75209a162a70ea32b6c2682e7498bc941f701578f8dd67bf61a7f0664e46517d552cce441f0461ffda8248fbf31846491db4bafc08aba00648cb965977ef46d3e2a13234730247eb4042779fedb70c041a256993a7478e6581fa0a5b4240a553a17c2fe8a79b5ed3f8e53ec88535d9279bb42e0c6f58791b1b6e0c808fbbde8f5a4c2bc265d23263f259cd7bbfd80e41885c326253e4a154ccc50f6a4216ef954d62fa03fd2d8823e6b18a164d750c3e1d9b01792557372fdeb184c60893ff260da7a92074d2d22d36b43551b87d814e0b7c03149324f1493cec3fb833cfb49cf02b5925a48b0d41d26699d5297742935bf7112d69f7002889be6659232a6b673a3ad4f2aaf55a7507eb54b737c4f4fab644069f26dee9fbe02c22456b9995d182af57220292538015948afe7d22e5794f3c2e9640609c850a5bd3a33613a34de82ab058b0804f415652952f0b5a8aab524893042c95a5e4df51d3f948d7fd125a4d830237d0777e4d6c54ca8918aa0f271f5bb47ffc3f179117aeba479e9d41030f00fb29d963aec423f38e8dc4de681a955e35b8a2c5c10697edeca37b1d232627bca769befd2439309b5d53b7235ce54db416a29bf23a8cdd6ec65ad83848f8af34bb03e074b296749c34bf508bcce5e4447666283d41f6575423636cdfc77bc410a5b034b1d1ea0511147aece16c5efefa39dd2c196940788dd433b36f2d29bc88d6e907d4513244426dad82623f088922264f88d105b6e4c9bf9c575dcdd44508f0ddf83d522ae1059ae4a0e130301e603a84e4673414e31c683bb01c458a26ff0426ade2364c1f0796f58af4d345e7455513d2ca85ebae50727cbc55ffcced5ebd7516c85ba648804892056c1c8270c67bdf9f90d9253ed2a211da96ff3cf6647ab8e1fc1a99da12a2d28ee7baf5bd0c09a7c9dfac795a7c6b7ed497c1094dc9d137008d06037d37dba4af7f384890bb64eff7247f1e438bde9df80bc4d915355cb1006fea20cba6f3fc34ffd3fc26bba4147cfb8f20a2f42cef9de0e61810a7aa49988b2f9bc3d314fc72ad6723ad27648a52897d96fa70532b6a822ecf5901f7676550001bca8eda4940f18cc82a36ad2d2037b203b70a4b01aca970e7b2a997f822b507b9eb35823c1da6684ad75a9c14ce41793e699a396a983dd15c8a4404c691253a9badb945df7d44773c9c5468fc26d66bf5b3792bc061f12f0e19d9f04b6e48d2714065883671b60c44d38d859c5e12a888c98dece127d6eecbd992c90d3320a56eb03c4fc5f653e53c6a8ca4da556606766d7e48b676dccfe5a516bd89f70b35fe0f8988c50880ea099c52f567dce46d58d7777fb3a1c1da86cb92f234677572eb720e14f7480832e434c9b558f1170002cf85ee919a7503e3fd22e47d772abfb2143182f0ce06fa7b77465f4c0f5991c788b0768f1a95d38fe05590228776c2ad3257c30b4ec6677b836fa39359a0dcde8991e8b38288ea3cfce5398da1d2cd26a0ebc99c8d798f542c280fbf3563ac5f0e0f99ee1be5212d5a7d0ad0c59f2c7f507e14254b059cd056c32131dffb65b22881ecf94faa6d34c4723d70d07808af382026ae23a0fab8314029781c74feb63bff02df943e8a514cc36a7dd9b03c8a8d64718cc358070d2b1317ae756734898a197700e13bdd0c3b6fb352bd8bb3267d0373d3ab4a22b72afb298f547cf7e44f8105441a084cd7685ac70c30388bb5d81f09841fbe444b4d477292c5409ab0bd151fef8d48442848af8196540bb1db1472587c79556bc0f006c9ae5d24a3192f7faf56888f0f4844497d5fd9165d0ffe6454260f52dd644a", 0x1000}, {&(0x7f0000001b00)="470694063910f5bb1613a07cb1e021a40244c0a7847d8e1db2568410f7a0fab58831f3701bccdb677c7392a0fcd672a84a65ff7032220b0b9c8309cf54bf075c5a433626efa3a97ea879d4f5d14e2b8781e016304003cb2deadc73986a71a05da7837bbfba8422d3579488ac62c8394b2e242ee9ebbd3b2085fd8862ace8d739bf53efa624c7ce", 0x87}, {&(0x7f0000001bc0)="b5915130d9a9d4af02e142cff9f44458787960a46bda29288166a0a8c4d5c5da593c911a4798d726ed374ad7b877fb264c1f64edf7261ed8c05443c400315b0d8a1ddd1655a5b26bae4aec0dda16427384aeb5ed8ad6fd5b811e595d28ce59493a10d6ae90c1b99222b3a3b745b7d67298ac9a39b15a43476e34867d17f6e8e9d9a9f63d79acfcb9f207144e073dc349f7d4466638", 0x95}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="720e2893b63a8233dc1e72e048e408a19ebca96d77ee0ae65b228102db2d8820a9b225a17013e925e4e18fd2", 0x2c}, {&(0x7f0000001d00)="7eb2aef8450ff5576475e184275ebea0c229b64db5d5186f7ea3ff423075a91cab8320af4de7e9b4d571876fafda833cf985ac5706a72ae3e0b6b99dd9ebd23f2438ec190f65650b557361b9a43a622b632fc8489fb28d3cec9e143b5331d8b987c757e876bf938b", 0x68}, {&(0x7f0000001d80)="630dd5dc28364db64db6857899e2cf6ad1d65b634eb8b450c38a621ab631f5c5ca0ce6f43964630dbb52207fc01e69404762b181ff22cd30d3197b00640c003ee43eb1777134a8fc5fc0234900076246e192cffc46548f0236b42c3426f068d03fec9769af1c343d958508714083c7fd8d1e6dde5b0284ef887dfe762a88fc8b7b968461138850f444387dc0325463bbfc985f", 0x93}], 0x9, &(0x7f0000001f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@cipso={0x86, 0x26, 0x0, [{0x5, 0xe, "e58ca7388619e4c9e706421d"}, {0x2, 0x12, "107859887324e5c5e886eb9d22e087e5"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x53, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @private=0xa010101]}, @end, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x6, [{@remote}, {@multicast2, 0x6}, {@rand_addr=0x64010100, 0x2}, {@empty, 0x1}, {@multicast2, 0xf}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010102, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5d8}}], 0xf0}}, {{&(0x7f0000002000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002140)=[{&(0x7f0000002040)="aeeefe8864ba5323400b55c05d443e4a123d450e82aa9be256bcf74b80080ab7272e0d9efae8a08c38b92a5348d1b80e4dd918be450eb83704cbcd07cbb6d12a5b6c05", 0x43}, {&(0x7f00000020c0)="069471a9036cb8ab5228cb9ba81769e2886f387981b1320e03bad20e7098d6e7107832b52c78d91fdebc19ec2fea3ad0582c8663a52f591411eb6d41adc91bae02366b", 0x43}], 0x2, &(0x7f0000002180)}}], 0x2, 0x10)
r17 = openat(0xffffffffffffffff, &(0x7f0000002240)='./file0/file0\x00', 0x100, 0x28)
sched_setscheduler(r3, 0x5, &(0x7f0000002280)=0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r17)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r17, 0xc00c642e, &(0x7f0000002300)={0x0, 0x0, r17})
openat$audio1(0xffffffffffffff9c, &(0x7f0000002340), 0x410a01, 0x0)
r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000002380), 0x105000, 0x0)
ioctl$TUNSETIFF(r18, 0x400454ca, &(0x7f00000023c0)={'bond_slave_1\x00', 0x400})

6m6.071089133s ago: executing program 2 (id=488):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[r0, r0]}, 0x2)
syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
write$snapshot(r0, 0x0, 0x0)

5m51.515967113s ago: executing program 32 (id=488):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000080)=[r0, r0]}, 0x2)
syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
write$snapshot(r0, 0x0, 0x0)

29.152725382s ago: executing program 4 (id=2020):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

29.016006912s ago: executing program 0 (id=2022):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000002140)={0x28, 0x4, r8, 0x0, &(0x7f0000000000)="87af4830c9efce0233bad621", 0xc, 0x7})
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000380)={0x28, 0x3, r8, r8, 0x1000, 0x100008000005, 0xc})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r11, 0x5}, 0x10)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x1e8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd269}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x88b8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2515}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}]}, 0x1e8}}, 0x8101)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x28000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000d"], 0x48)

28.923343452s ago: executing program 3 (id=2024):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000cc0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x4, 0x0, @none, 0x0, "", 0xc}]}}}}, 0xf)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800020085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCXONC(r4, 0x540a, 0x2)
clock_nanosleep(0x2, 0x1, &(0x7f0000000000), &(0x7f0000000040))
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000014000c002b80080001006869c7abaeae868ff18d754f0000000069d1c3e52ef98233cbf4711f65d190dc8c156f6e6d75eaf8008bbf47ae84", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
close(0x4)

27.699449286s ago: executing program 0 (id=2025):
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280)={0x0, 0x6e, 0xf6}, &(0x7f0000000440)=ANY=[@ANYBLOB="656e633d706b63733120686173732d3235362d61726d00000000000000a88200000000000000000000000000000000000061b828400000000000000000000000002a0000000000"], &(0x7f0000000500)="04600eb5122eab350e13d0f69191ce0495036eb278d25fba08cfe2248877119cc87cc81610e9f37ace91efbee7876c4bd848ef9c534a87abdff9f0d45d07a1f50458bc50b38ce2b23780126a003dfa6d82b29ac90067a2241d7baa930e5e6b670cad5c670ab534fbc8af4831b9a6", &(0x7f0000000580)="8155e18a4af8d89cdb96e186c333c7221b1fd273fa2cde2ad135de5ba46d28dfd95dbf26ef8ee196047ae811fb14294eca7c2f0c402eac363b6a4e663a9f1360ce726a10543c5e95b653360a78ab41a84d3b8c42d2dbec71fdf81c019ac41106d5d36359817b636d2cd9813229b7f4c902c18e13dcde2dea72a7fc0c9ba10c174c24df0bfab5a14d0c0828a654dd1dc0113fcc6c79d2b75bd4b77f9947fc5c06b7e690de5bf5dc5f894a2fb6f90e094fe1fc3ef17a1f6c61153c4ee57544642664ea2ea6e3492ceac5cd93deeff7fcfa595cb1413794e15e358125010b39e253facfd722382bd66c329864b9d7cc561c8aefa5252613")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="611000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\\/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\\\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001200050926bd7000fddbdf25270904ff4e224e2206000000200900000600000008000000fdffffff050000000500000002000000", @ANYRESOCT=r1, @ANYBLOB="00000100071a00001f000000ffffffffb6965963a9eeea5b8246c8a3244b51a3c040a1d65f6db63c6514c21bf1847814b37eb855cc9cfbdc624f8d7d408f64e98d09ab149bc8aab231912e845ed9c2"], 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840), 0x49)
r4 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x80000001, &(0x7f00000003c0))
ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78})
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000200)=0x34010, 0x4)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000120a09090000000000000000020000000900020073797a31000050000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x5c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000150a01020000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008880}, 0x24000898)
close_range(r7, 0xffffffffffffffff, 0x0)

27.267448142s ago: executing program 4 (id=2027):
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000040)=0x4, 0x4)
writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

27.256332169s ago: executing program 0 (id=2028):
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x804)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x505001, 0x1a)
sendmsg$nl_route(r0, 0x0, 0x4000864)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x0)

27.236448027s ago: executing program 3 (id=2029):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)=' ', 0x1}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)=' ', 0x1}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
userfaultfd(0x80001) (async)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
fsmount(r0, 0x0, 0x0) (async)
r2 = fsmount(r0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801)
syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async)
r3 = syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0)
fchdir(r2) (async)
fchdir(r2)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = dup(r6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
clock_gettime(0x0, &(0x7f00000040c0)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f0000003ec0)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/255, 0xff}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000140)=""/8, 0x8}], 0x5, &(0x7f0000000680)=""/129, 0x81}, 0x426}, {{&(0x7f0000000740)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000380)=[{&(0x7f00000007c0)=""/161, 0xa1}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000001a00)=""/121, 0x79}], 0x4}, 0x2}, {{&(0x7f0000001a80)=@can, 0x80, &(0x7f0000000980)=[{&(0x7f0000001b00)=""/233, 0xe9}, {&(0x7f0000001c00)=""/127, 0x7f}, {&(0x7f0000000400)=""/12, 0xc}], 0x3, &(0x7f0000001c80)=""/79, 0x4f}, 0x8001}, {{&(0x7f0000001d00)=@isdn, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/75, 0x4b}, {&(0x7f0000001e00)=""/80, 0x50}], 0x2, &(0x7f0000001ec0)=""/82, 0x52}, 0x7}, {{&(0x7f0000001f40)=@x25, 0x80, &(0x7f0000002140)=[{&(0x7f0000001fc0)=""/189, 0xbd}, {&(0x7f0000002080)=""/88, 0x58}, {&(0x7f0000002100)=""/33, 0x21}], 0x3, &(0x7f0000002180)=""/203, 0xcb}, 0x7}, {{&(0x7f0000002280)=@can, 0x80, &(0x7f0000002640)=[{&(0x7f0000002300)=""/185, 0xb9}, {&(0x7f00000023c0)=""/179, 0xb3}, {&(0x7f0000002480)=""/55, 0x37}, {&(0x7f00000024c0)=""/53, 0x35}, {&(0x7f0000002500)=""/4, 0x4}, {&(0x7f0000002540)=""/226, 0xe2}], 0x6, &(0x7f00000026c0)=""/86, 0x56}, 0x4}, {{&(0x7f0000002740)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000027c0)=""/145, 0x91}, {&(0x7f0000002880)=""/92, 0x5c}, {&(0x7f0000002900)=""/93, 0x5d}, {&(0x7f0000002980)}, {&(0x7f00000029c0)=""/191, 0xbf}, {&(0x7f0000002a80)=""/208, 0xd0}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x7, &(0x7f0000003c00)=""/205, 0xcd}, 0x4}, {{&(0x7f0000003d00)=@caif=@dbg, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d80)=""/67, 0x43}, {&(0x7f0000003e00)=""/70, 0x46}], 0x2}, 0x100000}], 0x8, 0x10000, &(0x7f0000004100)={r8, r9+10000000})

26.027989151s ago: executing program 0 (id=2032):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="202617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, 0x0, 0x0)

25.911479526s ago: executing program 4 (id=2033):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, 0x0, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x7c, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x2}}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0)

25.783284597s ago: executing program 3 (id=2034):
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) (async)
r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8)
getresgid(&(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200)) (async)
r4 = getgid()
read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, <r5=>0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
r7 = syz_clone(0x800, &(0x7f0000002280)="b655eed0060efad4ad4dceb4bcd7d2ec7fe3991a24a687cd808b66453a99b10bbbed48d65e4d8e583a0815dc837db912effa56b57a18d7782c15043c7ed7c4d8235acbf322f3438a09621f", 0x4b, &(0x7f0000002300), &(0x7f0000002340), &(0x7f0000002380)="36ab77ed5f19465d3f463570f558ddfa1f16438df698d269ae30c5fc9f2d5a502f9f20737381d7694e455a45f02a5a51203043e976b1e29eda77d1a4f3b408776aa2aa6ee70b582df638703295b6df699d50368b6fd9dca15a32e40c588032df320e114fa6eece716d8b89cbb0d8cb2faec2478739ef0492b1b2e9936a97e9a37a2c856ea07d78c619c6a88489e4469796336757946bb96e0873314ff042fe147f34849527eaf22d")
shmctl$IPC_SET(r0, 0x1, &(0x7f0000002440)={{0x3, r2, r3, 0xffffffffffffffff, r4, 0x10}, 0x6, 0x80, 0xbf, 0x7, r6, r7, 0x5}) (async)
readv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f00000024c0)=""/166, 0xa6}, {&(0x7f0000002580)=""/229, 0xe5}, {&(0x7f0000002680)}], 0x3)
shmctl$SHM_LOCK(r0, 0xb) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 32)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0x18, 0x1, &(0x7f00000027c0)=@raw=[@generic={0x1d, 0xc, 0x6, 0x7f0, 0xa53e}], &(0x7f0000002800)='GPL\x00', 0x5, 0xe5, &(0x7f0000002840)=""/229, 0x41000, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002940)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002980)={0x5, 0xc, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000029c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000002a00)=[{0x5, 0x3, 0xa, 0x4}], 0x10, 0xf}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b00)={&(0x7f0000002780)='virtio_transport_alloc_pkt\x00', r8, 0x0, 0x6}, 0x18) (async, rerun: 64)
pipe2$9p(&(0x7f0000002b40)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0) (rerun: 64)
write$P9_RMKDIR(r10, &(0x7f0000002b80)={0x14, 0x49, 0x1, {0x32, 0x1, 0x4}}, 0x14) (async)
ioctl$FICLONE(r9, 0x40049409, r9)
r11 = accept4$x25(0xffffffffffffffff, &(0x7f0000002bc0), &(0x7f0000002c00)=0x12, 0x80000)
setsockopt$SO_TIMESTAMP(r11, 0x1, 0x1d, &(0x7f0000002c40)=0x3, 0x4) (async)
mkdir(&(0x7f0000002c80)='./file0\x00', 0x4)
getsockopt$IP_SET_OP_GET_FNAME(r11, 0x1, 0x53, &(0x7f0000002cc0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000002d00)=0x2c) (async)
prctl$PR_SET_MM(0x23, 0x17, &(0x7f0000ffc000/0x2000)=nil) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000002d40)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) (async, rerun: 32)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000002d80)) (async, rerun: 32)
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002dc0)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r12, 0xc00c620f, &(0x7f0000002e00)={r6}) (async, rerun: 64)
r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002e40), 0x80, 0x0) (async, rerun: 64)
lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
write$FUSE_ATTR(r13, &(0x7f0000002f40)={0x78, 0xfffffffffffffff5, r5, {0xa2, 0x2, 0x0, {0x2, 0x1, 0x9, 0x4, 0x5, 0x347dbf07, 0x2, 0x1, 0xff, 0xa000, 0x93a3, r2, r14, 0x3, 0x8}}}, 0x78) (async, rerun: 64)
r15 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002fc0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 64)
dup(r15)

25.654336276s ago: executing program 4 (id=2036):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000005f5fcbbb000007000000950000000000000067f05bd754347dc4e5941afac814d663983bcc9f10902f3db738e0548cb157281f9bb61f7a4f2a9ddb8021196c812045c157da656f22ec3aa09732115bf8ed639249f96c54"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x10000000000000}, 0x18)
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/39)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
eventfd(0x7)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x58, 0x1401, 0x10, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='nfs4\x00', 0x2038447, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078)

25.343520262s ago: executing program 3 (id=2037):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x4)

24.141755788s ago: executing program 5 (id=2038):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)
readv(r2, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4)
listen(r0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
fchmod(r4, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4}, 0x94)
socket$inet6(0xa, 0x803, 0x6)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000)
shutdown(r3, 0x1)

24.125149439s ago: executing program 4 (id=2039):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r0=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0086202, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x25, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e1e, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1b)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
read(r8, &(0x7f0000000000)=""/93, 0x5d)

22.659254432s ago: executing program 5 (id=2043):
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x804)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x505001, 0x1a)
sendmsg$nl_route(r0, 0x0, 0x4000864)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380))
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x0)

21.908624489s ago: executing program 4 (id=2044):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107a0000000000040000ecffffffff9400000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'ipvlan0\x00', 0x1000}) (async)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc73b5c37696b90ad5bca70304193fc04574d3ca94f8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afac", 0x30}, {&(0x7f0000000100)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3da", 0x51}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0x50)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1b1802, 0x0)
ioctl$HIDIOCSUSAGES(r5, 0x501c4814, &(0x7f00000012c0)={{0x3, 0x200, 0x1c000000, 0x3, 0x5, 0x8001}, 0x28c, [0x2, 0x0, 0x400, 0xfffffffa, 0x8000, 0x3, 0x8000, 0x3, 0x5, 0x3a, 0x269, 0x1, 0x2, 0x8, 0x3, 0x401, 0x8, 0x13c, 0x9, 0xfffffffd, 0x401, 0x7f, 0x5, 0x1, 0x4, 0xa, 0x7f, 0x8, 0x5, 0x3db, 0x4, 0x7fffffff, 0x9, 0x80, 0x0, 0xd, 0x4, 0xe547f812, 0x1, 0x40, 0x4, 0xec1e, 0x1, 0x0, 0x3, 0x2, 0xc8e3, 0x9, 0x8001, 0x7, 0x5, 0x5, 0x8, 0x5, 0x7, 0x2, 0x7, 0x4, 0x3, 0x1a, 0x7, 0xb98, 0xc, 0x3, 0x9, 0xffffff01, 0x5, 0xfffffc01, 0xfeb9, 0x400, 0x6, 0x3884, 0x9, 0x3, 0x760, 0x5, 0xfffffffc, 0xa, 0x100, 0x2d72, 0x200, 0x3, 0x21a4, 0xffff0e71, 0xffff9e49, 0xf08a, 0xfffffffa, 0x93a, 0xf, 0x3, 0xfffffff9, 0xd, 0xb3b, 0x9, 0x0, 0x6, 0x10, 0x7, 0x7ff, 0xf9b, 0x8, 0xa6, 0xf, 0x81, 0x9, 0xb43, 0x8, 0x1, 0xffff, 0x6950, 0x0, 0x7f, 0xe, 0xfffffffd, 0x2, 0x43, 0x9, 0x1, 0x5, 0x9, 0x0, 0xfffffffe, 0x9, 0x4, 0xffff1702, 0x4, 0x6, 0x9, 0x10001, 0xffffffff, 0x2, 0x0, 0x8, 0xfffffffb, 0x8, 0x5, 0x0, 0x400, 0x2, 0xd0f5, 0x0, 0x2, 0x5, 0x3, 0x8, 0x5, 0x7ff, 0x1, 0x8000, 0x209, 0x1, 0x4d7, 0x7, 0xc, 0x4, 0x2, 0x200, 0x2, 0x6, 0x6, 0x0, 0x12, 0x0, 0x100, 0x80, 0x3, 0xffff0001, 0x5, 0x400, 0xce, 0x80, 0x7f, 0x9, 0x4, 0x10, 0xfffffffe, 0x9, 0x10, 0x2, 0x8, 0xb, 0x3ff, 0x5, 0x8, 0x4, 0x1, 0xbe6d, 0x7, 0x5, 0x5, 0x5, 0x6, 0x5, 0x7, 0x7ffd, 0x6, 0x3, 0x5, 0x5, 0x40, 0xb8, 0xec0, 0xfff, 0x0, 0x5, 0xd, 0x6, 0x4, 0x1, 0x6, 0x2, 0x7, 0x8, 0x3, 0x8001, 0x6, 0x0, 0x7fffffff, 0x6, 0x98fa, 0x91, 0x5, 0x6f9, 0x484, 0x0, 0x1, 0x6e13a198, 0x7, 0xd0, 0x5, 0x85, 0x5, 0x2ea5, 0x71, 0x6, 0x1, 0x5435, 0x497, 0x8, 0x10527567, 0x3, 0xd60f, 0xe000000, 0x2000000, 0x3ba, 0x7f, 0x74, 0x4ad, 0xd, 0xff, 0x5, 0x3afde50, 0x6, 0x80000001, 0xfff, 0x6, 0x8, 0x80, 0x8, 0x3, 0x3, 0x400, 0x8, 0x401, 0x4, 0x4, 0xa69, 0x7, 0x7c27, 0x5, 0x3, 0x4, 0x4, 0x0, 0xff, 0x2, 0xf17, 0x6, 0x25fa, 0x2, 0xfffffff9, 0x4, 0x2, 0x10, 0x1, 0x3, 0x3, 0x2, 0x9, 0x5, 0x0, 0x2, 0x3, 0x8d, 0x6, 0x2, 0x10001, 0x4, 0x2, 0x26, 0x7fff, 0x8b68, 0xe, 0x3, 0x8, 0x87, 0x3f, 0x6, 0xb74, 0x5, 0x0, 0x2f8, 0x3, 0xc9c, 0x9, 0x9, 0x6, 0x10000, 0xfed5, 0x52, 0x6, 0x3, 0x5, 0x3, 0x5818, 0x2, 0x1, 0x7, 0xfff, 0x1000, 0x8, 0x0, 0x4, 0x9, 0x0, 0x5, 0x0, 0x7, 0x3ff, 0x12000, 0x81, 0xd, 0x40, 0x0, 0x4, 0x7, 0xc, 0x4, 0x7, 0x80000000, 0xff68, 0x0, 0x40, 0x1, 0xf1c, 0x7, 0x3, 0x8, 0x80000001, 0x8, 0xdeb5, 0xfff, 0xefa, 0x6, 0x5, 0x4, 0x7, 0x2, 0xee1, 0x6, 0x8, 0x401, 0x5, 0x6, 0x6, 0x10001, 0xda12, 0x3, 0x8, 0x1000, 0x2, 0x8a59, 0x7ff, 0xffff, 0xb6d6, 0x7, 0x3, 0x200, 0xffff, 0x3, 0x7, 0x3, 0x2, 0x4, 0x4, 0xf1, 0x0, 0x8, 0x2, 0x9, 0x80000001, 0x35ff, 0x4, 0xb9, 0x3, 0x7ff, 0x6, 0x1, 0x0, 0x9, 0x6, 0xc, 0x8, 0x200, 0x5, 0x2, 0x1, 0x31, 0x0, 0xd, 0x4, 0x617, 0x0, 0xc, 0x9, 0x0, 0x6, 0x0, 0x58, 0x3ff, 0x5, 0x2, 0x6, 0x9, 0x5941, 0x7ff, 0xff, 0x9, 0x4, 0x8001, 0x0, 0xff, 0x7, 0xfffffff9, 0x80000000, 0x400, 0x10001, 0x2, 0x1, 0x7, 0x19db, 0x0, 0x0, 0x8, 0x8, 0x4, 0x0, 0x3ff, 0x9, 0x7, 0xc, 0x2fb, 0x4, 0x8, 0x8, 0xfffffffe, 0x4, 0x10000, 0x2, 0x2, 0xffff, 0x2, 0x7, 0xd482, 0x1ff, 0x4, 0x6, 0x171, 0x8ae, 0x8, 0x2, 0x4, 0x6, 0x6, 0x9, 0x1, 0x8, 0xdc, 0x3, 0x10, 0x7fffffff, 0x5, 0x0, 0x5, 0x21e6380a, 0x0, 0x67, 0x99, 0x6, 0xbab6, 0x7, 0x4, 0xfffffffb, 0x6, 0x2, 0x0, 0x2, 0x3, 0xb801, 0x2e1, 0xb62, 0x3ff, 0x7, 0x5, 0x6, 0x1, 0x6, 0x5, 0x2, 0xb, 0x8, 0x3, 0xa, 0x4, 0x7, 0x8, 0xfffffff7, 0x4, 0x3, 0x1000000, 0x80000000, 0x8, 0xd9f, 0xffff, 0x3, 0x2, 0xe0000000, 0x87, 0x4d, 0xe8fb, 0xfffffffe, 0x178, 0x7, 0x0, 0xb94, 0x101, 0x0, 0xfffffffa, 0x0, 0xb, 0x2, 0xfffff712, 0xa376, 0x9, 0x5, 0x7, 0xf4e, 0x1, 0xf, 0xc, 0x1, 0x36d, 0x4, 0x287, 0x8, 0x5, 0x8, 0x7, 0x800, 0xfe, 0xfffffffb, 0x1, 0x9, 0xff, 0x9, 0x80000001, 0x5, 0x8c4, 0x9, 0x3, 0x9, 0x4, 0x7, 0x5, 0x6, 0x6, 0x4, 0x8, 0xf9, 0x5, 0x3, 0x293, 0x3, 0xffff000, 0x0, 0xffffff56, 0x8, 0x8, 0xffffffff, 0x9e, 0x3, 0x800, 0x4, 0x6, 0x6, 0x0, 0x6, 0x1ff, 0x6, 0x248, 0x2d, 0x9, 0x3d75, 0xc, 0x0, 0x80, 0x8, 0x2, 0x2, 0xffff, 0x9b, 0xb, 0x9, 0x2, 0x8, 0x8, 0x4, 0xffffffff, 0xd169, 0x400, 0x3, 0x5, 0xffffffff, 0x2, 0x8, 0x10001, 0xfff, 0x6, 0x7ff, 0x5b, 0x8001, 0xfffff7d3, 0x7, 0x3, 0x5, 0xe, 0x7ff, 0x10, 0x101, 0x9, 0x0, 0x6, 0x5, 0x1ff, 0x7fffffff, 0x2, 0x8, 0xfd5, 0xffffffff, 0x9, 0x1, 0x5, 0xe7, 0x0, 0x8000, 0x100000, 0xfffffff7, 0x3ff, 0xfffffffe, 0x2493, 0x8, 0xf2bb9129, 0x10001, 0x6, 0x9, 0x9, 0x6, 0x3, 0xb, 0xa67a, 0x5, 0x0, 0x6, 0x9, 0x9, 0x93e8, 0x6, 0xd, 0x4, 0x4, 0x7fff, 0x1, 0x7ff, 0x7f, 0x4, 0x8, 0x55a3, 0x7, 0x8, 0x5, 0x9, 0xe0, 0x1, 0x3fd, 0x3, 0x5, 0x8001, 0xffffffff, 0x4, 0x1, 0x4, 0xe, 0xffffff7f, 0x8, 0x6, 0x5, 0x9, 0x5, 0x3, 0x1000, 0x8, 0x2, 0x5, 0x8, 0x9, 0x200, 0x1000, 0x800, 0x8, 0x9, 0x1fe3, 0xdf5b, 0x2, 0x5, 0x1000, 0x6, 0x1, 0xb, 0x10000000, 0x4, 0x3, 0x3, 0x3, 0x800, 0x7f, 0x3, 0x5, 0x4, 0x1000, 0x2, 0x9, 0x8, 0x1, 0xd872, 0x412d, 0x10, 0x9, 0xc57d, 0x7, 0x6, 0x5, 0x8, 0x7, 0x9, 0x5, 0xfffff7e0, 0x9, 0xf, 0x5, 0xffffffff, 0x2, 0x8, 0x4, 0x4, 0xec, 0x200, 0x0, 0xf45, 0x6, 0x4b8f1044, 0x1, 0x8, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x8, 0x2, 0x8001, 0x7, 0xb, 0x35, 0xffff, 0x7, 0x2, 0xfffffff9, 0x2, 0x2, 0x5, 0x7, 0x80000001, 0x1, 0x6, 0x1, 0x4, 0x9, 0x546, 0x4, 0x763, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0xc, 0x10001, 0xb, 0x4, 0x1ca, 0x265, 0xbd6, 0x8, 0xfc000000, 0x80000001, 0x304, 0xfffff514, 0x8, 0x6, 0xc9, 0x3, 0xfffffffe, 0x7, 0x4, 0x22b, 0x8000, 0x9, 0x5, 0x1, 0x1, 0xfb, 0x81, 0x1, 0x1, 0x681d17c2, 0x1, 0x7, 0xff, 0x99fe, 0x7, 0x3, 0x16e3, 0xfffffff8, 0x3, 0x1967, 0x1000, 0xc0a2, 0x6, 0x7fffffff, 0xb, 0xa, 0x0, 0x1, 0x1, 0x2, 0x7ff, 0x1, 0xed8, 0x8, 0x9725, 0x1, 0x4, 0x0, 0x2, 0x38000000, 0x4, 0x4, 0xb, 0xfffffffa, 0x2e70, 0x1ff, 0xfff, 0xa91, 0x1, 0x0, 0x18f25fa9, 0x7, 0x6, 0x3, 0x5, 0x80000000, 0x4, 0x7, 0x10, 0x9, 0x10001, 0x0, 0x4, 0x5, 0xac, 0x1, 0x9, 0x9, 0x3, 0x70, 0x8, 0x1, 0xa845, 0x1, 0x5, 0x6, 0x4, 0x6, 0x7fff, 0x9, 0x7, 0x236, 0x7, 0xb68, 0xcfd, 0x0, 0x4, 0x200, 0x1, 0x0, 0x7, 0x0, 0x6, 0x8001, 0x9, 0x4, 0x7a, 0x8, 0x8, 0x9, 0x10, 0x9, 0x4, 0x4, 0x7, 0x2, 0x1000, 0x9, 0x9, 0xb, 0xffffffff, 0x3, 0x8, 0x999, 0x10000, 0x10001, 0x3, 0x3, 0x7cc, 0x0, 0x1ff, 0x6, 0x200, 0x1de9445d, 0x3, 0x5, 0x8, 0x3ff, 0x0, 0x7ff, 0x7, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x0, 0x9, 0xfffffffc, 0x547, 0xd41, 0xe, 0xffff, 0xf5, 0xf64, 0x8001, 0xbab, 0x0, 0x2, 0x4, 0x880b, 0xb5, 0xfffffff9, 0x7, 0x7fffffff, 0x401, 0x5, 0x8, 0x9, 0x1, 0x1, 0x7f, 0x2, 0x80000001, 0xfffffffc, 0x2, 0x3, 0x9, 0x4, 0xffff, 0x2, 0x5, 0x0, 0x80000001, 0xe, 0x5, 0xd, 0x25, 0x1, 0x1, 0xfff, 0xc63e, 0x5c, 0x1, 0x4, 0x2a, 0x6]}) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) (rerun: 32)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x110, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0x4, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "02dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0)

21.839422068s ago: executing program 0 (id=2045):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10)
pipe(&(0x7f0000000d00))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x8000, 0x0, 0xfffffffd, 0x74a, 0xfffffffe})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a279"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0)
listen(r2, 0x220c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)

21.678815647s ago: executing program 1 (id=2046):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, 0x0, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x7c, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x2}}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0)

21.678467098s ago: executing program 5 (id=2047):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006)
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000d4ffffffffff", [0x0, 0xffffffff9673e35d]}})

21.53899686s ago: executing program 5 (id=2048):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x1692, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x8200})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1, 0x2000000}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c)
fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000740)={0x1, 0x9, 0x1, 'queue0\x00', 0x9e1a})
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010101, 0x4e22, 0x4, 0x4e20, 0x0, 0x2, 0x1a0, 0xa0, 0x3b, r3, r5}, {0x2, 0x7, 0x4, 0x7, 0xcc8, 0xffffffff, 0x9, 0xb4c6}, {0x1, 0x5, 0x0, 0x1ff}, 0x7, 0x6e6bba, 0x2, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3502, 0x2, 0x3, 0x1, 0x9d1, 0x0, 0x2}}, 0xe8)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r3, 0x10c64, 0x1a704}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000044)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
accept4$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x800)

21.491203084s ago: executing program 0 (id=2049):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000002140)={0x28, 0x4, r7, 0x0, &(0x7f0000000000)="87af4830c9efce0233bad621", 0xc, 0x7})
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000380)={0x28, 0x3, r7, r7, 0x1000, 0x100008000005, 0xc})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x1e8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd269}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x88b8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2515}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}]}, 0x1e8}}, 0x8101)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x28000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000d"], 0x48)

21.463309715s ago: executing program 1 (id=2050):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000300)='./file0\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"/15], 0xf8}}, 0x0)
keyctl$clear(0x7, 0xfffffffffffffffb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
lseek(r5, 0xfffffffc, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x100)
sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)

20.237409612s ago: executing program 1 (id=2051):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x400}], 0x50, 0x0, &(0x7f00000008c0)="424eadd47cb3b4247cb4f8a2d20eb716a73f3c727f727f4ac60b0492dd974689c49f9967aad396f4fffea223225ef664798b2eb72b0842313365a6fc3e6f00b76adca1333c9c245e2a950cd7f0535d37"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20.236432816s ago: executing program 5 (id=2052):
sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x200, @mcast2, 0xce}, 0x1c)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

20.039373177s ago: executing program 1 (id=2053):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
sendmsg$802154_raw(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14, &(0x7f0000000540)={&(0x7f0000000440)="a8e564459c6a8fc726e470386d938c37786370d47b7de0a4cc99e8e15920dd9d9431d5a1eb9a", 0x26}}, 0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xd000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}, 0x1c)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, r10, 0x2f126000)
syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c, 0x0, r10}, &(0x7f0000000040), &(0x7f00000007c0))
r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid\x00')
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x810)
write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000002580)={0xa, 0x4}, 0xc)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="500401a173ba1b"], 0x7)

20.01253868s ago: executing program 3 (id=2054):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000002140)={0x28, 0x4, r8, 0x0, &(0x7f0000000000)="87af4830c9efce0233bad621", 0xc, 0x7})
ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000380)={0x28, 0x3, r8, r8, 0x1000, 0x100008000005, 0xc})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r11, 0x5}, 0x10)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x1e8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd269}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x88b8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2515}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}]}, 0x1e8}}, 0x8101)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x28000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000d"], 0x48)

20.004535799s ago: executing program 5 (id=2055):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r0=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0086202, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x25, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e1e, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1b)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
read(r8, &(0x7f0000000000)=""/93, 0x5d)

19.615343345s ago: executing program 1 (id=2056):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, 0x0, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r7, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x30000, 0x0)

17.019480257s ago: executing program 3 (id=2057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
readv(r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', <r5=>0x0})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4400046, r5})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff, 0x0, 0x0, 0x0, 0x6, r5})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$SIOCSIFHWADDR(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r11 = socket$kcm(0x10, 0x4, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0)
r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r12, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'})

16.133004525s ago: executing program 1 (id=2058):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006)
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000eeffffffffff", [0x0, 0xffffffff9673e35d]}})

463.876709ms ago: executing program 33 (id=2049):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000002140)={0x28, 0x4, r7, 0x0, &(0x7f0000000000)="87af4830c9efce0233bad621", 0xc, 0x7})
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000380)={0x28, 0x3, r7, r7, 0x1000, 0x100008000005, 0xc})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x1e8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd269}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x88b8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2515}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}]}, 0x1e8}}, 0x8101)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x28000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000d"], 0x48)

361.806892ms ago: executing program 34 (id=2058):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006)
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000eeffffffffff", [0x0, 0xffffffff9673e35d]}})

249.106939ms ago: executing program 35 (id=2055):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r0=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0xc0086202, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x25, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e1e, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1b)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
read(r8, &(0x7f0000000000)=""/93, 0x5d)

152.756267ms ago: executing program 36 (id=2057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
readv(r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', <r5=>0x0})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4400046, r5})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff, 0x0, 0x0, 0x0, 0x6, r5})
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r9)
r10 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$SIOCSIFHWADDR(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r11 = socket$kcm(0x10, 0x4, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0)
r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r12, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'})

0s ago: executing program 37 (id=2044):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107a0000000000040000ecffffffff9400000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'ipvlan0\x00', 0x1000}) (async)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc73b5c37696b90ad5bca70304193fc04574d3ca94f8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afac", 0x30}, {&(0x7f0000000100)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3da", 0x51}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0x50)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1b1802, 0x0)
ioctl$HIDIOCSUSAGES(r5, 0x501c4814, &(0x7f00000012c0)={{0x3, 0x200, 0x1c000000, 0x3, 0x5, 0x8001}, 0x28c, [0x2, 0x0, 0x400, 0xfffffffa, 0x8000, 0x3, 0x8000, 0x3, 0x5, 0x3a, 0x269, 0x1, 0x2, 0x8, 0x3, 0x401, 0x8, 0x13c, 0x9, 0xfffffffd, 0x401, 0x7f, 0x5, 0x1, 0x4, 0xa, 0x7f, 0x8, 0x5, 0x3db, 0x4, 0x7fffffff, 0x9, 0x80, 0x0, 0xd, 0x4, 0xe547f812, 0x1, 0x40, 0x4, 0xec1e, 0x1, 0x0, 0x3, 0x2, 0xc8e3, 0x9, 0x8001, 0x7, 0x5, 0x5, 0x8, 0x5, 0x7, 0x2, 0x7, 0x4, 0x3, 0x1a, 0x7, 0xb98, 0xc, 0x3, 0x9, 0xffffff01, 0x5, 0xfffffc01, 0xfeb9, 0x400, 0x6, 0x3884, 0x9, 0x3, 0x760, 0x5, 0xfffffffc, 0xa, 0x100, 0x2d72, 0x200, 0x3, 0x21a4, 0xffff0e71, 0xffff9e49, 0xf08a, 0xfffffffa, 0x93a, 0xf, 0x3, 0xfffffff9, 0xd, 0xb3b, 0x9, 0x0, 0x6, 0x10, 0x7, 0x7ff, 0xf9b, 0x8, 0xa6, 0xf, 0x81, 0x9, 0xb43, 0x8, 0x1, 0xffff, 0x6950, 0x0, 0x7f, 0xe, 0xfffffffd, 0x2, 0x43, 0x9, 0x1, 0x5, 0x9, 0x0, 0xfffffffe, 0x9, 0x4, 0xffff1702, 0x4, 0x6, 0x9, 0x10001, 0xffffffff, 0x2, 0x0, 0x8, 0xfffffffb, 0x8, 0x5, 0x0, 0x400, 0x2, 0xd0f5, 0x0, 0x2, 0x5, 0x3, 0x8, 0x5, 0x7ff, 0x1, 0x8000, 0x209, 0x1, 0x4d7, 0x7, 0xc, 0x4, 0x2, 0x200, 0x2, 0x6, 0x6, 0x0, 0x12, 0x0, 0x100, 0x80, 0x3, 0xffff0001, 0x5, 0x400, 0xce, 0x80, 0x7f, 0x9, 0x4, 0x10, 0xfffffffe, 0x9, 0x10, 0x2, 0x8, 0xb, 0x3ff, 0x5, 0x8, 0x4, 0x1, 0xbe6d, 0x7, 0x5, 0x5, 0x5, 0x6, 0x5, 0x7, 0x7ffd, 0x6, 0x3, 0x5, 0x5, 0x40, 0xb8, 0xec0, 0xfff, 0x0, 0x5, 0xd, 0x6, 0x4, 0x1, 0x6, 0x2, 0x7, 0x8, 0x3, 0x8001, 0x6, 0x0, 0x7fffffff, 0x6, 0x98fa, 0x91, 0x5, 0x6f9, 0x484, 0x0, 0x1, 0x6e13a198, 0x7, 0xd0, 0x5, 0x85, 0x5, 0x2ea5, 0x71, 0x6, 0x1, 0x5435, 0x497, 0x8, 0x10527567, 0x3, 0xd60f, 0xe000000, 0x2000000, 0x3ba, 0x7f, 0x74, 0x4ad, 0xd, 0xff, 0x5, 0x3afde50, 0x6, 0x80000001, 0xfff, 0x6, 0x8, 0x80, 0x8, 0x3, 0x3, 0x400, 0x8, 0x401, 0x4, 0x4, 0xa69, 0x7, 0x7c27, 0x5, 0x3, 0x4, 0x4, 0x0, 0xff, 0x2, 0xf17, 0x6, 0x25fa, 0x2, 0xfffffff9, 0x4, 0x2, 0x10, 0x1, 0x3, 0x3, 0x2, 0x9, 0x5, 0x0, 0x2, 0x3, 0x8d, 0x6, 0x2, 0x10001, 0x4, 0x2, 0x26, 0x7fff, 0x8b68, 0xe, 0x3, 0x8, 0x87, 0x3f, 0x6, 0xb74, 0x5, 0x0, 0x2f8, 0x3, 0xc9c, 0x9, 0x9, 0x6, 0x10000, 0xfed5, 0x52, 0x6, 0x3, 0x5, 0x3, 0x5818, 0x2, 0x1, 0x7, 0xfff, 0x1000, 0x8, 0x0, 0x4, 0x9, 0x0, 0x5, 0x0, 0x7, 0x3ff, 0x12000, 0x81, 0xd, 0x40, 0x0, 0x4, 0x7, 0xc, 0x4, 0x7, 0x80000000, 0xff68, 0x0, 0x40, 0x1, 0xf1c, 0x7, 0x3, 0x8, 0x80000001, 0x8, 0xdeb5, 0xfff, 0xefa, 0x6, 0x5, 0x4, 0x7, 0x2, 0xee1, 0x6, 0x8, 0x401, 0x5, 0x6, 0x6, 0x10001, 0xda12, 0x3, 0x8, 0x1000, 0x2, 0x8a59, 0x7ff, 0xffff, 0xb6d6, 0x7, 0x3, 0x200, 0xffff, 0x3, 0x7, 0x3, 0x2, 0x4, 0x4, 0xf1, 0x0, 0x8, 0x2, 0x9, 0x80000001, 0x35ff, 0x4, 0xb9, 0x3, 0x7ff, 0x6, 0x1, 0x0, 0x9, 0x6, 0xc, 0x8, 0x200, 0x5, 0x2, 0x1, 0x31, 0x0, 0xd, 0x4, 0x617, 0x0, 0xc, 0x9, 0x0, 0x6, 0x0, 0x58, 0x3ff, 0x5, 0x2, 0x6, 0x9, 0x5941, 0x7ff, 0xff, 0x9, 0x4, 0x8001, 0x0, 0xff, 0x7, 0xfffffff9, 0x80000000, 0x400, 0x10001, 0x2, 0x1, 0x7, 0x19db, 0x0, 0x0, 0x8, 0x8, 0x4, 0x0, 0x3ff, 0x9, 0x7, 0xc, 0x2fb, 0x4, 0x8, 0x8, 0xfffffffe, 0x4, 0x10000, 0x2, 0x2, 0xffff, 0x2, 0x7, 0xd482, 0x1ff, 0x4, 0x6, 0x171, 0x8ae, 0x8, 0x2, 0x4, 0x6, 0x6, 0x9, 0x1, 0x8, 0xdc, 0x3, 0x10, 0x7fffffff, 0x5, 0x0, 0x5, 0x21e6380a, 0x0, 0x67, 0x99, 0x6, 0xbab6, 0x7, 0x4, 0xfffffffb, 0x6, 0x2, 0x0, 0x2, 0x3, 0xb801, 0x2e1, 0xb62, 0x3ff, 0x7, 0x5, 0x6, 0x1, 0x6, 0x5, 0x2, 0xb, 0x8, 0x3, 0xa, 0x4, 0x7, 0x8, 0xfffffff7, 0x4, 0x3, 0x1000000, 0x80000000, 0x8, 0xd9f, 0xffff, 0x3, 0x2, 0xe0000000, 0x87, 0x4d, 0xe8fb, 0xfffffffe, 0x178, 0x7, 0x0, 0xb94, 0x101, 0x0, 0xfffffffa, 0x0, 0xb, 0x2, 0xfffff712, 0xa376, 0x9, 0x5, 0x7, 0xf4e, 0x1, 0xf, 0xc, 0x1, 0x36d, 0x4, 0x287, 0x8, 0x5, 0x8, 0x7, 0x800, 0xfe, 0xfffffffb, 0x1, 0x9, 0xff, 0x9, 0x80000001, 0x5, 0x8c4, 0x9, 0x3, 0x9, 0x4, 0x7, 0x5, 0x6, 0x6, 0x4, 0x8, 0xf9, 0x5, 0x3, 0x293, 0x3, 0xffff000, 0x0, 0xffffff56, 0x8, 0x8, 0xffffffff, 0x9e, 0x3, 0x800, 0x4, 0x6, 0x6, 0x0, 0x6, 0x1ff, 0x6, 0x248, 0x2d, 0x9, 0x3d75, 0xc, 0x0, 0x80, 0x8, 0x2, 0x2, 0xffff, 0x9b, 0xb, 0x9, 0x2, 0x8, 0x8, 0x4, 0xffffffff, 0xd169, 0x400, 0x3, 0x5, 0xffffffff, 0x2, 0x8, 0x10001, 0xfff, 0x6, 0x7ff, 0x5b, 0x8001, 0xfffff7d3, 0x7, 0x3, 0x5, 0xe, 0x7ff, 0x10, 0x101, 0x9, 0x0, 0x6, 0x5, 0x1ff, 0x7fffffff, 0x2, 0x8, 0xfd5, 0xffffffff, 0x9, 0x1, 0x5, 0xe7, 0x0, 0x8000, 0x100000, 0xfffffff7, 0x3ff, 0xfffffffe, 0x2493, 0x8, 0xf2bb9129, 0x10001, 0x6, 0x9, 0x9, 0x6, 0x3, 0xb, 0xa67a, 0x5, 0x0, 0x6, 0x9, 0x9, 0x93e8, 0x6, 0xd, 0x4, 0x4, 0x7fff, 0x1, 0x7ff, 0x7f, 0x4, 0x8, 0x55a3, 0x7, 0x8, 0x5, 0x9, 0xe0, 0x1, 0x3fd, 0x3, 0x5, 0x8001, 0xffffffff, 0x4, 0x1, 0x4, 0xe, 0xffffff7f, 0x8, 0x6, 0x5, 0x9, 0x5, 0x3, 0x1000, 0x8, 0x2, 0x5, 0x8, 0x9, 0x200, 0x1000, 0x800, 0x8, 0x9, 0x1fe3, 0xdf5b, 0x2, 0x5, 0x1000, 0x6, 0x1, 0xb, 0x10000000, 0x4, 0x3, 0x3, 0x3, 0x800, 0x7f, 0x3, 0x5, 0x4, 0x1000, 0x2, 0x9, 0x8, 0x1, 0xd872, 0x412d, 0x10, 0x9, 0xc57d, 0x7, 0x6, 0x5, 0x8, 0x7, 0x9, 0x5, 0xfffff7e0, 0x9, 0xf, 0x5, 0xffffffff, 0x2, 0x8, 0x4, 0x4, 0xec, 0x200, 0x0, 0xf45, 0x6, 0x4b8f1044, 0x1, 0x8, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x8, 0x2, 0x8001, 0x7, 0xb, 0x35, 0xffff, 0x7, 0x2, 0xfffffff9, 0x2, 0x2, 0x5, 0x7, 0x80000001, 0x1, 0x6, 0x1, 0x4, 0x9, 0x546, 0x4, 0x763, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0xc, 0x10001, 0xb, 0x4, 0x1ca, 0x265, 0xbd6, 0x8, 0xfc000000, 0x80000001, 0x304, 0xfffff514, 0x8, 0x6, 0xc9, 0x3, 0xfffffffe, 0x7, 0x4, 0x22b, 0x8000, 0x9, 0x5, 0x1, 0x1, 0xfb, 0x81, 0x1, 0x1, 0x681d17c2, 0x1, 0x7, 0xff, 0x99fe, 0x7, 0x3, 0x16e3, 0xfffffff8, 0x3, 0x1967, 0x1000, 0xc0a2, 0x6, 0x7fffffff, 0xb, 0xa, 0x0, 0x1, 0x1, 0x2, 0x7ff, 0x1, 0xed8, 0x8, 0x9725, 0x1, 0x4, 0x0, 0x2, 0x38000000, 0x4, 0x4, 0xb, 0xfffffffa, 0x2e70, 0x1ff, 0xfff, 0xa91, 0x1, 0x0, 0x18f25fa9, 0x7, 0x6, 0x3, 0x5, 0x80000000, 0x4, 0x7, 0x10, 0x9, 0x10001, 0x0, 0x4, 0x5, 0xac, 0x1, 0x9, 0x9, 0x3, 0x70, 0x8, 0x1, 0xa845, 0x1, 0x5, 0x6, 0x4, 0x6, 0x7fff, 0x9, 0x7, 0x236, 0x7, 0xb68, 0xcfd, 0x0, 0x4, 0x200, 0x1, 0x0, 0x7, 0x0, 0x6, 0x8001, 0x9, 0x4, 0x7a, 0x8, 0x8, 0x9, 0x10, 0x9, 0x4, 0x4, 0x7, 0x2, 0x1000, 0x9, 0x9, 0xb, 0xffffffff, 0x3, 0x8, 0x999, 0x10000, 0x10001, 0x3, 0x3, 0x7cc, 0x0, 0x1ff, 0x6, 0x200, 0x1de9445d, 0x3, 0x5, 0x8, 0x3ff, 0x0, 0x7ff, 0x7, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x0, 0x9, 0xfffffffc, 0x547, 0xd41, 0xe, 0xffff, 0xf5, 0xf64, 0x8001, 0xbab, 0x0, 0x2, 0x4, 0x880b, 0xb5, 0xfffffff9, 0x7, 0x7fffffff, 0x401, 0x5, 0x8, 0x9, 0x1, 0x1, 0x7f, 0x2, 0x80000001, 0xfffffffc, 0x2, 0x3, 0x9, 0x4, 0xffff, 0x2, 0x5, 0x0, 0x80000001, 0xe, 0x5, 0xd, 0x25, 0x1, 0x1, 0xfff, 0xc63e, 0x5c, 0x1, 0x4, 0x2a, 0x6]}) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) (rerun: 32)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x110, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0x4, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "02dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0)

kernel console output (not intermixed with test programs):

 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.535482][ T5959] usb 6-1: Product: syz
[  402.598808][ T5959] usb 6-1: Manufacturer: syz
[  402.604083][ T5959] usb 6-1: SerialNumber: syz
[  403.063338][T10688] net_ratelimit: 21 callbacks suppressed
[  403.063360][T10688] bond1: (slave macvlan2): failed to get link speed/duplex
[  403.215549][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  403.364768][ T5959] usb 6-1: USB disconnect, device number 17
[  403.382009][T10984] FAULT_INJECTION: forcing a failure.
[  403.382009][T10984] name failslab, interval 1, probability 0, space 0, times 0
[  403.399803][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  403.471433][T10984] CPU: 1 UID: 0 PID: 10984 Comm: syz.3.1303 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  403.471461][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  403.471473][T10984] Call Trace:
[  403.471480][T10984]  <TASK>
[  403.471488][T10984]  dump_stack_lvl+0x189/0x250
[  403.471516][T10984]  ? __pfx____ratelimit+0x10/0x10
[  403.471540][T10984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.471562][T10984]  ? __pfx__printk+0x10/0x10
[  403.471592][T10984]  ? __pfx___might_resched+0x10/0x10
[  403.471619][T10984]  should_fail_ex+0x414/0x560
[  403.471645][T10984]  should_failslab+0xa8/0x100
[  403.471668][T10984]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  403.471688][T10984]  ? __alloc_skb+0x112/0x2d0
[  403.471718][T10984]  __alloc_skb+0x112/0x2d0
[  403.471749][T10984]  tcp_stream_alloc_skb+0x3d/0x340
[  403.471776][T10984]  tcp_connect+0x146f/0x4ef0
[  403.471810][T10984]  ? ktime_get_with_offset+0x8c/0x2a0
[  403.471843][T10984]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  403.471870][T10984]  ? ktime_get_with_offset+0x8c/0x2a0
[  403.471893][T10984]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  403.471921][T10984]  ? __pfx_tcp_connect+0x10/0x10
[  403.471940][T10984]  ? get_random_u32+0x48e/0x940
[  403.471969][T10984]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.472001][T10984]  ? __asan_memset+0x22/0x50
[  403.472034][T10984]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  403.472072][T10984]  ? inet6_hash_connect+0xd8/0x170
[  403.472123][T10984]  tcp_v6_connect+0x1202/0x1880
[  403.472160][T10984]  ? __pfx_tcp_v6_connect+0x10/0x10
[  403.472183][T10984]  ? tomoyo_check_inet_address+0x275/0x8c0
[  403.472218][T10984]  ? smack_ipv6host_label+0x824/0x8e0
[  403.472247][T10984]  ? __pfx_tomoyo_check_inet_address+0x10/0x10
[  403.472283][T10984]  __inet_stream_connect+0x2ab/0xe80
[  403.472317][T10984]  ? __local_bh_enable_ip+0x12d/0x1c0
[  403.472338][T10984]  ? __pfx___inet_stream_connect+0x10/0x10
[  403.472361][T10984]  ? __local_bh_enable_ip+0x12d/0x1c0
[  403.472387][T10984]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  403.472419][T10984]  inet_stream_connect+0x66/0xa0
[  403.472444][T10984]  __sys_connect+0x316/0x440
[  403.472470][T10984]  ? __fget_files+0x3a0/0x420
[  403.472492][T10984]  ? __pfx___sys_connect+0x10/0x10
[  403.472531][T10984]  ? __pfx_ksys_write+0x10/0x10
[  403.472546][T10984]  ? rcu_is_watching+0x15/0xb0
[  403.472575][T10984]  __x64_sys_connect+0x7a/0x90
[  403.472601][T10984]  do_syscall_64+0xfa/0x3b0
[  403.472622][T10984]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.472641][T10984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.472660][T10984]  ? clear_bhb_loop+0x60/0xb0
[  403.472684][T10984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.472703][T10984] RIP: 0033:0x7fa46658ebe9
[  403.472719][T10984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.472736][T10984] RSP: 002b:00007fa467469038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  403.472757][T10984] RAX: ffffffffffffffda RBX: 00007fa4667b5fa0 RCX: 00007fa46658ebe9
[  403.472771][T10984] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003
[  403.472783][T10984] RBP: 00007fa467469090 R08: 0000000000000000 R09: 0000000000000000
[  403.472795][T10984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.472806][T10984] R13: 00007fa4667b6038 R14: 00007fa4667b5fa0 R15: 00007ffc4db39cd8
[  403.472839][T10984]  </TASK>
[  403.591262][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  403.877686][ T6596] udevd[6596]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.32/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  403.912825][ T7806] udevd[7806]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  403.942213][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.196/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  404.506735][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  404.768238][T10688] bond1: (slave macvlan2): failed to get link speed/duplex
[  404.969188][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.285800][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.409429][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.599216][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.608927][    T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  406.333526][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.346729][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.356827][    T9] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  406.366067][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.384515][    T9] usb 4-1: config 0 descriptor??
[  406.389645][ T5927] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  406.623480][T11022] netlink: 'syz.3.1312': attribute type 1 has an invalid length.
[  406.631775][ T5927] usb 6-1: Using ep0 maxpacket: 16
[  406.637450][T11022] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1312'.
[  406.654254][ T5927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  406.665400][ T5927] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  406.674780][ T5927] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  406.720160][ T5927] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  406.738730][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.756540][ T5927] usb 6-1: Product: syz
[  406.769028][ T5927] usb 6-1: Manufacturer: syz
[  406.773776][ T5927] usb 6-1: SerialNumber: syz
[  406.798753][ T5927] cdc_ncm 6-1:1.0: skipping garbage
[  406.818724][ T5927] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  406.838879][ T5927] cdc_ncm 6-1:1.0: bind() failure
[  406.970557][    T9] elo 0003:04E7:0030.0011: item fetching failed at offset 5/7
[  406.991860][    T9] elo 0003:04E7:0030.0011: parse failed
[  407.008894][    T9] elo 0003:04E7:0030.0011: probe with driver elo failed with error -22
[  407.014994][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.026085][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.037133][ T5927] usb 6-1: USB disconnect, device number 18
[  407.228382][ T5978] usb 4-1: USB disconnect, device number 40
[  407.520284][T11081] netlink: 'syz.4.1325': attribute type 12 has an invalid length.
[  407.749527][    T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  407.788806][ T5978] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  407.938782][    T9] usb 1-1: Using ep0 maxpacket: 16
[  407.959012][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  407.994430][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  408.021270][    T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  408.048891][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.077084][    T9] usb 1-1: Product: syz
[  408.091137][    T9] usb 1-1: Manufacturer: syz
[  408.108847][ T3463] net_ratelimit: 18 callbacks suppressed
[  408.108865][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  408.134724][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  408.138773][    T9] usb 1-1: SerialNumber: syz
[  408.266212][ T5978] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  408.410289][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  408.415811][    T9] usb 1-1: config 0 descriptor??
[  408.453953][T10688] bond1: (slave macvlan2): failed to get link speed/duplex
[  408.678848][ T5978] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  408.705926][ T5978] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  408.729232][    T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  408.745891][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.783127][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  408.878841][ T5978] usb 5-1: Product: syz
[  408.889843][ T5978] usb 5-1: Manufacturer: syz
[  408.909706][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  408.915485][ T5978] usb 5-1: SerialNumber: syz
[  408.947262][ T5978] usb 5-1: config 0 descriptor??
[  408.957578][T11097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1331'.
[  408.968560][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'.
[  408.970724][ T5978] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  408.999575][    T9] usb 1-1: USB disconnect, device number 44
[  409.001983][T10688] usb 1-1: Failed to submit usb control message: -71
[  409.017051][ T5978] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card
[  409.018803][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.032941][ T5978] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90
[  409.045146][T10688] usb 1-1: unable to send the bmi data to the device: -71
[  409.057158][T10688] usb 1-1: unable to get target info from device
[  409.074384][T10688] usb 1-1: could not get target info (-71)
[  409.171122][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.194187][T10688] usb 1-1: could not probe fw (-71)
[  409.413616][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.548559][ T5978] usb 5-1: USB disconnect, device number 52
[  409.572078][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.781389][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.043345][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  412.020741][T11123] tipc: Enabled bearer <eth:wg1>, priority 10
[  412.119292][ T5961] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  412.288873][ T5961] usb 6-1: Using ep0 maxpacket: 16
[  412.295918][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1342'.
[  412.333170][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.364700][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.402308][ T5961] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  412.432364][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.465133][ T5961] usb 6-1: config 0 descriptor??
[  412.498381][T11140] binder: 11139:11140 ioctl 4018620d 0 returned -22
[  412.870097][ T5978] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  412.904695][T11151] trusted_key: encrypted_key: insufficient parameters specified
[  413.038858][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  413.058914][ T5978] usb 4-1: Using ep0 maxpacket: 32
[  413.066480][ T5978] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  413.074876][ T5978] usb 4-1: config 0 has no interface number 0
[  413.085132][ T5978] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  413.094448][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.103009][ T5978] usb 4-1: Product: syz
[  413.107250][ T5978] usb 4-1: Manufacturer: syz
[  413.112357][ T5978] usb 4-1: SerialNumber: syz
[  413.122049][ T5978] usb 4-1: config 0 descriptor??
[  413.138901][ T5978] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  413.188854][    T9] usb 1-1: Using ep0 maxpacket: 8
[  413.198781][    T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  413.208241][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.216469][    T9] usb 1-1: Product: syz
[  413.222374][    T9] usb 1-1: Manufacturer: syz
[  413.223208][ T3463] net_ratelimit: 19 callbacks suppressed
[  413.223248][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.227080][    T9] usb 1-1: SerialNumber: syz
[  413.249583][    T9] usb 1-1: config 0 descriptor??
[  413.270018][    T9] gspca_main: se401-2.14.0 probing 047d:5003
[  413.360993][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.375003][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.384793][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.477530][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.553181][ T5978] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  413.577334][ T5978] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  413.597751][ T5961] letsketch 0003:6161:4D15.0012: Device info: ఁ
[  413.611675][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.638431][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  413.639281][ T5907] usb 4-1: USB disconnect, device number 41
[  413.668995][    T9] gspca_se401: Frame size: 0x0 1/16th janggu
[  413.675117][    T9] gspca_se401: Frame size: 0x0 1/16th janggu
[  413.728492][ T5907] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  413.741210][    T9] gspca_se401: Frame size: 0x0 1/16th janggu
[  413.755795][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.756290][    T9] gspca_se401: Frame size: 0x0 1/16th janggu
[  413.783763][ T5907] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  413.797240][    T9] gspca_se401: Frame size: 0x0 1/16th janggu
[  413.814865][    T9] gspca_se401: Frame size: 0x0 1/16th janggu
[  413.827101][ T5907] quatech2 4-1:0.51: device disconnected
[  413.835839][ T5961] usb 6-1: Max retries (5) exceeded reading string descriptor 201
[  413.868505][ T5961] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -71
[  413.893080][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.898931][ T5961] usb 6-1: USB disconnect, device number 19
[  413.988956][ T5978] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  414.018982][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  414.131901][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  414.158819][ T5978] usb 5-1: Using ep0 maxpacket: 16
[  414.167221][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.179129][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.189488][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  414.221114][ T5978] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  414.234364][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.260137][T10688] bond1: (slave macvlan2): failed to get link speed/duplex
[  414.263127][ T5978] usb 5-1: config 0 descriptor??
[  414.343405][T11167] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1351'.
[  414.380121][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  414.716230][ T5978] HID 045e:07da: Invalid code 65791 type 1
[  414.731343][ T5978] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input30
[  414.799562][ T5978] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  414.880611][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'.
[  414.898984][T11174] netlink: 'syz.1.1353': attribute type 12 has an invalid length.
[  414.910174][ T5907] usb 5-1: USB disconnect, device number 53
[  414.925600][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1354'.
[  414.943888][    T9] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31
[  414.978400][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'.
[  415.057238][T11174] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  415.057336][T11174] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  415.057366][T11174] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  415.057394][T11174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  415.075280][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'.
[  415.075314][T11174] netlink: 'syz.1.1353': attribute type 12 has an invalid length.
[  415.075328][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1353'.
[  415.114742][T11173] fido_id[11173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  415.369765][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  415.487363][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1358'.
[  415.487388][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1358'.
[  415.487415][T11188] netlink: 'syz.5.1358': attribute type 13 has an invalid length.
[  415.537405][T11190] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1359'.
[  415.578546][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  415.578576][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.581731][    T9] usb 4-1: config 0 descriptor??
[  415.614061][    T9] cp210x 4-1:0.0: cp210x converter detected
[  415.624492][   T30] audit: type=1326 audit(1755928614.884:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.1.1361" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa39378ebe9 code=0x0
[  415.667956][ T5907] usb 1-1: USB disconnect, device number 45
[  416.061070][T11179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.391502][T11179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.562526][T11207] vivid-004: disconnect
[  416.647130][T11207] vivid-004: reconnect
[  416.989454][T11200] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR
[  417.037021][    T9] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32
[  417.044757][T11178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.078244][    T9] cp210x 4-1:0.0: querying part number failed
[  417.222977][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.569303][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[  417.621654][T11219] __nla_validate_parse: 1 callbacks suppressed
[  417.621667][T11219] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1367'.
[  417.639096][T11219] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1367'.
[  417.652165][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1366'.
[  418.302584][   T12] net_ratelimit: 24 callbacks suppressed
[  418.312482][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  418.548810][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  418.668878][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  418.733759][T11236] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  418.751065][    T9] usb 4-1: USB disconnect, device number 42
[  418.765690][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  418.786075][    T9] cp210x 4-1:0.0: device disconnected
[  418.800486][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  418.928837][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  419.053069][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  419.295193][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  420.206885][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  420.489639][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  420.608849][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  420.654289][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1381'.
[  420.780255][ T5961] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  421.019445][ T5961] usb 4-1: Using ep0 maxpacket: 16
[  422.003940][ T5961] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  422.133093][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.228988][ T5961] usb 4-1: Product: syz
[  422.233263][ T5961] usb 4-1: Manufacturer: syz
[  422.237942][ T5961] usb 4-1: SerialNumber: syz
[  422.272433][ T5961] usb 4-1: config 0 descriptor??
[  422.303964][ T5961] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  422.867484][ T5961] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110
[  423.079832][ T5927] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  423.090726][    T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  423.262098][    T9] usb 1-1: Using ep0 maxpacket: 16
[  423.271965][ T5927] usb 5-1: config 169 has an invalid interface number: 155 but max is 3
[  423.281829][ T5927] usb 5-1: config 169 contains an unexpected descriptor of type 0x2, skipping
[  423.293156][ T5927] usb 5-1: config 169 has an invalid interface number: 169 but max is 3
[  423.301947][    T9] usb 1-1: config 255 has an invalid interface number: 47 but max is 0
[  423.330265][ T3463] net_ratelimit: 12 callbacks suppressed
[  423.330291][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  423.596261][    T9] usb 1-1: config 255 has no interface number 0
[  423.615509][    T9] usb 1-1: config 255 interface 47 has no altsetting 0
[  423.623257][ T5927] usb 5-1: config 169 contains an unexpected descriptor of type 0x1, skipping
[  423.645066][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  423.702289][ T5927] usb 5-1: config 169 has an invalid interface number: 192 but max is 3
[  424.627791][ T5927] usb 5-1: config 169 has an invalid interface number: 57 but max is 3
[  424.638936][    T9] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc
[  424.675677][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.310062][T11305] ubi31: detaching mtd0
[  425.403750][T11305] ubi31: mtd0 is detached
[  425.451655][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  425.643426][ T5927] usb 5-1: config 169 has an invalid descriptor of length 109, skipping remainder of the config
[  425.666392][    T9] usb 1-1: Product: syz
[  425.688752][    T9] usb 1-1: Manufacturer: syz
[  425.693404][    T9] usb 1-1: SerialNumber: syz
[  425.764898][ T5927] usb 5-1: config 169 has no interface number 0
[  425.792369][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  425.799729][ T5927] usb 5-1: config 169 has no interface number 1
[  425.799753][ T5927] usb 5-1: config 169 has no interface number 2
[  425.799771][ T5927] usb 5-1: config 169 has no interface number 3
[  425.799847][ T5927] usb 5-1: config 169 interface 155 altsetting 2 has an endpoint descriptor with address 0x3C, changing to 0xC
[  425.799874][ T5927] usb 5-1: config 169 interface 155 altsetting 2 endpoint 0x8 has invalid maxpacket 520, setting to 64
[  425.799901][ T5927] usb 5-1: config 169 interface 155 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[  425.799924][ T5927] usb 5-1: config 169 interface 155 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  425.799952][ T5927] usb 5-1: config 169 interface 155 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  425.799974][ T5927] usb 5-1: config 169 interface 155 altsetting 2 endpoint 0x9 has invalid maxpacket 1088, setting to 64
[  425.800000][ T5927] usb 5-1: config 169 interface 155 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  425.800023][ T5927] usb 5-1: config 169 interface 155 altsetting 2 has a duplicate endpoint with address 0x7, skipping
[  425.800046][ T5927] usb 5-1: config 169 interface 155 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  425.800082][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has a duplicate endpoint with address 0x2, skipping
[  425.800104][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has a duplicate endpoint with address 0x5, skipping
[  425.800128][ T5927] usb 5-1: config 169 interface 169 altsetting 250 endpoint 0xD has invalid maxpacket 1544, setting to 64
[  425.800154][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has a duplicate endpoint with address 0x5, skipping
[  425.800177][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has an invalid descriptor for endpoint zero, skipping
[  425.800198][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has a duplicate endpoint with address 0x5, skipping
[  425.800219][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has a duplicate endpoint with address 0x7, skipping
[  425.800241][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has an invalid descriptor for endpoint zero, skipping
[  425.810395][   T43] usb 4-1: USB disconnect, device number 43
[  425.843769][    T9] usb 1-1: can't set config #255, error -71
[  425.997453][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.028216][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has a duplicate endpoint with address 0x5, skipping
[  426.069503][T11311] loop2: detected capacity change from 0 to 7
[  426.078750][ T5927] usb 5-1: config 169 interface 169 altsetting 250 has a duplicate endpoint with address 0x5, skipping
[  426.098190][ T5927] usb 5-1: config 169 interface 169 altsetting 250 endpoint 0x6 has invalid maxpacket 479, setting to 64
[  426.103127][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1392'.
[  426.120086][T11311]  loop2:
[  426.123505][T11311] loop2: partition table partially beyond EOD, truncated
[  426.135698][ T5927] usb 5-1: config 169 interface 192 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  426.150397][ T5927] usb 5-1: config 169 interface 57 altsetting 92 has a duplicate endpoint with address 0x2, skipping
[  426.182539][ T5927] usb 5-1: config 169 interface 57 altsetting 92 has a duplicate endpoint with address 0xA, skipping
[  426.213930][ T5927] usb 5-1: config 169 interface 57 altsetting 92 has a duplicate endpoint with address 0x6, skipping
[  426.247328][ T5927] usb 5-1: config 169 interface 57 altsetting 92 has a duplicate endpoint with address 0x9, skipping
[  426.299072][ T5927] usb 5-1: config 169 interface 57 altsetting 92 has a duplicate endpoint with address 0xC, skipping
[  426.342005][ T5927] usb 5-1: config 169 interface 57 altsetting 92 has a duplicate endpoint with address 0x5, skipping
[  426.374397][ T5927] usb 5-1: config 169 interface 57 altsetting 92 has 6 endpoint descriptors, different from the interface descriptor's value: 9
[  426.391225][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.404418][ T5927] usb 5-1: config 169 interface 155 has no altsetting 0
[  426.413004][ T5927] usb 5-1: config 169 interface 169 has no altsetting 0
[  426.421000][ T5927] usb 5-1: config 169 interface 192 has no altsetting 0
[  426.518803][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.647297][    T9] usb 1-1: USB disconnect, device number 46
[  426.653980][ T5927] usb 5-1: config 169 interface 57 has no altsetting 0
[  426.670052][ T5927] usb 5-1: string descriptor 0 read error: -71
[  426.675403][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  426.676359][ T5927] usb 5-1: New USB device found, idVendor=0f11, idProduct=1010, bcdDevice=c7.3a
[  426.695923][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.799414][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  427.060195][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  427.204653][ T5927] usb 5-1: can't set config #169, error -71
[  427.214111][ T5927] usb 5-1: USB disconnect, device number 54
[  427.490748][T11336] xt_connbytes: Forcing CT accounting to be enabled
[  427.513765][T11336] set match dimension is over the limit!
[  427.535677][T11338] binder: 11337:11338 ioctl 4018620d 0 returned -22
[  427.625103][ T5927] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  427.784021][ T5927] usb 5-1: device descriptor read/64, error -71
[  428.762981][T10690] net_ratelimit: 5 callbacks suppressed
[  428.763002][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  429.929123][ T5927] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  430.068849][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  430.275445][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  430.335238][T11352] mkiss: ax0: crc mode is auto.
[  430.426472][T11364] lo speed is unknown, defaulting to 1000
[  430.433373][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  430.441059][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1407'.
[  430.662434][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  430.816013][T11385] binder: 11381:11385 ioctl c0306201 0 returned -14
[  431.008928][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  431.558961][ T5978] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  431.720766][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  431.862364][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  431.971294][ T5978] usb 1-1: Using ep0 maxpacket: 32
[  431.989863][ T5978] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  431.999345][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.007983][ T5978] usb 1-1: Product: syz
[  432.012264][ T5978] usb 1-1: Manufacturer: syz
[  432.016942][ T5978] usb 1-1: SerialNumber: syz
[  432.038892][ T5978] usb 1-1: config 0 descriptor??
[  432.054186][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  432.054636][ T5978] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  432.174924][ T5978] usb 1-1: Found UVC 0.00 device syz (0d49:7000)
[  432.199149][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  432.220326][ T5978] usb 1-1: No valid video chain found.
[  432.269450][ T5978] usb 1-1: USB disconnect, device number 47
[  432.632474][T11430] loop6: detected capacity change from 0 to 63
[  432.671162][T11422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.702491][T11430] loop6: detected capacity change from 63 to 524287999
[  432.724207][T11430] buffer_io_error: 41 callbacks suppressed
[  432.724232][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.765922][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.796256][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.811109][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.826957][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.836070][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.856301][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1421'.
[  432.867983][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.885901][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.917159][T11430] ldm_validate_partition_table(): Disk read failed.
[  432.937135][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.952536][T11430] Buffer I/O error on dev loop6, logical block 0, async page read
[  432.964089][T11430] Dev loop6: unable to read RDB block 0
[  432.974877][T11430]  loop6: unable to read partition table
[  432.985060][T11430] loop_reread_partitions: partition scan of loop6 (ùùĠ�™YçDYÁ3-ş�QŜ{k§;éHüç
;j½ĥ&I�}TxìÔ`+ä) failed (rc=-5)
[  433.057328][T11445] binfmt_misc: register: failed to install interpreter file ./file0
[  434.335664][   T78] net_ratelimit: 7 callbacks suppressed
[  434.335683][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  434.489991][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  434.959325][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.184339][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.324411][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.489030][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.579211][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'.
[  435.599614][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.749189][T11498] binder: 11495:11498 ioctl c0306201 0 returned -14
[  435.791455][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.819018][T11500] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1435'.
[  435.956145][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  436.149495][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  436.580176][T11499] loop1: detected capacity change from 0 to 7
[  436.626904][T11499] ldm_validate_partition_table(): Disk read failed.
[  436.639380][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'.
[  436.715619][T11499] Dev loop1: unable to read RDB block 0
[  436.744136][T11524] binder: 11518:11524 unknown command 0
[  436.787668][T11524] binder: 11518:11524 ioctl c0306201 200000000080 returned -22
[  436.802834][T11499]  loop1: unable to read partition table
[  436.859660][T11499] loop1: partition table beyond EOD, truncated
[  436.899122][T11499] loop_reread_partitions: partition scan of loop1 (ŝè˘ĞxüŸÑĝ éÚĴ§½dG¤´à–ƒŬĦŻ â·û
[  436.899122][T11499] 
) failed (rc=-5)
[  436.919495][T11524] batadv_slave_0: entered promiscuous mode
[  436.949894][T11518] batadv_slave_0: left promiscuous mode
[  438.192591][T11545] mkiss: ax0: crc mode is auto.
[  439.218802][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1452'.
[  439.285957][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1452'.
[  439.369462][   T49] net_ratelimit: 17 callbacks suppressed
[  439.369482][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  439.398730][   T43] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  439.519583][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  439.554084][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'.
[  439.588868][   T43] usb 5-1: Using ep0 maxpacket: 16
[  439.603029][   T43] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.846288][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  439.949708][   T43] usb 5-1: config 0 interface 0 has no altsetting 0
[  440.025244][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  440.082388][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.182883][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.356465][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  440.373183][   T43] usb 5-1: config 0 descriptor??
[  440.481904][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  440.641918][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  440.839887][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  441.093678][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  441.410227][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  441.545348][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  441.603238][T11607] binder: BINDER_SET_CONTEXT_MGR already set
[  441.648031][T11607] binder: 11605:11607 ioctl 4018620d 200000000240 returned -16
[  441.665184][T11611] netlink: 'syz.0.1463': attribute type 29 has an invalid length.
[  441.704317][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  442.158551][   T43] usb 5-1: USB disconnect, device number 57
[  443.312140][T11633] lo speed is unknown, defaulting to 1000
[  444.528874][ T1098] net_ratelimit: 8 callbacks suppressed
[  444.528894][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  444.742317][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  444.751375][T11663] netlink: 'syz.5.1477': attribute type 1 has an invalid length.
[  444.813162][T11667] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  444.831789][T11667] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  445.768539][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  445.909748][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  445.979980][T11684] netlink: 'syz.5.1483': attribute type 1 has an invalid length.
[  446.042218][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  446.163755][ T5843] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1
[  446.172977][ T5843] Bluetooth: hci2: unexpected event for opcode 0x2039
[  446.190552][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  446.208317][T11693] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  446.221337][T11693] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  446.309737][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  446.439447][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  446.587262][T11695] syz.5.1488: attempt to access beyond end of device
[  446.587262][T11695] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  446.602777][T11695] (syz.5.1488,11695,0):ocfs2_get_sector:1714 ERROR: status = -5
[  446.611822][T11695] (syz.5.1488,11695,0):ocfs2_sb_probe:753 ERROR: status = -5
[  446.620046][T11695] (syz.5.1488,11695,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  446.629712][T11695] (syz.5.1488,11695,0):ocfs2_fill_super:1177 ERROR: status = -5
[  447.201070][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1490'.
[  448.148948][T11728] netlink: 'syz.0.1495': attribute type 10 has an invalid length.
[  448.286423][T11728] team0: Port device wlan1 added
[  448.352019][T11737] bpf: Bad value for 'gid'
[  448.394420][T11737] /dev/sg0: Can't lookup blockdev
[  448.508496][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1501'.
[  448.563718][T11746] bridge1: port 1(veth0_to_bond) entered blocking state
[  448.571162][T11746] bridge1: port 1(veth0_to_bond) entered disabled state
[  448.578612][T11746] veth0_to_bond: entered allmulticast mode
[  448.588553][T11746] veth0_to_bond: entered promiscuous mode
[  448.719019][ T5927] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[  448.861119][ T5907] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  448.892780][ T5927] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  448.903348][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.918235][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1504'.
[  448.930796][ T5927] usb 5-1: config 0 descriptor??
[  448.940412][ T5927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  449.069399][ T5907] usb 4-1: Using ep0 maxpacket: 16
[  449.467775][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.477615][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.487723][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  449.539738][ T5907] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  449.558815][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.572822][ T5907] usb 4-1: Product: syz
[  449.577011][ T5907] usb 4-1: Manufacturer: syz
[  449.587516][ T5907] usb 4-1: SerialNumber: syz
[  449.592516][ T3495] net_ratelimit: 21 callbacks suppressed
[  449.592532][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  449.607885][ T5907] usb 4-1: config 0 descriptor??
[  449.626934][ T5907] hub 4-1:0.0: bad descriptor, ignoring hub
[  449.633902][ T5907] hub 4-1:0.0: probe with driver hub failed with error -5
[  449.646944][ T5907] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32
[  449.687107][ T5843] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1
[  449.697978][ T5843] Bluetooth: hci4: unexpected event for opcode 0x2039
[  449.712618][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  449.828805][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  449.910934][ T5927] gp8psk: usb in 137 operation failed.
[  449.916541][ T5927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  449.948040][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  449.960160][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  449.989103][ T5927] usb 5-1: USB disconnect, device number 58
[  450.099836][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  450.129024][ T5934] usb 4-1: USB disconnect, device number 44
[  450.219265][ T5843] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  450.219858][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  450.229927][ T5843] Bluetooth: hci2: Injecting HCI hardware error event
[  450.245329][ T5843] Bluetooth: hci2: hardware error 0x00
[  450.348797][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  450.492581][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  451.229975][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  451.479931][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  451.488688][T11806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'.
[  452.275895][T11819] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  452.359672][ T5843] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  452.834128][ T5927] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  452.922333][T11827] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  452.991814][T11827] fuse: Bad value for 'group_id'
[  453.013411][T11827] fuse: Bad value for 'group_id'
[  453.042680][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.054622][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0
[  453.079486][ T5927] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  453.103036][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.111763][ T5927] usb 4-1: Product: syz
[  453.116103][ T5927] usb 4-1: Manufacturer: syz
[  453.124976][ T5927] usb 4-1: SerialNumber: syz
[  453.136556][ T5927] usb 4-1: config 0 descriptor??
[  453.147495][ T5927] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  453.171848][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  453.183043][ T5927] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  453.192168][ T5927] usb 4-1: media controller created
[  453.229485][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  453.319637][ T5927] DVB: Unable to find symbol tda10046_attach()
[  453.325889][ T5927] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  453.365293][ T5927] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  453.742409][ T5843] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  453.751404][ T5843] Bluetooth: hci4: Injecting HCI hardware error event
[  453.761177][ T5843] Bluetooth: hci4: hardware error 0x00
[  453.791250][ T5927] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  453.802354][ T5927] usb 4-1: USB disconnect, device number 45
[  454.007885][T11727] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1
[  454.014988][T11727] Bluetooth: hci4: unexpected event for opcode 0x2039
[  454.067168][T11849] pimreg: entered allmulticast mode
[  454.100809][T11849] pimreg: left allmulticast mode
[  454.670105][ T1098] net_ratelimit: 20 callbacks suppressed
[  454.676283][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  454.786050][T11860] netlink: 'syz.1.1533': attribute type 21 has an invalid length.
[  454.795863][T11860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'.
[  454.829331][T11862] gfs2: not a GFS2 filesystem
[  454.850132][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  454.922193][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1533'.
[  454.969498][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  455.078833][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  455.800192][T11869] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  455.819033][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  455.821392][ T5843] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  455.939049][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  456.048928][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  456.158792][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  456.168903][ T5907] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  456.178852][ T5978] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  456.234536][T11877] netlink: 4588 bytes leftover after parsing attributes in process `syz.1.1540'.
[  456.269322][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  456.321071][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short
[  456.329979][ T5907] usb 1-1: not running at top speed; connect to a high speed hub
[  456.341090][ T5907] usb 1-1: config 3 has an invalid interface number: 153 but max is 0
[  456.349506][ T5907] usb 1-1: config 3 has no interface number 0
[  456.355910][ T5907] usb 1-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  456.363320][ T5978] usb 4-1: Using ep0 maxpacket: 16
[  456.369659][ T5907] usb 1-1: config 3 interface 153 has no altsetting 0
[  456.383189][ T5907] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6
[  456.391332][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  456.393523][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.408028][ T5907] usb 1-1: Product: syz
[  456.415800][ T5978] usb 4-1: config 0 has an invalid interface number: 9 but max is 2
[  456.425801][ T5907] usb 1-1: Manufacturer: syz
[  456.426020][ T5978] usb 4-1: config 0 has an invalid interface number: 9 but max is 2
[  456.435521][ T5907] usb 1-1: SerialNumber: syz
[  456.447086][ T5978] usb 4-1: config 0 has an invalid interface number: 157 but max is 2
[  456.455479][ T5978] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  456.469079][T11874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  456.470436][ T5978] usb 4-1: config 0 has no interface number 0
[  456.485449][ T5978] usb 4-1: config 0 has no interface number 1
[  456.503113][ T5978] usb 4-1: config 0 interface 9 has no altsetting 0
[  456.513243][ T5978] usb 4-1: config 0 interface 9 has no altsetting 1
[  456.521995][ T5978] usb 4-1: config 0 interface 157 has no altsetting 0
[  456.533057][ T5978] usb 4-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0
[  456.543645][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.552106][ T5978] usb 4-1: Product: syz
[  456.556702][ T5978] usb 4-1: Manufacturer: syz
[  456.561740][ T5978] usb 4-1: SerialNumber: syz
[  457.565717][ T5978] usb 4-1: config 0 descriptor??
[  457.585437][T11874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.604582][T11874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.329927][ T5978] usb 4-1: selecting invalid altsetting 1
[  458.358482][ T5978] sierra 4-1:0.9: Sierra USB modem converter detected
[  458.403573][ T5978] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  458.657382][ T5978] usb 4-1: USB disconnect, device number 46
[  459.757910][ T1098] net_ratelimit: 10 callbacks suppressed
[  459.757943][ T1098] bond1: (slave macvlan2): failed to get link speed/duplex
[  459.848027][ T5978] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  459.964002][ T5978] sierra 4-1:0.9: device disconnected
[  460.030124][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  460.252574][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  460.446954][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  460.614853][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  460.733399][ T5907] sisusb 1-1:3.153: Invalid USB2VGA device
[  460.739402][ T5907] sisusb 1-1:3.153: probe with driver sisusb failed with error -22
[  460.751859][ T5907] usb 1-1: USB disconnect, device number 48
[  460.767094][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  460.905571][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  461.053826][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  461.308711][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  461.516877][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  462.091531][T11928] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  464.114159][T11955] hub 8-0:1.0: USB hub found
[  464.123604][T11955] hub 8-0:1.0: 1 port detected
[  464.422111][T11946] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.430137][T11946] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.900535][ T5934] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  464.907381][ T3509] net_ratelimit: 16 callbacks suppressed
[  464.907403][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  465.272055][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  465.811993][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.827408][ T5934] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  465.836462][ T5934] usb 5-1: config 0 has no interface number 1
[  465.842770][ T5934] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  465.851898][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.878597][ T5934] usb 5-1: config 0 descriptor??
[  465.900619][ T5934] usb 5-1: unknown number of interfaces: 2
[  465.906650][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  466.080273][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  466.402554][T11978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1564'.
[  466.487374][ T5934] usb 5-1: USB disconnect, device number 59
[  466.510175][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  466.619797][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  466.740006][T11983] autofs: Unknown parameter ''
[  466.910366][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  467.101556][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  468.218091][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  468.340051][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  468.435353][T12005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1573'.
[  468.569440][ T5961] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  468.624582][T12009] dvmrp0: entered allmulticast mode
[  468.732833][ T5961] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  468.743975][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.774697][ T5961] usb 4-1: config 0 descriptor??
[  469.003565][ T5961] kaweth 4-1:0.0: Firmware present in device.
[  469.041195][ T5907] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  469.208995][ T5907] usb 5-1: Using ep0 maxpacket: 8
[  469.222821][T12003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.555328][T10690] net_ratelimit: 7 callbacks suppressed
[  470.555342][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  470.589764][T12003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.644284][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short
[  470.652092][ T5961] kaweth 4-1:0.0: Error reading configuration (-71), no net device created
[  470.652327][ T5961] kaweth 4-1:0.0: probe with driver kaweth failed with error -5
[  470.669463][ T5961] usb 4-1: USB disconnect, device number 47
[  470.698778][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  470.719979][ T5907] usb 5-1: config 4 interface 0 has no altsetting 0
[  470.730442][ T5907] usb 5-1: string descriptor 0 read error: -22
[  470.736718][ T5907] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  470.759039][ T5907] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  470.799030][ T5907] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  470.818951][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  470.821133][ T5907] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  470.842882][ T5907] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  470.850750][ T5907] usb 5-1: media controller created
[  470.876200][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  470.928798][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  471.049794][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  471.158810][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  471.286072][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1580'.
[  471.297157][T12029] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  471.305874][T12029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  471.429331][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  471.599046][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  471.754866][ T5907] usb 5-1: USB disconnect, device number 60
[  472.690954][T12046] trusted_key: syz.4.1587 sent an empty control message without MSG_MORE.
[  472.729026][ T5934] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  472.753667][T12048] syzkaller0: entered allmulticast mode
[  472.866118][T12050] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  472.908798][ T5934] usb 4-1: Using ep0 maxpacket: 32
[  472.915897][ T5934] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  472.931397][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.949615][T12054] ipvlan2: entered promiscuous mode
[  472.955535][T12054] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  472.978868][T12054] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  472.992826][ T5934] usb 4-1: config 0 descriptor??
[  473.156542][T12060] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  473.703003][ T5934] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  473.714828][ T5934] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  473.723930][ T5934] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  473.998126][   T30] audit: type=1326 audit(1755928673.264:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12066 comm="syz.5.1595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99c318ebe9 code=0x0
[  474.318896][ T5961] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  474.469161][ T5961] usb 5-1: device descriptor read/64, error -71
[  474.711077][ T5961] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  474.848813][ T5961] usb 5-1: device descriptor read/64, error -71
[  475.029023][ T5961] usb usb5-port1: attempt power cycle
[  475.371937][ T5961] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  475.382556][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1607'.
[  475.410220][ T5961] usb 5-1: device descriptor read/8, error -71
[  475.462738][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1607'.
[  475.638933][ T3509] net_ratelimit: 29 callbacks suppressed
[  475.638955][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  475.668964][ T5961] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  475.699480][ T5961] usb 5-1: device descriptor read/8, error -71
[  475.758967][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  475.820474][ T5961] usb usb5-port1: unable to enumerate USB device
[  475.905228][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  476.477207][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  476.630476][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  476.743294][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  476.869045][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  476.978937][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  477.016478][ T5978] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  477.091306][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  477.193856][ T5978] usb 6-1: Using ep0 maxpacket: 8
[  477.208553][ T5978] usb 6-1: config 1 has an invalid interface number: 128 but max is 1
[  477.235645][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  477.255490][ T5978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.296515][ T5978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  477.340362][ T5978] usb 6-1: config 1 has no interface number 0
[  477.366906][ T5978] usb 6-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.387114][T12147] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[  477.412037][ T5978] usb 6-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.600815][ T5978] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  477.767866][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.849807][ T5978] usb 6-1: Product: syz
[  477.889281][ T5978] usb 6-1: Manufacturer: syz
[  477.951863][ T5978] usb 6-1: SerialNumber: syz
[  479.124694][ T5978] cdc_wdm 6-1:1.128: skipping garbage
[  479.144651][ T5978] cdc_wdm 6-1:1.128: cdc-wdm0: USB WDM device
[  479.155105][ T5978] cdc_wdm 6-1:1.128: Unknown control protocol
[  479.619046][ T5978] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  480.596206][T12170] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1617'.
[  484.221642][   T12] net_ratelimit: 15 callbacks suppressed
[  484.221662][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  484.228840][    T9] usb 6-1: USB disconnect, device number 20
[  484.338979][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  484.380920][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1631'.
[  484.494695][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  484.497167][T12189] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  484.521112][T12190] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  484.627537][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  484.741209][T12195] fuse: Unknown parameter 'f<W4áûƒYyç„4/óÀĥ-Ë\zċÍ£²œn8”Ïžyŝr²‘ß}€'
[  484.749631][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  484.874471][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  485.022179][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  485.164277][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  485.333343][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  485.908103][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  485.949072][T12211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  486.273900][T12231] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  486.287527][T12231] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  486.979465][    T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  487.458952][    T9] usb 5-1: Using ep0 maxpacket: 8
[  487.480189][    T9] usb 5-1: config 0 has an invalid interface number: 143 but max is 0
[  487.502902][    T9] usb 5-1: config 0 has no interface number 0
[  487.528781][    T9] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  487.537872][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.571577][    T9] usb 5-1: config 0 descriptor??
[  487.689643][    T9] viperboard 5-1:0.143: version 0.00 found at bus 005 address 066
[  487.723227][    T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  487.748916][    T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  487.749216][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1659'.
[  487.819980][    T9] usb 5-1: USB disconnect, device number 66
[  488.282776][T12279] ieee802154 phy1 wpan1: encryption failed: -22
[  488.731424][   T30] audit: type=1107 audit(1755928688.004:120): pid=12286 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=''
[  489.327817][   T12] net_ratelimit: 22 callbacks suppressed
[  489.335439][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  489.623554][T12312] overlayfs: missing 'lowerdir'
[  489.662992][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  489.849639][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  489.999781][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  490.128895][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  490.146539][T12337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.178460][T12337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.239153][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  490.359883][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  490.491744][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  490.669575][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  490.912002][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  491.140043][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'.
[  491.265967][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'.
[  492.172285][ T5927] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  492.488942][ T5927] usb 1-1: Using ep0 maxpacket: 16
[  492.719353][T12397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.021307][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  493.043945][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  493.093496][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0
[  493.101473][ T5927] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  493.112955][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.128801][ T5927] usb 1-1: config 0 descriptor??
[  493.162763][T12399] netlink: 'syz.5.1697': attribute type 21 has an invalid length.
[  493.257106][T12398] dummy0: entered promiscuous mode
[  493.281095][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1697'.
[  493.426206][T12379] netlink: 'syz.0.1689': attribute type 7 has an invalid length.
[  493.478271][T12379] netlink: 'syz.0.1689': attribute type 8 has an invalid length.
[  493.494190][T12405] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1699'.
[  494.330676][   T36] net_ratelimit: 20 callbacks suppressed
[  494.330689][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  494.472400][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'.
[  494.482716][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  494.497483][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1702'.
[  494.570730][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'.
[  494.631799][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  494.774721][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  494.901588][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  495.040024][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  495.138250][ T5927] usb 1-1: string descriptor 0 read error: -71
[  495.167023][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  495.190381][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  495.211010][ T5927] dvb-usb: bulk message failed: -22 (3/0)
[  495.270711][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  495.400176][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  495.447731][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  495.587054][T12443] kAFS: unable to lookup cell '/,'
[  496.064920][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  496.072330][ T5927] usb 1-1: media controller created
[  496.280874][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  496.296207][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  496.371172][ T5927] dvb-usb: bulk message failed: -22 (6/0)
[  496.377385][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  496.427595][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35
[  496.476412][ T5927] dvb-usb: schedule remote query interval to 150 msecs.
[  496.488982][T12460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'.
[  496.498134][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  496.569188][ T5927] usb 1-1: USB disconnect, device number 49
[  496.671138][T12466] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1714'.
[  496.706841][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  497.866952][T12495] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1721'.
[  498.114664][T12505] FAULT_INJECTION: forcing a failure.
[  498.114664][T12505] name failslab, interval 1, probability 0, space 0, times 0
[  498.178081][T12505] CPU: 0 UID: 0 PID: 12505 Comm: syz.5.1724 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  498.178110][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  498.178123][T12505] Call Trace:
[  498.178131][T12505]  <TASK>
[  498.178140][T12505]  dump_stack_lvl+0x189/0x250
[  498.178167][T12505]  ? __pfx____ratelimit+0x10/0x10
[  498.178187][T12505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  498.178208][T12505]  ? __pfx__printk+0x10/0x10
[  498.178245][T12505]  ? __pfx___might_resched+0x10/0x10
[  498.178272][T12505]  should_fail_ex+0x414/0x560
[  498.178298][T12505]  should_failslab+0xa8/0x100
[  498.178321][T12505]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  498.178341][T12505]  ? __alloc_skb+0x112/0x2d0
[  498.178372][T12505]  __alloc_skb+0x112/0x2d0
[  498.178400][T12505]  netlink_sendmsg+0x5c6/0xb30
[  498.178437][T12505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  498.178471][T12505]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  498.178489][T12505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  498.178515][T12505]  __sock_sendmsg+0x21c/0x270
[  498.178541][T12505]  sock_write_iter+0x258/0x330
[  498.178565][T12505]  ? __pfx_sock_write_iter+0x10/0x10
[  498.178598][T12505]  ? __lock_acquire+0xab9/0xd20
[  498.178627][T12505]  do_iter_readv_writev+0x56b/0x7f0
[  498.178649][T12505]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  498.178673][T12505]  ? bpf_lsm_file_permission+0x9/0x20
[  498.178692][T12505]  ? security_file_permission+0x75/0x290
[  498.178715][T12505]  ? rw_verify_area+0x258/0x650
[  498.178746][T12505]  vfs_writev+0x31a/0x960
[  498.178773][T12505]  ? __lock_acquire+0xab9/0xd20
[  498.178791][T12505]  ? __pfx_vfs_writev+0x10/0x10
[  498.178828][T12505]  ? __fget_files+0x2a/0x420
[  498.178854][T12505]  ? __fget_files+0x3a0/0x420
[  498.178873][T12505]  ? __fget_files+0x2a/0x420
[  498.178904][T12505]  do_writev+0x14d/0x2d0
[  498.178930][T12505]  ? __pfx_do_writev+0x10/0x10
[  498.178950][T12505]  ? rcu_is_watching+0x15/0xb0
[  498.178977][T12505]  ? do_syscall_64+0xbe/0x3b0
[  498.179002][T12505]  do_syscall_64+0xfa/0x3b0
[  498.179022][T12505]  ? lockdep_hardirqs_on+0x9c/0x150
[  498.179042][T12505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.179062][T12505]  ? clear_bhb_loop+0x60/0xb0
[  498.179084][T12505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.179103][T12505] RIP: 0033:0x7f99c318ebe9
[  498.179121][T12505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.179138][T12505] RSP: 002b:00007f99c3fbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  498.179159][T12505] RAX: ffffffffffffffda RBX: 00007f99c33b5fa0 RCX: 00007f99c318ebe9
[  498.179174][T12505] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000d
[  498.179187][T12505] RBP: 00007f99c3fbc090 R08: 0000000000000000 R09: 0000000000000000
[  498.179199][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.179210][T12505] R13: 00007f99c33b6038 R14: 00007f99c33b5fa0 R15: 00007ffe0043fdd8
[  498.179249][T12505]  </TASK>
[  499.282559][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1726'.
[  499.425447][   T49] net_ratelimit: 18 callbacks suppressed
[  499.425467][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  499.605609][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  500.271257][T12536] openvswitch: netlink: IP tunnel dst address not specified
[  500.398906][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  500.514144][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  500.529790][T12549] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1734'.
[  500.552889][T12546] kvm: kvm [12544]: vcpu10, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x1
[  500.606754][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'.
[  500.631875][T12553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  500.650724][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  500.759605][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  500.881311][ T5927] usb 5-1: new full-speed USB device number 67 using dummy_hcd
[  500.890361][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  501.398866][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  501.899198][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.918763][ T5927] usb 5-1: not running at top speed; connect to a high speed hub
[  501.939561][ T5927] usb 5-1: config 6 has an invalid interface number: 215 but max is 1
[  501.947788][ T5927] usb 5-1: config 6 has an invalid interface number: 195 but max is 1
[  502.008922][ T5927] usb 5-1: config 6 has no interface number 0
[  502.015050][ T5927] usb 5-1: config 6 has no interface number 1
[  502.033008][ T5927] usb 5-1: config 6 interface 195 has no altsetting 0
[  502.034791][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  502.072952][ T5927] usb 5-1: New USB device found, idVendor=054c, idProduct=0154, bcdDevice=ca.4e
[  502.092365][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.115523][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1743'.
[  502.116822][ T5927] usb 5-1: Product: syz
[  502.148559][ T5927] usb 5-1: Manufacturer: syz
[  502.158817][ T5927] usb 5-1: SerialNumber: syz
[  502.422684][ T5927] usb 5-1: USB disconnect, device number 67
[  503.294605][T12588] syzkaller1: entered promiscuous mode
[  503.322661][T12588] syzkaller1: entered allmulticast mode
[  503.349757][T12592] netlink: 'syz.4.1746': attribute type 10 has an invalid length.
[  503.357912][T12592] nlmon0: left allmulticast mode
[  503.381417][T12592] netlink: 'syz.4.1746': attribute type 10 has an invalid length.
[  504.219507][T12605] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1749'.
[  504.493597][T10690] net_ratelimit: 17 callbacks suppressed
[  504.493616][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  504.640082][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  504.769120][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  504.884981][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  505.030899][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  505.188998][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  505.299598][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  505.422373][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  505.527172][T12612] netlink: 'syz.5.1753': attribute type 3 has an invalid length.
[  505.561358][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  505.670575][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'.
[  505.688737][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  505.803059][T12626] fuse: Unknown parameter '˙˙˙˙˙˙˙˙0x00000000000000090x000000000000000000000000000000000000'
[  505.964171][T12636] x_tables: duplicate underflow at hook 2
[  505.986622][T12637] x_tables: duplicate underflow at hook 2
[  506.323649][T12650] netlink: 'syz.5.1765': attribute type 39 has an invalid length.
[  507.435274][T12675] ALSA: mixer_oss: invalid OSS volume 'LI'
[  508.628750][ T5978] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  508.798986][ T5978] usb 5-1: device descriptor read/64, error -71
[  509.058714][ T5978] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  509.201192][ T5978] usb 5-1: device descriptor read/64, error -71
[  509.332599][ T5978] usb usb5-port1: attempt power cycle
[  509.472893][ T5961] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  509.643914][ T3495] net_ratelimit: 24 callbacks suppressed
[  509.643935][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  509.769219][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  509.879894][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  509.914543][ T5978] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  509.988976][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  510.006143][ T5961] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  510.018837][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.027250][ T5978] usb 5-1: device descriptor read/8, error -71
[  510.036209][ T5961] usb 1-1: config 0 descriptor??
[  510.047737][T12718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1781'.
[  510.065588][T12718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1781'.
[  510.108869][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  510.228859][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  510.357041][ T5961] kaweth 1-1:0.0: Firmware present in device.
[  510.370371][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  510.413066][ T5978] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  510.439428][ T5978] usb 5-1: device descriptor read/8, error -71
[  510.459790][ T5961] kaweth 1-1:0.0: Statistics collection: 0
[  510.465726][ T5961] kaweth 1-1:0.0: Multicast filter limit: 0
[  510.479120][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  510.505924][ T5961] kaweth 1-1:0.0: MTU: 0
[  510.524383][ T5961] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[  510.549339][ T5978] usb usb5-port1: unable to enumerate USB device
[  510.617190][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  510.794931][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  511.289504][T12731] netlink: 'syz.0.1778': attribute type 3 has an invalid length.
[  511.297899][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'.
[  511.584954][ T5961] kaweth 1-1:0.0: kaweth interface created at eth5
[  511.779168][ T5961] usb 1-1: USB disconnect, device number 50
[  512.253468][T12747] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1788'.
[  513.314552][T12770] fuse: Bad value for 'group_id'
[  513.321955][T12770] fuse: Bad value for 'group_id'
[  513.366657][T12772] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  513.808834][ T5978] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  513.975312][ T5978] usb 5-1: Using ep0 maxpacket: 8
[  514.003935][ T5978] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  514.031043][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.059854][ T5978] usb 5-1: Product: syz
[  514.072085][ T5978] usb 5-1: Manufacturer: syz
[  514.085094][ T5978] usb 5-1: SerialNumber: syz
[  514.103626][ T5978] usb 5-1: config 0 descriptor??
[  514.103891][T12784] tmpfs: Unknown parameter 'usrquota˙˙˙˙'
[  514.123466][ T5978] gspca_main: se401-2.14.0 probing 047d:5003
[  514.531629][ T5978] gspca_se401: ExtraFeatures: 255
[  514.568712][ T5978] gspca_se401: Frame size: 2314x0 bayer
[  514.736261][ T5978] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36
[  514.748830][ T3463] net_ratelimit: 24 callbacks suppressed
[  514.748849][ T3463] bond1: (slave macvlan2): failed to get link speed/duplex
[  514.776414][ T5978] usb 5-1: USB disconnect, device number 72
[  514.830000][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1805'.
[  514.922596][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  515.047392][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  515.179210][T10690] bond1: (slave macvlan2): failed to get link speed/duplex
[  515.238917][    T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  515.289470][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  515.399473][    T9] usb 1-1: Using ep0 maxpacket: 16
[  515.414940][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  515.432496][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.454057][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.475515][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  515.504884][    T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  515.521561][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.555902][    T9] usb 1-1: config 0 descriptor??
[  515.561108][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  515.679787][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  515.799414][ T3509] bond1: (slave macvlan2): failed to get link speed/duplex
[  515.940752][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  516.384711][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  516.398769][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  516.411834][    T9] usb 1-1: USB disconnect, device number 51
[  516.501608][T12831] xt_CT: No such helper "snmp"
[  516.504147][T12835] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1817'.
[  517.029445][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'.
[  517.254746][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'.
[  518.418812][T12876] overlayfs: failed to clone upperpath
[  518.836503][T12886] sctp: [Deprecated]: syz.3.1834 (pid 12886) Use of int in maxseg socket option.
[  518.836503][T12886] Use struct sctp_assoc_value instead
[  518.978732][    T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  519.130570][    T9] usb 1-1: Using ep0 maxpacket: 16
[  519.141790][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.442309][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.069059][T12897] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1831'.
[  520.175817][T12896] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1831'.
[  520.190871][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  520.205214][    T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  520.207317][   T78] net_ratelimit: 21 callbacks suppressed
[  520.207333][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  520.214645][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.238414][    T9] usb 1-1: config 0 descriptor??
[  520.394721][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  520.691635][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  520.997617][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  521.239685][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  521.368826][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  521.374979][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  521.417673][    T9] usb 1-1: USB disconnect, device number 52
[  521.501091][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  521.598401][T12927] netlink: 'syz.1.1844': attribute type 4 has an invalid length.
[  521.629980][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  521.675531][T12927] lo speed is unknown, defaulting to 1000
[  521.769622][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  521.878811][ T3495] bond1: (slave macvlan2): failed to get link speed/duplex
[  522.020146][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  522.851333][T12957] netlink: 'syz.0.1853': attribute type 12 has an invalid length.
[  522.859319][T12957] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1853'.
[  524.743547][T12986] netlink: 'syz.4.1863': attribute type 1 has an invalid length.
[  524.865099][T12986] 8021q: adding VLAN 0 to HW filter on device bond2
[  524.971650][T12995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1864'.
[  525.523039][ T5959] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  526.015261][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'.
[  526.046265][T13019] netlink: 'syz.1.1871': attribute type 4 has an invalid length.
[  526.055544][ T8364] net_ratelimit: 20 callbacks suppressed
[  526.055562][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  526.202588][ T5959] usb 1-1: Using ep0 maxpacket: 32
[  526.213743][ T5959] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  526.240043][ T5959] usb 1-1: config 0 interface 0 has no altsetting 0
[  526.253503][ T5959] usb 1-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00
[  526.288410][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.300898][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  526.526650][ T5959] usb 1-1: config 0 descriptor??
[  526.685235][T12990] bond1: (slave macvlan2): failed to get link speed/duplex
[  526.950783][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  527.059055][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  527.190160][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  527.309545][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  527.428959][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  527.539498][ T9475] bond1: (slave macvlan2): failed to get link speed/duplex
[  527.759371][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  528.023851][T13049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1866'.
[  528.298821][T13053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1877'.
[  528.316467][T13055] vivid-004: disconnect
[  529.308078][    T9] usb 1-1: USB disconnect, device number 53
[  529.612154][T13054] vivid-004: reconnect
[  529.738880][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  530.126756][    T9] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[  530.202514][    T9] usb 1-1: config 0 has no interface number 0
[  530.236189][    T9] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  530.296436][    T9] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.318781][    T9] usb 1-1: config 0 interface 109 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  530.344852][    T9] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[  530.374553][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.423817][    T9] usb 1-1: config 0 descriptor??
[  530.452080][    T9] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints
[  530.461098][    T9] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19!
[  530.529095][    T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  530.548896][    T9] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  530.775143][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.778768][ T5907] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  530.784425][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.980970][ T5907] usb 6-1: config 0 has an invalid interface number: 57 but max is 0
[  531.007577][ T5907] usb 6-1: config 0 has no interface number 0
[  531.025473][ T5907] usb 6-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  531.057656][ T5907] usb 6-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4
[  531.071473][T10691] net_ratelimit: 23 callbacks suppressed
[  531.071491][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  531.117626][ T5907] usb 6-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7
[  531.176376][ T5907] usb 6-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024
[  531.219664][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  531.233270][ T5907] usb 6-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  531.258933][T11727] Bluetooth: hci5: command 0x0c1a tx timeout
[  531.308951][ T5907] usb 6-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[  531.326556][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.378447][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  531.387477][ T5907] usb 6-1: config 0 descriptor??
[  531.396029][ T5907] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  531.406385][ T5907] gspca_mr97310a: reg write [21] error -22
[  531.426172][ T5907] mr97310a 6-1:0.57: probe with driver mr97310a failed with error -22
[  531.498719][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  531.541721][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'.
[  531.618729][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  531.729699][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  531.852298][T12993] bond1: (slave macvlan2): failed to get link speed/duplex
[  532.602782][ T5907] usb 1-1: USB disconnect, device number 54
[  532.648921][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  532.822867][T13106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1895'.
[  532.836276][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  532.863259][ T5907] usb 6-1: USB disconnect, device number 21
[  533.612129][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  535.168068][T13150] lo speed is unknown, defaulting to 1000
[  535.442569][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'.
[  535.480799][T13153] lo speed is unknown, defaulting to 1000
[  535.504448][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'.
[  536.005249][T13180] autofs: Unknown parameter ''
[  536.042720][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1907'.
[  536.138909][ T1152] net_ratelimit: 14 callbacks suppressed
[  536.138930][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  536.287064][T12993] bond1: (slave macvlan2): failed to get link speed/duplex
[  536.515114][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  536.678743][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  536.880188][T12993] bond1: (slave macvlan2): failed to get link speed/duplex
[  536.901481][T13198] syzkaller0: tun_chr_ioctl cmd 1074812117
[  537.004381][T13211] netlink: 'syz.4.1918': attribute type 1 has an invalid length.
[  537.009163][T13205] loop6: detected capacity change from 0 to 524287999
[  537.020419][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  537.056517][T13198] vlan0: entered promiscuous mode
[  537.118506][T13213] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1920'.
[  537.130098][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  537.239013][T12993] bond1: (slave macvlan2): failed to get link speed/duplex
[  537.342751][ T5934] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  537.359428][T12993] bond1: (slave macvlan2): failed to get link speed/duplex
[  537.378445][ T5934] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  537.403708][ T5934] usb 4-1: USB disconnect, device number 48
[  537.472191][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  537.550678][ T5961] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  537.762519][ T5961] usb 6-1: Using ep0 maxpacket: 8
[  537.780546][ T5961] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  537.799823][ T5961] usb 6-1: config 0 has no interface number 0
[  537.817041][ T5961] usb 6-1: config 0 interface 126 has no altsetting 0
[  537.851773][ T5961] usb 6-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=fa.3e
[  537.882484][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.890738][ T5961] usb 6-1: Product: syz
[  537.894974][ T5961] usb 6-1: Manufacturer: syz
[  537.896222][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'.
[  537.908834][    T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  537.928686][ T5961] usb 6-1: SerialNumber: syz
[  537.943392][ T5961] usb 6-1: config 0 descriptor??
[  537.951928][ T5961] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  537.993011][T13236] 8021q: adding VLAN 0 to HW filter on device bond3
[  538.008850][ T5934] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  538.035557][T13238] 8021q: adding VLAN 0 to HW filter on device bond3
[  538.042917][T13238] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  538.055229][T13238] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  538.062652][    T9] usb 1-1: config 3 has an invalid interface number: 110 but max is 0
[  538.062677][    T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  538.062696][    T9] usb 1-1: config 3 has no interface number 0
[  538.062755][    T9] usb 1-1: config 3 interface 110 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  538.102336][    T9] usb 1-1: config 3 interface 110 has no altsetting 0
[  538.131968][    T9] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=70.00
[  538.153973][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'.
[  538.168491][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.186448][T13236] macvlan3: entered promiscuous mode
[  538.192664][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  538.209240][    T9] usb 1-1: Product: syz
[  538.213449][    T9] usb 1-1: Manufacturer: syz
[  538.218278][T13236] macvlan3: entered allmulticast mode
[  538.228458][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  538.317170][T13236] bond3: (slave macvlan3): Error -98 calling set_mac_address
[  538.348208][    T9] usb 1-1: SerialNumber: syz
[  538.372799][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  538.572948][    T9] usb 1-1: bad CDC descriptors
[  538.616798][ T5934] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  538.641112][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.673321][ T5934] usb 4-1: Product: syz
[  538.705869][ T5934] usb 4-1: Manufacturer: syz
[  538.760889][T13243] comedi comedi3: comedi_config --init_data is deprecated
[  538.780818][ T5934] usb 4-1: SerialNumber: syz
[  538.890794][    T9] usb 1-1: USB disconnect, device number 55
[  538.993227][ T5934] usb 4-1: config 0 descriptor??
[  539.046157][T13229] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  539.230310][T13229] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  539.327342][ T5934] usb 4-1: ucan: probing device on interface #0
[  540.712545][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.740450][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.755215][    T9] usb 6-1: USB disconnect, device number 22
[  540.815281][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.843958][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.880255][ T5934] usb 4-1: ucan: device reported invalid tx-fifo size
[  540.887076][ T5934] usb 4-1: ucan: probe failed; try to update the device firmware
[  541.059150][ T5907] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  541.089948][    T9] usb 4-1: USB disconnect, device number 49
[  541.166665][T13257] IPv6: sit1: Disabled Multicast RS
[  541.173775][T13257] sit1: entered allmulticast mode
[  541.190769][T10691] net_ratelimit: 24 callbacks suppressed
[  541.190787][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  541.231234][ T5907] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.241438][ T5907] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  541.255192][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0
[  541.264361][ T5907] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  541.285180][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.313349][ T5907] usb 1-1: config 0 descriptor??
[  541.349449][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  541.481181][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  541.566008][ T5907] usb 1-1: string descriptor 0 read error: -71
[  541.581987][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37
[  541.593267][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  541.622439][ T5193] bcm5974 1-1:0.0: could not read from device
[  541.629183][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1938'.
[  541.666941][ T5907] usb 1-1: USB disconnect, device number 56
[  541.673527][ T5193] bcm5974 1-1:0.0: could not read from device
[  541.712172][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'.
[  541.731495][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  541.873426][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  542.008802][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  542.134170][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  542.288769][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  542.521993][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  543.067980][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'.
[  543.318773][ T5907] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  543.555788][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'.
[  543.642144][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'.
[  543.683920][ T5907] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  543.696527][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  543.719353][ T5907] usb 5-1: Product: syz
[  543.723537][ T5907] usb 5-1: SerialNumber: syz
[  543.751736][ T5907] usb 5-1: config 0 descriptor??
[  543.864376][   T30] audit: type=1326 audit(1755928999.130:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c318ebe9 code=0x7ffc0000
[  543.989366][ T5907] hso 5-1:0.0: Failed to find BULK IN ep
[  544.017009][   T30] audit: type=1326 audit(1755928999.130:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c318ebe9 code=0x7ffc0000
[  544.102862][T13316] lo speed is unknown, defaulting to 1000
[  544.116840][   T30] audit: type=1326 audit(1755928999.130:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99c318d550 code=0x7ffc0000
[  544.181218][ T5907] usb 5-1: USB disconnect, device number 73
[  544.245001][   T30] audit: type=1326 audit(1755928999.130:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f99c3190417 code=0x7ffc0000
[  544.336837][   T30] audit: type=1326 audit(1755928999.130:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99c318ebe9 code=0x7ffc0000
[  544.391643][   T30] audit: type=1326 audit(1755928999.130:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f99c3190417 code=0x7ffc0000
[  544.508355][   T30] audit: type=1326 audit(1755928999.130:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99c318d84a code=0x7ffc0000
[  544.681819][   T30] audit: type=1326 audit(1755928999.130:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c318ebe9 code=0x7ffc0000
[  544.740251][   T30] audit: type=1326 audit(1755928999.160:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f99c318ebe9 code=0x7ffc0000
[  544.803959][   T30] audit: type=1326 audit(1755928999.160:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13314 comm="syz.5.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c318ebe9 code=0x7ffc0000
[  546.198894][ T1152] net_ratelimit: 20 callbacks suppressed
[  546.198915][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  546.224915][T13341] xt_l2tp: invalid flags combination: 4
[  546.247452][T13341] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  546.338738][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  546.459084][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  546.607981][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  546.656148][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'.
[  546.824841][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  546.956648][T13361] netlink: 'syz.1.1965': attribute type 1 has an invalid length.
[  546.964740][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'.
[  547.561371][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  547.648082][T13360] block device autoloading is deprecated and will be removed.
[  547.677243][T13366] snd_dummy snd_dummy.0: control 1:0:0:syz0:0 is already present
[  547.688650][T13360] syz.3.1963: attempt to access beyond end of device
[  547.688650][T13360] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  547.728873][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  547.839310][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  547.876219][T13373] overlayfs: failed to clone lowerpath
[  548.029476][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  548.168822][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  548.547021][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'.
[  549.450150][T13401] binder: 13398:13401 ioctl 40206417 200000000080 returned -22
[  549.490656][ T5959] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  549.821218][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short
[  549.926968][ T5959] usb 6-1: not running at top speed; connect to a high speed hub
[  550.058863][ T5959] usb 6-1: config 129 has an invalid interface number: 28 but max is 0
[  550.108765][ T5959] usb 6-1: config 129 has no interface number 0
[  550.129879][ T5959] usb 6-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  550.219001][ T5959] usb 6-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[  550.243763][ T5959] usb 6-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  550.258354][ T5959] usb 6-1: config 129 interface 28 has no altsetting 0
[  550.723152][ T5959] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[  550.753247][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.769210][ T5959] usb 6-1: Product: syz
[  550.779238][ T5959] usb 6-1: Manufacturer: syz
[  550.788736][ T5959] usb 6-1: SerialNumber: syz
[  550.828870][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'.
[  550.856569][T13381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  551.127739][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'.
[  551.153087][T13424] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1985'.
[  551.163987][T13424] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1985'.
[  551.190337][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'.
[  551.224115][T10691] net_ratelimit: 19 callbacks suppressed
[  551.224136][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  551.329037][ T5907] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  551.340784][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'.
[  551.367153][ T5959] etas_es58x 6-1:129.28: Starting syz syz (Serial Number syz)
[  551.387530][ T5959] etas_es58x 6-1:129.28: could not retrieve the product info string
[  551.395783][T12993] bond1: (slave macvlan2): failed to get link speed/duplex
[  551.429852][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'.
[  551.472206][ T5959] usb 6-1: USB disconnect, device number 23
[  551.481329][ T5959] etas_es58x 6-1:129.28: Disconnecting syz syz
[  551.490816][ T5907] usb 5-1: Using ep0 maxpacket: 32
[  551.510802][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  551.522050][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  551.568710][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  551.591865][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  551.618699][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  551.639987][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  551.644314][T12993] bond1: (slave macvlan2): failed to get link speed/duplex
[  551.667021][ T5907] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  551.687823][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.728801][ T5907] usb 5-1: Product: syz
[  551.733038][ T5907] usb 5-1: Manufacturer: syz
[  551.737656][ T5907] usb 5-1: SerialNumber: syz
[  551.781869][ T5907] usb 5-1: config 0 descriptor??
[  551.817257][ T5907] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38
[  551.899983][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  552.005932][ T5978] usb 5-1: USB disconnect, device number 74
[  552.015201][ T5959] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  552.019753][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  552.141206][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  552.220099][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'.
[  552.229265][T13441] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  552.237845][T13441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.421332][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short
[  552.438532][ T5959] usb 6-1: not running at top speed; connect to a high speed hub
[  552.466019][ T5959] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  552.490691][ T5959] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  552.511369][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  552.528924][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.547286][ T5959] usb 6-1: Product: syz
[  552.563439][ T5959] usb 6-1: Manufacturer: syz
[  552.578368][ T5959] usb 6-1: SerialNumber: syz
[  552.734198][T13445] 8021q: adding VLAN 0 to HW filter on device bond1
[  552.824799][T13436] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  553.025838][    T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0)
[  553.165101][    T9] libceph: connect (1)[c::]:6789 error -22
[  553.171280][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  553.174663][ T5961] libceph: connect (1)[c::]:6789 error -22
[  553.183518][ T5961] libceph: mon0 (1)[c::]:6789 connect error
[  553.349763][ T5961] libceph: connect (1)[c::]:6789 error -22
[  553.355738][ T5961] libceph: mon0 (1)[c::]:6789 connect error
[  553.384203][T13467] kexec: Could not allocate control_code_buffer
[  553.436344][    T9] libceph: connect (1)[c::]:6789 error -22
[  553.449259][ T5978] libceph: connect (1)[c::]:6789 error -22
[  553.452296][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  553.455320][ T5978] libceph: mon0 (1)[c::]:6789 connect error
[  553.681440][ T5978] libceph: connect (1)[c::]:6789 error -22
[  553.687534][ T5978] libceph: mon0 (1)[c::]:6789 connect error
[  553.716469][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.727684][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.737118][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.759125][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.778730][ T5959] cdc_ncm 6-1:1.0: SET_CRC_MODE failed
[  553.813085][ T5959] cdc_ncm 6-1:1.0: bind() failure
[  553.833317][T13459] ceph: No mds server is up or the cluster is laggy
[  553.834481][T13463] ceph: No mds server is up or the cluster is laggy
[  553.845988][ T5959] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  553.868564][T13454] ceph: No mds server is up or the cluster is laggy
[  553.912574][ T5959] cdc_ncm 6-1:1.1: bind() failure
[  553.948892][ T5959] usb 6-1: USB disconnect, device number 24
[  553.969161][T13477] Scaler: =================  START STATUS  =================
[  553.977243][ T5907] libceph: connect (1)[c::]:6789 error -22
[  553.983367][ T5907] libceph: mon0 (1)[c::]:6789 connect error
[  553.995626][T13477] Scaler: ==================  END STATUS  ==================
[  556.590230][ T1152] net_ratelimit: 17 callbacks suppressed
[  556.590251][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  556.748837][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  557.052211][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  557.207139][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  557.462506][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  557.639702][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  557.768915][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  557.817361][T13514] overlayfs: missing 'lowerdir'
[  557.901058][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'.
[  557.910274][T13518] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  557.918448][T13518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  557.934403][T10689] bond1: (slave macvlan2): failed to get link speed/duplex
[  559.156848][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'.
[  559.270353][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'.
[  559.460949][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'.
[  560.458139][T13536] sp0: Synchronizing with TNC
[  560.771489][T13545] tmpfs: Unknown parameter 'mpol'
[  561.744286][T10691] net_ratelimit: 22 callbacks suppressed
[  561.744308][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  562.052477][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'.
[  562.539219][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  562.687196][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  562.852241][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  563.781021][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.968412][T12990] bond1: (slave macvlan2): failed to get link speed/duplex
[  564.018819][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'.
[  564.089111][T12990] bond1: (slave macvlan2): failed to get link speed/duplex
[  564.418748][ T5959] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  564.427961][T12994] bond1: (slave macvlan2): failed to get link speed/duplex
[  565.139829][T13611] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  565.321885][ T1152] bond1: (slave macvlan2): failed to get link speed/duplex
[  565.633626][T10689] bond1: (slave macvlan2): failed to get link speed/duplex
[  565.668792][ T5959] usb 1-1: Using ep0 maxpacket: 16
[  565.711667][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  565.749922][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  565.779794][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  565.818839][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  565.822703][ T5959] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  565.844732][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.859902][ T5959] usb 1-1: config 0 descriptor??
[  565.941952][T13624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2041'.
[  565.979040][ T5907] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  566.600547][ T5959] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  566.649094][ T5959] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  566.707925][ T5959] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  566.766335][ T5959] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  566.797209][ T5959] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  566.824049][T12991] net_ratelimit: 8 callbacks suppressed
[  566.824123][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  566.974531][ T5959] input: HID 0955:7214 Haptics as /devices/virtual/input/input39
[  567.050285][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  567.191402][ T5959] shield 0003:0955:7214.0017: Registered Thunderstrike controller
[  567.209427][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  567.217655][ T5959] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  567.418195][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  567.458098][ T5961] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  567.491076][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.826257][ T5959] usb 1-1: USB disconnect, device number 57
[  567.845251][ T5961] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  567.863625][ T5961] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  567.877648][ T5961] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  567.903119][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.939317][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  568.090110][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  568.098688][ T5907] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  568.107766][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.173563][ T5907] usb 4-1: config 0 descriptor??
[  568.200588][T12990] bond1: (slave macvlan2): failed to get link speed/duplex
[  568.227521][T13639] cifs: Unknown parameter 'mode'
[  568.262341][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'.
[  568.332658][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  568.458932][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  568.592808][ T5959] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  568.822584][T12990] bond1: (slave macvlan2): failed to get link speed/duplex
[  568.833669][ T5907] usbhid 4-1:0.0: can't add hid device: -71
[  568.851914][ T5907] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  568.973415][T13655] 9pnet_virtio: no channels available for device syz
[  569.400518][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  569.420136][ T5959] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  569.425231][ T5907] usb 4-1: USB disconnect, device number 50
[  569.433175][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.474657][ T5959] usb 5-1: config 0 descriptor??
[  569.589574][ T5959] pwc: Philips SPC 900NC USB webcam detected.
[  569.765152][T13642] netlink: 'syz.4.2044': attribute type 25 has an invalid length.
[  569.860786][T13642] netlink: 'syz.4.2044': attribute type 8 has an invalid length.
[  569.886532][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'.
[  572.371862][T12990] net_ratelimit: 6 callbacks suppressed
[  572.371881][T12990] bond1: (slave macvlan2): failed to get link speed/duplex
[  572.971336][T10689] bond1: (slave macvlan2): failed to get link speed/duplex
[  573.385418][T13684] trusted_key: encrypted_key: insufficient parameters specified
[  573.835886][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  574.030719][ T5959] pwc: send_video_command error -71
[  574.035980][ T5959] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  576.458216][ T5959] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  578.895478][ T5959] usb 5-1: USB disconnect, device number 75
[  589.191212][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  589.379265][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  589.520118][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  589.629645][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  589.751760][T10689] bond1: (slave macvlan2): failed to get link speed/duplex
[  589.968744][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  590.724279][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  590.880403][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  590.988882][T10691] bond1: (slave macvlan2): failed to get link speed/duplex
[  591.098973][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  591.112746][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  591.123024][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  591.171923][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  591.181168][T13702] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  591.198000][T13702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  591.207592][T13702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  591.216416][T13702] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  591.220864][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  591.224409][T13702] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  591.240673][T13702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  591.322092][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  591.333780][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  591.347537][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  591.357711][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  591.365477][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  591.480798][T13702] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  591.491162][T13702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  591.504211][T13702] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  591.512834][T13702] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  591.520779][T13702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  591.541515][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  591.579418][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  591.590218][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  591.600391][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  591.622180][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  591.780949][T10691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.791632][T10691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.858130][T13697] lo speed is unknown, defaulting to 1000
[  591.879408][T13705] lo speed is unknown, defaulting to 1000
[  591.914904][T10691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.925275][T10691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.951099][T13698] lo speed is unknown, defaulting to 1000
[  592.008059][T13703] lo speed is unknown, defaulting to 1000
[  592.069985][T10691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.080623][T10691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.113802][T13707] lo speed is unknown, defaulting to 1000
[  592.223580][T10691] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.234172][T10691] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.672937][T13705] chnl_net:caif_netlink_parms(): no params data found
[  592.777196][T13697] chnl_net:caif_netlink_parms(): no params data found
[  592.817463][T13703] chnl_net:caif_netlink_parms(): no params data found
[  592.892908][T10691] bridge_slave_1: left promiscuous mode
[  592.903968][T10691] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.915261][T10691] bridge_slave_0: left allmulticast mode
[  592.921093][T10691] bridge_slave_0: left promiscuous mode
[  592.926790][T10691] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.198957][T10691] dvmrp0 (unregistering): left allmulticast mode
[  593.266485][ T5843] Bluetooth: hci0: command tx timeout
[  593.294455][T10691] bridge0 (unregistering): left allmulticast mode
[  593.340955][ T5843] Bluetooth: hci3: command tx timeout
[  593.514616][ T5843] Bluetooth: hci1: command tx timeout
[  593.550071][T10691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  593.560708][T10691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.573996][T10691] bond0 (unregistering): Released all slaves
[  593.588738][ T5843] Bluetooth: hci2: command tx timeout
[  593.634482][T13707] chnl_net:caif_netlink_parms(): no params data found
[  593.738774][ T5843] Bluetooth: hci5: command tx timeout
[  593.752908][T10691] tipc: Disabling bearer <udp:s>
[  593.759852][T10691] tipc: Left network mode
[  593.942631][T13705] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.949967][T13705] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.957205][T13705] bridge_slave_0: entered allmulticast mode
[  593.965076][T13705] bridge_slave_0: entered promiscuous mode
[  594.032196][T13698] chnl_net:caif_netlink_parms(): no params data found
[  594.053080][T13705] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.060721][T13705] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.067957][T13705] bridge_slave_1: entered allmulticast mode
[  594.076333][T13705] bridge_slave_1: entered promiscuous mode
[  594.114721][T13703] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.122236][T13703] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.129571][T13703] bridge_slave_0: entered allmulticast mode
[  594.137456][T13703] bridge_slave_0: entered promiscuous mode
[  594.146483][T13703] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.153959][T13703] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.161866][T13703] bridge_slave_1: entered allmulticast mode
[  594.169699][T13703] bridge_slave_1: entered promiscuous mode
[  594.292624][T13697] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.300366][T13697] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.307663][T13697] bridge_slave_0: entered allmulticast mode
[  594.321573][T13697] bridge_slave_0: entered promiscuous mode
[  594.351392][T13705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.364364][T13705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  594.391969][T13703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.404673][T13707] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.415537][T13707] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.423249][T13707] bridge_slave_0: entered allmulticast mode
[  594.431437][T13707] bridge_slave_0: entered promiscuous mode
[  594.438809][T13697] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.445918][T13697] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.454131][T13697] bridge_slave_1: entered allmulticast mode
[  594.462507][T13697] bridge_slave_1: entered promiscuous mode
[  594.513299][T13703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  594.533178][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  594.541491][T10691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  594.549695][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  594.557096][T10691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  594.565406][T10691] 
[  594.567727][T10691] ======================================================
[  594.574727][T10691] WARNING: possible circular locking dependency detected
[  594.581734][T10691] 6.16.0-syzkaller #0 Not tainted
[  594.586730][T10691] ------------------------------------------------------
[  594.593722][T10691] kworker/u8:19/10691 is trying to acquire lock:
[  594.600025][T10691] ffff88807dd90e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  594.609930][T10691] 
[  594.609930][T10691] but task is already holding lock:
[  594.617271][T10691] ffff88807de6ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320
[  594.628843][T10691] 
[  594.628843][T10691] which lock already depends on the new lock.
[  594.628843][T10691] 
[  594.639242][T10691] 
[  594.639242][T10691] the existing dependency chain (in reverse order) is:
[  594.648273][T10691] 
[  594.648273][T10691] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  594.656706][T10691]        lock_acquire+0x120/0x360
[  594.661723][T10691]        __mutex_lock+0x182/0xe80
[  594.666754][T10691]        dev_set_mtu+0x10e/0x260
[  594.671689][T10691]        team_add_slave+0x8b8/0x2840
[  594.676970][T10691]        do_set_master+0x530/0x6d0
[  594.682077][T10691]        do_setlink+0xcf0/0x41c0
[  594.687020][T10691]        rtnl_newlink+0x160b/0x1c70
[  594.692214][T10691]        rtnetlink_rcv_msg+0x7cc/0xb70
[  594.697683][T10691]        netlink_rcv_skb+0x205/0x470
[  594.702966][T10691]        netlink_unicast+0x75c/0x8e0
[  594.708263][T10691]        netlink_sendmsg+0x805/0xb30
[  594.713567][T10691]        __sock_sendmsg+0x21c/0x270
[  594.718759][T10691]        ____sys_sendmsg+0x505/0x830
[  594.724041][T10691]        ___sys_sendmsg+0x21f/0x2a0
[  594.729255][T10691]        __x64_sys_sendmsg+0x19b/0x260
[  594.734715][T10691]        do_syscall_64+0xfa/0x3b0
[  594.739734][T10691]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.746137][T10691] 
[  594.746137][T10691] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  594.754307][T10691]        validate_chain+0xb9b/0x2140
[  594.759592][T10691]        __lock_acquire+0xab9/0xd20
[  594.764778][T10691]        lock_acquire+0x120/0x360
[  594.769794][T10691]        __mutex_lock+0x182/0xe80
[  594.774811][T10691]        team_device_event+0x182/0xa20
[  594.780260][T10691]        notifier_call_chain+0x1b3/0x3e0
[  594.785884][T10691]        dev_close_many+0x29c/0x410
[  594.791076][T10691]        unregister_netdevice_many_notify+0x619/0x2320
[  594.797916][T10691]        default_device_exit_batch+0x819/0x890
[  594.804242][T10691]        ops_undo_list+0x522/0x990
[  594.809349][T10691]        cleanup_net+0x4c5/0x800
[  594.814280][T10691]        process_scheduled_works+0xade/0x17b0
[  594.820427][T10691]        worker_thread+0x8a0/0xda0
[  594.825532][T10691]        kthread+0x70e/0x8a0
[  594.830124][T10691]        ret_from_fork+0x3fc/0x770
[  594.835227][T10691]        ret_from_fork_asm+0x1a/0x30
[  594.840509][T10691] 
[  594.840509][T10691] other info that might help us debug this:
[  594.840509][T10691] 
[  594.850729][T10691]  Possible unsafe locking scenario:
[  594.850729][T10691] 
[  594.858165][T10691]        CPU0                    CPU1
[  594.863519][T10691]        ----                    ----
[  594.868877][T10691]   lock(&dev_instance_lock_key#3);
[  594.874080][T10691]                                lock(team->team_lock_key#3);
[  594.881548][T10691]                                lock(&dev_instance_lock_key#3);
[  594.889283][T10691]   lock(team->team_lock_key#3);
[  594.894232][T10691] 
[  594.894232][T10691]  *** DEADLOCK ***
[  594.894232][T10691] 
[  594.902365][T10691] 5 locks held by kworker/u8:19/10691:
[  594.907807][T10691]  #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  594.918696][T10691]  #1: ffffc90004b5fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  594.929233][T10691]  #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  594.938562][T10691]  #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  594.948597][T10691]  #4: ffff88807de6ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320
[  594.960643][T10691] 
[  594.960643][T10691] stack backtrace:
[  594.966528][T10691] CPU: 0 UID: 0 PID: 10691 Comm: kworker/u8:19 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  594.966549][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  594.966560][T10691] Workqueue: netns cleanup_net
[  594.966593][T10691] Call Trace:
[  594.966603][T10691]  <TASK>
[  594.966612][T10691]  dump_stack_lvl+0x189/0x250
[  594.966633][T10691]  ? __pfx_dump_stack_lvl+0x10/0x10
[  594.966651][T10691]  ? __pfx__printk+0x10/0x10
[  594.966671][T10691]  ? print_lock_name+0xde/0x100
[  594.966691][T10691]  print_circular_bug+0x2ee/0x310
[  594.966712][T10691]  check_noncircular+0x134/0x160
[  594.966733][T10691]  validate_chain+0xb9b/0x2140
[  594.966753][T10691]  ? __lock_acquire+0xab9/0xd20
[  594.966772][T10691]  __lock_acquire+0xab9/0xd20
[  594.966789][T10691]  ? team_device_event+0x182/0xa20
[  594.966803][T10691]  lock_acquire+0x120/0x360
[  594.966816][T10691]  ? team_device_event+0x182/0xa20
[  594.966833][T10691]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  594.966860][T10691]  __mutex_lock+0x182/0xe80
[  594.966877][T10691]  ? team_device_event+0x182/0xa20
[  594.966895][T10691]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  594.966916][T10691]  ? team_device_event+0x182/0xa20
[  594.966931][T10691]  ? __pfx___mutex_lock+0x10/0x10
[  594.966947][T10691]  ? __timer_delete_sync+0x218/0x2d0
[  594.966975][T10691]  team_device_event+0x182/0xa20
[  594.966992][T10691]  notifier_call_chain+0x1b3/0x3e0
[  594.967012][T10691]  dev_close_many+0x29c/0x410
[  594.967032][T10691]  ? __lock_acquire+0xab9/0xd20
[  594.967047][T10691]  ? __pfx_dev_close_many+0x10/0x10
[  594.967070][T10691]  unregister_netdevice_many_notify+0x619/0x2320
[  594.967090][T10691]  ? __local_bh_enable_ip+0x12d/0x1c0
[  594.967108][T10691]  ? __local_bh_enable_ip+0x12d/0x1c0
[  594.967124][T10691]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  594.967146][T10691]  ? unregister_netdevice_queue+0x1b3/0x380
[  594.967165][T10691]  ? batadv_meshif_destroy_netlink+0x1dd/0x270
[  594.967188][T10691]  default_device_exit_batch+0x819/0x890
[  594.967213][T10691]  ? __pfx___might_resched+0x10/0x10
[  594.967231][T10691]  ? __pfx_default_device_exit_batch+0x10/0x10
[  594.967252][T10691]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  594.967271][T10691]  ? net_generic+0x1e/0x240
[  594.967290][T10691]  ? __pfx_default_device_exit_batch+0x10/0x10
[  594.967312][T10691]  ops_undo_list+0x522/0x990
[  594.967335][T10691]  ? __pfx_ops_undo_list+0x10/0x10
[  594.967359][T10691]  cleanup_net+0x4c5/0x800
[  594.967382][T10691]  ? __pfx_cleanup_net+0x10/0x10
[  594.967403][T10691]  ? _raw_spin_unlock_irq+0x23/0x50
[  594.967417][T10691]  ? process_scheduled_works+0x9ef/0x17b0
[  594.967433][T10691]  ? process_scheduled_works+0x9ef/0x17b0
[  594.967450][T10691]  process_scheduled_works+0xade/0x17b0
[  594.967477][T10691]  ? __pfx_process_scheduled_works+0x10/0x10
[  594.967499][T10691]  worker_thread+0x8a0/0xda0
[  594.967525][T10691]  kthread+0x70e/0x8a0
[  594.967546][T10691]  ? __pfx_worker_thread+0x10/0x10
[  594.967562][T10691]  ? __pfx_kthread+0x10/0x10
[  594.967582][T10691]  ? _raw_spin_unlock_irq+0x23/0x50
[  594.967600][T10691]  ? lockdep_hardirqs_on+0x9c/0x150
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  594.967615][T10691]  ? __pfx_kthread+0x10/0x10
[  594.967635][T10691]  ret_from_fork+0x3fc/0x770
[  594.967651][T10691]  ? __pfx_ret_from_fork+0x10/0x10
[  594.967669][T10691]  ? __switch_to_asm+0x39/0x70
[  594.967687][T10691]  ? __switch_to_asm+0x33/0x70
[  594.967705][T10691]  ? __pfx_kthread+0x10/0x10
[  594.967725][T10691]  ret_from_fork_asm+0x1a/0x30
[  594.967750][T10691]  </TASK>
[  595.307727][T10691] hsr0: left allmulticast mode
[  595.312852][T10691] veth1_macvtap: left promiscuous mode
[  595.318383][T10691] veth0_macvtap: left promiscuous mode
[  595.341931][T10691] veth1_vlan: left promiscuous mode
[  595.346866][ T5843] Bluetooth: hci0: command tx timeout
[  595.347638][T10691] veth0_vlan: left promiscuous mode
[  595.420464][ T5843] Bluetooth: hci3: command tx timeout
[  595.497684][T10691] team0 (unregistering): Port device team_slave_1 removed
[  595.538500][T10691] team0 (unregistering): Port device team_slave_0 removed
[  595.579813][ T5843] Bluetooth: hci1: command tx timeout
[  595.659630][ T5843] Bluetooth: hci2: command tx timeout
[  595.685323][T10691] team0 (unregistering): Port device dummy0 removed
[  595.716826][T13707] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.724181][T13707] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.732392][T13707] bridge_slave_1: entered allmulticast mode
[  595.742193][T13707] bridge_slave_1: entered promiscuous mode
[  595.770310][T13698] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR
[  595.780777][T13705] team0: Port device team_slave_0 added
[  595.819400][ T5843] Bluetooth: hci5: command tx timeout
[  595.899240][T12991] net_ratelimit: 2 callbacks suppressed
[  595.899261][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.029115][T10689] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.189256][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.322319][T12991] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.438807][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.456344][T10691] IPVS: stop unused estimator thread 0...
[  596.514092][T10691] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.548826][ T9474] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.563377][T10691] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.611878][T10691] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.659146][T10689] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.669663][T10691] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.768711][ T8364] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.878845][T12990] bond1: (slave macvlan2): failed to get link speed/duplex
[  596.913445][T10691] bridge_slave_1: left allmulticast mode
[  596.919394][T10691] bridge_slave_1: left promiscuous mode
[  596.925149][T10691] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.933169][T10691] bridge_slave_0: left allmulticast mode
[  596.940183][T10691] bridge_slave_0: left promiscuous mode
[  596.945861][T10691] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.954369][T10691] bridge_slave_1: left allmulticast mode
[  596.960333][T10691] bridge_slave_1: left promiscuous mode
[  596.965967][T10691] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.975059][T10691] bridge_slave_0: left allmulticast mode
[  596.981475][T10691] bridge_slave_0: left promiscuous mode
[  596.987135][T10691] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.996025][T10691] bridge_slave_1: left allmulticast mode
[  597.001775][T10691] bridge_slave_1: left promiscuous mode
[  597.007417][T10691] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.015418][T10691] bridge_slave_0: left allmulticast mode
[  597.021499][T10691] bridge_slave_0: left promiscuous mode
[  597.027164][T10691] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.036132][T10691] bridge_slave_1: left allmulticast mode
[  597.041851][T10691] bridge_slave_1: left promiscuous mode
[  597.047474][T10691] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.055509][T10691] bridge_slave_0: left allmulticast mode
[  597.061358][T10691] bridge_slave_0: left promiscuous mode
[  597.066988][T10691] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.075526][T10691] bridge_slave_1: left promiscuous mode
[  597.082716][T10691] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.090947][T10691] bridge_slave_0: left allmulticast mode
[  597.096576][T10691] bridge_slave_0: left promiscuous mode
[  597.102333][T10691] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.110817][T10691] bridge_slave_1: left promiscuous mode
[  597.116429][T10691] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.124896][T10691] bridge_slave_0: left promiscuous mode
[  597.130924][T10691] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.206644][T10691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  597.216353][T10691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  597.225775][T10691] bond0 (unregistering): Released all slaves
[  597.315629][T10691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  597.325328][T10691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  597.335461][T10691] bond0 (unregistering): Released all slaves
[  597.403019][T10691] bond0 (unregistering): Released all slaves
[  597.491133][T10691] bond0 (unregistering): Released all slaves
[  597.545565][T10691] bond0 (unregistering): Released all slaves
[  597.713987][T10691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  597.722878][T10691] bond_slave_0: left promiscuous mode
[  597.729601][T10691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  597.738357][T10691] bond_slave_1: left promiscuous mode
[  597.745599][T10691] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  597.754294][T10691] batadv0: left promiscuous mode
[  597.761000][T10691] bond0 (unregistering): Released all slaves
[  597.879500][T10691] bond1 (unregistering): Released all slaves
[  598.178151][T10691] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  598.187020][T10691] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  598.197665][T10691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  598.207049][T10691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  598.216717][T10691] bond0 (unregistering): Released all slaves
[  598.227437][T10691] bond1 (unregistering): Released all slaves
[  598.332505][T10691] bond2 (unregistering): Released all slaves
[  598.440470][T10691] bond3 (unregistering): Released all slaves
[  598.525345][T10691] : left promiscuous mode
[  598.686742][T10691] team0: Port device wlan1 removed
[  598.982881][T10691] hsr_slave_0: left promiscuous mode
[  598.988547][T10691] hsr_slave_1: left promiscuous mode
[  598.994540][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  599.002806][T10691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.010431][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  599.017809][T10691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.029105][T10691] hsr_slave_0: left promiscuous mode
[  599.034755][T10691] hsr_slave_1: left promiscuous mode
[  599.040620][T10691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.048162][T10691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.057878][T10691] veth1_macvtap: left promiscuous mode
[  599.063630][T10691] veth1_vlan: left promiscuous mode
[  599.144403][T10691] team0 (unregistering): Port device team_slave_0 removed
[  599.434270][T10691] team0 (unregistering): Port device team_slave_1 removed
[  599.461110][T10691] team0 (unregistering): Port device team_slave_0 removed
[  599.840441][T10691] team0 (unregistering): Port device team_slave_1 removed
[  599.877034][T10691] team0 (unregistering): Port device team_slave_0 removed