last executing test programs:

6.03881576s ago: executing program 2 (id=3531):
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)

5.073933698s ago: executing program 2 (id=3532):
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2)
ppoll(&(0x7f0000000000)=[{r4, 0x9f712fd3135d63af}], 0x1, 0x0, 0x0, 0xffffffffffffffb7)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x4000000)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000617e2918573e8f7ea900"/31], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.526990068s ago: executing program 1 (id=3537):
r0 = inotify_init()
r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000)
cachestat(r1, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000001200), 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x26, '\x00', @p_u32=&(0x7f0000000100)=0xfffffffe}})
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r8 = socket(0x400000000010, 0x3, 0x0)
getsockname$netlink(r5, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4.364948266s ago: executing program 1 (id=3538):
r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000080)={&(0x7f0000000500)=[{0x8, 0x2a10, 0x0, 0x0}, {0x7, 0xd211, 0x3a, &(0x7f0000000400)="4a10f7d31bdc50495f0f3c7c637465e1290074097b306436a52cef17df203573735ae82feed2f6d08f9e11068ce1b6e8c0fe60fc11317ff31432"}], 0x2})
syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getuid()
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x80c2)
writev(r4, &(0x7f0000000680)=[{&(0x7f0000001c80)="29236d945bebcc9377082b5819d957cf2e93e43437965039468b5c15045486822e59a85cb8622320e3ad7b78c4c8a8dedad754f9a0b7964fc2b75b9b23194004a0cced134ce681bccfa4499c368f7e6da1d286ac34e1892dc228b4ee5be3f532b25054994fbc748b1224df39740bcc62ea3127b3cda1e212c672db32e9aa02abf6f9b1ddf419f8a07bd4aa6c9220b6324d1737da9f20d97437af4a156ebb000e584493adb8c082d9cce6df34be9ae88e4ffe0579178cda63760907406adc5537568259dd94b1a05694a292ff5700dcd62c7314469a48c854ee7ef378ccceb39e537f1fd27312f55826b8223ace6fc5e9131d834ec93e808789139501bef4c504ead9b8897e8b402ac730be02eb895f10c1bf9981aedb0a64b4a58624aef0077c26e02cef19906aac21a9d45a4c9a8f82e6c039ff7a29812a7282de5b8a49a74837bc8302ca4c0f9abd5841f8c0056ee10f5dc4e1ebf6d08dd6ce212453c68d6b32938318eb912dddef2b957462044ddcb223fb8d6be0e41890018bdc3c352de0780bc2de7a79da48dbfcdf43549cad22bdd8fca4a830cd3056e3ed47d08fe6fb7bd495732269809371a532b6e7261688909f4c94d350fef132202ea8a3d687df40b7f229cfe3974c1b4a35df4f936f68abe9aaf5f6f5f14f0d55570542507696e6411bd1e717bde438a1013371cc5992782dba6789d924dbd0b501a4437132c2452831be2e86b9d7e58dd8c2e337c1e1277be27ca165b41ee78d6631219d5c08b8fab76daa23b899216a0f8ecb86ce149196f2a7f89d4ca211a7dd4f4e033bd434d57827bf635028776dffb16b65834a2890566865de4d164026902409eca098047cf120ccb889489501273bfeab96bbfe17c7baae3bca74684b419ac8e8867c355a7fb3f08f00c8c60c7a50a5e41308b7cd05629610c99cff3697035d95a14eefaaeb498a2aed9dd4a07f24d64ffc88ce0180ca54ab9642bb26948d9add59c8d9e4389c5148dc11151259a2b370397110686bbfcbb1f65ebef77d1f89513e65625dc79f0eef966c24b8c1ea25f983c4ad1e1cbaf1c08bf49483b76fef71dab2d70bdb73280bb2f1c2b0e9bf3e2cff82c14ba1484a09e930e1eccd439e386e17638159772e41bc49c07a8dbd32fd74897ccd4051b67278a61714e2db5d7e242294b06966b9edf5735a33e2acbf14ed4ff1b823416540eada3b0c6fbea631696d23e11ad5f3a6081547ff297bae68fc62589efea0fbd71c3eed1c25d52b0527bc9c2b06e14b18e8ec1d3da68e34576b6d3d6e59f9dd72b9724aa46805994d2d4ac53bcfd0afa5ab87f5412f5709cb76b0acb48cd7405bb8c36cf6c4d3ea63ba2f1b51196c5b8289856e519af792e8b90becd472a47c36616d13a1ee96d7e051b27dd347e539a5f9d15a9d3ad1bb3774fb3d5e0270d0dc1fec4f11ff91790cf4ff9843913e237254fc9ac7399e9605fa6b5124a0afc327fde411f0588d96c60b4039b374702ce255057a17cb1dd60ea11a010e76506d1f91c99e1880cf0ea9945acb979e28697356b048194854a7b7119d504e18f33fdec8c6295cd7251ef1d73378227752c81f18cf6714cf52f6671291e9065dbb3ba7c5efa3ad314a190a71b45c0f0ca8c4b3703ea8fcabf15bfa1ab9538fd2fe7e97bbf994fa8cf491702ca042b595195d2e9a31e04a55d36a1c9755db1ca335aefdbbecad85653844a9647b2d9ed4598fcaa44ec59331c37e801fb846e30bc8a826f6f2d1b0eb63df1864ee666b8863337dfe277a8ef2937bebe9097f8336ddf60242f808f2a197675d8663a628a88d9abe79f48ccf35d6e07694c301190de6eabab410232e55d47befced35089c0f2f7a03813f76b920cfed0381ca8a5734021224113fcf836556f14730378c8ae853f038bb5825f03a5c9926d4179e7528fe9f468eb33ff8937c68269e8a82bc141fef2cf8b76121b16521d74987e196bc25bb150fabb35576e8b647e7612427e8bfdf7f0856a306b63478e94ed829c61c21b3c5a88538bd8086f7f1cae6abdf58ceb740b162c76a74b087fbf1d5866f6fb5a4708d63d4f09fc05d38abb36f5f197dbb61202ebd60113a1410bbc192c3ed030ab08916aea685cc8a63dbce44dc457e191121330773e1fbb4b86a15cbf6565d5edf049cce2938be0a836ae444e53e582a18937393749aa63de0d32183300e8e85282e6ea51a21f3a9aa5b0141b86686873402361bd25e7bc35fabaa8c22d3d28590d4bb4e5016aed4f82b5efef8aace51bf49bb137caf28de310b1627a387e615ff0dbc782f17cb2be9106840a2576013df102b26d9e1f3dc0eeba0d49da8568fcd7e17bcfa0b2dc5d5ead4bf38a98a5b0b7cb1187532e7c2c7e80858992ecab8fc18f9eea00790ddce9608520c5ca3672eda2a19be080bf811c6cfd83b0356ab43a3472049cc53ddfb33840d0b8be1b721670ea0da2ff63176573c294b12d3fa0a6b6b01c211a1e13f668cb26d50384a0eab18e15dcc456e260914bb64b43ef9c8aa70ebc6bd090e7ebc857f1d9c293701ed09421b6fda878fd11cae88401e23e8d37bc9f708e54c8593bd0ec8c8fb28ca147791c1521a05953ec9320e32f8f5f6611d34d21050021236026302661ba278087d9a7797c55d658013826cc81af2714fc8e52ce314f1347b7da0a07d33cdb547daafc58d1f34781922092f10f30b64d143007421a0f0c943e43cd3bd225a10fce4d0edc9f82147a0652bf34acbae6c4b3c348ddc243ef30f749330ed2ef374443eea190c90b7b1d6247d8afaebe9e5d21a22ad3a603286ac598bec4af283a3fb1478e1beee3b1783251ac9214706b6cd2a6427b2d64e28e78b64020af252f2611e61b8069a9b30178052de9f040de283d3c671e4b447391ca4e404237b7fab2b71db608744f5005442e4eed33099c465c209e1ebbd133333407bc7f5fb8f541780ebdb312cf608473680fbcbc3bba1e0b32e278ddc7dd1537395877c4c0a2739688116ddc5086c380208c96fb4eaa704c6a6c325a258b859d508b0b4f22385f4e34d7fd320f5d465feadaf2f026bec13ecf4d1c926c99f795ada7fa5a8370daafd156effe4f09c73c01710b642b33ecc4b44f78c9ee04ca69f6dd6b19c7af8275ea8d3b6ba653a1927181b16f31e0120cc5e01e43879d81a26c6d4eb1ebafa1108e404a1067f1e3770f73442dabff1bbb80e740f84c415fc426db4437c527367e59f970f85ae3631301492ccb3ee6bfc5fbe7958d4592138698caf71f622d81cad81de7decd61df8e4eff76adecf22e25bbb97b465403884514e70d08a5200c316ac29d81d336a6f5c9b8e9be005facf2952fd8d125c5c850993d13405c256cad210ea7cfc0276e60ee859c66604b498153f4e2fdc43c4e1a72f94e296b6d7b056e206adbd2239d4f85d48dee8eb0701beda56552fa6999174c7669a47cc7063a5ae46ebcebc0858bb690d68ab9ea82aefcf35bef1f726aed6c27d2c58bacbbc66b2dcccea047060390c25e1a41dbab10c8b9be8b7eee0a7b9c7955ee4a865dbd091eb1118a0830a2345e7d7f6839c3d218d05b591cfb2f27454b456acebace69c95c86c20cc647b2835a87ff1e89dbf9c737bbb3e88bdaac460f1b1c038329ae678bb0a00863f45a5f4878b5bec04e23f5abc3ea073727774d12ae9ee72ca376b3d7a85ef7cc35d9f1a7fb7e7312f2b274e6f0026461ae5c36e9680eee2770930d15988184263dcd7d822e531f8562a814405aeb4251f2bca131bd5461130266385b69314dc9807d685f2d58c6b2ca9ba38ddb3b0e0657a40c053445e4d0297ed9a0b735b27fdd01260932a45f9bd3381dd3c1369a01f7bfe42d55972c2c810ac069cfac76e2f38b7902222170fcf925339e87f15a25e4578f9c128153a02ae0e8c6eccee9c54ef4558f697bac0bc42c0a25b01eab829edd492fb800f043e8952807cfaa63e437309850af719ebb7f82b8422675c7d7303d90ee734faea0ffc68603a26207891d4c2ef87e4dfc158fef8e86ce383e8a0561c7aefa64655fd0dd643fbc2adbeaae36eb91405a9e03e7245df4cff59f57905bb535dfc1a6a9904cace4de4be5c775b0a562b5a6f5aded6b7aa2a3de1497add59775a29180a04f3bc6fc1e274c21df40bb17dea9469039be20b3a2bd35d50e95657667d279d3e3355e410fae72b5fb205df6c335a491c2beaeb272dcfa7ad0773f3a498fc9cb49f546c4a2825e0862e6458094b6e275aed4ffa26694e8c5fd6585c82c8e8feb0268469d7a5914f7756a2b1c8ba032c3bc18854e18e63882dc9a6bbe34e642b2461f1079e29cde310d546e20b971eb72f1e48884f7ef1dced1a3586b153b1e5981eab08410c7bccedac100ef09b52b5ab1c880458e21501204bac583e6c9d35ad3980d409859406e2c39bf452d629d2832e8aebf99d9250b11f38230fc0e146c6cb181e4b7dcbce70913b53d34fd4a81a258846798c6d6c074bcbfc17fb8291f5b54f72b43ac4108f20c1d102b6151cfc444e689e6255e73992d536ab6c5d6e906ed95c911998a6aaf003c61f4dae56c85571b4e4373102112320ac504b25c1524cfd44634f70337484efa6d8d69152c745d35a0afe4d350c5031702d4f5cae4dce63068d4b35e694266c4b221f3405a86a5f521d988606c9c816f606270715b4295b93d83ca66158403a39e63948116ea63f3d2af7c9dd6f0f181c4b7e69e6c7cb14d58316dd210594ba67a8d8638177fb58838766aeca025695d13705c56553a998e6c1378e69e06594a2eff93d59886debebe5e43dbdf4c756977461da685bd5af07e69fcbd5d3caa4331a29ac994ef24f3a75a7eb3ed259902298ce39e4a48295b26caa050f30ca2b43e0f7cceb90eeadbc66382364669baba177490c022ac2884a3b4c2100caa84bf93c454c8be0d64e164beb1f11bc664361c229a8475b8323cfa99293b85d1b895bf6cfa5f4a809f727725488fb00ddfc39cfe0d0964673a5954c8fc06b391811bf5ac1a8503a3fd9ad22609896dfea8dc2b859ac6248fe4e704d04c3e5b8df97732950701331af0482b1a7d45368dc43ded2d2d5fca0b312896540d8500bc3672167a9a5c4d407b53b4ec1a32cf75de14d3091c713a80c55302918a61620a5186e8b3a320126dc0e7a7534cfbc23872187e1442451bb89757a05a3d74e933ba9622e93190976a46dfe76d87ca8e009416596dc1f44b7e9fa9036e164d8dae25890bdeb73d5012c86eea471ab254aed1269b07e2d6a1521b2a7320a4f0638028ffe87a11b9f20a5be71d7cdace21002cb5bba1d9c1356f8e4898407b99fb2f7ba26a1a6c1c27ce3d99d5c16fe9af42917914789519bb9f78cab623665081bd2befeefd50ddcda94ec4407a2670a0e0e5ebd2bb82048bf038c7ab6cb074386d3b09d0066a064c7caa332b78e16e518e98bf7ce5f21c2503ee377c231db58d848731ca564259d42841d2d77a285e4a04d438460b447f393371e427684a8375353a9135c64a76f8df75e72c8bf2f7fee47ab1e85824fe62a826fe6a72b96180c6dc107b129658307eac6a071df81365dbb57e4d09879d0d49b89e1055409724daa70fa3dfa5d8730006d71f6e5bb772f70b39f968350d78e9a13482622eb9b9aef8ff252edc7b5d8010da88b6fb833cd9e9a045062197774dfbd9511939370acc445e58556b6db0596336a317f468be9531a52e4eb9b76450296364751163f551f6cf8991464f27a57a3f2d385aadba3b7843637fbe7289f62df178038a331a259f78b026844012efd29d865d5dcb3a9da3", 0x1000}, {&(0x7f0000001c00)="8ae0bf7eb9a4cc54b3673f0923572b77453c9dc476655cc5b2cdc26d472430d85fa7c10f82969ad481dcf0cc1fc9e46191472236cd430a31f1b7811e126616d08c6e06dcc77ab779c94e85f85cad46ef59581853f05218e8b7efef4403c93da872606462a642bf15a2f8d0", 0x6b}, {&(0x7f00000006c0)="188e653c3e62a9d08338d0c19001dc168f2c89c215338aee5d362281b52d5010d3c310414521bcd5b8f28567661d385afd79afbba52a25bd27e26c80d6d8eab010f2f299e71bdc1db7d992390c7f5b078a6d75359d45737676ce2080024689a6347ebde874edfca4d394d73d679e08506dc5d4d6aefd4547942441623749bfcfa2cea13c74664c119bebefa2373cba4130deb7ce3b4289aabfa577e05fdfce2cd990c06b75bd161114030000000000000008a3dfad867e70f2bcb6f22725d50071d779211d18a5b9f404f26a614077da37e11409c69dc0b4e7c468b21d5800000000", 0xe2}, {&(0x7f00000005c0)="2b870f0d02ee7b18c051df5938530869aad0bdc2c37df3ec9d88477b39d14887ce5ef1f12bc676146774f834f5d7b134c62be5b6f76f0c897696b801bd2de247d8e4c8389ee29ecb1949b6eb500366a5ba648216e41e3d84e68b09c92cbe14ab7e286611c77892d76c67e8a143d0ed5fd129bd2de33b60be7538b17de5dd4b6e53d1ac3447db5b1a89e7b9", 0x8b}], 0x4)
ioprio_get$uid(0x3, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
r5 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000b, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0xfffffffffffffffc, 0x2000000000001]}})
ioctl$COMEDI_CHANINFO(r3, 0x80206403, &(0x7f0000008580)={0x3, &(0x7f0000004ac0), &(0x7f0000000240), 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000a80)=[@reply_sg={0x40486312, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000009c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1014, 0x1}, @fd}, &(0x7f0000000a40)={0x0, 0xffffffffffffff58, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
r6 = dup3(r2, r1, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/custom1\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
openat$uinput(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})

4.014347536s ago: executing program 2 (id=3539):
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000050000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2)
ppoll(&(0x7f0000000000)=[{r3, 0x9f712fd3135d63af}], 0x1, 0x0, 0x0, 0xffffffffffffffb7)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x4000000)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000617e2918573e8f7ea900"/31], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000000c0))
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

3.137393434s ago: executing program 2 (id=3541):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x53, 0x0, 0x1}, 0x28)
r0 = openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x37, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
socket$packet(0x11, 0x3, 0x300)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
io_setup(0x7, &(0x7f0000000280)=<r6=>0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
io_submit(r6, 0x0, 0x0)
writev(r5, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
memfd_create(&(0x7f0000000140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9\x0e\x00\x1ae\xe0\x00\"\x02\x00\x00\x00\xfb\xff\x00\x00\x82\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+OS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%)\xb1\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbd\xc5', 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000640)={r8, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x9, 0x1d, 0x11, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc30900000058128b3ad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35afcff0e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6a0000c5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8cad5ba139c01802c4dae4162e43ac61b7ad33", [0x9, 0x1]}})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default usez 0000000000000000'], 0x2a, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d01, &(0x7f0000000280))
io_setup(0x9, 0x0)
r10 = syz_clone(0x10028000, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = syz_pidfd_open(r10, 0x0)
io_submit(0x0, 0x4, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x8, r11, &(0x7f00000003c0)="37d7a1ba715cc797d3ae4c4a64654013310772b9e240bea312aca3c8b37cd096081b47bcc2e1a664163fdbfa28b2c44c81ef05754b82715dff94a1253682d97c5ad82baac347cb1ac43dca6fd992cfd6723401197cdebbc400", 0x59, 0x8a, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x3, r9, &(0x7f0000000480)="f078e683495e3244c0fdb73c76c732d5b0458957c69c23a840", 0x19, 0x1ff, 0x0, 0x1, r8}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x2, r4, &(0x7f0000000580)="9338281e8b5a664445cd50371f003dceb0f5d24cdfbcf3bf5c593a9ca0ef844fd50c280715d1ec9701864b5cead026bb637e2b4a80fe61aa41fa74abaf1697f10ec066492768e005b9aa8b0cbc05f4c1a8debb8d2444060e08f50c7a59a9f88e103ef9d47409ee043a51dda38c9d7a34336e70ad6dfac7d04dfc39f9c950798c6588ebc43ef0a46e8318dd03d9029e19", 0x90, 0xfffffffffffffa25, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f0000000900)="93a904a69d07b3a4a0a7c8072c5f6bb88ed15a4f77e27a67018976d9c8214053bfb0fc74ff73e0ec8298c77cb73fdd7bea794f539d7c7531be0dd01c6c5ea93cc5cb6bc174675b53dd30b65c237b256986b2448612bc6279ac39a794c0b5b0017f9fd0214f03000000000000006ab36a65c6db3de98ce8af7f26a6a3722d34062d46cae1b594ec293b3b3046a398287b0f3e8a3acb70d54c6527c2c338bd4edd58d884269e1b828f271b0c91dab000144c01ebdeedf7c04482982f6668ec28b80ca2abed29ebd1eef19c19fd407ee34e0472e4881eda75393f6f4d73bc590afb0000000000000000", 0xe8, 0xaba, 0x0, 0x1, r0}])
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

2.994503664s ago: executing program 1 (id=3542):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) (async, rerun: 32)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (rerun: 32)
landlock_restrict_self(r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
ioctl(r1, 0x541b, 0x0)
ioctl(r1, 0x5451, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = getpid() (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x3, 0x10, 0x1, 0x1}}]}, 0x15c}}, 0x20000000) (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async)
ptrace(0x8, r3)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4fc, 0x0, 0x0, 0xfeffffff, 0x30c, 0x30c, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0x0, 'veth0_to_bridge\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0x1f4, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x308d, 0x7fffffff, 0x14, 0x22453, 0x22453, 0x40, 0x2, 0x7fffffff, 0x20}, {0x100}}}, @common=@addrtype={{0x2c}, {0x60, 0x0, 0x0, 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x18, @loopback, @loopback, @gre_key=0x7, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x4, 0x6, 0x0, 0x7]}}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x11, @private=0xa010101, @multicast2, @gre_key=0x134, @gre_key=0x8001}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffffff, 'lo\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e21, @port=0x101}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {0xff}, {0xff}, 0x5c, 0x0, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@local, @port, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x558)

2.93361929s ago: executing program 2 (id=3543):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x33}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x800000}}}, @TCA_IFE_SMAC={0x0, 0x4, @random="64ca59b9decf"}, @TCA_IFE_SMAC={0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @TCA_IFE_DMAC={0x0, 0x3, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
openat$uinput(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2000010, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',mmap,fsmagic=0x0000000000000005,fscontext=unconfined_u,seclabel,dont_hash,uid<', @ANYRESDEC=r5, @ANYBLOB=',seclabel,fsname=ct\x00,context=staff_u,uid<', @ANYRESDEC=r6, @ANYBLOB=',\x00'])
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000130500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x11000)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x2)

2.932496217s ago: executing program 1 (id=3545):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r2, r3, 0x0, 0xffffffff004)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd)
readv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1)
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0)
io_setup(0x142e, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2, &(0x7f0000001980)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x40}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x9}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f00000013c0)=""/102, 0x66}, &(0x7f0000001440), 0x28}}, @mask_fadd={0x58, 0x114, 0x8, {{0x21c, 0x2}, &(0x7f0000001480)=0x9, &(0x7f00000014c0)=0x8, 0x3, 0x8, 0x5, 0x3, 0x3, 0x7c4}}, @fadd={0x58, 0x114, 0x6, {{0x153d, 0xffffffc0}, &(0x7f0000001500)=0x4, &(0x7f0000001540)=0x8, 0x0, 0xea05, 0x8000000000000000, 0x8, 0x10, 0xd}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x10000}, &(0x7f0000001580)=0xc, &(0x7f00000015c0)=0xffffffff, 0x3, 0xc761, 0x1ff, 0x983, 0x60}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0xffffffff}, &(0x7f0000001600)=0x2ab, &(0x7f0000001640)=0x1, 0x2, 0x8, 0x81, 0x7, 0x2, 0x400}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x8}, &(0x7f0000001680)=0xffffffff, &(0x7f00000016c0)=0x81, 0x10000, 0x178000, 0x4, 0x1, 0x64, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x5}, &(0x7f0000001700)=0xfff, &(0x7f0000001740)=0x8000000000000000, 0x3, 0x13bcd273, 0x6, 0x9, 0x0, 0xb1}}, @rdma_args={0x48, 0x114, 0x1, {{0x402, 0x7}, {&(0x7f0000001780)=""/254, 0xfe}, &(0x7f0000001940)=[{&(0x7f0000001880)=""/171, 0xab}], 0x1, 0x4, 0xbe64}}], 0x2b4, 0xc0}, 0x800)
landlock_restrict_self(r5, 0x9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000340)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r7 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
wait4(r7, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)

2.584589822s ago: executing program 0 (id=3548):
openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x37, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
io_setup(0x7, &(0x7f0000000280)=<r4=>0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
io_submit(r4, 0x0, 0x0)
writev(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x3c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
memfd_create(&(0x7f0000000140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9\x0e\x00\x1ae\xe0\x00\"\x02\x00\x00\x00\xfb\xff\x00\x00\x82\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+OS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%)\xb1\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbd\xc5', 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000640)={r6, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x9, 0x1d, 0x11, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc30900000058128b3ad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35afcff0e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6a0000c5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8cad5ba139c01802c4dae4162e43ac61b7ad33", [0x9, 0x1]}})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default usez 0000000000000000'], 0x2a, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d01, &(0x7f0000000280))
io_setup(0x9, &(0x7f0000000500)=<r8=>0x0)
r9 = syz_clone(0x10028000, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_pidfd_open(r9, 0x0)
io_submit(r8, 0x4, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x8, r10, &(0x7f00000003c0)="37d7a1ba715cc797d3ae4c4a64654013310772b9e240bea312aca3c8b37cd096081b47bcc2e1a664163fdbfa28b2c44c81ef05754b82715dff94a1253682d97c5ad82baac347cb1ac43dca6fd992cfd6723401197cdebbc400", 0x59, 0x8a, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x3, r7, &(0x7f0000000480)="f078e683495e3244c0fdb73c76", 0xd, 0x1ff, 0x0, 0x1, r6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x2, r2, &(0x7f0000000580), 0x0, 0xfffffffffffffa25, 0x0, 0x2}, 0x0])
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a391a0890e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

1.475921483s ago: executing program 0 (id=3549):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
inotify_init1(0x80000)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_getaffinity(0x0, 0x8, &(0x7f00000002c0))

1.209159649s ago: executing program 0 (id=3550):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, 0x0, 0x0, 0x20005845)

1.075261561s ago: executing program 0 (id=3552):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) (async)
r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/udp6\x00')
syz_genetlink_get_family_id$ethtool(0x0, r2) (async)
sched_setaffinity(0x0, 0xfffffffffffffe47, &(0x7f00000003c0)=0x10000000002)
sched_setattr(0x0, 0x0, 0x0) (async)
write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x6, 0x0, 0x80, 0x0, @time={0x6, 0xbc41}, {0x3, 0xfd}, {0xa}, @raw32={[0x5, 0x5, 0x401]}}, {0x0, 0x0, 0x0, 0x0, @tick=0x8001, {}, {0x5}, @raw8={"150c20236c974b186fc79748"}}, {0x4, 0xfe, 0xfe, 0x0, @time={0xfffffff2}, {0x20}, {}, @connect={{0x8, 0x5f}, {0x2, 0xf}}}, {0x1, 0x7, 0xf, 0x0, @time={0x6, 0x5}, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) (async)
ioctl$I2C_RDWR(r1, 0x707, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_getnexthop={0x5c, 0x6a, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_OIF={0x8, 0x5, r6}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x1800) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
socket$nl_route(0x10, 0x3, 0x0)

995.306133ms ago: executing program 0 (id=3553):
syz_io_uring_setup(0x52d0, &(0x7f0000000580)={0x0, 0x0, 0x1, 0xfffffffe, 0x3}, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0)
write$bt_hci(r0, &(0x7f0000000180)=ANY=[], 0x8)
lseek(0xffffffffffffffff, 0x100, 0x4)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = dup(r6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
r8 = dup(r6)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
r9 = inotify_init()
readahead(r9, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000100)={<r10=>0x0, 0x6}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={r10, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e25, @private=0xa010101}}, 0x400, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000080))
ioctl$USBDEVFS_BULK(r7, 0xc0105502, &(0x7f00000003c0)={{{0xf}}, 0xee, 0x9, &(0x7f00000002c0)="16435345570e0507ece311e3f934caac7a21578e49e122b3a9a76023171d3b93682dcd956db10d264333b0d5e2ff5586265b84fdbac64c3030c84b268d1478ad698a70e8eb1e4d8606f062f94984592d1484c0ae71f74d89df421c5c5d435d839c887cb344baeb9a357ac8ecd4287a94d7f537cb1b8f61a7354f83e1b7a136f448467ec2cdc68fd1ca3996c38c422dc323846ff6a04e370c8875c3046e3dc44aaf164aabac0122cb957b39a9fa68c8720beba13df1a24363b21152fd17a65139dea4e8000a4bc85d073ec70b74c39fa9f716a0776e2dc11d98583e9ff04b14b94ca609b5b73759c25a1c5ce76c1d"})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

824.935303ms ago: executing program 0 (id=3556):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000007c0)={&(0x7f0000001940)=[{0x2, 0x6a11, 0x0, 0x0}], 0x1})

735.224305ms ago: executing program 2 (id=3558):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
madvise(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x12)
listen(r2, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00')
getdents(r7, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0)
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, r5, 0x8, 0x70b529, 0x0, {0x8}}, 0x14}}, 0x4048000)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$netlink(0x10, 0x3, 0x14)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000000340)="580100001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c08080041d5c0f354990074802d3a06e2224e8ab73b60e6e5d9e783683aec32ccddf2db735662ae7eb682eb6bf473411646abf3b2a1bd894ccaa68c", 0x88}], 0x1)
getgid()
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
accept4$alg(r2, 0x7000000, 0x0, 0x80000)
r8 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x4001, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x00', 0x10})
setsockopt(r1, 0x88, 0x81, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x24040081, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffff81, @mcast1}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0)
shutdown(r0, 0x1)

644.294042ms ago: executing program 3 (id=3559):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000e80)="1c", 0x1, 0x40, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="d8", 0x1, 0x20000040, 0x0, 0xffffffb5)

643.981872ms ago: executing program 3 (id=3560):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, 0x0, 0x0, 0x20005845)

631.004388ms ago: executing program 1 (id=3561):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x10000a0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x0, 0x100})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r4})
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r5 = dup(r3)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sched_getaffinity(r4, 0x8, &(0x7f00000002c0))
r6 = openat$ttynull(0xffffff9c, &(0x7f0000000280), 0x30002, 0x0)
ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000500)=""/249)
futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0)
timer_create(0x1, &(0x7f0000000440)={0x0, 0x17, 0x8, @thr={&(0x7f0000000140)="d30049afff7af6410cadc88ac3e289a96b5df62b9807a656f408b67515270b7678ba39d013fe226cb2840bd2242fd327d6eee97133fc0c0738f43a0d9b738ecefa092fe323f0b1aeb34bb03020f514c9c6b23eb59632fbfa403c32f200da4748d6d0eef1d0fbe8c727378727af52c8461bc9c38d64b8631ac1d862a60ab3074b9996cf4f1ddc1bda320fa4d6e21c78e0c28880e5862d697be1fc591438ce0306f04b1714fb3fe9d0eccca9bc675f0a22b86409bc327c95241e121895df40049ed41ced1b0e356a4856f40081c8d1ca5b44444d5eda1077434314b9481552facb7bc4e1", &(0x7f0000000340)="8412c50c254174e690c66660dad0f83b67dbdaca619db07fca687bb255a718d4672c8e630e5dd91728e7fec9dcb8ea1380021f2c3da0a85d9589fbbe4c9013fbd5a9edc1e6e7d0282ba41b135f3830bc6da73eb25b81c3958929d42891b11d8999be3f6fd1b7840b9c214abf5187bda70fc35bd42a61c9a80d25d69e94c57584235e6d075ab9a8dacf5dfb002941b017acd25908c704808c3071b7f9300a60b478f0b17fa90544023e90634e3e6eadd5ac353447714ffe1688132ae3d41bf564b29daceef6b903e1acd9172e5c87b0bd80732f68c2adcd7051b2780220ca1e4931eb45bf341fb6"}}, &(0x7f0000000480)=<r7=>0x0)
timer_gettime(r7, &(0x7f00000004c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'tunl0\x00', <r8=>0x0, 0x8, 0x20, 0x6e, 0x6, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x65, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @local, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x46, 0x0, 0x4, [0x9, 0x8, 0x2, 0x2]}]}}}}})
r9 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x2020)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0xfa, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x26b, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x20, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000800000000000000009000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000000982070000080000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100a54421f4f411aadf0008000000b7030000ff7f000085000000060000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x44, '\x00', r8, @fallback=0x28, r9, 0x8, &(0x7f0000000880)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0xa, 0x6, 0xfff}, 0x10, r10, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000c00)=[{0x2, 0x2, 0xa, 0x4}, {0x2, 0x4, 0x4, 0x3}, {0x5, 0x3, 0x8, 0x6}, {0x3, 0x4, 0x8, 0x6}, {0x2, 0x2, 0x10, 0x8}, {0x1, 0x5, 0x9, 0x4}, {0x0, 0x3, 0xf, 0x3}, {0x3, 0x2, 0x2, 0x1}, {0x1, 0x2, 0x5, 0x5}, {0x3, 0x3, 0x10, 0x6}], 0x10, 0x8}, 0x94)

553.34654ms ago: executing program 3 (id=3562):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000e80)="1c", 0x1, 0x40, 0x0, 0x0)

552.854996ms ago: executing program 3 (id=3563):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x5, 0x1000}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

495.413356ms ago: executing program 3 (id=3564):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x53, 0x0, 0x1}, 0x28)
r0 = openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x37, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
socket$packet(0x11, 0x3, 0x300)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
io_setup(0x7, &(0x7f0000000280)=<r6=>0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
io_submit(r6, 0x0, 0x0)
writev(r5, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
memfd_create(&(0x7f0000000140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9\x0e\x00\x1ae\xe0\x00\"\x02\x00\x00\x00\xfb\xff\x00\x00\x82\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+OS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%)\xb1\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbd\xc5', 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000640)={r8, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x9, 0x1d, 0x11, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc30900000058128b3ad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35afcff0e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6a0000c5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8cad5ba139c01802c4dae4162e43ac61b7ad33", [0x9, 0x1]}})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default usez 0000000000000000'], 0x2a, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d01, &(0x7f0000000280))
io_setup(0x9, 0x0)
r10 = syz_clone(0x10028000, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = syz_pidfd_open(r10, 0x0)
io_submit(0x0, 0x4, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x8, r11, &(0x7f00000003c0)="37d7a1ba715cc797d3ae4c4a64654013310772b9e240bea312aca3c8b37cd096081b47bcc2e1a664163fdbfa28b2c44c81ef05754b82715dff94a1253682d97c5ad82baac347cb1ac43dca6fd992cfd6723401197cdebbc400", 0x59, 0x8a, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x3, r9, &(0x7f0000000480)="f078e683495e3244c0fdb73c76c732d5b0458957c69c23a840", 0x19, 0x1ff, 0x0, 0x1, r8}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x2, r4, &(0x7f0000000580)="9338281e8b5a664445cd50371f003dceb0f5d24cdfbcf3bf5c593a9ca0ef844fd50c280715d1ec9701864b5cead026bb637e2b4a80fe61aa41fa74abaf1697f10ec066492768e005b9aa8b0cbc05f4c1a8debb8d2444060e08f50c7a59a9f88e103ef9d47409ee043a51dda38c9d7a34336e70ad6dfac7d04dfc39f9c950798c6588ebc43ef0a46e8318dd03d9029e19", 0x90, 0xfffffffffffffa25, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f0000000900)="93a904a69d07b3a4a0a7c8072c5f6bb88ed15a4f77e27a67018976d9c8214053bfb0fc74ff73e0ec8298c77cb73fdd7bea794f539d7c7531be0dd01c6c5ea93cc5cb6bc174675b53dd30b65c237b256986b2448612bc6279ac39a794c0b5b0017f9fd0214f03000000000000006ab36a65c6db3de98ce8af7f26a6a3722d34062d46cae1b594ec293b3b3046a398287b0f3e8a3acb70d54c6527c2c338bd4edd58d884269e1b828f271b0c91dab000144c01ebdeedf7c04482982f6668ec28b80ca2abed29ebd1eef19c19fd407ee34e0472e4881eda75393f6f4d73bc590afb0000000000000000", 0xe8, 0xaba, 0x0, 0x1, r0}])
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

295.004545ms ago: executing program 3 (id=3565):
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
io_uring_setup(0x2736, &(0x7f0000000000)={0x0, 0xb906, 0x4000, 0x0, 0x7ff})
socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x4, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_LOCK(r2, 0xb)
madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xe)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
shmctl$SHM_UNLOCK(r2, 0xc)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000180)={0x7, {0x3, 0x9f, 0x9, 0x82, 0xfffffff9, 0x3}})
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @win={{0x8, 0x2, 0x6, 0x6}, 0x8, 0xe4c8, &(0x7f00000001c0)={{0xd8c, 0x7, 0x2, 0x5}, &(0x7f0000000100)={{0x7, 0x6, 0x7, 0x7}}}, 0xffffffff, 0x0, 0xf}})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@ipv6={@private1, @empty, [0xff, 0xffffff00, 0xffffff00, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_hsr\x00', 'pimreg1\x00', {}, {}, 0x3a, 0x2, 0x4, 0x4}, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0xf93}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x3, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

0s ago: executing program 1 (id=3566):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r2 = fcntl$dupfd(r1, 0x0, r1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10)
syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, 0x0, &(0x7f0000ffe000), 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)
r5 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r5, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd25, 0x0, {{}, {}, {0x8, 0x11, 0x3e}}}, 0x24}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x80003, 0x6)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@local, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xfffffffffffffd93)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0x20000000000a78a}, 0xfffffffe, 0x6e6bba, 0x1, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x9}}, 0xe4)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002000000"], 0x10}}, 0x0)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

11.233584][T16009] Cannot create hsr debugfs directory
[  911.592362][T16071] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.774843][ T5752] Bluetooth: hci3: command tx timeout
[  911.885397][T16071] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.431722][T16080] overlayfs: failed to resolve './file0': -2
[  912.531199][T16071] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.685746][T16082] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.804924][T16071] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.872976][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3
[  912.917729][T16082] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.020316][ T1189] hsr_slave_0: left promiscuous mode
[  913.025296][ T1189] hsr_slave_1: left promiscuous mode
[  913.025546][T16080] 9p: Bad value for 'rfdno'
[  913.033536][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  913.036800][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0
[  913.043513][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  913.046205][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1
[  913.054137][ T1189] batman_adv: batadv0: Interface deactivated: macsec1
[  913.056518][ T1189] batman_adv: batadv0: Removing interface: macsec1
[  913.119532][ T1189] veth1_macvtap: left promiscuous mode
[  913.123748][ T1189] veth0_macvtap: left promiscuous mode
[  913.126555][ T1189] veth1_vlan: left promiscuous mode
[  913.128869][ T1189] veth0_vlan: left promiscuous mode
[  913.435064][T16090] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  913.600107][ T1189] team0 (unregistering): Port device team_slave_1 removed
[  913.609438][ T1189] team0 (unregistering): Port device team_slave_0 removed
[  913.726468][T16082] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.787763][ T9265] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  913.823014][ T9265] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  913.833417][ T5752] Bluetooth: hci3: command tx timeout
[  913.891067][T16082] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.905844][ T9265] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  913.922462][ T9265] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.234881][ T1204] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.251938][ T1204] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.291092][T10342] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.325080][T10342] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.539670][T16111] syzkaller0: entered promiscuous mode
[  914.548103][T16111] syzkaller0: entered allmulticast mode
[  914.671239][T16009] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  914.674068][T16009] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  914.674869][T16009] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  914.677733][T16009] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  914.692600][T16009] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  914.695217][T16009] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  914.701871][T16009] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  914.707954][T16009] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  914.844225][T16009] 8021q: adding VLAN 0 to HW filter on device bond0
[  914.858017][T16009] 8021q: adding VLAN 0 to HW filter on device team0
[  914.904465][T16009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  914.908724][T16009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  915.131445][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.134247][ T9265] bridge0: port 1(bridge_slave_0) entered forwarding state
[  915.156457][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.159122][ T9265] bridge0: port 2(bridge_slave_1) entered forwarding state
[  915.913359][ T5752] Bluetooth: hci3: command tx timeout
[  917.158829][T16009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  917.267226][T16009] veth0_vlan: entered promiscuous mode
[  917.279581][T16009] veth1_vlan: entered promiscuous mode
[  917.341324][T16009] veth0_macvtap: entered promiscuous mode
[  917.365774][T16009] veth1_macvtap: entered promiscuous mode
[  917.382613][T16009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  917.399662][T16009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  917.421393][ T9265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  917.428513][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  917.431494][T16172] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  917.436999][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  917.444406][   T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  917.445334][T16172] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2565'.
[  917.553507][T16178] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  917.580379][T16178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2566'.
[  918.029128][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.034873][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.581452][T16191] gfs2: gfs2 mount does not exist
[  918.862226][ T1189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.973703][T16198] syzkaller0: entered promiscuous mode
[  918.982426][T16198] syzkaller0: entered allmulticast mode
[  919.000427][T16193] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  919.042037][ T1189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.114276][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  919.130539][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  919.139307][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  919.150075][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  919.155199][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  919.397912][T16193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2568'.
[  920.114156][ T8554] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  920.263404][ T8554] usb 8-1: Using ep0 maxpacket: 8
[  920.266519][ T8554] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  920.269216][ T8554] usb 8-1: config 0 has no interface number 0
[  920.271961][ T8554] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  920.276031][ T8554] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  920.279715][ T8554] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  920.283122][ T8554] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  920.286293][ T8554] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  920.290360][ T8554] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  920.293553][ T8554] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.298349][ T8554] usb 8-1: config 0 descriptor??
[  920.303564][ T8554] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  920.515327][T16213] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90
[  920.527360][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.540034][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  920.597395][ T1340] usb 8-1: USB disconnect, device number 6
[  920.619647][ T1340] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  921.439597][ T5749] Bluetooth: hci1: command tx timeout
[  922.052610][T16216] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.167870][ T1189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.242928][T16226] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  922.260086][T16226] 8021q: adding VLAN 0 to HW filter on device bond1
[  922.279733][T16226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2575'.
[  922.301675][T16216] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.378959][T16228] syz.1.2575 (16228): drop_caches: 2
[  922.550811][T16216] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  922.688536][T16216] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  923.094905][ T1189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  923.353056][ T1158] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  923.353407][ T5749] Bluetooth: hci5: command 0x0406 tx timeout
[  923.365115][ T1204] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  923.403407][T10342] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  923.425673][T10342] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  923.517272][ T5752] Bluetooth: hci1: command tx timeout
[  923.650676][ T1189] bridge_slave_1: left allmulticast mode
[  923.654788][ T1189] bridge_slave_1: left promiscuous mode
[  923.661767][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.676315][ T1189] bridge_slave_0: left allmulticast mode
[  923.681874][ T1189] bridge_slave_0: left promiscuous mode
[  923.701451][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.778210][   T40] audit: type=1326 audit(1779329766.125:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.2.2578" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x0
[  924.388403][ T1189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  924.414072][ T1189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  924.434746][ T1189] bond0 (unregistering): Released all slaves
[  924.551631][T16235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.801950][T16235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.054185][T16235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.074825][ T5839] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  925.112632][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2
[  925.303342][ T5839] usb 7-1: Using ep0 maxpacket: 16
[  925.454840][T16235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.509351][T16206] bridge0: port 1(bridge_slave_0) entered blocking state
[  925.512671][T16206] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.516852][T16206] bridge_slave_0: entered allmulticast mode
[  925.520875][T16206] bridge_slave_0: entered promiscuous mode
[  925.529537][T16206] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.534481][T16206] bridge0: port 2(bridge_slave_1) entered disabled state
[  925.537907][T16206] bridge_slave_1: entered allmulticast mode
[  925.541910][T16206] bridge_slave_1: entered promiscuous mode
[  925.593899][ T1189] hsr_slave_0: left promiscuous mode
[  925.595558][ T5752] Bluetooth: hci1: command tx timeout
[  925.600695][ T1189] hsr_slave_1: left promiscuous mode
[  925.605360][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  925.608905][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0
[  925.613411][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  925.615843][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1
[  925.622644][ T1189] veth1_macvtap: left promiscuous mode
[  925.624689][ T1189] veth0_macvtap: left promiscuous mode
[  925.626698][ T1189] veth1_vlan: left promiscuous mode
[  925.628665][ T1189] veth0_vlan: left promiscuous mode
[  925.663405][ T5839] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  925.769630][ T1189] team0 (unregistering): Port device team_slave_1 removed
[  925.783561][ T1189] team0 (unregistering): Port device team_slave_0 removed
[  925.850157][T16206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  925.899310][T16206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  925.921309][T16206] team0: Port device team_slave_0 added
[  925.926378][T16206] team0: Port device team_slave_1 added
[  925.948031][T16206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  925.950673][T16206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  925.959840][T16206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  925.964501][T16206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  925.967139][T16206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  925.976765][T16206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.060730][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.066256][ T1158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  926.066728][ T5839] usb 7-1: Product: syz
[  926.071280][ T5839] usb 7-1: Manufacturer: syz
[  926.074140][ T5839] usb 7-1: SerialNumber: syz
[  926.133915][ T1158] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  926.149877][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3
[  926.197721][T16206] hsr_slave_0: entered promiscuous mode
[  926.201917][T16206] hsr_slave_1: entered promiscuous mode
[  926.211928][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  926.274661][   T40] audit: type=1326 audit(1779329768.625:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.3.2581" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703ef7c code=0x0
[  926.295348][ T5839] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  926.329409][ T5839] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  926.337375][ T5839] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  926.343729][ T5839] usb 7-1: media controller created
[  926.356961][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  926.462214][T16275] netlink: 'syz.3.2581': attribute type 1 has an invalid length.
[  926.465935][T16275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2581'.
[  926.588891][ T5839] zl10353_read_register: readreg error (reg=127, ret==-110)
[  926.608900][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4
[  926.630639][ T5839] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  926.638941][ T5839] usb 7-1: USB disconnect, device number 12
[  927.140117][T16296] netlink: 'syz.2.2582': attribute type 1 has an invalid length.
[  927.191406][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2582'.
[  927.302402][T16296] 8021q: adding VLAN 0 to HW filter on device bond5
[  927.340652][T16302] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.684370][ T5752] Bluetooth: hci1: command tx timeout
[  927.907075][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  927.926827][T16297] syz.2.2582 (16297): drop_caches: 2
[  928.037331][T16302] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.374984][T16302] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.472927][T16326] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.563660][T16302] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.598637][T16326] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.698233][T16206] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  928.719434][T16206] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  928.732065][T16326] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.830202][T16206] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  928.849005][T16206] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  928.869099][T16206] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  928.879170][T16206] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  928.882571][ T1189] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  928.915747][T16206] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  928.924363][T16206] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  928.927939][ T1189] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  928.960579][T16326] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.021791][ T1189] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  929.049988][   T43] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  929.251743][T16340] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  929.253532][   T43] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  929.259996][   T43] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  929.263407][T16340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  929.337693][T16341] random: crng reseeded on system resumption
[  929.430751][   T43] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  929.606478][   T43] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  929.743671][T16206] 8021q: adding VLAN 0 to HW filter on device bond0
[  929.806739][T16206] 8021q: adding VLAN 0 to HW filter on device team0
[  929.890580][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.894027][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  929.933147][T16351] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.040568][  T228] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.044472][  T228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  930.089184][T16351] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.254378][T16351] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.456242][T16351] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.026569][T16206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  931.084716][T16206] veth0_vlan: entered promiscuous mode
[  931.104231][T16206] veth1_vlan: entered promiscuous mode
[  931.142778][T16206] veth0_macvtap: entered promiscuous mode
[  931.152213][T16206] veth1_macvtap: entered promiscuous mode
[  931.170512][T16206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  931.182291][T16206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  931.195098][   T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  931.203540][   T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  931.208537][   T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  931.215444][   T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  931.362449][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  931.367240][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  931.398306][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  931.402640][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  931.412753][T16374] fuse: Bad value for 'fd'
[  932.833396][   T40] audit: type=1326 audit(1779329775.065:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16383 comm="syz.3.2591" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703ef7c code=0x0
[  932.865201][   T40] audit: type=1326 audit(1779329775.215:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16388 comm="syz.0.2592" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04f7c code=0x0
[  932.871427][T16386] netlink: 'syz.3.2591': attribute type 1 has an invalid length.
[  932.876506][T16386] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2591'.
[  933.421591][ T1189] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  933.431193][ T1189] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  933.443147][ T1189] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  933.455706][ T1189] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  936.566405][T16425] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  936.571326][T16425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  936.653570][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  936.655648][T16426] random: crng reseeded on system resumption
[  936.784196][T16426] batman_adv: batadv0: Adding interface: macsec1
[  936.787141][T16426] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  936.798003][T16426] batman_adv: batadv0: Interface activated: macsec1
[  937.079836][   T40] audit: type=1326 audit(1779329779.425:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.2.2603" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x0
[  937.233369][   T40] audit: type=1326 audit(1779329779.575:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16427 comm="syz.1.2602" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f16f7c code=0x0
[  937.422102][T16434] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[  937.425154][T16434] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2602'.
[  938.101609][T16442] netlink: 'syz.2.2606': attribute type 1 has an invalid length.
[  938.138810][T16442] 8021q: adding VLAN 0 to HW filter on device bond6
[  938.173354][T16442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2606'.
[  938.284942][T16449] syz.2.2606 (16449): drop_caches: 2
[  940.097962][T16466] fuse: Bad value for 'fd'
[  940.156542][T16462] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  940.160953][T16462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2608'.
[  940.221999][T16468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  940.237452][T16468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2610'.
[  941.746821][   T40] audit: type=1326 audit(1779329784.095:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.2.2614" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x0
[  941.916758][T16487] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.082163][T16487] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.245509][T16487] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.310824][T16487] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.448689][ T1204] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  942.479756][ T1158] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  942.504493][ T1158] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  942.529400][  T228] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  943.073109][T16499] netlink: 'syz.3.2617': attribute type 4 has an invalid length.
[  943.119040][ T5752] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  943.207830][T16499] Bluetooth: hci3: Frame reassembly failed (-84)
[  943.233698][ T1158] Bluetooth: hci3: Frame reassembly failed (-84)
[  943.896496][T16509] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  943.909070][T16509] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2619'.
[  944.763823][   T40] audit: type=1326 audit(1779329787.115:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16524 comm="syz.2.2624" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93f7c code=0x0
[  945.274183][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  945.274203][ T5752] Bluetooth: hci3: command 0x1003 tx timeout
[  946.249020][T16539] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  946.305157][T16539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  946.559513][T16540] random: crng reseeded on system resumption
[  948.506493][T16567] netlink: 'syz.2.2634': attribute type 1 has an invalid length.
[  948.562243][T16570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2634'.
[  948.626368][T16567] 8021q: adding VLAN 0 to HW filter on device bond7
[  948.852216][   T40] audit: type=1326 audit(1779329791.195:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16573 comm="syz.3.2635" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x0
[  948.950159][T16567] syz.2.2634 (16567): drop_caches: 2
[  949.945195][T16591] netlink: 'syz.1.2639': attribute type 1 has an invalid length.
[  949.996161][T16595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2639'.
[  950.033837][T16591] 8021q: adding VLAN 0 to HW filter on device bond2
[  950.140801][T16592] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  950.163525][T16592] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2638'.
[  950.281956][T16595] syz.1.2639 (16595): drop_caches: 2
[  950.494424][T16601] overlayfs: failed to resolve './file0': -2
[  951.213145][T16612] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  951.219581][T16612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  951.227474][T16611] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2644'.
[  951.252663][T16611] tipc: Started in network mode
[  951.255827][T16611] tipc: Node identity f6d0f06401be, cluster identity 4711
[  951.262542][T16611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  951.283484][T16611] syzkaller0: entered promiscuous mode
[  951.285859][T16611] syzkaller0: entered allmulticast mode
[  951.315789][T16614] random: crng reseeded on system resumption
[  951.340690][T16611] tipc: Resetting bearer <eth:syzkaller0>
[  951.449223][T16610] tipc: Resetting bearer <eth:syzkaller0>
[  951.509549][T16610] tipc: Disabling bearer <eth:syzkaller0>
[  952.176988][   T40] audit: type=1326 audit(1779329794.525:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16618 comm="syz.3.2646" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x0
[  952.224256][T16617] netlink: 'syz.1.2645': attribute type 1 has an invalid length.
[  952.284326][T16623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2645'.
[  952.303579][T16617] 8021q: adding VLAN 0 to HW filter on device bond3
[  952.421461][T16623] syz.1.2645 (16623): drop_caches: 2
[  953.546053][T16634] netlink: 'syz.3.2649': attribute type 1 has an invalid length.
[  953.577107][T16634] 8021q: adding VLAN 0 to HW filter on device bond2
[  953.672669][T16641] syz.3.2649 (16641): drop_caches: 2
[  957.018635][T16665] FAULT_INJECTION: forcing a failure.
[  957.018635][T16665] name failslab, interval 1, probability 0, space 0, times 1
[  957.024484][T16665] CPU: 3 UID: 0 PID: 16665 Comm: syz.3.2653 Not tainted syzkaller #0 PREEMPT(full) 
[  957.024503][T16665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  957.024511][T16665] Call Trace:
[  957.024536][T16665]  <TASK>
[  957.024541][T16665]  dump_stack_lvl+0x100/0x190
[  957.024573][T16665]  should_fail_ex.cold+0x5/0xa
[  957.024593][T16665]  should_failslab+0xc2/0x120
[  957.024612][T16665]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  957.024641][T16665]  ? __alloc_skb+0x140/0x710
[  957.024674][T16665]  __alloc_skb+0x140/0x710
[  957.024693][T16665]  ? __pfx___alloc_skb+0x10/0x10
[  957.024708][T16665]  ? kfree_skbmem+0x15d/0x210
[  957.024724][T16665]  ? kmem_cache_free+0x127/0x6c0
[  957.024739][T16665]  ? skb_release_data+0x6ca/0x8e0
[  957.024754][T16665]  tcp_stream_alloc_skb+0x34/0x660
[  957.024768][T16665]  tcp_write_xmit+0x732/0x83d0
[  957.024795][T16665]  __tcp_push_pending_frames+0xaf/0x3b0
[  957.024812][T16665]  tcp_rcv_established+0xbe9/0x3910
[  957.024829][T16665]  ? find_held_lock+0x2b/0x80
[  957.024845][T16665]  ? __pfx_tcp_rcv_established+0x10/0x10
[  957.024862][T16665]  tcp_v4_do_rcv+0xbb6/0x1260
[  957.024876][T16665]  ? __pfx_tcp_v4_do_rcv+0x10/0x10
[  957.024888][T16665]  __release_sock+0x35a/0x440
[  957.024906][T16665]  release_sock+0x1e5/0x280
[  957.024919][T16665]  sk_wait_data+0x1aa/0x510
[  957.024935][T16665]  ? __pfx_sk_wait_data+0x10/0x10
[  957.024949][T16665]  ? __pfx_woken_wake_function+0x10/0x10
[  957.024965][T16665]  ? tcp_send_ack+0x89/0xa0
[  957.024983][T16665]  tcp_recvmsg_locked+0xb72/0x2a20
[  957.025002][T16665]  ? __pfx_tcp_recvmsg_locked+0x10/0x10
[  957.025018][T16665]  ? __local_bh_enable_ip+0x9e/0x120
[  957.025036][T16665]  tcp_recvmsg+0x141/0x630
[  957.025050][T16665]  ? __pfx_tcp_recvmsg+0x10/0x10
[  957.025065][T16665]  ? __fget_files+0x215/0x3d0
[  957.025079][T16665]  ? __fget_files+0x215/0x3d0
[  957.025094][T16665]  ? __pfx_tcp_recvmsg+0x10/0x10
[  957.025107][T16665]  inet_recvmsg+0xd5/0x4c0
[  957.025119][T16665]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  957.025135][T16665]  ? __pfx_inet_recvmsg+0x10/0x10
[  957.025148][T16665]  sock_recvmsg+0x187/0x1f0
[  957.025165][T16665]  __sys_recvfrom+0x200/0x300
[  957.025179][T16665]  ? __pfx___sys_recvfrom+0x10/0x10
[  957.025195][T16665]  ? __fget_files+0x215/0x3d0
[  957.025208][T16665]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  957.025234][T16665]  ? fput+0x79/0x100
[  957.025250][T16665]  ? ksys_write+0x1ac/0x250
[  957.025264][T16665]  __ia32_compat_sys_recvfrom+0xe4/0x1c0
[  957.025281][T16665]  ? __do_fast_syscall_32+0x98/0x950
[  957.025292][T16665]  ? lockdep_hardirqs_on+0x78/0x100
[  957.025340][T16665]  __do_fast_syscall_32+0xe7/0x950
[  957.025351][T16665]  ? lockdep_hardirqs_on+0x78/0x100
[  957.025369][T16665]  do_fast_syscall_32+0x32/0x70
[  957.025381][T16665]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  957.025397][T16665] RIP: 0023:0xf703ef7c
[  957.025407][T16665] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  957.025418][T16665] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000173
[  957.025430][T16665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  957.025437][T16665] RDX: 00000000fffffd0b RSI: 00000000c9100120 RDI: 0000000000000000
[  957.025446][T16665] RBP: 00000000fffffd25 R08: 0000000000000000 R09: 0000000000000000
[  957.025453][T16665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  957.025459][T16665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  957.025473][T16665]  </TASK>
[  957.766075][T16699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2655'.
[  957.834434][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'.
[  957.912090][T16705] fuse: Bad value for 'fd'
[  958.915992][T16715] netlink: 'syz.0.2660': attribute type 1 has an invalid length.
[  958.951523][T16715] 8021q: adding VLAN 0 to HW filter on device bond1
[  958.975630][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2660'.
[  959.083154][T16720] syz.0.2660 (16720): drop_caches: 2
[  960.143416][ T3264] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  960.318401][ T3264] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  960.321965][ T3264] usb 7-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  960.325662][ T3264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.372048][ T3264] usb 7-1: config 0 descriptor??
[  960.386925][ T3264] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  960.632211][T16726] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2661'.
[  960.636514][ T3264] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  961.518939][ T3264] usb 8-1: Using ep0 maxpacket: 16
[  962.130186][T16739] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.131295][ T3264] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  962.441528][ T3264] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.446034][ T3264] usb 8-1: Product: syz
[  962.447431][ T3264] usb 8-1: Manufacturer: syz
[  962.449039][ T3264] usb 8-1: SerialNumber: syz
[  962.478685][  T843] usb 7-1: USB disconnect, device number 13
[  962.640677][T16739] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.768385][ T3264] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  962.784614][ T3264] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  962.789468][ T3264] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  962.793554][ T3264] usb 8-1: media controller created
[  962.804428][ T3264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  962.820138][ T3264] zl10353_read_register: readreg error (reg=127, ret==-71)
[  962.820919][T16739] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.849890][ T3264] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  962.854783][ T3264] usb 8-1: USB disconnect, device number 7
[  962.903599][T16739] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.026795][ T6105] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.038220][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.056206][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.068563][ T1158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  963.596535][T16757] netlink: 'syz.3.2670': attribute type 1 has an invalid length.
[  963.620035][T16757] 8021q: adding VLAN 0 to HW filter on device bond3
[  963.751070][T16762] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  963.802107][T16763] syz.3.2670 (16763): drop_caches: 2
[  963.898352][T16755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'.
[  966.461082][T16778] x_tables: ip_tables: icmp match: only valid for protocol 1
[  967.544981][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  967.611310][T16780] netlink: 'syz.1.2675': attribute type 1 has an invalid length.
[  967.636612][T16780] 8021q: adding VLAN 0 to HW filter on device bond4
[  967.801240][T16782] syz.1.2675 (16782): drop_caches: 2
[  968.693316][ T3264] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  968.939006][T16792] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.061580][T16792] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.253570][T16792] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.383440][ T3264] usb 7-1: Using ep0 maxpacket: 16
[  969.464284][ T3264] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  969.477538][ T3264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.483677][ T3264] usb 7-1: Product: syz
[  969.485158][ T3264] usb 7-1: Manufacturer: syz
[  969.486807][ T3264] usb 7-1: SerialNumber: syz
[  969.488496][T16792] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.523359][  T843] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  969.688625][  T843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  969.693183][  T843] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  969.776816][ T3264] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  969.804363][ T3264] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  969.817095][ T3264] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  969.824514][ T3264] usb 7-1: media controller created
[  969.845448][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.850778][ T3264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  969.873619][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  969.883056][ T3264] zl10353_read_register: readreg error (reg=127, ret==-71)
[  969.886857][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.904732][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  970.137367][ T3264] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  970.152144][ T3264] usb 7-1: USB disconnect, device number 14
[  970.194348][  T843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.208737][  T843] usb 6-1: config 0 descriptor??
[  971.625784][T16816] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.911657][T16816] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.919577][  T843] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  971.958511][T16818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  971.976430][T16818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2684'.
[  972.179962][ T3264] usb 6-1: USB disconnect, device number 11
[  972.188429][T16816] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.449086][T16816] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.548713][   T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  972.560628][   T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  972.568414][   T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  972.576795][   T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  973.131391][T16833] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.236017][T16833] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.318794][T16833] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.426529][T16833] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  973.659843][T16841] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  973.681116][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2688'.
[  975.874383][T16867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.352902][T16867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.470754][T16867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.021778][T16867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.187278][ T1189] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  977.199801][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  977.209174][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  977.224623][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  977.270203][T16875] fuse: Bad value for 'fd'
[  977.477840][T16880] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.546371][T16880] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.619358][T16880] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.681885][T16880] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.764981][  T228] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  977.779349][  T228] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  977.827509][ T9265] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  977.931438][ T1158] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  977.947538][ T1158] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  977.973691][ T9265] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  977.980352][ T9265] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  977.997261][ T1158] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  978.064946][T16888] gfs2: gfs2 mount does not exist
[  978.339317][T16894] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  978.339405][T16894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  978.506203][T16897] random: crng reseeded on system resumption
[  978.624248][ T5895] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  978.803520][ T5895] usb 5-1: Using ep0 maxpacket: 8
[  978.806998][ T5895] usb 5-1: config 0 has no interfaces?
[  978.811506][ T5895] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  978.814632][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.817473][ T5895] usb 5-1: Product: syz
[  978.818911][ T5895] usb 5-1: Manufacturer: syz
[  978.820560][ T5895] usb 5-1: SerialNumber: syz
[  978.830369][ T5895] usb 5-1: config 0 descriptor??
[  979.061704][T16886] 9p: Bad value for 'rfdno'
[  979.068564][T10569] usb 5-1: USB disconnect, device number 5
[  979.507046][T16904] syzkaller0: entered promiscuous mode
[  979.509828][T16904] syzkaller0: entered allmulticast mode
[  979.651211][T16904] tipc: Started in network mode
[  979.653510][T16904] tipc: Node identity ba043a3a40f5, cluster identity 4711
[  979.658860][T16904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  979.689019][ T5752] Bluetooth: hci0: command 0x0406 tx timeout
[  980.338468][T16903] tipc: Resetting bearer <eth:syzkaller0>
[  980.402021][T16903] tipc: Disabling bearer <eth:syzkaller0>
[  980.608174][T16915] overlayfs: failed to resolve './file0': -2
[  981.166611][T16934] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  981.172467][T16934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  981.238853][T16936] random: crng reseeded on system resumption
[  984.696000][T16976] netlink: 'syz.1.2718': attribute type 1 has an invalid length.
[  984.764426][T16977] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.953044][T16976] 8021q: adding VLAN 0 to HW filter on device bond5
[  984.971478][T16977] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.121263][T16977] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.173647][   T40] audit: type=1326 audit(1779329827.405:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16981 comm="syz.0.2720" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04f7c code=0x0
[  985.204102][T16976] syz.1.2718 (16976): drop_caches: 2
[  985.361809][T16990] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  985.375024][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2721'.
[  985.829974][T16977] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.958514][  T228] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  985.976695][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  985.991399][  T228] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  986.006497][  T228] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  986.577931][T17006] Bluetooth: MGMT ver 1.23
[  986.875168][T17011] netlink: 'syz.1.2728': attribute type 1 has an invalid length.
[  986.903861][T17011] 8021q: adding VLAN 0 to HW filter on device bond6
[  986.925592][T17011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2728'.
[  987.031709][T17013] syz.1.2728 (17013): drop_caches: 2
[  988.020746][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2732'.
[  988.297805][T17030] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  988.713517][ T5752] Bluetooth: hci0: command 0x0406 tx timeout
[  988.716340][ T5749] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  989.228986][T17042] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  989.254130][T17042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2736'.
[  989.923312][ T5749] Bluetooth: hci2: command 0x0406 tx timeout
[  990.285252][T17050] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  990.355548][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'.
[  991.291370][T17071] netlink: 'syz.0.2743': attribute type 1 has an invalid length.
[  991.317430][T17071] 8021q: adding VLAN 0 to HW filter on device bond2
[  991.656210][T17077] syz.0.2743 (17077): drop_caches: 2
[  992.686932][T17105] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.805633][T17105] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  992.882101][T17105] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.284966][T16371] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  993.413604][T16371] usb 8-1: device descriptor read/64, error -71
[  993.486380][T17118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  993.495342][T17118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  993.520084][T17105] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  993.623707][ T1204] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  993.642651][ T1204] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  993.653983][T16371] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  993.682106][ T1204] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  993.705735][  T228] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  993.784533][T16371] usb 8-1: device descriptor read/64, error -71
[  993.906701][T16371] usb usb8-port1: attempt power cycle
[  994.263837][T16371] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  994.285925][T16371] usb 8-1: device descriptor read/8, error -71
[  994.543877][T16371] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  994.566608][T16371] usb 8-1: device descriptor read/8, error -71
[  994.673602][T16371] usb usb8-port1: unable to enumerate USB device
[  994.730376][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'.
[  995.434187][T14664] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  995.437477][T14664] Bluetooth: hci0: command 0x0406 tx timeout
[  996.774886][T17144] binder_alloc: 17143: binder_alloc_buf, no vma
[  996.839909][T17146] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2757'.
[  998.090368][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  999.577075][T17185] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.199179][T17185] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.421454][T17185] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.547170][T17185] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.688891][   T43] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.715009][   T43] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.745242][   T43] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.759482][   T43] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.832534][   T40] audit: type=1326 audit(1779329843.175:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.0.2774" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04f7c code=0x0
[ 1001.113833][T17230] netlink: 'syz.1.2776': attribute type 1 has an invalid length.
[ 1001.129793][T17230] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1001.136197][T17230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2776'.
[ 1001.231663][T17232] syz.1.2776 (17232): drop_caches: 2
[ 1002.977493][ T5895] IPVS: starting estimator thread 0...
[ 1002.985119][T17249] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1002.987725][T17249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1003.049185][T17253] random: crng reseeded on system resumption
[ 1003.073451][T17250] IPVS: using max 43 ests per chain, 103200 per kthread
[ 1003.257131][T17256] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1004.785462][   T40] audit: type=1326 audit(1779329847.125:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.2785" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04f7c code=0x0
[ 1005.684446][T17304] netlink: 'syz.2.2789': attribute type 1 has an invalid length.
[ 1005.694225][T17305] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1005.697902][T17305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1005.720007][T17304] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1005.729676][T17304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2789'.
[ 1005.757736][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1005.783477][T17308] random: crng reseeded on system resumption
[ 1006.153743][T17313] syz.2.2789 (17313): drop_caches: 2
[ 1006.731466][T17316] syzkaller0: entered promiscuous mode
[ 1006.734466][T17316] syzkaller0: entered allmulticast mode
[ 1007.761778][T17323] netlink: 'syz.0.2792': attribute type 1 has an invalid length.
[ 1007.854303][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2792'.
[ 1007.862704][T17323] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1008.025933][T17325] syz.0.2792 (17325): drop_caches: 2
[ 1009.628629][T17339] netlink: 'syz.0.2796': attribute type 1 has an invalid length.
[ 1009.652153][T17339] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1009.672713][T17339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2796'.
[ 1009.805770][T17341] syz.0.2796 (17341): drop_caches: 2
[ 1010.727909][T17348] overlayfs: failed to resolve './file0': -2
[ 1010.892884][T17351] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.972988][T17351] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.056582][T17351] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.193299][T17351] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.489319][ T6105] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.532188][ T6105] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.561559][T17355] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1011.564925][ T1158] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.583324][T17355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1011.608224][ T6105] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.659585][T17356] random: crng reseeded on system resumption
[ 1011.867499][T17358] netlink: 4975 bytes leftover after parsing attributes in process `syz.0.2801'.
[ 1011.870848][T17358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1012.161200][T17348] 9p: Bad value for 'rfdno'
[ 1012.867200][T17375] gfs2: gfs2 mount does not exist
[ 1013.274034][T10569] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1013.423953][T10569] usb 7-1: device descriptor read/64, error -71
[ 1013.694761][T10569] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1013.853949][T10569] usb 7-1: device descriptor read/64, error -71
[ 1013.975748][T10569] usb usb7-port1: attempt power cycle
[ 1014.333609][T10569] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1014.370836][T10569] usb 7-1: device descriptor read/8, error -71
[ 1014.490472][T17390] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1014.623436][T10569] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1014.641982][T17395] overlayfs: failed to resolve './file0': -2
[ 1014.645934][T10569] usb 7-1: device descriptor read/8, error -71
[ 1014.749473][T17397] tipc: Can't bind to reserved service type 0
[ 1014.763571][T10569] usb usb7-port1: unable to enumerate USB device
[ 1016.390597][T17406] gfs2: gfs2 mount does not exist
[ 1016.406126][T17395] 9pnet_fd: Insufficient options for proto=fd
[ 1017.399570][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2816'.
[ 1017.482097][T17420] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ŘČĚONEOUT'
[ 1017.491031][T17420] ALSA: mixer_oss: invalid OSS volume 'flags:'
[ 1017.496801][T17420] ALSA: mixer_oss: invalid OSS volume 'mnt_id:'
[ 1017.500312][T17420] ALSA: mixer_oss: invalid OSS volume 'ino:'
[ 1017.510826][T17420] ALSA: mixer_oss: invalid OSS volume ''
[ 1018.719382][T17434] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input64
[ 1018.777832][T17430] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1019.435534][T17430] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1019.529732][T17430] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1019.644973][T17430] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1019.823627][ T1158] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.845129][ T1158] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.870894][T17443] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1019.876961][ T1158] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.880171][T17443] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1019.905283][ T9265] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.987180][T17444] random: crng reseeded on system resumption
[ 1020.391282][T17449] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1020.415438][T17449] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2824'.
[ 1020.436902][T17450] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1021.262946][T17463] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1021.265885][T17463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1021.335259][T17465] random: crng reseeded on system resumption
[ 1021.964657][T17471] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1022.088514][T17471] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1022.140259][T17474] gfs2: gfs2 mount does not exist
[ 1022.901846][T17489] Bluetooth: MGMT ver 1.23
[ 1022.952964][T17491] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[ 1022.973864][T17491] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1022.990898][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2837'.
[ 1023.087251][T17494] syz.0.2837 (17494): drop_caches: 2
[ 1023.469977][T17471] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.571263][T17493] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.653556][T17471] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.821538][T17493] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.828128][ T1158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.831348][ T1158] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.841389][ T1158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.851587][ T1158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1023.884659][T17493] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1023.937917][T17493] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1024.762843][ T1158] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.775307][ T1158] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.798731][ T6105] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.825201][ T6105] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.001992][T17515] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1025.006206][T17515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1025.070572][T17516] random: crng reseeded on system resumption
[ 1027.836025][T17543] fuse: Bad value for 'fd'
[ 1028.712414][   T40] audit: type=1326 audit(1779329871.055:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17553 comm="syz.1.2853" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16f7c code=0x0
[ 1030.294718][   T40] audit: type=1326 audit(1779329872.645:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x7ffc0000
[ 1030.321938][   T40] audit: type=1326 audit(1779329872.655:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x7ffc0000
[ 1030.342477][   T40] audit: type=1326 audit(1779329872.655:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703ef7c code=0x7ffc0000
[ 1030.366499][   T40] audit: type=1326 audit(1779329872.655:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x7ffc0000
[ 1030.382698][   T40] audit: type=1326 audit(1779329872.655:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef7c code=0x7ffc0000
[ 1030.398850][   T40] audit: type=1326 audit(1779329872.665:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703ef7c code=0x7ffc0000
[ 1030.418239][   T40] audit: type=1326 audit(1779329872.665:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71761ab code=0x7ffc0000
[ 1030.451584][   T40] audit: type=1326 audit(1779329872.665:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71761ab code=0x7ffc0000
[ 1030.484119][   T40] audit: type=1326 audit(1779329872.675:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.2856" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71761ab code=0x7ffc0000
[ 1031.511557][T17618] fuse: Bad value for 'fd'
[ 1031.951423][T17622] netlink: 'syz.3.2859': attribute type 1 has an invalid length.
[ 1031.979664][T17622] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1031.990736][T17622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2859'.
[ 1032.096152][T17624] syz.3.2859 (17624): drop_caches: 2
[ 1033.053655][T17633] geneve2: entered promiscuous mode
[ 1034.273754][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'.
[ 1034.497862][T17653] netlink: 'syz.3.2867': attribute type 1 has an invalid length.
[ 1034.561370][T17653] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1034.591531][T17653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2867'.
[ 1035.924054][T17660] syz.3.2867 (17660): drop_caches: 2
[ 1037.871051][T17683] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.035610][T17683] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.160128][T17683] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.448164][T17683] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.053916][   T43] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.062205][   T43] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.072280][   T43] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.081038][   T43] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1039.215716][T17696] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.290284][T17696] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.348522][T17696] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.421680][T17696] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.123668][T17717] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1041.126624][T17717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1041.188921][T17719] random: crng reseeded on system resumption
[ 1041.794944][ T5749] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1041.801282][ T5749] CPU: 2 UID: 0 PID: 5749 Comm: kworker/u33:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1041.801323][ T5749] Tainted: [L]=SOFTLOCKUP
[ 1041.801333][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1041.801376][ T5749] Workqueue: hci1 hci_rx_work
[ 1041.801523][ T5749] Call Trace:
[ 1041.801562][ T5749]  <TASK>
[ 1041.801574][ T5749]  dump_stack_lvl+0x100/0x190
[ 1041.801630][ T5749]  sysfs_warn_dup.cold+0x1c/0x28
[ 1041.801666][ T5749]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1041.801718][ T5749]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1041.801740][ T5749]  ? find_held_lock+0x2b/0x80
[ 1041.801803][ T5749]  ? kobject_add_internal+0x25f/0x930
[ 1041.801830][ T5749]  ? kobject_add_internal+0x25f/0x930
[ 1041.801894][ T5749]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1041.801926][ T5749]  kobject_add_internal+0x2c8/0x930
[ 1041.801996][ T5749]  kobject_add+0x16a/0x1e0
[ 1041.802026][ T5749]  ? __pfx_kobject_add+0x10/0x10
[ 1041.802084][ T5749]  ? class_to_subsys+0x10f/0x150
[ 1041.802182][ T5749]  ? kobject_put+0xb9/0x640
[ 1041.802233][ T5749]  ? _raw_spin_unlock+0x28/0x50
[ 1041.802312][ T5749]  device_add+0x294/0x1950
[ 1041.802346][ T5749]  ? __pfx_dev_set_name+0x10/0x10
[ 1041.802425][ T5749]  ? __pfx_device_add+0x10/0x10
[ 1041.802458][ T5749]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1041.802525][ T5749]  hci_conn_add_sysfs+0x1a3/0x260
[ 1041.802583][ T5749]  le_conn_complete_evt+0x11eb/0x1f60
[ 1041.802646][ T5749]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1041.802686][ T5749]  hci_le_enh_conn_complete_evt+0x23d/0x3b0
[ 1041.802745][ T5749]  ? skb_pull_data+0x15f/0x1e0
[ 1041.802805][ T5749]  hci_le_meta_evt+0x34a/0x5f0
[ 1041.802843][ T5749]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[ 1041.802907][ T5749]  hci_event_packet+0x51c/0xcd0
[ 1041.802965][ T5749]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1041.803003][ T5749]  ? __pfx_hci_event_packet+0x10/0x10
[ 1041.803062][ T5749]  ? kcov_remote_start+0x374/0x660
[ 1041.803118][ T5749]  ? lockdep_hardirqs_on+0x78/0x100
[ 1041.803161][ T5749]  hci_rx_work+0x451/0xfc0
[ 1041.803251][ T5749]  process_one_work+0xa0e/0x1980
[ 1041.803315][ T5749]  ? __pfx_process_one_work+0x10/0x10
[ 1041.803347][ T5749]  ? __pfx_hci_rx_work+0x10/0x10
[ 1041.803427][ T5749]  worker_thread+0x5ef/0xe50
[ 1041.803461][ T5749]  ? __pfx_worker_thread+0x10/0x10
[ 1041.803485][ T5749]  ? kthread+0x13a/0x450
[ 1041.803529][ T5749]  ? __pfx_worker_thread+0x10/0x10
[ 1041.803551][ T5749]  kthread+0x370/0x450
[ 1041.803593][ T5749]  ? __pfx_kthread+0x10/0x10
[ 1041.803617][ T5749]  ret_from_fork+0x72b/0xd50
[ 1041.803645][ T5749]  ? __pfx_ret_from_fork+0x10/0x10
[ 1041.803692][ T5749]  ? native_load_gs_index+0x1e/0xc0
[ 1041.803723][ T5749]  ? __switch_to+0x800/0x1100
[ 1041.803773][ T5749]  ? __pfx_kthread+0x10/0x10
[ 1041.803794][ T5749]  ret_from_fork_asm+0x1a/0x30
[ 1041.803879][ T5749]  </TASK>
[ 1041.924571][    C2] hpet_rtc_timer_reinit: 18 callbacks suppressed
[ 1041.924590][    C2] hpet: Lost 7 RTC interrupts
[ 1041.930662][ T5749] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1041.937772][ T5749] Bluetooth: hci1: failed to register connection device
[ 1041.950907][T17736] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1041.963515][T17736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1042.025670][T17737] random: crng reseeded on system resumption
[ 1042.140648][T17740] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.241270][T17740] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.314454][T17740] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.389428][T17740] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.507895][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.526489][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.549260][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.571359][ T6105] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1043.300195][T17760] gfs2: gfs2 mount does not exist
[ 1043.650433][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1043.687273][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1043.797603][ T6105] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1043.857591][T17767] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1043.874954][T17772] netlink: 'syz.0.2889': attribute type 1 has an invalid length.
[ 1043.880255][T17767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2888'.
[ 1043.942214][T17775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2889'.
[ 1044.004799][ T5749] Bluetooth: hci1: command 0x2016 tx timeout
[ 1044.106680][T17772] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1044.121706][ T1158] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1044.675122][T17790] netlink: 4975 bytes leftover after parsing attributes in process `syz.2.2890'.
[ 1044.679060][T17790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1044.792517][T17794] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1044.795504][T17794] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1044.805087][T17772] syz.0.2889 (17772): drop_caches: 2
[ 1044.869612][T17797] random: crng reseeded on system resumption
[ 1044.950152][T17799] geneve2: entered promiscuous mode
[ 1045.069174][T17802] netlink: 'syz.0.2894': attribute type 1 has an invalid length.
[ 1045.126442][T17803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2894'.
[ 1045.155596][T17802] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1045.255639][T17803] syz.0.2894 (17803): drop_caches: 2
[ 1046.073566][ T5749] Bluetooth: hci1: command 0x2016 tx timeout
[ 1047.273412][T16371] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[ 1047.454976][T16371] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1047.457462][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1047.460938][T16371] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1047.473290][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1047.477239][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1047.482461][T16371] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1047.485155][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1047.489338][T16371] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1047.498407][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1047.502966][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1047.507528][T16371] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1047.510614][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1047.514434][T16371] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1047.518091][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1047.521522][T16371] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1047.528976][T16371] usb 6-1: string descriptor 0 read error: -22
[ 1047.532772][T16371] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1047.535755][T16371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.546611][T16371] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1047.979182][ T5748] usb 6-1: USB disconnect, device number 12
[ 1048.182309][T17835] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.373397][  T843] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1048.452675][T17835] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.559111][T17835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.622744][T17835] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.712525][ T6105] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.723431][  T843] usb 5-1: Using ep0 maxpacket: 16
[ 1048.725920][ T1158] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.731586][ T6105] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.732997][  T843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1048.739814][  T843] usb 5-1: config 0 has no interfaces?
[ 1048.746118][ T6105] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.746233][  T843] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1048.753407][  T843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.757335][  T843] usb 5-1: Product: syz
[ 1048.759263][  T843] usb 5-1: Manufacturer: syz
[ 1048.762012][  T843] usb 5-1: SerialNumber: syz
[ 1048.767532][  T843] usb 5-1: config 0 descriptor??
[ 1049.263591][T16371] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1049.443323][T16371] usb 7-1: Using ep0 maxpacket: 8
[ 1049.447283][T16371] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1049.453534][T16371] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1049.460114][T16371] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1049.466834][T16371] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1049.478372][T16371] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1049.485842][T16371] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.707796][T16371] usb 7-1: GET_CAPABILITIES returned 0
[ 1049.707847][T16371] usbtmc 7-1:16.0: can't read capabilities
[ 1049.962475][T16371] usb 7-1: USB disconnect, device number 19
[ 1051.051826][ T3264] usb 5-1: USB disconnect, device number 6
[ 1051.083547][T10569] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1051.258372][T10569] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1051.266472][T10569] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1051.275322][T10569] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1051.284098][T10569] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.290176][T10569] usb 8-1: config 0 descriptor??
[ 1051.608513][T17871] netlink: 'syz.1.2913': attribute type 1 has an invalid length.
[ 1051.636932][T17871] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1051.661871][T17871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2913'.
[ 1051.712770][T17854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1051.727428][T17854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1052.051339][T17876] syz.1.2913 (17876): drop_caches: 2
[ 1052.133803][T10569] usbhid 8-1:0.0: can't add hid device: -71
[ 1052.136327][T10569] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1052.142020][T17875] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.148826][T10569] usb 8-1: USB disconnect, device number 12
[ 1052.246779][    C2] hpet: Lost 1 RTC interrupts
[ 1052.342480][T17875] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.890138][T17875] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.952379][T17875] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.049285][  T166] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1053.086197][  T166] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1053.129330][T10342] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1053.152186][T10342] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1053.308461][T17893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2918'.
[ 1053.359915][T17893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2918'.
[ 1053.365015][T17893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2918'.
[ 1053.684962][T17903] netlink: 'syz.3.2922': attribute type 1 has an invalid length.
[ 1053.739488][T17904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2922'.
[ 1053.750609][T17907] 9p: Bad value for 'rfdno'
[ 1054.044167][T17898] bond9 (unregistering): Released all slaves
[ 1054.158779][T17908] syz.3.2922 (17908): drop_caches: 2
[ 1054.159210][T17903] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1054.446765][T17922] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.543894][T17922] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.689284][T17922] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.737490][T17928] fuse: Bad value for 'fd'
[ 1054.785325][T17922] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.863454][T17931] fuse: Bad value for 'fd'
[ 1054.929221][T17930] gfs2: gfs2 mount does not exist
[ 1055.675511][T10342] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.838799][T17934] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.920166][ T1204] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1055.953553][T17934] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.005369][ T1158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.073933][   T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.135297][T17934] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.292097][T17934] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.648759][   T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.666630][ T6105] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.759207][ T6105] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.812606][ T6105] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1057.216957][T17966] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1057.219658][T17966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1057.326763][T17967] random: crng reseeded on system resumption
[ 1058.248513][T17974] netlink: 'syz.3.2936': attribute type 1 has an invalid length.
[ 1058.303595][T17975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2936'.
[ 1058.494938][T17974] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1058.630997][T17978] syz.3.2936 (17978): drop_caches: 2
[ 1059.348741][T17985] fuse: Bad value for 'fd'
[ 1059.427097][T17987] comedi comedi1: adq12b: I/O base address or length out of range
[ 1059.517392][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.770364][T17988] fuse: Unknown parameter 'gr@_
[ 1059.770364][T17988] Až*§+('
[ 1059.793350][T15675] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1059.960902][T15675] usb 7-1: Using ep0 maxpacket: 16
[ 1059.976380][T15675] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1059.982954][T15675] usb 7-1: config 0 has no interfaces?
[ 1059.988491][T15675] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1059.992860][T15675] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1059.997586][T15675] usb 7-1: Product: syz
[ 1059.999507][T15675] usb 7-1: Manufacturer: syz
[ 1060.001159][T15675] usb 7-1: SerialNumber: syz
[ 1060.006303][T15675] usb 7-1: config 0 descriptor??
[ 1060.028716][   T40] audit: type=1326 audit(1779329902.375:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17991 comm="syz.0.2941" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f04f7c code=0x0
[ 1060.322833][T17998] netlink: 4975 bytes leftover after parsing attributes in process `syz.1.2943'.
[ 1060.327252][T17998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1060.944372][T18007] gfs2: gfs2 mount does not exist
[ 1061.064008][T18010] overlayfs: failed to resolve './file0': -2
[ 1061.077982][T18010] 9p: Bad value for 'rfdno'
[ 1062.147597][T18020] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1062.824082][T10569] usb 7-1: USB disconnect, device number 20
[ 1063.408643][T18034] netlink: 4975 bytes leftover after parsing attributes in process `syz.2.2954'.
[ 1063.423373][T18034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1063.475446][T18039] geneve2: entered promiscuous mode
[ 1063.836685][T18043] atomic_op ffff8880779db198 conn xmit_atomic 0000000000000000
[ 1063.869967][T18046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1063.931759][T18047] random: crng reseeded on system resumption
[ 1064.681109][T18042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.683931][T18042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.812150][T18042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1064.827589][T18042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1064.925707][T18042] batman_adv: batadv0: Interface deactivated: macsec1
[ 1064.981287][   T59] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.984732][   T59] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.987975][   T59] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.990771][   T59] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1066.019205][T10569] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1066.172092][T18083] netlink: 'syz.0.2963': attribute type 1 has an invalid length.
[ 1066.183380][T10569] usb 7-1: Using ep0 maxpacket: 16
[ 1066.188302][T10569] usb 7-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.193688][T10569] usb 7-1: config 157 has 0 interfaces, different from the descriptor's value: 1
[ 1066.200832][T10569] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1066.205718][T10569] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.209642][T10569] usb 7-1: Product: syz
[ 1066.212260][T10569] usb 7-1: Manufacturer: syz
[ 1066.216001][T10569] usb 7-1: SerialNumber: syz
[ 1066.226033][T18083] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1066.515185][T18097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1066.584309][T18098] random: crng reseeded on system resumption
[ 1066.684298][T10569] usb 7-1: USB disconnect, device number 21
[ 1069.280262][T18149] gfs2: gfs2 mount does not exist
[ 1071.916843][T18203] gfs2: gfs2 mount does not exist
[ 1072.617163][T18213] ALSA: mixer_oss: invalid OSS volume ''
[ 1072.910123][T18219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1072.964264][T18223] random: crng reseeded on system resumption
[ 1075.185287][T18249] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1075.207255][T18249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2992'.
[ 1076.205719][T18267] overlayfs: failed to resolve './file0': -2
[ 1076.350125][T18272] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[ 1076.734843][T18282] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3001'.
[ 1077.868676][T18292] overlayfs: failed to resolve './file0': -2
[ 1077.904136][T18290] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1077.914143][T18290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1078.169982][T18293] random: crng reseeded on system resumption
[ 1078.746089][T18292] 9p: Could not find request transport: fd0x0000000000000005
[ 1079.701146][T18309] netlink: 'syz.0.3010': attribute type 1 has an invalid length.
[ 1079.714910][T18309] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1080.426520][T18309] bond9: (slave veth3): Enslaving as an active interface with a down link
[ 1080.807521][T18322] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1080.817051][T18322] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[ 1081.138433][T18348] fuse: Bad value for 'fd'
[ 1081.463301][T15675] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1081.723683][T15675] usb 8-1: Using ep0 maxpacket: 16
[ 1081.743685][T15675] usb 8-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.749518][T15675] usb 8-1: config 157 has 0 interfaces, different from the descriptor's value: 1
[ 1081.762583][T15675] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1081.766558][T15675] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.770047][T15675] usb 8-1: Product: syz
[ 1081.772464][T15675] usb 8-1: Manufacturer: syz
[ 1081.775177][T15675] usb 8-1: SerialNumber: syz
[ 1081.898003][T18353] netlink: 'syz.2.3016': attribute type 1 has an invalid length.
[ 1081.920787][T18353] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1081.943029][T18353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3016'.
[ 1082.089303][T18353] syz.2.3016 (18353): drop_caches: 2
[ 1082.304850][T16371] usb 8-1: USB disconnect, device number 13
[ 1082.354112][T18361] netlink: 4975 bytes leftover after parsing attributes in process `syz.0.3019'.
[ 1082.357139][T18361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1083.290511][T18379] overlayfs: failed to resolve './file0': -2
[ 1084.923882][T18418] netlink: 4975 bytes leftover after parsing attributes in process `syz.2.3028'.
[ 1084.927165][T18418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1085.097025][T18379] 9p: Could not find request transport: fd0x0000000000000005
[ 1085.671426][T18428] netlink: 'syz.2.3031': attribute type 1 has an invalid length.
[ 1085.712118][T18433] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[ 1085.732206][T18434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3031'.
[ 1085.751232][T18428] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1085.937403][T18438] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3034'.
[ 1085.959760][T18428] syz.2.3031 (18428): drop_caches: 2
[ 1086.690772][T18451] netlink: 15678 bytes leftover after parsing attributes in process `syz.3.3036'.
[ 1088.040557][T18490] input: syz1 as /devices/virtual/input/input65
[ 1089.029764][T18502] netlink: 'syz.1.3048': attribute type 1 has an invalid length.
[ 1089.055874][T18502] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1089.071818][T18502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3048'.
[ 1089.093495][T18502] syz.1.3048 (18502): drop_caches: 2
[ 1089.474401][T16371] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1089.643389][T16371] usb 8-1: Using ep0 maxpacket: 16
[ 1089.646443][T16371] usb 8-1: config 157 has 0 interfaces, different from the descriptor's value: 1
[ 1089.651971][T16371] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1089.655311][T16371] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.658166][T16371] usb 8-1: Product: syz
[ 1089.659635][T16371] usb 8-1: Manufacturer: syz
[ 1089.661897][T16371] usb 8-1: SerialNumber: syz
[ 1090.299756][ T5895] usb 8-1: USB disconnect, device number 14
[ 1090.370592][T18525] random: crng reseeded on system resumption
[ 1093.493584][T18574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'.
[ 1094.649113][T18609] overlayfs: failed to resolve './file0': -2
[ 1095.544710][T18609] 9pnet_fd: Insufficient options for proto=fd
[ 1096.933654][ T5895] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1098.038260][T18645] overlayfs: failed to resolve './file0': -2
[ 1099.732960][T18645] 9pnet_fd: Insufficient options for proto=fd
[ 1107.616725][ T5749] Bluetooth: hci0: unexpected event for opcode 0x2003
[ 1107.625576][T18708] random: crng reseeded on system resumption
[ 1107.774646][T18713] dummy0: entered allmulticast mode
[ 1107.864962][T18716] bridge_slave_0: left allmulticast mode
[ 1107.867695][T18716] bridge_slave_0: left promiscuous mode
[ 1107.871334][T18716] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.881451][T18716] bridge_slave_1: left allmulticast mode
[ 1107.889837][T18716] bridge_slave_1: left promiscuous mode
[ 1107.892869][T18716] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1107.907218][T18716] bond0: (slave bond_slave_0): Releasing backup interface
[ 1107.915958][T18716] bond0: (slave bond_slave_1): Releasing backup interface
[ 1107.917563][T18717] fuse: Unknown parameter 'fd0xffffffffffffffff'
[ 1107.935580][T18716] team0: Port device team_slave_0 removed
[ 1107.944632][T18716] team0: Port device team_slave_1 removed
[ 1107.949145][T18716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1107.952781][T18716] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1107.967904][T18716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1107.971223][T18716] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1107.979132][T18716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1108.454693][T18726] overlayfs: failed to resolve './file0': -2
[ 1108.461557][T18726] 9pnet_fd: Insufficient options for proto=fd
[ 1109.151608][T18745] gfs2: gfs2 mount does not exist
[ 1109.429753][T18751] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3103'.
[ 1109.440457][T18751] smc: net device vcan0 applied user defined pnetid SYZ1
[ 1109.577066][T18755] overlayfs: failed to resolve './file0': -2
[ 1110.207223][T18755] 9pnet_fd: Insufficient options for proto=fd
[ 1110.217269][T18760] fuse: Bad value for 'fd'
[ 1111.345866][T18777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1112.232672][ T6105] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1112.244280][ T6105] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1112.767634][T14715] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1112.993385][T14715] usb 7-1: Using ep0 maxpacket: 16
[ 1113.025445][T14715] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1113.034277][T14715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.042323][T14715] usb 7-1: Product: syz
[ 1113.049980][T14715] usb 7-1: Manufacturer: syz
[ 1113.061335][T14715] usb 7-1: SerialNumber: syz
[ 1113.418296][T14715] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1113.516652][T14715] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1113.523266][T14715] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1113.526279][T14715] usb 7-1: media controller created
[ 1113.540428][T14715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1113.600878][T14715] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1113.648313][T14715] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1113.655548][T14715] usb 7-1: USB disconnect, device number 22
[ 1113.686680][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3117'.
[ 1114.234491][T14664] Bluetooth: hci3: command 0xfc11 tx timeout
[ 1114.234632][ T5749] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[ 1114.362150][T18805] gfs2: gfs2 mount does not exist
[ 1114.436769][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'.
[ 1114.755560][T18823] syzkaller0: entered promiscuous mode
[ 1114.757208][T18823] syzkaller0: entered allmulticast mode
[ 1116.058839][T18898] fuse: fd is not a fuse device
[ 1116.864797][T18893] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1116.867672][T18893] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1116.877071][T18893] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1116.879720][T18893] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1116.885748][T18893] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1116.896407][T18893] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1116.907767][T18893] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1116.911111][T18893] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1116.917183][T18893] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1116.923626][T18893] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1117.173606][T14715] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1117.343715][T14715] usb 5-1: Using ep0 maxpacket: 16
[ 1117.349115][T14715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.353141][T14715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1117.359402][T14715] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1117.363045][T14715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.367243][T14715] usb 5-1: Product: syz
[ 1117.368622][T14715] usb 5-1: Manufacturer: syz
[ 1117.370147][T14715] usb 5-1: SerialNumber: syz
[ 1117.385992][T14715] usb 5-1: 0:2 : does not exist
[ 1117.413545][T16371] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1117.451593][T18954] capability: warning: `syz.1.3181' uses deprecated v2 capabilities in a way that may be insecure
[ 1117.461586][T18954] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1117.465372][T18954] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1117.575188][T16371] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1117.578567][T16371] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1117.581387][T16371] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1117.585098][T16371] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.590829][T14715] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1117.596448][T16371] usb 7-1: config 0 descriptor??
[ 1117.635556][T14715] usb 5-1: USB disconnect, device number 7
[ 1117.659325][T18735] udevd[18735]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory
[ 1117.664107][T18735] udevd[18735]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory
[ 1117.684200][T18735] udevd[18735]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1117.953357][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1118.011171][T16371] hid_parser_main: 6 callbacks suppressed
[ 1118.011193][T16371] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[ 1118.019097][T16371] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[ 1118.022258][T16371] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[ 1118.025832][T16371] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[ 1118.029305][T16371] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[ 1118.038981][T16371] playstation 0003:054C:0DF2.0004: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[ 1118.103388][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1118.112492][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1118.117290][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1118.124208][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1118.127106][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.129972][    T9] usb 6-1: Product: syz
[ 1118.131669][    T9] usb 6-1: Manufacturer: syz
[ 1118.133363][    T9] usb 6-1: SerialNumber: syz
[ 1118.154132][ T5749] Bluetooth: hci5: command 0x0406 tx timeout
[ 1118.214054][T16371] playstation 0003:054C:0DF2.0004: Invalid byte count transferred, expected 20 got 0
[ 1118.218164][T16371] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22
[ 1118.222665][T16371] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense
[ 1118.227371][T16371] playstation 0003:054C:0DF2.0004: Failed to create dualsense.
[ 1118.236732][T16371] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -22
[ 1118.326860][T18973] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3188'.
[ 1118.330063][T18973] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3188'.
[ 1118.368991][T18977] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[ 1118.418682][T16371] usb 7-1: USB disconnect, device number 23
[ 1118.629035][T18981] fuse: fd is not a fuse device
[ 1118.847769][    T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[ 1118.863008][    T9] usb 6-1: USB disconnect, device number 13
[ 1118.953650][ T5749] Bluetooth: hci1: command 0x2016 tx timeout
[ 1118.953737][T14664] Bluetooth: hci2: command 0x0406 tx timeout
[ 1118.954250][ T5752] Bluetooth: hci0: command 0x0406 tx timeout
[ 1119.127074][T19003] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1119.134027][T19003] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1119.139672][T19003] overlayfs: failed to get uuid (222/file1, err=-13); falling back to uuid=null.
[ 1119.327894][T19019] kvm: pic: single mode not supported
[ 1119.328022][T19019] kvm: pic: level sensitive irq not supported
[ 1119.331792][T19019] kvm: pic: single mode not supported
[ 1119.335666][T19019] kvm: pic: single mode not supported
[ 1119.342383][T19019] kvm: pic: single mode not supported
[ 1119.347523][T19019] kvm: pic: single mode not supported
[ 1119.350109][T19019] kvm: pic: level sensitive irq not supported
[ 1119.359453][T19026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3213'.
[ 1119.360869][T19019] kvm: pic: single mode not supported
[ 1119.361579][T19026] tipc: Invalid UDP bearer configuration
[ 1119.361633][T19026] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1119.366311][T19019] kvm: pic: single mode not supported
[ 1119.371501][T19019] kvm: pic: level sensitive irq not supported
[ 1119.376338][T19019] kvm: pic: single mode not supported
[ 1119.380142][T19019] kvm: pic: single mode not supported
[ 1119.382929][T19019] kvm: pic: level sensitive irq not supported
[ 1119.392291][T19019] kvm: pic: single mode not supported
[ 1119.439091][T19028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1119.693408][T19041] fuse: fd is not a fuse device
[ 1120.004051][T10569] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1120.007420][ T3264] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1120.183414][T10569] usb 7-1: Using ep0 maxpacket: 8
[ 1120.185695][ T3264] usb 6-1: Using ep0 maxpacket: 8
[ 1120.190442][T10569] usb 7-1: config 0 has no interfaces?
[ 1120.195284][ T3264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1120.199973][T10569] usb 7-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[ 1120.203941][ T3264] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[ 1120.209274][T10569] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.215238][T10569] usb 7-1: config 0 descriptor??
[ 1120.217565][ T3264] usb 6-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[ 1120.221488][ T3264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.231290][ T3264] usb 6-1: config 0 descriptor??
[ 1120.233376][T14664] Bluetooth: hci5: command 0x0406 tx timeout
[ 1120.431018][T10569] usb 7-1: USB disconnect, device number 24
[ 1120.445682][ T3264] usbhid 6-1:0.0: can't add hid device: -71
[ 1120.447789][ T3264] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1120.451810][ T3264] usb 6-1: USB disconnect, device number 14
[ 1120.613441][T15675] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1120.775402][T15675] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[ 1120.778656][T15675] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1120.782054][T15675] usb 5-1: config 220 has no interface number 2
[ 1120.784320][T15675] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1120.788870][T15675] usb 5-1: config 220 interface 0 has no altsetting 0
[ 1120.791273][T15675] usb 5-1: config 220 interface 76 has no altsetting 0
[ 1120.793760][T15675] usb 5-1: config 220 interface 1 has no altsetting 0
[ 1120.797810][T15675] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1120.800833][T15675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.803629][T15675] usb 5-1: Product: syz
[ 1120.805094][T15675] usb 5-1: Manufacturer: syz
[ 1120.806669][T15675] usb 5-1: SerialNumber: syz
[ 1120.957520][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.030524][T15675] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1121.034152][T14664] Bluetooth: hci1: command 0x2016 tx timeout
[ 1121.037247][T15675] uvcvideo 5-1:220.0: No valid video chain found.
[ 1121.039742][T15675] usb 5-1: selecting invalid altsetting 0
[ 1121.045022][T14664] Bluetooth: hci2: command 0x0406 tx timeout
[ 1121.047594][ T5749] Bluetooth: hci0: command 0x0406 tx timeout
[ 1121.084355][T15675] usb 5-1: selecting invalid altsetting 0
[ 1121.086593][T15675] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[ 1121.093802][T15675] usb 5-1: USB disconnect, device number 8
[ 1122.074340][T19085] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1122.077432][T19085] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1122.080482][T19085] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1122.084836][T19085] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1122.231519][T19114] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3250'.
[ 1122.470754][T19128] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3256'.
[ 1122.514306][    T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1122.607787][T19134] fuse: fd is not a fuse device
[ 1122.684799][    T9] usb 7-1: config 0 has no interfaces?
[ 1122.687803][    T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1122.691430][    T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1122.695098][    T9] usb 7-1: Product: syz
[ 1122.696734][    T9] usb 7-1: Manufacturer: syz
[ 1122.701188][    T9] usb 7-1: config 0 descriptor??
[ 1122.733331][T15675] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[ 1122.907078][T15675] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1122.913062][T15675] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1122.916058][T15675] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00
[ 1122.919927][T15675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.925645][T15675] usb 5-1: config 0 descriptor??
[ 1122.930187][T19130] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1122.963477][T14715] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1123.113576][T14715] usb 6-1: Using ep0 maxpacket: 8
[ 1123.117488][T19119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1123.117799][T14715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1123.121056][T19119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1123.126432][T14715] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[ 1123.132759][T10569] usb 7-1: USB disconnect, device number 25
[ 1123.134650][T14715] usb 6-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[ 1123.134674][T14715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.138581][T14715] usb 6-1: config 0 descriptor??
[ 1123.346032][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x3
[ 1123.349700][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.352746][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.356249][ T5749] Bluetooth: hci5: command 0x0406 tx timeout
[ 1123.356324][T14715] usbhid 6-1:0.0: can't add hid device: -71
[ 1123.358079][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3264'.
[ 1123.358326][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.361511][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.366029][T14715] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1123.368648][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.368670][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.380579][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.383910][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.386491][T14715] usb 6-1: USB disconnect, device number 15
[ 1123.386929][T15675] logitech-djreceiver 0003:046D:C70E.0005: unknown main item tag 0x0
[ 1123.410415][T15675] logitech-djreceiver 0003:046D:C70E.0005: hidraw1: USB HID v0.fe Device [HID 046d:c70e] on usb-dummy_hcd.0-1/input0
[ 1123.544225][T10569] usb 5-1: USB disconnect, device number 9
[ 1123.570202][T19156] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[ 1123.720446][T19169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1123.769579][T19175] overlayfs: failed to resolve './cgroup': -2
[ 1123.966015][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'.
[ 1124.154032][ T5749] Bluetooth: hci1: command 0x2016 tx timeout
[ 1124.156329][T14664] Bluetooth: hci2: command 0x0406 tx timeout
[ 1124.156464][ T5752] Bluetooth: hci0: command 0x0406 tx timeout
[ 1124.291353][T19216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3296'.
[ 1124.298871][T19216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3296'.
[ 1124.323419][T14715] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1124.343401][T10569] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1124.476687][T14715] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1124.481359][T14715] usb 5-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config
[ 1124.486204][T14715] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7
[ 1124.491633][T14715] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50432, setting to 1024
[ 1124.499924][T14715] usb 5-1: string descriptor 0 read error: -22
[ 1124.502930][T14715] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1124.506907][T14715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1124.513823][T10569] usb 6-1: Using ep0 maxpacket: 32
[ 1124.525865][T19228] fuse: fd is not a fuse device
[ 1124.536182][T10569] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1124.543147][T10569] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1124.548108][T10569] usb 6-1: can't read configurations, error -71
[ 1124.630601][T19232] fuse: fd is not a fuse device
[ 1125.120768][T14715] usb 5-1: current rate 2133376 is different from the runtime rate 48000
[ 1125.265860][T19244] tun0: tun_chr_ioctl cmd 2147767507
[ 1125.314352][T19250] netlink: 'syz.1.3313': attribute type 29 has an invalid length.
[ 1125.320928][T19250] netlink: 'syz.1.3313': attribute type 29 has an invalid length.
[ 1125.321702][T14715] usb 5-1: USB disconnect, device number 10
[ 1125.326329][T19250] netlink: 'syz.1.3313': attribute type 29 has an invalid length.
[ 1125.418079][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3316'.
[ 1125.851750][T19278] netlink: 'syz.1.3326': attribute type 10 has an invalid length.
[ 1125.860373][T19278] team0: Port device dummy0 added
[ 1125.904427][   T40] audit: type=1326 audit(1779329968.255:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.914909][   T40] audit: type=1326 audit(1779329968.255:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.924170][   T40] audit: type=1326 audit(1779329968.255:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.933516][   T40] audit: type=1326 audit(1779329968.255:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.942540][   T40] audit: type=1326 audit(1779329968.255:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.956670][   T40] audit: type=1326 audit(1779329968.255:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.968013][   T40] audit: type=1326 audit(1779329968.255:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.977998][   T40] audit: type=1326 audit(1779329968.255:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.988158][   T40] audit: type=1326 audit(1779329968.255:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19281 comm="syz.1.3328" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f16f7c code=0x7ffc0000
[ 1125.991890][T14664] Bluetooth: hci1: ACL packet for unknown connection handle 200
[ 1126.233894][T14664] Bluetooth: hci1: command 0x2016 tx timeout
[ 1127.063371][T10569] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1127.235324][T10569] usb 7-1: config 0 has an invalid interface number: 4 but max is 0
[ 1127.238887][T10569] usb 7-1: config 0 has no interface number 0
[ 1127.241703][T10569] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1127.245700][T10569] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.252599][T10569] usb 7-1: config 0 descriptor??
[ 1127.460967][T10569] usb 7-1: string descriptor 0 read error: -71
[ 1127.467495][T10569] ums-realtek 7-1:0.4: USB Mass Storage device detected
[ 1127.597504][T10569] usb 7-1: USB disconnect, device number 26
[ 1127.684833][T15675] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1127.751805][T19373] netlink: 'syz.0.3365': attribute type 2 has an invalid length.
[ 1127.754631][T19373] netlink: 'syz.0.3365': attribute type 2 has an invalid length.
[ 1127.834095][T15675] usb 6-1: Using ep0 maxpacket: 32
[ 1127.837888][T15675] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1127.841337][T15675] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1127.846099][T15675] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1127.850859][T15675] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1127.853837][T15675] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1127.857678][T15675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.861943][T15675] usb 6-1: config 0 descriptor??
[ 1128.117096][T14664] Bluetooth: hci1: unexpected event for opcode 0x040d
[ 1128.144831][T19386] netlink: 'syz.2.3370': attribute type 10 has an invalid length.
[ 1128.148423][T19386] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3370'.
[ 1128.165931][T19386] batman_adv: batadv0: Interface deactivated: macsec1
[ 1128.177533][T19386] batman_adv: batadv0: Removing interface: macsec1
[ 1128.234443][T14664] Bluetooth: hci0: command 0x0406 tx timeout
[ 1128.329987][T15675] corsair-cpro 0003:1B1C:0C10.0006: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[ 1128.411206][T15675] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -38
[ 1128.440349][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'.
[ 1128.453462][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'.
[ 1128.466490][T19406] binder: 19405:19406 unknown command 0
[ 1128.469309][T19406] binder: 19405:19406 ioctl c0306201 800001c0 returned -22
[ 1128.690563][    T9] usb 6-1: USB disconnect, device number 18
[ 1129.143319][T15675] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1129.308769][T15675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1129.316038][T15675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1129.320249][T15675] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1129.324465][T15675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.342653][T15675] usb 5-1: config 0 descriptor??
[ 1129.764634][T15675] hid_parser_main: 27 callbacks suppressed
[ 1129.764651][T15675] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[ 1129.769186][T15675] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[ 1129.771884][T15675] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[ 1129.775535][T15675] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[ 1129.777810][T15675] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[ 1129.782674][T15675] playstation 0003:054C:0DF2.0007: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[ 1129.959636][T15675] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 41
[ 1129.962581][T15675] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22
[ 1129.968387][T15675] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense
[ 1129.972478][T15675] playstation 0003:054C:0DF2.0007: Failed to create dualsense.
[ 1129.976648][T15675] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22
[ 1130.164216][    T9] usb 5-1: USB disconnect, device number 11
[ 1131.751026][T19510] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3422'.
[ 1132.254416][T19536] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.261691][T19536] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1132.394809][T19543] gfs2: gfs2 mount does not exist
[ 1132.734217][T19549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3438'.
[ 1133.093750][T19551] fuse: Bad value for 'fd'
[ 1133.222536][T19551] fuse: fd is not a fuse device
[ 1133.267311][T19554] netlink: 'syz.0.3440': attribute type 1 has an invalid length.
[ 1133.318108][T19554] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1133.336791][ T5895] IPVS: starting estimator thread 0...
[ 1133.384193][T19554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3440'.
[ 1133.511863][T19554] syz.0.3440 (19554): drop_caches: 2
[ 1133.514941][T19560] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1133.973362][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1134.123441][ T5895] usb 5-1: Using ep0 maxpacket: 16
[ 1134.131361][ T5895] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1134.136557][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.140035][ T5895] usb 5-1: Product: syz
[ 1134.141975][ T5895] usb 5-1: Manufacturer: syz
[ 1134.144536][ T5895] usb 5-1: SerialNumber: syz
[ 1134.371575][ T5895] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1134.378254][ T5895] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1134.382375][ T5895] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1134.385813][ T5895] usb 5-1: media controller created
[ 1134.399811][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1134.568832][T19581] netlink: 'syz.3.3450': attribute type 1 has an invalid length.
[ 1134.569722][ T5895] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1134.601734][ T5895] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1134.605605][T19581] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1134.615839][ T5895] usb 5-1: USB disconnect, device number 12
[ 1134.634315][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3450'.
[ 1134.803361][T15434] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1134.954931][T15434] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1134.964069][T15434] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1134.968596][T15434] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1134.972623][T15434] usb 6-1: Product: syz
[ 1134.974574][T15434] usb 6-1: Manufacturer: syz
[ 1134.976655][T15434] usb 6-1: SerialNumber: syz
[ 1135.031485][T19598] netlink: 'syz.3.3454': attribute type 1 has an invalid length.
[ 1135.064361][T19598] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1135.075884][T19598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3454'.
[ 1135.192353][T15434] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1135.449737][    C2] usblp0: nonzero write bulk status received: -71
[ 1135.453484][ T1340] usb 6-1: USB disconnect, device number 19
[ 1135.462815][T19609] overlayfs: failed to clone lowerpath
[ 1135.471511][ T1340] usblp0: removed
[ 1135.767916][T19623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3458'.
[ 1137.619975][T19666] overlayfs: failed to resolve './file0': -2
[ 1139.463421][ T5895] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1139.633377][ T5895] usb 5-1: Using ep0 maxpacket: 16
[ 1139.641254][ T5895] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1139.648108][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.652808][ T5895] usb 5-1: Product: syz
[ 1139.655964][ T5895] usb 5-1: Manufacturer: syz
[ 1139.658683][ T5895] usb 5-1: SerialNumber: syz
[ 1139.887601][ T5895] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1139.900359][ T5895] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1139.914263][ T5895] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1139.923746][ T5895] usb 5-1: media controller created
[ 1139.936539][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1140.088614][ T5895] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1140.126595][ T5895] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1140.139789][ T5895] usb 5-1: USB disconnect, device number 13
[ 1140.410417][T19701] overlayfs: failed to resolve './file0': -2
[ 1140.611204][T19707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'.
[ 1140.614822][T19707] openvswitch: netlink: Flow key attr not present in new flow.
[ 1140.685730][T19709] random: crng reseeded on system resumption
[ 1140.892879][T19716] netlink: 'syz.0.3481': attribute type 1 has an invalid length.
[ 1140.895924][T19716] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3481'.
[ 1140.968993][T19714] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1141.752513][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3485'.
[ 1141.763182][T19731] openvswitch: netlink: Flow key attr not present in new flow.
[ 1142.237463][T19743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3489'.
[ 1142.246112][T19743] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1142.376816][T19743] random: crng reseeded on system resumption
[ 1145.300209][T19775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3501'.
[ 1145.304878][T19775] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1145.375981][T19776] random: crng reseeded on system resumption
[ 1146.178833][T19784] netlink: 'syz.2.3503': attribute type 2 has an invalid length.
[ 1146.181449][T19784] netlink: 'syz.2.3503': attribute type 2 has an invalid length.
[ 1146.260842][T19786] fuse: fd is not a fuse device
[ 1147.241491][T19805] gfs2: gfs2 mount does not exist
[ 1147.867667][T19821] fuse: fd is not a fuse device
[ 1149.850927][T19865] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[ 1150.020806][T19867] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[ 1150.066139][T19869] netlink: 'syz.3.3525': attribute type 1 has an invalid length.
[ 1150.081009][T19869] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1150.090611][T19869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3525'.
[ 1150.314228][T19879] fuse: fd is not a fuse device
[ 1151.373527][T19890] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1151.662697][T19896] gfs2: gfs2 mount does not exist
[ 1152.246459][T13854] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1152.403326][T13854] usb 6-1: Using ep0 maxpacket: 32
[ 1152.408588][T13854] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1152.411912][T13854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.415130][T13854] usb 6-1: Product: syz
[ 1152.416619][T13854] usb 6-1: Manufacturer: syz
[ 1152.418361][T13854] usb 6-1: SerialNumber: syz
[ 1152.423510][T13854] usb 6-1: config 0 descriptor??
[ 1152.428933][T13854] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1152.432793][T13854] dvb-usb: bulk message failed: -22 (4/0)
[ 1152.438352][T13854] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1152.441760][T13854] dvb-usb: bulk message failed: -22 (5/0)
[ 1152.444063][T13854] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1152.450684][T13854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1152.454565][T13854] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1152.457600][T13854] usb 6-1: media controller created
[ 1152.469371][T13854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1152.481144][T13854] usb 6-1: selecting invalid altsetting 3
[ 1152.483588][T13854] ttusb2: set interface to alts=3 failed
[ 1152.509627][T13854] DVB: Unable to find symbol tda10086_attach()
[ 1152.511848][T13854] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1152.515686][T13854] dvb-usb: bulk message failed: -22 (4/0)
[ 1152.519822][T13854] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1152.524061][T13854] dvb-usb: bulk message failed: -22 (5/0)
[ 1152.526302][T13854] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1152.530105][T13854] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1152.697474][ T1340] usb 6-1: USB disconnect, device number 20
[ 1152.772958][ T1340] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1153.245366][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3542'.
[ 1153.256222][T19922] Cannot find set identified by id 0 to match
[ 1153.430844][T19932] fuse: fd is not a fuse device
[ 1153.442530][   T40] audit: type=1326 audit(1779329995.785:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19924 comm="syz.2.3543" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93f7c code=0x0
[ 1155.355344][T19982] fuse: fd is not a fuse device
[ 1155.450552][T19986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1155.554532][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'.
[ 1155.683551][T15675] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1155.843401][T15675] usb 5-1: Using ep0 maxpacket: 16
[ 1155.849620][T15675] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1155.859727][T15675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.867492][T15675] usb 5-1: Product: syz
[ 1155.869432][T15675] usb 5-1: Manufacturer: syz
[ 1155.876838][T15675] usb 5-1: SerialNumber: syz
[ 1155.937691][   T40] audit: type=1800 audit(1779329998.285:225): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3565" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1156.096181][T15675] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1156.114853][T15675] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1156.118889][T15675] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1156.122127][T15675] usb 5-1: media controller created
[ 1156.134533][T15675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1156.353970][T15675] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1156.357221][T19985] ------------[ cut here ]------------
[ 1156.359649][T19985] usb 5-1: BOGUS control dir, pipe 80000e80 doesn't match bRequestType c0
[ 1156.364887][T19985] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#2: syz.0.3556/19985
[ 1156.369335][T19985] Modules linked in:
[ 1156.372316][T19985] CPU: 2 UID: 0 PID: 19985 Comm: syz.0.3556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1156.377281][T19985] Tainted: [L]=SOFTLOCKUP
[ 1156.379222][T19985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1156.383655][T19985] RIP: 0010:usb_submit_urb+0x157e/0x1910
[ 1156.385895][T19985] Code: d2 74 5d 48 89 54 24 40 e8 6f 16 b4 fa 4c 89 ef e8 d7 6e df fe 48 89 c6 48 8d 3d ed 0f 91 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 43 16 b4 fa 89 ee bf ff 00 00 00
[ 1156.394536][T19985] RSP: 0000:ffffc9002517f8c8 EFLAGS: 00010283
[ 1156.396947][T19985] RAX: ffffffff8c82a320 RBX: ffff88806b506000 RCX: 0000000080000e80
[ 1156.400063][T19985] RDX: ffff888061164ea0 RSI: ffffffff8c82a320 RDI: ffffffff90e50610
[ 1156.403681][T19985] RBP: ffff88802af43058 R08: 00000000000000c0 R09: 0000000000000000
[ 1156.407046][T19985] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804af9e200
[ 1156.410190][T19985] R13: ffff88802af430b0 R14: 0000000080000e80 R15: 00000000000000c0
[ 1156.413408][T19985] FS:  0000000000000000(0000) GS:ffff888097374000(0063) knlGS:00000000f53c6b40
[ 1156.417084][T19985] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1156.419846][T19985] CR2: 00000000f71f7810 CR3: 0000000020a84000 CR4: 0000000000352ef0
[ 1156.423475][T19985] Call Trace:
[ 1156.424953][T19985]  <TASK>
[ 1156.426291][T19985]  ? __init_swait_queue_head+0xca/0x150
[ 1156.428787][T19985]  usb_start_wait_urb+0x10e/0x580
[ 1156.431133][T19985]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1156.433663][T19985]  ? __asan_memset+0x23/0x50
[ 1156.435674][T19985]  usb_control_msg+0x328/0x4b0
[ 1156.437743][T19985]  ? __pfx_usb_control_msg+0x10/0x10
[ 1156.440103][T19985]  ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0
[ 1156.443357][T19985]  ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0
[ 1156.446194][T19985]  gl861_ctrl_msg+0x1a5/0x4a0
[ 1156.448274][T19985]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[ 1156.450302][T19985]  gl861_i2c_master_xfer+0x545/0x690
[ 1156.452339][T19985]  ? mark_held_locks+0x40/0x70
[ 1156.454474][T19985]  __i2c_transfer+0x5e9/0x1780
[ 1156.456680][T19985]  ? rt_mutex_slowlock.constprop.0+0x67/0x120
[ 1156.459571][T19985]  ? __pfx___i2c_transfer+0x10/0x10
[ 1156.461866][T19985]  i2c_transfer+0x15f/0x380
[ 1156.463971][T19985]  i2cdev_ioctl_rdwr+0x3ec/0x700
[ 1156.466026][T19985]  compat_i2cdev_ioctl+0x469/0x540
[ 1156.468268][T19985]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 1156.470911][T19985]  ? __fget_files+0x21f/0x3d0
[ 1156.473392][T19985]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 1156.476184][T19985]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1156.478890][T19985]  __do_fast_syscall_32+0xe7/0x950
[ 1156.481078][T19985]  ? lockdep_hardirqs_on+0x78/0x100
[ 1156.483371][T19985]  do_fast_syscall_32+0x32/0x70
[ 1156.485416][T19985]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1156.488073][T19985] RIP: 0023:0xf7f04f7c
[ 1156.489841][T19985] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1156.498654][T19985] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1156.502214][T19985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[ 1156.505652][T19985] RDX: 00000000800007c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1156.509248][T19985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1156.512948][T19985] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1156.516416][T19985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1156.519812][T19985]  </TASK>
[ 1156.521194][T19985] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1156.524277][T19985] CPU: 2 UID: 0 PID: 19985 Comm: syz.0.3556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1156.528999][T19985] Tainted: [L]=SOFTLOCKUP
[ 1156.531005][T19985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1156.535303][T19985] Call Trace:
[ 1156.536740][T19985]  <TASK>
[ 1156.538067][T19985]  dump_stack_lvl+0x100/0x190
[ 1156.540197][T19985]  vpanic+0x552/0x970
[ 1156.542054][T19985]  ? __pfx_vpanic+0x10/0x10
[ 1156.544090][T19985]  panic+0xd1/0xe0
[ 1156.545706][T19985]  ? __pfx_panic+0x10/0x10
[ 1156.547618][T19985]  check_panic_on_warn.cold+0x19/0x34
[ 1156.549896][T19985]  ? usb_submit_urb+0x1573/0x1910
[ 1156.552145][T19985]  __warn.cold+0x191/0x328
[ 1156.554218][T19985]  __report_bug+0x296/0x3d0
[ 1156.556297][T19985]  ? usb_submit_urb+0x1573/0x1910
[ 1156.558470][T19985]  ? __pfx___report_bug+0x10/0x10
[ 1156.560617][T19985]  ? mark_held_locks+0x40/0x70
[ 1156.562688][T19985]  ? stack_depot_save_flags+0x479/0x9d0
[ 1156.565197][T19985]  report_bug_entry+0xe1/0x290
[ 1156.567281][T19985]  ? usb_submit_urb+0x157e/0x1910
[ 1156.569502][T19985]  handle_bug+0x1cd/0x2a0
[ 1156.571365][T19985]  exc_invalid_op+0x17/0x50
[ 1156.573091][T19985]  asm_exc_invalid_op+0x1a/0x20
[ 1156.575169][T19985] RIP: 0010:usb_submit_urb+0x157e/0x1910
[ 1156.577584][T19985] Code: d2 74 5d 48 89 54 24 40 e8 6f 16 b4 fa 4c 89 ef e8 d7 6e df fe 48 89 c6 48 8d 3d ed 0f 91 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 43 16 b4 fa 89 ee bf ff 00 00 00
[ 1156.585803][T19985] RSP: 0000:ffffc9002517f8c8 EFLAGS: 00010283
[ 1156.588360][T19985] RAX: ffffffff8c82a320 RBX: ffff88806b506000 RCX: 0000000080000e80
[ 1156.591688][T19985] RDX: ffff888061164ea0 RSI: ffffffff8c82a320 RDI: ffffffff90e50610
[ 1156.595271][T19985] RBP: ffff88802af43058 R08: 00000000000000c0 R09: 0000000000000000
[ 1156.598911][T19985] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804af9e200
[ 1156.602256][T19985] R13: ffff88802af430b0 R14: 0000000080000e80 R15: 00000000000000c0
[ 1156.605585][T19985]  ? usb_submit_urb+0x1569/0x1910
[ 1156.607749][T19985]  ? __init_swait_queue_head+0xca/0x150
[ 1156.610258][T19985]  usb_start_wait_urb+0x10e/0x580
[ 1156.612681][T19985]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 1156.615088][T19985]  ? __asan_memset+0x23/0x50
[ 1156.617078][T19985]  usb_control_msg+0x328/0x4b0
[ 1156.619129][T19985]  ? __pfx_usb_control_msg+0x10/0x10
[ 1156.621421][T19985]  ? rt_mutex_slowlock_block.constprop.0+0x382/0x7c0
[ 1156.624569][T19985]  ? rt_mutex_slowlock_block.constprop.0+0x59/0x7c0
[ 1156.627642][T19985]  gl861_ctrl_msg+0x1a5/0x4a0
[ 1156.629677][T19985]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[ 1156.631927][T19985]  gl861_i2c_master_xfer+0x545/0x690
[ 1156.634162][T19985]  ? mark_held_locks+0x40/0x70
[ 1156.636212][T19985]  __i2c_transfer+0x5e9/0x1780
[ 1156.638358][T19985]  ? rt_mutex_slowlock.constprop.0+0x67/0x120
[ 1156.641018][T19985]  ? __pfx___i2c_transfer+0x10/0x10
[ 1156.643422][T19985]  i2c_transfer+0x15f/0x380
[ 1156.645410][T19985]  i2cdev_ioctl_rdwr+0x3ec/0x700
[ 1156.647528][T19985]  compat_i2cdev_ioctl+0x469/0x540
[ 1156.649712][T19985]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 1156.652184][T19985]  ? __fget_files+0x21f/0x3d0
[ 1156.654203][T19985]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 1156.656869][T19985]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1156.659517][T19985]  __do_fast_syscall_32+0xe7/0x950
[ 1156.661906][T19985]  ? lockdep_hardirqs_on+0x78/0x100
[ 1156.664130][T19985]  do_fast_syscall_32+0x32/0x70
[ 1156.666209][T19985]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1156.668911][T19985] RIP: 0023:0xf7f04f7c
[ 1156.670720][T19985] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1156.679032][T19985] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1156.682579][T19985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[ 1156.685961][T19985] RDX: 00000000800007c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1156.689637][T19985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1156.693110][T19985] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1156.696413][T19985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1156.699942][T19985]  </TASK>
[ 1156.702410][T19985] Kernel Offset: disabled
[ 1156.703843][T19985] Rebooting in 86400 seconds..