last executing test programs:

4m44.893812039s ago: executing program 1 (id=1329):
r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

4m44.810579625s ago: executing program 1 (id=1331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r1, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x101000)
ioctl$TCFLSH(r2, 0x40384708, 0x20000000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xe4}}, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x100000001)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), 0x4)
sendto$ax25(0xffffffffffffffff, &(0x7f0000000100)="e8c458668e251505922a17779eeb04941e0584cac1bf87ea60b60420c70195fe710ca1f303dd69dd76329126e407b3e01dd34f65e6f448413ae45099d30c2a11a3f9325438f4be2821c98967acbe94db6cfcd5b19e63606aa5ea7df6c190c6acee53764c218c07efa3d9f30809aba61a3699245e9b927bca561d8af82b240862d0aa62e3346a6a44c18103299ee0", 0x8e, 0x20040000, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_addr=@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}, 0x0)

4m44.581500181s ago: executing program 1 (id=1335):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000044d564b"])

4m43.082173528s ago: executing program 1 (id=1353):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

4m42.982930626s ago: executing program 1 (id=1355):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x40, {[@mptcp=@ack={0x1e, 0x4, 0x40, 0x1}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @exp_fastopen={0xfe, 0x9, 0xf989, "eeb3fef90b"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @mptcp=@synack={0x1e, 0x10, 0xd, 0x2, 0x4, 0x1, 0x6}]}}}}}}}}, 0x0)

4m42.632444397s ago: executing program 1 (id=1360):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0)

4m42.354231765s ago: executing program 32 (id=1360):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0)

4m17.36226467s ago: executing program 3 (id=1546):
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x20000000, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, &(0x7f0000002080)={0x0, 0x0, 0x0}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)

4m17.204255133s ago: executing program 3 (id=1548):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
userfaultfd(0x80001)
pselect6(0x40, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffffd, 0x800, 0x7, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)

4m16.984233748s ago: executing program 3 (id=1550):
pipe(&(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8c094)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$inet(r4, 0x0, 0x44885)
sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0)

4m14.673698879s ago: executing program 3 (id=1565):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0xf, 0x2, {0x2, 0x9}}, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)

4m11.809428177s ago: executing program 3 (id=1583):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m11.661041984s ago: executing program 3 (id=1586):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})

3m57.255679235s ago: executing program 4 (id=1687):
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x0, 0x0, 0x32)
splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0)

3m56.996721906s ago: executing program 4 (id=1692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x1}, 0x8)

3m55.554451901s ago: executing program 33 (id=1586):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})

3m39.999298162s ago: executing program 4 (id=1692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x1}, 0x8)

3m13.946687207s ago: executing program 4 (id=1692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x1}, 0x8)

3m1.613122024s ago: executing program 6 (id=1893):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38)
read$snapshot(r6, 0x0, 0xffffffbf)
read$char_usb(r6, 0x0, 0x0)

2m59.468942688s ago: executing program 6 (id=1897):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
rmdir(&(0x7f0000000700)='./cgroup/../file0\x00')
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
userfaultfd(0x1)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)

2m58.098379177s ago: executing program 6 (id=1902):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
syz_open_dev$evdev(&(0x7f00000004c0), 0xc, 0x4080)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
socket$packet(0x11, 0x2, 0x300)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
userfaultfd(0x80001)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

2m55.088666527s ago: executing program 6 (id=1917):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m54.926010643s ago: executing program 6 (id=1918):
pipe(&(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8c094)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$inet(r4, 0x0, 0x44885)
sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0)

2m54.840892745s ago: executing program 6 (id=1919):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$ax25(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

2m54.388550917s ago: executing program 34 (id=1919):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$ax25(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

2m33.368911269s ago: executing program 4 (id=1692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x1}, 0x8)

1m51.8959194s ago: executing program 4 (id=1692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x1}, 0x8)

1m28.075640081s ago: executing program 7 (id=2140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x5, 0x4)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
close(r2)
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x591003, 0x0, 0x9}, 0x18)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$sock(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x14, 0x1, 0x51, 0x7}}], 0x14}}], 0x1, 0x0)
r3 = socket$kcm(0x11, 0x2, 0x300)
setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2, 0x9, 0x301, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}]}]}, 0x6f}}, 0x0)

1m26.836826494s ago: executing program 7 (id=2145):
pipe(&(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8c094)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0)

1m25.284830425s ago: executing program 7 (id=2147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
sendmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x1}], 0x1}}], 0x484, 0x24048084)

1m24.008434691s ago: executing program 7 (id=2150):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6a, 0xe8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x3, 0x9)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
connect$rose(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)

1m22.602359514s ago: executing program 7 (id=2154):
pipe(&(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x3c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8c094)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$inet(r4, 0x0, 0x44885)
sendto$inet(r4, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0)

1m21.638067344s ago: executing program 7 (id=2156):
socketpair(0x1, 0x3, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2840}, 0x50)
process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x3c}}, 0x404c840)

1m20.286072589s ago: executing program 35 (id=2156):
socketpair(0x1, 0x3, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2840}, 0x50)
process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x3c}}, 0x404c840)

11.465741202s ago: executing program 5 (id=2283):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.33590612s ago: executing program 2 (id=2285):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')
syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x6, {0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
close(0x3)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1e3, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)})

9.158127778s ago: executing program 2 (id=2286):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r7)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

8.019402707s ago: executing program 2 (id=2288):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
r3 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
ftruncate(r3, 0x200004)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x0, 0x6, "5b29ab", 0x0, 0x6c, 0x0, @mcast2, @mcast1, [], "eb0000006fad50b3"}}}}}}}, 0x0)
read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0xfffffe9f)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040))
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0})
sendfile(r2, r3, 0x0, 0x80001d00c0d1)
openat(r3, 0x0, 0x0, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
close(r9)

7.912777764s ago: executing program 5 (id=2289):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x8000, 0x4)
connect$inet6(r3, 0x0, 0x0)
sendmsg$inet6(r3, 0x0, 0x6b87bd76ddbcbbe)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)

7.912041508s ago: executing program 0 (id=2290):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004b40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035007465616d5f736c6176655f310000000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008040)
unshare(0x22020400)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000500)=ANY=[@ANYBLOB], 0x150)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000180)=@ctrl_frame=@rts={{}, {0x5}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x7, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x101202, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200"], 0x34}}, 0x400c840)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000300)={0x9, 0x7ff})
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x8, 0x64, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x1000000000000010, 0x80802, 0x0)

6.823107133s ago: executing program 0 (id=2291):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioperm(0x0, 0x7fff, 0x15f9)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0x84140, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
keyctl$clear(0x5, 0xfffffffffffffffe)
unshare(0x22020600)

6.822746529s ago: executing program 5 (id=2292):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x3}, 0x18)
io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f0000000300), 0x1)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)

6.822040356s ago: executing program 2 (id=2293):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$unix(0x1, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x0, 0x4, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x2, 0x0, 0xfffffffffffffd60)

5.470096102s ago: executing program 0 (id=2294):
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x212d40, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.417914742s ago: executing program 0 (id=2295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0)

5.396211943s ago: executing program 2 (id=2296):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0)
recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10001, 0x0)

5.250723022s ago: executing program 5 (id=2297):
socket$inet6(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$phonet(0x23, 0x2, 0x1)
setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r5=>0x0})
bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10)
socket(0x2, 0x80805, 0x0)

1.278694514s ago: executing program 0 (id=2298):
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan0\x00'})
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

1.277405096s ago: executing program 5 (id=2299):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mq_open(&(0x7f0000000000)='\x00', 0x802, 0x24, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = syz_open_dev$radio(0x0, 0x2, 0x2)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r6 = epoll_create(0x32)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f00000000c0)={r6, r4, 0x6})

1.275921486s ago: executing program 2 (id=2300):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = io_uring_setup(0x2e34, &(0x7f0000000180))
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"1a17924ab218eacb15a3fccf929e2dd2497903c1f853d95b995c65e99449ff953fa11c7723b2149ecdaa7f833f60e13b19a66e963f7e8da4297ebbfdda5b36fb4d01bd02e6c652dc4d99e2cb82c2a1d4a45e4c89ba9994e82f854bbc34a40b3a58aa256c9b4512fbf91b9846446c4909e4ec53982e7d7fd11ee0bdeab0bb4c469c9665dde8cb58f0ca148223b6cc4e2f306cfbeccedec8db5212f2fc4e14f836c68bdace4db1afbde9d463e5ac24567925b5fdf0e3af1a52dbd7669fe9227302c8f635bc2ddbf5bd7dccd7b92a9bd5c7363375a57851c2bc72509f2005f138f5a59cf85e9ddb1c972c89d50806e8941b7059cd3eca77527a7f20af70841b4d6f026614bdbb276a6814cc74d91856b968c5fdb52674d892a90d01ab91841b6811def78bdac9bc6f9df2598569fbdfef75079832b2750801dc83fd1987713c61136ac9e5f2f7e67f302109bb9a7fea75290b506a89a19d7e0e472937a8c9ecfe16ef6eb88c7a88a060756196d55d6a3d3f7cdf9915d22b6b3af69ec55017b821ec0621e8a59414efc2b46977a85846b53ae75a350947afcafbdef7233cc371bc2a6f29c0315b352ac2741c81df534303ddb30a4408db5679d05d245259c245c9d7f861711cc287cfd0462b948512623b921060386c587fd166df29e71ecfc8ed90031e95b2af1406b5ae73f6084e39e88194e3d37dc801982656b5b66342d74100f9f5b8c94c1e91b626bbf426a07b4be91dbdb76a6e40d0b788f89359e462e69bc4499fd4f9aa1e7f0c3f73a996b6ecef606c7651286e1f18a6823eed7191cd542057eaaf09aa32e8ce370c09050278b85fd359b8ca23e66e9d294ec57b3ddd90409d9b1ca28c6993b244f8ca46f6bf478ff22fb1df53e33abdda4b2b1e5cff7de19957bdc8e7ca39e4762204b1f9f33b9375b7282422b91841706751038e42023ba45c1cd0998c1794c1c2a5ff65466189bbb27bcbf01e5a48bfd8b6845f7d5c87d977df4ded5273ebf56b96c50b4eadc44bfaa0994259eeb1031644415fa9d729753d2138b06f9b7b624d9eeb1ef71dfdff0b639078f058c7a070451c4670af0c6eb1202f77be82faba9b6287995066b5f7e59b7967706d8d8c5bde48137e13df537ae54664fe4e8460b1bdf5b92a1dcf39ee1726bc6690d0ac5f799bcfab918c59cb132c45054ba17b8a44d505ad3eaeee95b4275b25b2087da8902552727a1e739014df348cfa3a1102661c35a6a38df6c410f5343577955dd57de5af089e3f1bcdf96d4ef1d5944243470b0ed10616144cccc5cac44e36fefd9441120c5d047867af0ea353da21fc0ae73b78b84d53a62efeb94ea8d441cc698c92fd7b36cf41472d036c5093bbdf943620c29ffa3b21ef4a0bb9274912b046834ee6f855ceadf18fb488040d5829ab6e8bf69a90315f7f84d002ac4e929e9f1010a8486746bd316799ba3a65744980c388202324ba50768c77a8481ba74d135da7507048c82714a8234837b69922126e4084a68f7418bfd26417cade786c7f8185e2492e3b64eb9d2c2c721504c7b4aeb383503f745fd69315c56b5b0158decd1b1606a63366b7e2d2b9124b6efca4480c703c8f37d6ddff55b0ec15f2ce6be6c902d06aec2ccabeba13b442b608076c33d19e690ab66cf6678d679758d22fb5d8d963f25d00c45576f8b2938543080297b9cb6c305e3131d2f412f00370c285251909f8ebefc3d18a23e25a183997b08251450b29fff32781e6a70e6e070ab3921f3f809392deb732d6f30cc034b5f77d41218bca86d515b16da0457dbf7aaefdcef9d5358e7b4f1e5d1a410f55449e765609d122f938fd57b71482244dff0523067cabfd322fc47aca1c331112e3d969f5fe3594c3c7adea7c36e9b9af6754cdea5ccf05b139f783d4b24540c50a6a9f7dff472d47c87c151d8439b5740cd1f423335dae2680050bd44766159cba66666b7dbc9e190130494327a0d8c9dbed5c8b831ce2b2bb236353ff7175a48b61a0f3209fa3db44f07a21a485ef1682a33cdf632ac2d6ca993b6cd90913e31704bb851711e1f2b5ebb19baaba102dd42d550933e9dfc17311665fef4d0206d7debbcbbd97efafffb905bf9a77b8eeb67d5f8bef8526f6f8607672bb3c50b14e16c264265594e05fa481f724290abdc9f60a899f26033236e3b90548c24288a7b627b51c4d7c638c359ec6325b0d79e1d69cf18cd9136a263b6aa84ad062b9831fc7c201b7ccec7d3b7ea2132ee4579632bf614bcde285527c36ef8a8e12651ef34a677a8d2f84360afa2f2245e4e0d61a12e8e446045fae61375082f983363795f11848edad24b3f7ae53f0eeb329fa62b6d7b446e3b2c1257981f9c0c3ea371c71021af834a285203b2e3177ddf5251044ea215c048f78701dec36a94ca3c435278d1fd889996adf5ea7c8db62f2b1331bc22c4b7798d587a5c4e619b7b576e19d92996bc0bdc0c8c15374e11b6eeda0e18b35aac4b96db9cdba025080bf5bea4ffdf4fa3c93ec5feede0a140f7f6727ef255783565935d59d348aaa6d12c060afd5f6d084346309d8cbf54b33050ecccf30ae083c4034165880214a94a5296427e2fcb6d90692a82212b6b8d86c6d163f0643944aaba4af1171aed463994f1374e1ec1654b89b04e9d635074e8d131bc2443daf1caad455671470329a287f4c711cb907403d5c05184cd3a647823b5b9c6dc4451fdde92dc1cb87010197026458b40d4809ab60aca1af6bb3702a3e0506cdd21faa6d9909f4ed74723de75fc48d44314fa3cc0c8e8ea226ec1d5875b9595aeacdff0a9f75b4a60dde781c58179f997ecb6479c91ecacc65bfe293a2d26c21ae7c1d7be1241cc1c4ea86a6cf8d93012bd98508aae8db723ff167026298cab227b7d0062c27ccc8e81df7268423ad063638760b44e77147ee9bd84140166ae2bfd592f845ca68c719f7520ae3c9988cc89db73bf93ad6f2f7d9394b2288f0176723acd167081ade4e066a26832f7b655cd874aa5026a7369bb9912c90599d1407f0488a9c540a31997890f5433bd1df91ba13a9e0721c9a707eac7cff1c3efef6cd716779c7ad631c3560caa2031d9d2591329c1867d0d5f96b5897cac2c6a381f0ce5c27969c2b3e7d188e1e896d815b01a3e177933817325953140272ad718a36ae522d43de109ba92255ee66d2a14897f2b2014dc9a495c108727e0eef54df617e269e43a0c48d28a91aaf14d58719e21ea39c1c534e39a1dfabb61377b55d2f69fe79c7d5111b8b952c388925ea8ab1503ae68bce95a34a10a85aa0e5da52add14b93eaac5861a6504e23dda8034e809253c1071ddda934663faac454cd378c5725f5c6f4d943779994357185e512a4b6993156e624f25d86d24e7254d3e9b231aa80ed5a32e108cb528d402f93e58c25ac937420ff7dcd7d9ec2126c7fe7cefa47c038f23de40523d5e026fe3bb4cfd3040f9bd9631cf5a2cde1e20a6032703cd64c2ad97ea95d05a7aa3ea3b3b9d5a86961116dd1338c0a2caae0ceab3178ac7736dfa8a949cd81d261748e6678cb730b57468fb2b7e22c5eb08ad496e76775dce0c31950a596580ad7d6c3fd9ce90dded340f20b77fe53e81fb6e2a7a6c450b8ac9009c7c077893f704457a90401fb758c0769fbfd38e40ae692e410b889bbf0b09a32dc731b6768c0fa3963a5b6279b6a5db611174339f3218fff567f6cfb7377ddc8e2c730da35cc3ec680a6bc95010dd03834caab7afb2c0023ad9ce3aae3c0fd1ece42ea840bf5fc798a0b5fbe7692f13549cdba4a0b68f722ef6877856a76fc3c39f7cfd760675a9f341d9f09f381972be9171e50455ed13e665e61a03b0c2a79276a871c25fc5c486639a71a8dfdf36174373b8995014752aba3026045be6b43074ac3824d687bbf5f6544228cea52791828f54980ee9f728534ea32edd205aaace717adcf61ce28f92719048d44b09812bcfd2d22cc9d7a45ed6b4634756f6b3189908c71728c373ea94aa5c74ce4a73c20138b8cb21db6e2dfb35329b86b1805a5208dd370b8342ca8aa3cbd3e7a3ec79d7b8ee677b04e19c524ddc6de0b22443ac15de908f61719399d0f9890ca2b0283a7db914944f424af10ba0ec9e3e253c060d7b28552eaae5eed1e906f8f93c2195293deabdad6cb38ddab51603e4a96ef1e086de911fb716ffbca467294d9e66e5d0f8225bc28d6c074c4ffba76706f61b0b386b7e4b6500a15fad291f34f6c84f1596a97512f31196a529a7a5725437c038e17d531da3838c8aef3bade6bc1d4c7624560d4fba72e5f8be2c5dc905e1e4bcb2aa7eddb275408ef4288ac69c7a18ae58fb26c2f5a6964f051b81d2e426fc2a5d8617050341b96d5a746e3419fbe94bd3752403868b655c2dba6f48ef109a2e6ec0041842fae52bfab70481ecfe8d27f3d5e444f1b941d871c8057cbe35df68665bc3aadea02d203b106d1179a428daa7d9fea9dbddd8955bb289a92ec790de74cd6a1edf925ab85471633dedf8ba46abe456963a2381addce2aa16c06dd80bb54d8e53d7c82607916af175061da29122afde8687add6b6f42233b76a1164893dcc1ec3dcf935576d2d0f3ab3b1adbace086da915234b4f9bad0afc2915608fc4f6611dc3b91d7e0e48cb0a0f3fdc70ef70ef82043afbd3325f0f6186390ab28ca9f0009184637530d79f0c5a77c6e912afbe6533988f543fc6c02d3d44fbdb0e2ebfad2680184f1ed451991667df958a71fb41cf4367bdb931389ea8b6340e225b312a09dadd8e2ac2d200db6e75323d48c73c6b819e13f92b01bf405e796a2e10b863e773598abcbcc196987e18b19530337809b56480778207103a12acfff1c0ad62846088251a1a0d0d6b300059a99698c84ccac78d53eb32e3984001978db7679960b4d75d71b49696909826c66320526fe02a060265821d15b8b2337121a201402a118ec03ff0d4f3dfa48f2dadd20b510ecdf4e6440b5b2466b9bf28e32327189f0405245694a6371dbe4eae7a8293cdc15193c284123d64690120634f808096a8f3f7a04a5bac9dd86c09f2e4e87c7d7c98d0b370e84ea5f265730f5480eb1375d4f82c7d4efbb6e58c5a92848331b2becd2531f6c456b5d0e690b102dd8faec55bde56f95727f4abf52c58543faaeb9cefd39bba788bd7e2b02b27ecbc1679a1ac00823c83e1ae29690cd25544d3ae0a8db25e963e9fb5bd94987637ac3546b9b312bf04d5c6211c135e806525d423fde9ccb5ef7962ec1e056e6f29adaeebb331f6c234586d1fe21577f56d620c6942a29d4915772144cc60008d1236db21100d5a3112c29396b9e18cdb5b104bed2df2b6ea72c9aa03bb6082f3eb07f0eae359864967a749492d21005b0d39c9613c20b1e21700ab66a4f5ca03ec08d67b95f759252d758743820ba243032e1708447fbaebc27e1316af4cf547cef3ac4966a1f04dd07012f257a0204107c23a0046b12493d9784b24dc561c1f88e591056bcc3b338ab1de65e5ad578021f26f93e9b12f00b5f8c8ae2db6b7b8f254303c7ff06514735974e65fb9a93dc79b115a12310040490ca11ef315340af104e20a2e22dcd132f7d7a61d9d3a12e832ee048a2170dbe03d747ed7402180eb964fde0ecb77e778b18a4e5a83479bb7e0ea0a7d5145ffed4607bd7e6b8f961625d5e3dcac2d4a05e71dc9c2e52195bd55aed4e6749dc1c329e2cda966d18e9bf882c05db627c1047fc71533bbba2c8a83d04db5bad6da349a9ad1992eb88e0274d32a16137e2396ad973c0ecbbc2d243e68b6959bf9b", 0x1000}}, 0x1006)
umount2(&(0x7f0000000540)='.\x00', 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

6.062255ms ago: executing program 5 (id=2301):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004b40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035007465616d5f736c6176655f310000000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008040)
unshare(0x22020400)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000500)=ANY=[@ANYBLOB], 0x150)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000180)=@ctrl_frame=@rts={{}, {0x5}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x7, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x101202, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200"], 0x34}}, 0x400c840)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000300)={0x9, 0x7ff})
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x8, 0x64, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x1000000000000010, 0x80802, 0x0)

0s ago: executing program 0 (id=2302):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000500)={0x3, r6, 0xffffffff, 0x0, 0xa, 0x1ff, 0x1})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12)

kernel console output (not intermixed with test programs):

00527][ T5875] em28xx 3-1:0.132: Registering V4L2 extension
[  444.715216][   T46] usb 3-1: USB disconnect, device number 31
[  444.731139][   T46] em28xx 3-1:0.132: Disconnecting em28xx
[  445.000055][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'.
[  445.165644][ T5875] usb 3-1: Decoder not found
[  445.189326][ T5875] em28xx 3-1:0.132: failed to create media graph
[  445.208112][ T5875] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  445.313179][ T5875] em28xx 3-1:0.132: Remote control support is not available for this card.
[  445.327315][T10632] netlink: 'syz.3.1537': attribute type 2 has an invalid length.
[  445.394369][   T46] em28xx 3-1:0.132: Closing input extension
[  445.424774][   T46] em28xx 3-1:0.132: Freeing device
[  445.544590][T10640] only policy match revision 0 supported
[  445.544613][T10640] unable to load match
[  445.874756][T10652] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  446.024015][ T5876] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  446.206440][ T5876] usb 5-1: Using ep0 maxpacket: 8
[  446.221207][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  446.250842][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  446.287039][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  446.315283][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  446.353831][T10665] overlayfs: failed to decode file handle (len=11, type=248, flags=0, err=-22)
[  446.371533][ T5876] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  446.391238][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.414565][ T5876] usb 5-1: Product: syz
[  446.418768][ T5876] usb 5-1: Manufacturer: syz
[  446.438604][ T5876] usb 5-1: SerialNumber: syz
[  446.454399][ T5876] usb 5-1: config 0 descriptor??
[  446.516271][ T5876] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22
[  446.776673][ T5876] imon:send_packet: packet tx failed (-71)
[  446.850216][ T5876] imon 5-1:0.0: panel buttons/knobs setup failed
[  446.933354][ T5876] rc_core: IR keymap rc-imon-pad not found
[  446.958255][ T5876] Registered IR keymap rc-empty
[  446.963310][ T5876] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  446.999275][ T5876] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  447.030754][ T5876] imon:send_packet: packet tx failed (-71)
[  447.058551][ T5876] imon 5-1:0.0: remote input dev register failed
[  447.076079][ T5876] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[  447.189471][T10682] xt_CT: No such helper "syz1"
[  447.690457][ T5876] imon 5-1:0.0: unable to initialize intf0, err 0
[  447.727495][ T5876] imon:imon_probe: failed to initialize context!
[  447.749975][ T5876] imon 5-1:0.0: unable to register, err -19
[  447.800579][ T5876] usb 5-1: USB disconnect, device number 28
[  447.966708][T10703] netlink: 'syz.0.1556': attribute type 2 has an invalid length.
[  448.015040][T10703] __nla_validate_parse: 2 callbacks suppressed
[  448.015059][T10703] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1556'.
[  450.099381][T10761] netlink: 'syz.0.1571': attribute type 10 has an invalid length.
[  450.172695][T10761] veth0_macvtap: left promiscuous mode
[  450.532318][T10761] batman_adv: batadv0: Adding interface: macvtap0
[  450.670867][T10761] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.819201][T10761] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  450.902747][T10763] syz_tun: entered allmulticast mode
[  450.936742][T10764] pimreg: entered allmulticast mode
[  450.973933][T10764] syz_tun: left allmulticast mode
[  450.990422][T10764] pimreg: left allmulticast mode
[  451.472948][T10796] smc: net device bond0 applied user defined pnetid SYZ0
[  451.487232][T10796] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  451.521611][T10796] smc: net device bond0 erased user defined pnetid SYZ0
[  451.546015][T10796] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0
[  451.808277][ T5875] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  451.931161][T10823] netlink: 'syz.5.1587': attribute type 4 has an invalid length.
[  451.942123][   T29] audit: type=1326 audit(1739829401.068:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  451.956259][T10823] netlink: 'syz.5.1587': attribute type 4 has an invalid length.
[  451.964814][   T29] audit: type=1326 audit(1739829401.068:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.021371][ T5875] usb 5-1: Using ep0 maxpacket: 8
[  452.038462][ T5875] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  452.053467][ T5875] usb 5-1: config 179 has no interface number 0
[  452.059940][   T29] audit: type=1326 audit(1739829401.068:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.085516][ T5875] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  452.117640][ T5875] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  452.129095][   T29] audit: type=1326 audit(1739829401.068:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.160474][ T5875] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  452.178923][ T5875] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  452.200710][   T29] audit: type=1326 audit(1739829401.068:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.222421][ T5875] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  452.256531][ T5875] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  452.265770][   T29] audit: type=1326 audit(1739829401.068:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.298188][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.319057][T10805] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  452.350105][   T29] audit: type=1326 audit(1739829401.068:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.414999][   T29] audit: type=1326 audit(1739829401.068:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.491736][   T29] audit: type=1326 audit(1739829401.068:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.542030][   T29] audit: type=1326 audit(1739829401.068:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  452.665285][ T5905] usb 5-1: USB disconnect, device number 29
[  452.671259][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  452.671308][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  453.018172][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'.
[  453.158920][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'.
[  453.183214][T10862] nbd: device at index 64 is going down
[  454.630270][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1600'.
[  454.725396][T10892] erspan0: entered promiscuous mode
[  454.764514][T10892] macvtap1: entered promiscuous mode
[  454.801763][T10892] macvtap1: entered allmulticast mode
[  454.807198][T10892] erspan0: entered allmulticast mode
[  454.825783][T10904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1602'.
[  454.902353][T10896] erspan0: left allmulticast mode
[  454.907840][T10896] erspan0: left promiscuous mode
[  455.560294][T10928] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  455.566858][T10928] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  455.589805][T10928] vhci_hcd vhci_hcd.0: Device attached
[  455.840167][ T5875] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  455.982021][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  456.195036][ T5876] usb 6-1: config 160 has an invalid interface number: 84 but max is 0
[  456.203745][ T5876] usb 6-1: config 160 has no interface number 0
[  456.210022][ T5876] usb 6-1: config 160 interface 84 has no altsetting 0
[  456.266007][ T5876] usb 6-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=c3.9f
[  456.275100][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.292767][ T5876] usb 6-1: Product: syz
[  456.296947][ T5876] usb 6-1: Manufacturer: syz
[  456.301939][ T5876] usb 6-1: SerialNumber: syz
[  456.545915][T10929] vhci_hcd: connection reset by peer
[  456.551889][ T5876] usb-storage 6-1:160.84: USB Mass Storage device detected
[  456.561568][ T5888] vhci_hcd: stop threads
[  456.565920][ T5888] vhci_hcd: release socket
[  456.571596][ T5888] vhci_hcd: disconnect device
[  456.600343][ T5876] usb-storage 6-1:160.84: Quirks match for vid 07c4 pid a4a5: 420
[  456.695974][ T5876] usb 6-1: USB disconnect, device number 3
[  457.990548][T10934] ip6erspan0: entered allmulticast mode
[  458.255097][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'.
[  458.396972][T10950] netlink: 'syz.2.1613': attribute type 1 has an invalid length.
[  458.872987][T10974] netlink: 'syz.4.1622': attribute type 2 has an invalid length.
[  458.891228][T10974] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.1622'.
[  458.904415][T10977] bond0: entered promiscuous mode
[  458.927509][T10977] bond_slave_0: entered promiscuous mode
[  458.944400][T10977] bond_slave_1: entered promiscuous mode
[  458.951052][T10977] batadv0: entered promiscuous mode
[  459.916257][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'.
[  460.417518][T11037] netlink: 'syz.5.1644': attribute type 2 has an invalid length.
[  460.426156][T11037] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.1644'.
[  461.290720][ T5875] vhci_hcd: vhci_device speed not set
[  461.337868][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'.
[  461.986069][ T5876] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  462.059522][T11098] netlink: 'syz.2.1667': attribute type 2 has an invalid length.
[  462.067586][T11098] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1667'.
[  462.170751][ T5876] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  462.183223][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.192045][ T5876] usb 5-1: Product: syz
[  462.196244][ T5876] usb 5-1: Manufacturer: syz
[  462.201229][ T5876] usb 5-1: SerialNumber: syz
[  462.207699][ T5876] usb 5-1: config 0 descriptor??
[  462.216723][ T5876] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 030
[  462.655194][ T5876]  (null): failure reading functionality
[  462.665583][ T5876] i2c i2c-1: failure reading functionality
[  462.674978][ T5876] i2c i2c-1: connected i2c-tiny-usb device
[  463.262952][ T5875] usb 5-1: USB disconnect, device number 30
[  463.283458][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  464.425942][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1675'.
[  464.548762][T11130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  464.673888][  T978] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  464.682420][T10272] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  464.696876][  T978] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  464.861399][T10272] usb 3-1: Using ep0 maxpacket: 8
[  464.868407][T10272] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  464.878294][T10272] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  464.892303][T10272] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  464.901632][T10272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  464.909784][T10272] usb 3-1: SerialNumber: syz
[  464.917517][T11128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  464.941782][   T25] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  465.060274][T11137] netlink: 'syz.5.1679': attribute type 2 has an invalid length.
[  465.068588][T11137] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.1679'.
[  465.117429][   T25] usb 5-1: Using ep0 maxpacket: 16
[  465.125842][   T25] usb 5-1: config 0 has no interfaces?
[  465.135370][   T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  465.144502][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.154748][   T25] usb 5-1: config 0 descriptor??
[  465.399350][  T978] usb 5-1: USB disconnect, device number 31
[  465.721709][T10272] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  465.734119][T10272] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  465.740996][T10272] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  465.768852][T10272] usb 3-1: USB disconnect, device number 32
[  465.928903][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1683'.
[  466.138296][T11152] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  466.547645][   T80] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.570528][   T80] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.624813][  T978] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  466.692593][   T80] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.703651][   T80] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.806506][  T978] usb 3-1: Using ep0 maxpacket: 32
[  466.840301][   T80] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.895373][   T80] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.022338][   T80] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.038076][  T978] usb 3-1: unable to get BOS descriptor or descriptor too short
[  467.064975][   T80] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.076183][  T978] usb 3-1: unable to read config index 0 descriptor/start: -71
[  467.083800][  T978] usb 3-1: can't read configurations, error -71
[  467.324130][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  467.336445][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  467.345527][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  467.357960][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  467.366983][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  467.367015][   T80] bridge_slave_1: left allmulticast mode
[  467.374755][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  467.396811][   T80] bridge_slave_1: left promiscuous mode
[  467.416274][   T80] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.427928][   T80] bridge_slave_0: left allmulticast mode
[  467.433623][   T80] bridge_slave_0: left promiscuous mode
[  467.439598][   T80] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.727180][T11186] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  467.783673][   T80] batman_adv: batadv0: Removing interface: gretap1
[  467.812526][   T80] bond1 (unregistering): (slave gretap2): Releasing active interface
[  468.294456][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  468.306277][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  468.318351][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  468.340575][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  468.356757][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  468.364501][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  468.472819][   T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.483446][   T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  468.495965][   T80] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  468.509068][   T80] bond0 (unregistering): Released all slaves
[  468.667974][   T80] bond1 (unregistering): Released all slaves
[  469.001807][T11205] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1705'.
[  469.469907][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'.
[  469.582594][T11225] program syz.5.1709 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  469.596819][ T5828] Bluetooth: hci1: command tx timeout
[  469.792305][T11222] hsr_slave_1 (unregistering): left promiscuous mode
[  470.097702][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'.
[  470.181162][   T80] hsr_slave_0: left promiscuous mode
[  470.189299][   T80] hsr_slave_1: left promiscuous mode
[  470.196273][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.203903][   T80] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.218144][   T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.226310][   T80] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.257800][   T80] veth1_macvtap: left promiscuous mode
[  470.265211][   T80] veth0_macvtap: left promiscuous mode
[  470.271150][   T80] veth1_vlan: left promiscuous mode
[  470.278784][   T80] veth0_vlan: left promiscuous mode
[  470.543539][ T5828] Bluetooth: hci5: command tx timeout
[  471.826269][ T5828] Bluetooth: hci1: command tx timeout
[  471.839419][   T80] team0 (unregistering): Port device team_slave_0 removed
[  471.847729][   T11] smc: removing ib device syz1
[  472.285263][T11176] chnl_net:caif_netlink_parms(): no params data found
[  472.764267][ T5828] Bluetooth: hci5: command tx timeout
[  473.047061][T11176] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.061264][T11176] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.082048][T11176] bridge_slave_0: entered allmulticast mode
[  473.095963][T11176] bridge_slave_0: entered promiscuous mode
[  473.133323][T11196] chnl_net:caif_netlink_parms(): no params data found
[  473.177536][T11176] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.201953][T11176] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.209216][T11176] bridge_slave_1: entered allmulticast mode
[  473.281646][T11176] bridge_slave_1: entered promiscuous mode
[  473.553047][T11176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.725547][T11176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.839330][   T80] IPVS: stop unused estimator thread 0...
[  473.864368][T11176] team0: Port device team_slave_0 added
[  473.873619][T11176] team0: Port device team_slave_1 added
[  473.879715][T11196] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.887763][T11196] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.895462][T11196] bridge_slave_0: entered allmulticast mode
[  473.902153][T11196] bridge_slave_0: entered promiscuous mode
[  473.933801][T11196] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.948365][T11196] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.955718][T11196] bridge_slave_1: entered allmulticast mode
[  473.963487][T11196] bridge_slave_1: entered promiscuous mode
[  473.986369][T11176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.998772][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.029354][T11176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.044167][ T5828] Bluetooth: hci1: command tx timeout
[  474.056344][T11176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.070694][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.101788][T11176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.115496][T11196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.126939][T11196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.163263][T11196] team0: Port device team_slave_0 added
[  474.176185][T11196] team0: Port device team_slave_1 added
[  474.222706][T11176] hsr_slave_0: entered promiscuous mode
[  474.229077][T11176] hsr_slave_1: entered promiscuous mode
[  474.235173][T11176] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  474.243010][T11176] Cannot create hsr debugfs directory
[  474.252395][T11196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.261221][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.289860][T11196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.306583][T11196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.322251][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.348743][T11196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.466872][T11196] hsr_slave_0: entered promiscuous mode
[  474.483446][T11196] hsr_slave_1: entered promiscuous mode
[  474.490648][T11196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  474.528009][T11196] Cannot create hsr debugfs directory
[  474.952163][T11334] only policy match revision 0 supported
[  474.952188][T11334] unable to load match
[  474.984844][ T5828] Bluetooth: hci5: command tx timeout
[  475.531222][T11196] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  475.707066][T11196] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  475.732794][T11196] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  475.751429][T11196] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  475.786097][T11176] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  475.800551][T11176] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  475.835010][T11176] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  475.853370][T11176] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  476.382487][ T5828] Bluetooth: hci1: command tx timeout
[  477.931511][ T5833] Bluetooth: hci5: command tx timeout
[  477.983815][T11196] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.018931][T11196] 8021q: adding VLAN 0 to HW filter on device team0
[  478.116945][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.124126][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.168475][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'.
[  478.181231][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.188366][ T6295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.600859][T11176] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.644440][T11176] 8021q: adding VLAN 0 to HW filter on device team0
[  478.704665][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.711866][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.752721][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.759905][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.196156][T11196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.299057][T11176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.535503][T11439] netlink: 'syz.5.1742': attribute type 2 has an invalid length.
[  479.576160][T11439] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.1742'.
[  479.760348][T11196] veth0_vlan: entered promiscuous mode
[  479.781209][T11196] veth1_vlan: entered promiscuous mode
[  479.834755][T11196] veth0_macvtap: entered promiscuous mode
[  479.852464][T11196] veth1_macvtap: entered promiscuous mode
[  479.889813][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.908032][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.920957][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.934174][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.951240][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.962905][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  479.980850][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  479.996538][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.016549][T11196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.045315][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.065099][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.077190][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.096214][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.114603][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.128496][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.145239][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.157304][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.176092][T11196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.199662][T11196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.211280][T11196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.222449][T11196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.233507][T11196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.403460][T11176] veth0_vlan: entered promiscuous mode
[  480.444395][T11176] veth1_vlan: entered promiscuous mode
[  480.527701][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.558355][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.578145][T11176] veth0_macvtap: entered promiscuous mode
[  480.615248][T11176] veth1_macvtap: entered promiscuous mode
[  480.696887][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.834870][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.852853][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.910881][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.767100][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.777986][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.791713][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.803022][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.813207][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.845772][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.873044][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.917146][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.962662][T11176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.030762][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.045398][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.061950][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.084284][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.105603][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.125394][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.139247][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.158280][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.179130][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.199790][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.213449][T11176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.230743][T11176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.239794][T11176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.249048][T11176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.258840][T11176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.526745][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.565812][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.632971][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'.
[  482.775347][T11524] netlink: 'syz.5.1753': attribute type 2 has an invalid length.
[  482.787227][T11524] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.1753'.
[  482.896462][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.910395][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.754074][ T5976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.960767][ T5976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.169492][ T5976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.458300][ T5976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.515206][T11568] syz_tun: entered allmulticast mode
[  484.528975][T11568] pimreg: entered allmulticast mode
[  484.535777][T11567] syz_tun: left allmulticast mode
[  484.560719][T11567] pimreg: left allmulticast mode
[  484.566700][   T29] kauditd_printk_skb: 1164 callbacks suppressed
[  484.566715][   T29] audit: type=1800 audit(1739829431.600:1251): pid=11564 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1760" name="/" dev="9p" ino=2 res=0 errno=0
[  484.602346][   T29] audit: type=1326 audit(1739829431.628:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10816 comm="syz.3.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c218cde9 code=0x50000
[  484.722315][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  484.739990][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  484.759189][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  484.769442][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  484.779609][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  484.788465][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  484.960249][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1765'.
[  485.161163][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'.
[  485.363846][T11580] netlink: 'syz.2.1766': attribute type 2 has an invalid length.
[  485.381989][ T5976] bridge_slave_1: left allmulticast mode
[  485.391890][ T5976] bridge_slave_1: left promiscuous mode
[  485.398392][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.421086][ T5976] bridge_slave_0: left allmulticast mode
[  485.426779][ T5976] bridge_slave_0: left promiscuous mode
[  485.433401][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.805101][T11598] 9pnet_fd: Insufficient options for proto=fd
[  486.960388][ T5828] Bluetooth: hci1: command tx timeout
[  487.015631][ T5976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.103669][ T5976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.295837][ T5976] bond0 (unregistering): Released all slaves
[  487.385613][T11615] pimreg: entered allmulticast mode
[  487.391857][T11615] pimreg: left allmulticast mode
[  487.924947][T11572] chnl_net:caif_netlink_parms(): no params data found
[  487.996362][ T5976] hsr_slave_0: left promiscuous mode
[  488.025065][ T5976] hsr_slave_1: left promiscuous mode
[  488.036454][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.060841][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.085075][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.100189][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.188543][ T5976] veth1_macvtap: left promiscuous mode
[  488.198980][ T5976] veth0_macvtap: left promiscuous mode
[  488.208113][ T5976] veth1_vlan: left promiscuous mode
[  488.226432][ T5976] veth0_vlan: left promiscuous mode
[  488.678815][T11657] netlink: 'syz.0.1785': attribute type 4 has an invalid length.
[  489.182069][ T5828] Bluetooth: hci1: command tx timeout
[  489.646296][ T5976] team0 (unregistering): Port device team_slave_1 removed
[  489.754388][ T5976] team0 (unregistering): Port device team_slave_0 removed
[  490.441140][T11622] Set syz1 is full, maxelem 65536 reached
[  491.241651][T11572] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.325937][T11572] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.386895][   T29] audit: type=1804 audit(1739829437.914:1253): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1792" name="/newroot/308/file0" dev="tmpfs" ino=1653 res=1 errno=0
[  491.437943][ T5828] Bluetooth: hci1: command tx timeout
[  491.438737][T11572] bridge_slave_0: entered allmulticast mode
[  491.472279][T11572] bridge_slave_0: entered promiscuous mode
[  491.480629][T11572] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.492044][T11572] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.503244][T11572] bridge_slave_1: entered allmulticast mode
[  491.589890][   T29] audit: type=1804 audit(1739829438.138:1254): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1792" name="/newroot/308/file0" dev="tmpfs" ino=1653 res=1 errno=0
[  491.619940][T11572] bridge_slave_1: entered promiscuous mode
[  491.757459][T11680] lo: entered allmulticast mode
[  491.784630][T11683] pimreg: entered allmulticast mode
[  491.891359][T11572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.075342][T11674] lo: left allmulticast mode
[  492.089830][T11674] pimreg: left allmulticast mode
[  492.188899][T11690] netlink: 'syz.0.1794': attribute type 10 has an invalid length.
[  492.823804][T11572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.843989][T11690] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  493.140978][T11572] team0: Port device team_slave_0 added
[  493.177182][T11572] team0: Port device team_slave_1 added
[  493.223303][T11702] netlink: 'syz.0.1796': attribute type 2 has an invalid length.
[  493.232332][T11702] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1796'.
[  493.257065][T11572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.272113][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.317796][T11572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.403701][ T5976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.428226][T11572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.440863][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.472427][ T5873] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  493.479189][T11572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.527109][ T5976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.586237][T11572] hsr_slave_0: entered promiscuous mode
[  493.603078][T11572] hsr_slave_1: entered promiscuous mode
[  493.614545][T11572] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  493.624636][T11572] Cannot create hsr debugfs directory
[  493.641201][ T5873] usb 7-1: Using ep0 maxpacket: 32
[  493.646639][ T5828] Bluetooth: hci1: command tx timeout
[  493.658910][ T5873] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  493.668446][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.681875][ T5873] usb 7-1: Product: syz
[  493.691405][ T5873] usb 7-1: Manufacturer: syz
[  493.697886][ T5976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.703416][ T5873] usb 7-1: SerialNumber: syz
[  493.753669][ T5873] usb 7-1: config 0 descriptor??
[  493.851876][T11717] bridge_slave_0: left allmulticast mode
[  493.860150][T11717] bridge_slave_0: left promiscuous mode
[  493.883610][T11717] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.912544][T11717] bridge_slave_1: left allmulticast mode
[  493.924178][T11717] bridge_slave_1: left promiscuous mode
[  493.930245][T11717] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.995309][T11717] bond0: (slave 
5
@ÿ): Releasing backup interface
[  494.048262][T11717] bond0: (slave bond_slave_1): Releasing backup interface
[  494.118312][T11717] team0: Port device team_slave_0 removed
[  494.154076][T11717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.161523][T11717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.199628][T11717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.224061][T11717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.260146][T11717] vlan2: left promiscuous mode
[  494.265237][T11717] dummy0: left promiscuous mode
[  494.292522][T11717] bridge0: port 3(vlan2) entered disabled state
[  494.350081][ T5976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.406737][ T5873] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  494.426911][ T5873] peak_usb 7-1:0.0 can0: sending command failure: -22
[  494.434599][ T5873] peak_usb 7-1:0.0 can0: sending command failure: -22
[  494.445841][T11718] team0: Mode changed to "loadbalance"
[  494.538574][ T5873] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22
[  494.927301][ T5836] usb 7-1: USB disconnect, device number 2
[  495.421176][T11770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.444770][T11770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.526414][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1812'.
[  496.453570][ T5976] batman_adv: batadv0: Removing interface: geneve2
[  496.821634][ T5976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  496.836252][ T5976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  496.861613][ T5976] bond0 (unregistering): Released all slaves
[  497.446560][T11799] netlink: 'syz.0.1819': attribute type 2 has an invalid length.
[  497.461490][T11799] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1819'.
[  498.288148][ T5976] hsr_slave_0: left promiscuous mode
[  498.341733][ T5976] hsr_slave_1: left promiscuous mode
[  498.362352][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.387627][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.401621][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.418956][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.485810][ T5976] veth1_macvtap: left promiscuous mode
[  498.491382][ T5976] veth0_macvtap: left promiscuous mode
[  498.514519][ T5976] veth1_vlan: left promiscuous mode
[  498.526471][ T5976] veth0_vlan: left promiscuous mode
[  498.725502][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1827'.
[  498.782158][T11838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.800579][T11838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.812457][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1827'.
[  499.288870][ T5976] team0 (unregistering): Port device team_slave_0 removed
[  500.822566][T11847] netlink: 'syz.6.1831': attribute type 4 has an invalid length.
[  500.836400][ T5976] IPVS: stop unused estimator thread 0...
[  500.870128][T11572] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  500.888336][T11847] netlink: 'syz.6.1831': attribute type 4 has an invalid length.
[  500.939895][T11572] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  500.952366][ T5875] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  500.985511][T11572] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  501.982684][T11572] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  502.278312][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.321355][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  502.331196][ T5875] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  502.382045][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.404036][ T5875] usb 6-1: config 0 descriptor??
[  502.466158][T11864] netlink: 'syz.0.1835': attribute type 2 has an invalid length.
[  502.501221][T11864] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1835'.
[  502.549312][T11572] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.570471][T11572] 8021q: adding VLAN 0 to HW filter on device team0
[  502.605183][  T206] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.612380][  T206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.453204][  T206] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.460398][  T206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.661756][T11883] pim6reg: entered allmulticast mode
[  503.758144][T11895] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  503.996588][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1840'.
[  504.040527][T11906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.041294][T11572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.077427][T11906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.159904][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1840'.
[  504.619491][ T5875] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0013/input/input24
[  504.880590][ T5875] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0013/input/input25
[  505.161774][ T5875] uclogic 0003:256C:006D.0013: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[  505.309610][ T5875] usb 6-1: USB disconnect, device number 4
[  505.673856][   T29] audit: type=1326 audit(1739829451.337:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11967 comm="syz.5.1845" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81f718cde9 code=0x0
[  506.822253][T11969] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1844'.
[  507.524920][T11572] veth0_vlan: entered promiscuous mode
[  507.571632][T11572] veth1_vlan: entered promiscuous mode
[  507.669041][T11572] veth0_macvtap: entered promiscuous mode
[  507.701075][T11572] veth1_macvtap: entered promiscuous mode
[  507.740254][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.758241][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1849'.
[  507.758749][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.785123][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.804103][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.819701][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.848869][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.865010][T11572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.909222][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.932813][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.951067][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  507.955260][T12000] netlink: 'syz.5.1850': attribute type 4 has an invalid length.
[  507.962090][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.017109][T11572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.039582][T11572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.053264][T11572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.094175][T11572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.130285][T11572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.140235][T11572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.152230][T11572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.306116][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.315846][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.386421][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.397100][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.745866][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.794494][ T5905] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  509.996880][T12039] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1855'.
[  510.005932][ T5905] usb 7-1: Using ep0 maxpacket: 32
[  510.030718][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.060686][ T5905] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  510.068744][ T5905] usb 7-1: config 0 has no interface number 0
[  510.084219][ T5905] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  510.099956][T12047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  510.125523][ T5905] usb 7-1: config 0 interface 1 has no altsetting 0
[  510.136432][T12039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  510.211396][ T5905] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  510.223089][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.234768][ T5905] usb 7-1: Product: syz
[  510.239053][ T5905] usb 7-1: Manufacturer: syz
[  510.257630][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1855'.
[  510.279374][ T5905] usb 7-1: SerialNumber: syz
[  510.315374][ T5905] usb 7-1: config 0 descriptor??
[  510.383915][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.111231][T12054] syz.0.1857: attempt to access beyond end of device
[  511.111231][T12054] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0
[  511.145597][ T5905] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  511.159802][T12054] XFS (nbd0): SB validate failed with error -5.
[  511.233446][ T5905] cx231xx 7-1:0.1: Failed to read PCB config
[  511.321334][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.343690][ T6324] block nbd0: Attempted send on invalid socket
[  511.360898][ T6324] I/O error, dev nbd0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0
[  511.365540][ T5905] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71
[  511.563843][ T5905] usb 7-1: USB disconnect, device number 3
[  512.766229][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  512.781020][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  512.790070][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  512.795809][ T5905] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  512.799359][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  512.820157][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  512.827587][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  512.941939][T12080] syz.0.1861: attempt to access beyond end of device
[  512.941939][T12080] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  514.594906][   T35] bridge_slave_1: left allmulticast mode
[  514.609305][   T35] bridge_slave_1: left promiscuous mode
[  514.619263][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.676005][   T35] bridge_slave_0: left allmulticast mode
[  514.682819][   T35] bridge_slave_0: left promiscuous mode
[  514.694899][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1865'.
[  514.742164][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.763706][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'.
[  515.155852][ T5833] Bluetooth: hci1: command tx timeout
[  515.941020][T12109] kvm: apic: phys broadcast and lowest prio
[  517.319706][ T5833] Bluetooth: hci1: command tx timeout
[  518.657224][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  518.670055][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  518.680838][   T35] bond0 (unregistering): Released all slaves
[  519.544087][ T5833] Bluetooth: hci1: command tx timeout
[  520.337999][T12076] chnl_net:caif_netlink_parms(): no params data found
[  520.397414][T12166] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  521.268941][   T35] hsr_slave_0: left promiscuous mode
[  521.577519][T12185] xt_CT: You must specify a L4 protocol and not use inversions on it
[  521.595834][   T35] hsr_slave_1: left promiscuous mode
[  521.645862][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.662581][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.693768][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.712528][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.766964][ T5833] Bluetooth: hci1: command tx timeout
[  521.900086][   T35] veth1_macvtap: left promiscuous mode
[  521.913378][   T35] veth0_macvtap: left promiscuous mode
[  521.927489][   T35] veth1_vlan: left promiscuous mode
[  521.937640][   T35] veth0_vlan: left promiscuous mode
[  521.944626][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1892'.
[  524.889271][T12226] Bluetooth: MGMT ver 1.23
[  525.367674][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1901'.
[  525.540441][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1904'.
[  525.935059][   T35] team0 (unregistering): Port device team_slave_1 removed
[  526.640626][   T35] team0 (unregistering): Port device team_slave_0 removed
[  527.955145][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'.
[  528.092755][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'.
[  528.309231][T12076] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.337058][T12076] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.363363][T12076] bridge_slave_0: entered allmulticast mode
[  528.384903][T12076] bridge_slave_0: entered promiscuous mode
[  528.393042][T12076] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.401150][T12076] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.415368][T12076] bridge_slave_1: entered allmulticast mode
[  528.425720][T12076] bridge_slave_1: entered promiscuous mode
[  528.440644][   T29] audit: type=1800 audit(1739829472.636:1256): pid=12272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1917" name="bus" dev="overlay" ino=222 res=0 errno=0
[  528.546921][T12076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.617982][T12076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.736306][T12076] team0: Port device team_slave_0 added
[  528.789389][T12076] team0: Port device team_slave_1 added
[  528.924732][T12076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.961560][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  528.979582][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.025944][T12076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.050355][T12076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.057689][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.103600][T12076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.266394][T12076] hsr_slave_0: entered promiscuous mode
[  529.296920][T12076] hsr_slave_1: entered promiscuous mode
[  529.303132][T12076] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  529.318400][T12076] Cannot create hsr debugfs directory
[  529.472856][   T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.640545][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'.
[  529.706254][   T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.761580][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  529.785366][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  529.794458][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  529.804155][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  529.820271][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  529.828134][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  529.953820][   T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.259288][   T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.040889][ T5833] Bluetooth: hci2: command tx timeout
[  532.614612][T12336] overlayfs: failed to clone upperpath
[  533.108511][T12353] 9pnet_fd: Insufficient options for proto=fd
[  533.341084][   T35] bridge_slave_1: left allmulticast mode
[  533.349686][   T35] bridge_slave_1: left promiscuous mode
[  533.363379][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.389285][   T35] bridge_slave_0: left allmulticast mode
[  533.429852][   T35] bridge_slave_0: left promiscuous mode
[  533.439775][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.686366][   T25] Process accounting resumed
[  534.261081][ T5833] Bluetooth: hci2: command tx timeout
[  535.968130][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  535.980114][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.991910][   T35] bond0 (unregistering): Released all slaves
[  536.250909][T12300] chnl_net:caif_netlink_parms(): no params data found
[  536.477377][ T5833] Bluetooth: hci2: command tx timeout
[  536.834756][   T35] hsr_slave_0: left promiscuous mode
[  536.857194][   T35] hsr_slave_1: left promiscuous mode
[  536.871632][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.891651][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.919288][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.928754][   T29] audit: type=1804 audit(1739829480.568:1257): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.1947" name="/newroot/125/file1" dev="fuse" ino=1 res=1 errno=0
[  536.934966][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.004178][   T29] audit: type=1804 audit(1739829480.596:1258): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1947" name="/newroot/125/file1" dev="fuse" ino=1 res=1 errno=0
[  537.196004][   T35] veth1_macvtap: left promiscuous mode
[  537.201848][   T35] veth0_macvtap: left promiscuous mode
[  537.250112][   T35] veth1_vlan: left promiscuous mode
[  537.286193][   T35] veth0_vlan: left promiscuous mode
[  538.027598][T12415] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  538.066377][T12415] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  538.733222][ T5833] Bluetooth: hci2: command tx timeout
[  541.002729][   T35] team0 (unregistering): Port device team_slave_1 removed
[  541.129225][   T35] team0 (unregistering): Port device team_slave_0 removed
[  541.280253][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1957'.
[  542.136798][T12476] 8021q: adding VLAN 0 to HW filter on device batadv1
[  542.161248][T12476] bridge0: port 1(batadv1) entered blocking state
[  542.193852][T12476] bridge0: port 1(batadv1) entered disabled state
[  542.214832][T12476] batadv1: entered allmulticast mode
[  542.226262][T12476] batadv1: entered promiscuous mode
[  542.242239][T12476] bridge0: port 1(batadv1) entered blocking state
[  542.248754][T12476] bridge0: port 1(batadv1) entered forwarding state
[  542.261372][ T5876] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  542.277399][T12076] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  542.327468][T12076] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  542.359711][T12076] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  542.402287][T12076] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  542.424857][T12300] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.443817][T12300] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.449803][ T5876] usb 6-1: Using ep0 maxpacket: 8
[  542.451041][T12300] bridge_slave_0: entered allmulticast mode
[  542.482863][T12300] bridge_slave_0: entered promiscuous mode
[  542.483157][ T5876] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  542.497851][T12300] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.512933][T12300] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.523252][ T5876] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  542.528199][T12300] bridge_slave_1: entered allmulticast mode
[  542.560315][ T5876] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  542.571902][T12300] bridge_slave_1: entered promiscuous mode
[  542.597905][ T5876] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  542.608539][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'.
[  542.646584][ T5876] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  542.668794][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.684435][T11952] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  542.701046][T11952] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  542.740699][T12300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.819774][T12300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.908802][T12300] team0: Port device team_slave_0 added
[  542.955680][ T5876] usb 6-1: GET_CAPABILITIES returned 0
[  542.961218][ T5876] usbtmc 6-1:16.0: can't read capabilities
[  543.370737][T12300] team0: Port device team_slave_1 added
[  543.801707][T12496] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90
[  543.854860][   T25] usb 6-1: USB disconnect, device number 5
[  543.879749][T12300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.942389][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1966'.
[  543.951979][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  544.000512][T12300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  544.049353][T12300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  544.064228][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  544.112660][T12300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  544.176022][T12076] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.330510][T12300] hsr_slave_0: entered promiscuous mode
[  544.381639][T12300] hsr_slave_1: entered promiscuous mode
[  544.387786][T12300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  544.419353][T12300] Cannot create hsr debugfs directory
[  544.760435][T12076] 8021q: adding VLAN 0 to HW filter on device team0
[  545.220342][T12076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  545.280273][T12076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  545.391207][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.398401][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.415932][T12564] overlayfs: failed to clone lowerpath
[  545.437964][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.445453][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.924201][T12076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  547.184481][T12300] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  547.240586][T12300] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  547.293788][T12300] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  547.366792][T12300] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  547.598233][T12300] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.676310][T12300] 8021q: adding VLAN 0 to HW filter on device team0
[  547.740873][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.748056][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  547.810934][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.818129][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  547.856906][T12076] veth0_vlan: entered promiscuous mode
[  547.904194][T12076] veth1_vlan: entered promiscuous mode
[  548.074752][T12076] veth0_macvtap: entered promiscuous mode
[  548.135266][T12076] veth1_macvtap: entered promiscuous mode
[  548.186007][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.230042][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.252344][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.280008][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.294918][T12076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  548.328960][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.347943][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.381299][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.417347][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.751203][T12076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  548.781924][T12076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.804742][T12076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.814158][T12076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.838430][T12076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.138213][ T6295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.159254][T12300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.196423][ T6295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.326353][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.357355][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.487969][  T978] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  549.698326][  T978] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  549.723091][  T978] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  549.733324][  T978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  549.772785][T12300] veth0_vlan: entered promiscuous mode
[  549.816873][  T978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  549.836682][T12300] veth1_vlan: entered promiscuous mode
[  549.872671][  T978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  549.993560][  T978] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  550.012243][  T978] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  550.033533][  T978] usb 6-1: Product: syz
[  550.042100][  T978] usb 6-1: Manufacturer: syz
[  550.130880][  T978] cdc_wdm 6-1:1.0: skipping garbage
[  550.136151][  T978] cdc_wdm 6-1:1.0: skipping garbage
[  550.180662][  T978] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  550.199195][  T978] cdc_wdm 6-1:1.0: Unknown control protocol
[  550.421475][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.428147][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.434700][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.441328][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.447879][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.454514][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.460904][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.467531][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.474117][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.480736][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.487093][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.493734][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.500066][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.506690][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.513313][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.519943][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.526334][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.532951][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.539452][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  550.546079][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  550.562547][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  550.563285][ T5888] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.571330][ T5873] usb 6-1: USB disconnect, device number 6
[  550.723737][ T5888] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.786848][T12300] veth0_macvtap: entered promiscuous mode
[  550.810774][T12300] veth1_macvtap: entered promiscuous mode
[  550.866486][ T5888] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.905228][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  550.952374][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  550.962273][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  550.995192][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.005073][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.035569][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.072903][T12300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.121903][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.174406][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.195715][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.229133][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.261587][T12300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.274271][ T5833] Bluetooth: hci4: unexpected event 0x3e length: 368 > 260
[  551.274304][ T5833] Bluetooth: hci4: unexpected subevent 0x0d length: 367 > 260
[  551.289451][ T5833] Bluetooth: hci4: adv larger than maximum supported
[  551.289534][ T5833] Bluetooth: hci4: adv larger than maximum supported
[  551.320085][T12300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.367834][T12300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.511484][ T5888] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.557949][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  551.570632][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  551.589092][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  551.602247][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  551.612690][T12300] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.623423][T12300] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.633829][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  551.641800][T12300] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.642030][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  551.659310][T12300] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.419437][T12695] fuse: Bad value for 'fd'
[  552.532788][   T29] audit: type=1800 audit(1739829495.132:1259): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1992" name="file1" dev="tmpfs" ino=1884 res=0 errno=0
[  552.640173][ T6295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.649581][ T5888] bridge_slave_1: left allmulticast mode
[  552.663695][ T5888] bridge_slave_1: left promiscuous mode
[  552.669465][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.688447][ T6295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.714724][ T5888] bridge_slave_0: left allmulticast mode
[  552.733973][ T5888] bridge_slave_0: left promiscuous mode
[  553.635095][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.838822][ T5828] Bluetooth: hci1: command tx timeout
[  553.889255][T12712] fuse: Bad value for 'fd'
[  556.084063][ T5828] Bluetooth: hci1: command tx timeout
[  556.558525][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.729397][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  556.808581][ T5888] bond0 (unregistering): Released all slaves
[  557.511315][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.519312][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.286907][ T5828] Bluetooth: hci1: command tx timeout
[  558.434808][T12687] chnl_net:caif_netlink_parms(): no params data found
[  558.907478][T12766] netlink: 'syz.2.2010': attribute type 4 has an invalid length.
[  560.787825][ T5828] Bluetooth: hci1: command tx timeout
[  560.795678][T12784] netlink: 'syz.2.2010': attribute type 4 has an invalid length.
[  561.275923][T12687] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.301238][T12687] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.316839][T12687] bridge_slave_0: entered allmulticast mode
[  561.326902][T12687] bridge_slave_0: entered promiscuous mode
[  561.418541][T10272] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  561.441119][ T5888] hsr_slave_0: left promiscuous mode
[  561.449643][ T5888] hsr_slave_1: left promiscuous mode
[  561.462959][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  561.470625][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  561.526422][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  561.544469][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  561.619591][ T5888] veth1_macvtap: left promiscuous mode
[  561.632247][T10272] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.655948][T10272] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  561.659643][ T5888] veth0_macvtap: left promiscuous mode
[  561.672126][ T5888] veth1_vlan: left promiscuous mode
[  561.681907][T10272] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  561.683278][ T5888] veth0_vlan: left promiscuous mode
[  562.484072][T10272] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.511113][T10272] usb 6-1: config 0 descriptor??
[  562.519979][T10272] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  562.527033][T10272] dvb-usb: bulk message failed: -22 (3/0)
[  562.542226][T10272] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  562.551135][T10272] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  562.562666][T10272] usb 6-1: media controller created
[  562.569123][T10272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  562.582174][T10272] dvb-usb: bulk message failed: -22 (6/0)
[  562.589032][T10272] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  562.603978][T10272] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26
[  562.628433][T10272] dvb-usb: schedule remote query interval to 150 msecs.
[  562.635426][T10272] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  562.792935][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.809964][T10272] dvb-usb: bulk message failed: -22 (1/0)
[  562.816045][T10272] dvb-usb: error while querying for an remote control event.
[  562.848960][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.020539][T10272] dvb-usb: bulk message failed: -22 (1/0)
[  563.027911][T10272] dvb-usb: error while querying for an remote control event.
[  563.207650][T10272] dvb-usb: bulk message failed: -22 (1/0)
[  563.213447][T10272] dvb-usb: error while querying for an remote control event.
[  563.378230][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  563.386143][T10272] dvb-usb: bulk message failed: -22 (1/0)
[  563.391916][T10272] dvb-usb: error while querying for an remote control event.
[  563.451945][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  563.583397][T10272] dvb-usb: bulk message failed: -22 (1/0)
[  563.590567][T10272] dvb-usb: error while querying for an remote control event.
[  563.770062][T10272] dvb-usb: bulk message failed: -22 (1/0)
[  563.775984][T10272] dvb-usb: error while querying for an remote control event.
[  563.965767][T10272] dvb-usb: bulk message failed: -22 (1/0)
[  563.971561][T10272] dvb-usb: error while querying for an remote control event.
[  564.109125][T12687] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.117361][T12687] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.126981][T12687] bridge_slave_1: entered allmulticast mode
[  564.133636][T12687] bridge_slave_1: entered promiscuous mode
[  564.146060][ T5873] dvb-usb: bulk message failed: -22 (1/0)
[  564.155493][ T5873] dvb-usb: error while querying for an remote control event.
[  564.221104][T12687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.271321][T12687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.326862][T10272] dvb-usb: bulk message failed: -22 (1/0)
[  564.350365][T10272] dvb-usb: error while querying for an remote control event.
[  564.438456][ T5905] usb 6-1: USB disconnect, device number 7
[  564.535315][ T5905] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  564.581160][T12687] team0: Port device team_slave_0 added
[  564.600844][T12687] team0: Port device team_slave_1 added
[  567.790829][T12687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.802904][T12687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.845694][T12687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.863283][T12687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.870740][T12687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.073024][T12687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.199151][T12687] hsr_slave_0: entered promiscuous mode
[  570.205628][T12687] hsr_slave_1: entered promiscuous mode
[  570.232025][T12687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  570.246221][T12687] Cannot create hsr debugfs directory
[  572.034750][T12889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2033'.
[  574.955995][T12904] libceph: resolve 'c' (ret=-3): failed
[  575.134692][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  576.081482][T12915] Cannot find set identified by id 632 to match
[  577.445877][T12918] hfs: can't find a HFS filesystem on dev nullb0
[  578.588165][T12687] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  578.625436][T12687] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  578.833775][T12687] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  578.850282][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2049'.
[  579.634533][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  579.663967][T12687] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  579.688956][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  579.781955][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2049'.
[  581.613919][T12687] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.799259][T12984] : entered promiscuous mode
[  582.070560][T12687] 8021q: adding VLAN 0 to HW filter on device team0
[  582.626411][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.633627][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.036584][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.043699][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.571373][ T5905] libceph: connect (1)[c::]:6789 error -101
[  584.603499][ T5905] libceph: mon0 (1)[c::]:6789 connect error
[  584.827371][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x30
[  584.855117][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x847
[  584.883566][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x86b
[  584.899071][ T5905] libceph: connect (1)[c::]:6789 error -101
[  584.910580][ T5905] libceph: mon0 (1)[c::]:6789 connect error
[  584.920086][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x8bf
[  584.940303][T13025] netlink: 'syz.7.2061': attribute type 2 has an invalid length.
[  584.966598][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc8
[  584.975914][T13025] netlink: 212912 bytes leftover after parsing attributes in process `syz.7.2061'.
[  585.041411][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x164
[  585.054454][T12687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.083735][T13005] kvm_intel: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x975
[  585.116685][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x9cb
[  585.157670][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x234
[  585.180634][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa4d
[  585.192642][T13005] kvm: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x258
[  585.213259][T13005] kvm_intel: kvm [13003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x2b2
[  585.395127][T13006] ceph: No mds server is up or the cluster is laggy
[  585.500174][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2064'.
[  585.559981][T13048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  585.610690][T13048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  585.623314][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2064'.
[  585.654946][T12687] veth0_vlan: entered promiscuous mode
[  585.690889][T12687] veth1_vlan: entered promiscuous mode
[  585.806207][T12687] veth0_macvtap: entered promiscuous mode
[  585.849431][T12687] veth1_macvtap: entered promiscuous mode
[  586.415846][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.487892][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.529923][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.559159][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.580455][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  586.633151][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.655264][T12687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  586.722273][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.760735][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.804199][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.837122][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.883565][T12687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  586.907154][T12687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  586.938734][T12687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  586.971168][T12687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.001345][T12687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.010105][T12687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.043808][T12687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.247942][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.256053][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.355897][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.556946][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.783462][T13106] netlink: 'syz.2.2075': attribute type 2 has an invalid length.
[  589.836049][T13106] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2075'.
[  592.791887][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.044189][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.125114][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.218717][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.389154][   T35] bridge_slave_1: left allmulticast mode
[  593.405459][   T35] bridge_slave_1: left promiscuous mode
[  593.411269][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.438336][   T35] bridge_slave_0: left allmulticast mode
[  593.444031][   T35] bridge_slave_0: left promiscuous mode
[  593.456041][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.645293][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  596.111599][T13184] netlink: 'syz.2.2088': attribute type 2 has an invalid length.
[  596.120271][T13184] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2088'.
[  596.151143][T12891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  596.161956][T12891] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  596.171935][T12891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  596.184310][T12891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  596.192384][T12891] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  596.201738][T12891] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  597.317538][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  597.334716][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  597.345844][   T35] bond0 (unregistering): Released all slaves
[  597.849433][T13202] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  598.166933][T13205] overlayfs: failed to clone upperpath
[  598.268873][T13209] bond_slave_0: entered promiscuous mode
[  598.275030][T13209] bond_slave_1: entered promiscuous mode
[  598.301374][T13209] macsec1: entered promiscuous mode
[  598.333280][T13209] bond0: entered promiscuous mode
[  598.344370][T13209] macsec1: entered allmulticast mode
[  598.363092][T13209] bond0: entered allmulticast mode
[  598.383181][T13209] bond_slave_0: entered allmulticast mode
[  598.397666][T12891] Bluetooth: hci1: command tx timeout
[  598.408967][T13209] bond_slave_1: entered allmulticast mode
[  598.444185][T13209] bond0: left allmulticast mode
[  598.449086][T13209] bond_slave_0: left allmulticast mode
[  598.457683][T13209] bond_slave_1: left allmulticast mode
[  598.465916][T13209] bond0: left promiscuous mode
[  598.472840][T13209] bond_slave_0: left promiscuous mode
[  598.478349][T13209] bond_slave_1: left promiscuous mode
[  598.530724][T13215] ipvlan2: entered promiscuous mode
[  598.536802][T13215] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  598.546547][T13215] team0: Device ipvlan2 is already an upper device of the team interface
[  598.547598][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2101'.
[  598.605706][T13219] bridge0: entered promiscuous mode
[  598.846558][T13221] bridge_slave_1: left allmulticast mode
[  598.857946][T13221] bridge_slave_1: left promiscuous mode
[  598.863858][T13221] bridge0: port 2(bridge_slave_1) entered disabled state
[  598.882481][T13221] bridge_slave_0: left allmulticast mode
[  598.888320][T13221] bridge_slave_0: left promiscuous mode
[  599.759977][T13221] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.320860][T13222] pimreg: entered allmulticast mode
[  600.343506][T13222] pimreg: left allmulticast mode
[  600.615293][   T35] hsr_slave_0: left promiscuous mode
[  600.623544][T12891] Bluetooth: hci1: command tx timeout
[  600.645094][   T35] hsr_slave_1: left promiscuous mode
[  600.669041][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  600.923597][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  600.942822][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  600.951249][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  602.062004][T13249] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  602.389976][   T35] veth1_macvtap: left promiscuous mode
[  602.429898][   T35] veth0_macvtap: left promiscuous mode
[  602.435546][   T35] veth1_vlan: left promiscuous mode
[  602.465857][   T35] veth0_vlan: left promiscuous mode
[  602.730457][T13256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'.
[  602.822786][T13258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.849565][T13258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.867828][T13258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  602.883143][T12891] Bluetooth: hci1: command tx timeout
[  605.045336][   T35] team0 (unregistering): Port device team_slave_1 removed
[  605.072095][T12891] Bluetooth: hci1: command tx timeout
[  605.118928][   T35] team0 (unregistering): Port device team_slave_0 removed
[  606.371142][T13267] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  606.382790][T13267] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  607.175776][T13276] overlayfs: failed to clone upperpath
[  607.419217][T13185] chnl_net:caif_netlink_parms(): no params data found
[  608.281513][T13293] xt_hashlimit: max too large, truncated to 1048576
[  608.291129][T13293] xt_limit: Overflow, try lower: 0/0
[  608.644071][T13300] pimreg: entered allmulticast mode
[  608.654741][T13298] netlink: 'syz.0.2120': attribute type 4 has an invalid length.
[  609.105388][T13185] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.244871][T13185] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.430974][T13185] bridge_slave_0: entered allmulticast mode
[  609.449212][T13185] bridge_slave_0: entered promiscuous mode
[  609.467872][T13185] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.526312][T13185] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.541085][T13185] bridge_slave_1: entered allmulticast mode
[  609.565152][T13185] bridge_slave_1: entered promiscuous mode
[  611.258442][T13185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.597047][T13185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  613.116421][T13185] team0: Port device team_slave_0 added
[  613.127924][T13185] team0: Port device team_slave_1 added
[  613.307414][T13185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.331470][   T29] audit: type=1800 audit(1739829552.042:1260): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2131" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  613.359355][T13185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.385352][    C0] vkms_vblank_simulate: vblank timer overrun
[  613.425547][T13185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.469607][T13185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.476697][T13185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.508983][T13185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  613.581227][T13185] hsr_slave_0: entered promiscuous mode
[  613.591532][T13185] hsr_slave_1: entered promiscuous mode
[  613.606232][T13185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  613.625621][T13362] overlayfs: failed to clone upperpath
[  613.647303][T13185] Cannot create hsr debugfs directory
[  615.586194][T13385] netlink: 'syz.7.2140': attribute type 1 has an invalid length.
[  619.748205][T13185] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  619.802714][T13185] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  619.863627][T13185] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  619.877179][T13185] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  620.911303][T13438] overlayfs: failed to resolve './file1': -2
[  620.945496][T13185] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.102826][T13185] 8021q: adding VLAN 0 to HW filter on device team0
[  621.118102][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.125284][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.569555][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.576752][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.115511][   T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.214804][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.221254][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.445582][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  625.794788][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.447109][T13185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  627.199888][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  627.214975][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  627.225021][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  627.237242][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  627.245670][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  627.253319][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  627.293321][   T11] bridge_slave_1: left allmulticast mode
[  627.370838][   T11] bridge_slave_1: left promiscuous mode
[  627.376621][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.423861][   T11] bridge_slave_0: left allmulticast mode
[  627.451628][   T11] bridge_slave_0: left promiscuous mode
[  627.528060][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.478089][T12891] Bluetooth: hci2: command tx timeout
[  630.953105][T10272] libceph: connect (1)[c::]:6789 error -101
[  630.959220][T10272] libceph: mon0 (1)[c::]:6789 connect error
[  631.666563][T12891] Bluetooth: hci2: command tx timeout
[  631.869975][T10272] libceph: connect (1)[c::]:6789 error -101
[  632.038794][T10272] libceph: mon0 (1)[c::]:6789 connect error
[  632.198441][T13549] ceph: No mds server is up or the cluster is laggy
[  632.312854][T13561] xt_connbytes: Forcing CT accounting to be enabled
[  632.319847][T13561] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  632.331859][T13561] xt_bpf: check failed: parse error
[  633.020716][ T5873] libceph: connect (1)[c::]:6789 error -101
[  633.026914][ T5873] libceph: mon0 (1)[c::]:6789 connect error
[  633.433189][T13566] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2177'.
[  633.442489][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2177'.
[  633.890039][T12891] Bluetooth: hci2: command tx timeout
[  635.184257][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  635.195834][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  635.216391][   T11] bond0 (unregistering): Released all slaves
[  636.179763][T12891] Bluetooth: hci2: command tx timeout
[  637.871101][T13610] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.2185'.
[  638.046469][T13602] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 39256 - 0
[  638.066024][T13602] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 39256 - 0
[  638.075708][T13602] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 39256 - 0
[  638.084993][T13602] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 39256 - 0
[  638.762731][T13602] geneve2: entered promiscuous mode
[  641.424416][   T11] hsr_slave_0: left promiscuous mode
[  641.430520][   T11] hsr_slave_1: left promiscuous mode
[  641.436404][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  641.467763][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  641.479399][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  641.488837][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  641.515653][   T11] veth1_macvtap: left promiscuous mode
[  641.521764][   T11] veth0_macvtap: left promiscuous mode
[  641.528071][   T11] veth1_vlan: left promiscuous mode
[  641.533559][   T11] veth0_vlan: left promiscuous mode
[  641.808428][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2193'.
[  641.880208][T13656] futex_wake_op: syz.5.2194 tries to shift op by -1; fix this program
[  643.023605][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.583839][   T11] team0 (unregistering): Port device team_slave_1 removed
[  643.646148][   T11] team0 (unregistering): Port device team_slave_0 removed
[  644.290690][T13507] chnl_net:caif_netlink_parms(): no params data found
[  644.496854][T13185] veth0_vlan: entered promiscuous mode
[  646.531303][T13185] veth1_vlan: entered promiscuous mode
[  646.694806][T13507] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.718860][T13507] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.973794][T13507] bridge_slave_0: entered allmulticast mode
[  647.134644][T13507] bridge_slave_0: entered promiscuous mode
[  647.212388][T13507] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.241342][T13507] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.252742][T13507] bridge_slave_1: entered allmulticast mode
[  647.371926][T13507] bridge_slave_1: entered promiscuous mode
[  648.476686][T13507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.164932][T13507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.230023][T13185] veth0_macvtap: entered promiscuous mode
[  649.254461][T13185] veth1_macvtap: entered promiscuous mode
[  650.848711][T13507] team0: Port device team_slave_0 added
[  650.883573][T13507] team0: Port device team_slave_1 added
[  651.066754][T13185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  651.139751][T13185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  651.166938][T13185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  651.192439][T13185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  651.216037][T13185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  651.238232][T13507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  651.249111][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.396576][T13507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  651.418413][T13185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  651.430036][T13185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  651.447070][T13185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  651.457883][T13185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.256520][T13185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.339903][T13185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.350384][T13185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.364993][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2207'.
[  652.378711][T13185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.394307][T13185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  652.557373][T13507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.564435][T13507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.031214][T13507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.327497][T13717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  654.001002][T13714] team0: Port device team_slave_1 removed
[  654.228453][T13507] hsr_slave_0: entered promiscuous mode
[  654.237100][T13507] hsr_slave_1: entered promiscuous mode
[  654.243281][T13507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  654.251768][T13507] Cannot create hsr debugfs directory
[  656.168275][ T5905] libceph: connect (1)[c::]:6789 error -101
[  656.275205][T13742] ceph: No mds server is up or the cluster is laggy
[  656.298078][ T5905] libceph: mon0 (1)[c::]:6789 connect error
[  656.330288][T13749] netlink: 81 bytes leftover after parsing attributes in process `syz.0.2216'.
[  656.400546][T13754] netlink: 'syz.5.2217': attribute type 1 has an invalid length.
[  657.050278][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.056994][T13754] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  657.099980][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.275524][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.306758][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  658.322101][T13507] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  658.366913][T13507] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  658.619317][T13507] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  659.442974][T13507] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  660.766622][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  660.963153][T13775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2223'.
[  660.980940][T13774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  661.054115][T13785] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  661.451130][T13507] 8021q: adding VLAN 0 to HW filter on device bond0
[  661.513641][T13507] 8021q: adding VLAN 0 to HW filter on device team0
[  661.522903][   T29] audit: type=1326 audit(1739829597.119:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  661.882735][   T29] audit: type=1326 audit(1739829597.119:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  661.979656][   T29] audit: type=1326 audit(1739829597.119:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  662.041251][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.048407][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  662.075384][   T29] audit: type=1326 audit(1739829597.119:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  662.190706][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.197844][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.245110][T13789] gre1: entered promiscuous mode
[  662.252187][   T29] audit: type=1326 audit(1739829597.119:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  662.423982][   T29] audit: type=1326 audit(1739829597.119:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  662.466080][   T29] audit: type=1326 audit(1739829597.119:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  663.435998][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  663.448628][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  663.457008][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  663.472207][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  663.482205][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  663.489368][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  663.535423][   T29] audit: type=1326 audit(1739829597.147:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  663.559040][   T29] audit: type=1326 audit(1739829597.212:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  663.587375][   T29] audit: type=1326 audit(1739829597.212:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13787 comm="syz.5.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f718cde9 code=0x7ffc0000
[  664.080556][  T975] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  664.723270][  T975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  664.873048][  T975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  664.890431][  T975] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  664.910933][  T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  665.636022][  T975] usb 6-1: SerialNumber: syz
[  665.646824][ T5888] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.708321][T12891] Bluetooth: hci1: command tx timeout
[  665.727224][T13507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  665.923641][  T975] usb 6-1: 0:2 : does not exist
[  665.973262][  T975] usb 6-1: unit 255 not found!
[  666.006982][  T975] usb 6-1: 5:0: cannot get min/max values for control 16 (id 5)
[  666.036093][ T5888] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.060878][  T975] usb 6-1: 5:0: cannot get min/max values for control 17 (id 5)
[  666.094453][  T975] usb 6-1: 5:0: cannot get min/max values for control 18 (id 5)
[  666.152173][  T975] usb 6-1: USB disconnect, device number 8
[  666.511041][ T5888] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.537573][T13792] udevd[13792]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  667.637101][T13839] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2237'.
[  667.930704][T12891] Bluetooth: hci1: command tx timeout
[  668.041434][ T5888] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.003425][T13834] team0: Port device team_slave_1 removed
[  669.050668][T13798] chnl_net:caif_netlink_parms(): no params data found
[  669.192857][T13507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.368113][T13798] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.387114][T13798] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.395895][T13798] bridge_slave_0: entered allmulticast mode
[  669.403098][T13798] bridge_slave_0: entered promiscuous mode
[  669.412364][ T5888] bridge_slave_1: left allmulticast mode
[  669.426014][ T5888] bridge_slave_1: left promiscuous mode
[  669.433797][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.474226][ T5888] bridge_slave_0: left allmulticast mode
[  669.484663][T13836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.489889][ T5888] bridge_slave_0: left promiscuous mode
[  669.511973][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.173276][T12891] Bluetooth: hci1: command tx timeout
[  673.253000][T12891] Bluetooth: hci1: command tx timeout
[  674.170935][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'.
[  674.180044][T13881] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  674.288865][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  674.288882][   T29] audit: type=1326 audit(1739829609.054:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  674.322280][   T29] audit: type=1326 audit(1739829609.054:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  674.460380][   T29] audit: type=1326 audit(1739829609.120:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  674.482938][   T29] audit: type=1326 audit(1739829609.120:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  674.525032][   T29] audit: type=1326 audit(1739829609.120:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  674.557909][   T29] audit: type=1326 audit(1739829609.120:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  675.401756][   T29] audit: type=1326 audit(1739829609.120:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  675.449743][   T29] audit: type=1326 audit(1739829609.120:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  675.472351][   T29] audit: type=1326 audit(1739829609.120:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  675.495487][   T29] audit: type=1326 audit(1739829609.120:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f185038cde9 code=0x7ffc0000
[  675.585996][T13890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  675.607896][T13890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  675.619602][T13890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2252'.
[  676.599809][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  676.620886][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  676.643598][ T5888] bond0 (unregistering): Released all slaves
[  676.670378][T13798] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.678637][T13798] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.693518][T13798] bridge_slave_1: entered allmulticast mode
[  676.708000][T13798] bridge_slave_1: entered promiscuous mode
[  677.339389][T13798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  677.407083][T13798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  677.629586][T13507] veth0_vlan: entered promiscuous mode
[  677.712544][T13798] team0: Port device team_slave_0 added
[  677.721001][T13798] team0: Port device team_slave_1 added
[  677.759003][T13907] netlink: 'syz.0.2254': attribute type 2 has an invalid length.
[  677.841368][T13907] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2254'.
[  677.859552][ T5888] hsr_slave_0: left promiscuous mode
[  678.015535][ T5888] hsr_slave_1: left promiscuous mode
[  678.147434][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  678.240475][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  678.358777][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  678.404546][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  678.551988][T13905] kvm_pr_unimpl_wrmsr: 2 callbacks suppressed
[  678.552007][T13905] kvm: kvm [13903]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x53000037f0
[  678.558822][ T5888] veth1_macvtap: left promiscuous mode
[  678.812274][ T5888] veth0_macvtap: left promiscuous mode
[  678.817939][ T5888] veth1_vlan: left promiscuous mode
[  678.823738][ T5888] veth0_vlan: left promiscuous mode
[  683.403280][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'.
[  683.498239][T13951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2264'.
[  683.738862][ T5888] team0 (unregistering): Port device team_slave_1 removed
[  683.800514][ T5888] team0 (unregistering): Port device team_slave_0 removed
[  684.376941][T13507] veth1_vlan: entered promiscuous mode
[  684.457984][T13798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.464971][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  684.492633][T13798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.534610][T13946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  684.563984][T13798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.575170][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  684.617330][T13798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  684.695791][T13798] hsr_slave_0: entered promiscuous mode
[  684.706291][T13798] hsr_slave_1: entered promiscuous mode
[  684.728513][T13798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  684.736456][T13798] Cannot create hsr debugfs directory
[  684.807075][T13958] netlink: 'syz.5.2267': attribute type 2 has an invalid length.
[  684.815076][T13958] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.2267'.
[  684.874554][T13507] veth0_macvtap: entered promiscuous mode
[  685.004856][T13507] veth1_macvtap: entered promiscuous mode
[  685.968694][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  685.979335][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.178053][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  686.188598][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  686.199714][T13507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.326707][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  686.339174][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  687.343051][T13507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  687.374599][T13507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  687.558584][T13507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  690.285315][T14000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  690.307082][T14000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  690.322450][T14000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2277'.
[  690.688586][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  690.704395][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  690.712793][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  690.721910][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  690.731270][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  690.738785][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  692.995030][T12891] Bluetooth: hci5: command tx timeout
[  694.065153][T14031] netlink: 'syz.0.2284': attribute type 1 has an invalid length.
[  694.201060][T14031] bond1: entered promiscuous mode
[  694.206249][T14031] bond1: entered allmulticast mode
[  694.217298][T13798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  694.238545][T10272] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  694.252126][T13798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  694.276900][T13798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  694.419656][T13798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  694.439185][T10272] usb 6-1: Using ep0 maxpacket: 8
[  694.490881][T10272] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  694.552075][T10272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.583394][T10272] usb 6-1: Product: syz
[  694.587601][T10272] usb 6-1: Manufacturer: syz
[  694.600070][T10272] usb 6-1: SerialNumber: syz
[  695.319013][T10272] usb 6-1: config 0 descriptor??
[  695.329133][T12891] Bluetooth: hci5: command tx timeout
[  695.441005][T10272] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71
[  695.449738][T14043] openvswitch: netlink: Message has 4 unknown bytes.
[  695.469236][T10272] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  695.480732][T10272] usb 6-1: USB disconnect, device number 9
[  695.665071][T13798] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.683030][T13798] 8021q: adding VLAN 0 to HW filter on device team0
[  695.735592][T14051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  695.786412][  T206] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.793596][  T206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.804898][T14051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  695.808629][  T206] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.821888][  T206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.834944][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2290'.
[  695.897738][T14058] ptrace attach of "./syz-executor exec"[10015] was attempted by ""[14058]
[  696.522375][T14005] chnl_net:caif_netlink_parms(): no params data found
[  697.520897][T12891] Bluetooth: hci5: command tx timeout
[  699.394385][T14005] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.414775][T14005] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.458438][T14005] bridge_slave_0: entered allmulticast mode
[  700.332178][T12891] Bluetooth: hci5: command tx timeout
[  700.483246][T14005] bridge_slave_0: entered promiscuous mode
[  701.237945][ T1143] bridge_slave_1: left allmulticast mode
[  701.422057][ T1143] bridge_slave_1: left promiscuous mode
[  701.427919][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.440088][ T1143] bridge_slave_0: left allmulticast mode
[  701.446706][ T1143] bridge_slave_0: left promiscuous mode
[  701.452419][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.889952][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  701.902043][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  701.912779][ T1143] bond0 (unregistering): Released all slaves
[  701.945779][T13798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  702.144397][T14005] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.171074][T14005] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.178341][T14005] bridge_slave_1: entered allmulticast mode
[  702.224089][T14005] bridge_slave_1: entered promiscuous mode
[  703.324480][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  703.481500][ T6295] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] PREEMPT SMP KASAN PTI
[  703.494117][ T6295] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]
[  703.502523][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: kworker/u8:11 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0
[  703.513443][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  703.523488][ T6295] Workqueue: events_unbound netfs_write_collection_worker
[  703.530618][ T6295] RIP: 0010:iov_iter_revert+0x2da/0x590
[  703.536155][ T6295] Code: 20 00 74 08 4c 89 ef e8 b4 b5 3a fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 1d
[  703.555760][ T6295] RSP: 0018:ffffc90003597630 EFLAGS: 00010203
[  703.561821][ T6295] RAX: 0000000000000023 RBX: ffffc900035977c0 RCX: ffff888025d05a00
[  703.569780][ T6295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  703.577739][ T6295] RBP: 000000000000011e R08: ffffffff84ebbd95 R09: ffffffff84ebbc24
[  703.585704][ T6295] R10: 0000000000000004 R11: ffff888025d05a00 R12: dffffc0000000000
[  703.593663][ T6295] R13: 0000000000000000 R14: 0000000000000001 R15: 000000000000001e
[  703.601621][ T6295] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  703.610535][ T6295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  703.617104][ T6295] CR2: 00007f8b834d56c0 CR3: 000000000e938000 CR4: 00000000003526f0
[  703.625067][ T6295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  703.633025][ T6295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  703.640981][ T6295] Call Trace:
[  703.644246][ T6295]  <TASK>
[  703.647167][ T6295]  ? __die_body+0x5f/0xb0
[  703.651490][ T6295]  ? die_addr+0xb0/0xe0
[  703.655644][ T6295]  ? exc_general_protection+0x3dd/0x5d0
[  703.661189][ T6295]  ? asm_exc_general_protection+0x26/0x30
[  703.666899][ T6295]  ? iov_iter_revert+0x104/0x590
[  703.671823][ T6295]  ? iov_iter_revert+0x275/0x590
[  703.676762][ T6295]  ? iov_iter_revert+0x2da/0x590
[  703.681690][ T6295]  netfs_retry_writes+0x17db/0x19b0
[  703.686887][ T6295]  ? __pfx_validate_chain+0x10/0x10
[  703.692099][ T6295]  ? mark_lock+0x9a/0x360
[  703.696430][ T6295]  ? __lock_acquire+0x1397/0x2100
[  703.701449][ T6295]  ? __pfx_netfs_retry_writes+0x10/0x10
[  703.706989][ T6295]  ? register_lock_class+0x102/0x980
[  703.712266][ T6295]  ? __pfx_register_lock_class+0x10/0x10
[  703.717892][ T6295]  netfs_write_collection_worker+0x2f90/0x3bb0
[  703.724054][ T6295]  ? process_scheduled_works+0x9c6/0x18e0
[  703.729763][ T6295]  process_scheduled_works+0xabe/0x18e0
[  703.735308][ T6295]  ? __pfx_process_scheduled_works+0x10/0x10
[  703.741293][ T6295]  ? assign_work+0x364/0x3d0
[  703.745872][ T6295]  worker_thread+0x870/0xd30
[  703.750454][ T6295]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  703.756349][ T6295]  ? __kthread_parkme+0x169/0x1d0
[  703.761374][ T6295]  ? __pfx_worker_thread+0x10/0x10
[  703.766473][ T6295]  kthread+0x7a9/0x920
[  703.770534][ T6295]  ? __pfx_kthread+0x10/0x10
[  703.775118][ T6295]  ? __pfx_worker_thread+0x10/0x10
[  703.780244][ T6295]  ? __pfx_kthread+0x10/0x10
[  703.784821][ T6295]  ? __pfx_kthread+0x10/0x10
[  703.789401][ T6295]  ? __pfx_kthread+0x10/0x10
[  703.793993][ T6295]  ? _raw_spin_unlock_irq+0x23/0x50
[  703.799179][ T6295]  ? lockdep_hardirqs_on+0x99/0x150
[  703.804364][ T6295]  ? __pfx_kthread+0x10/0x10
[  703.808945][ T6295]  ret_from_fork+0x4b/0x80
[  703.813349][ T6295]  ? __pfx_kthread+0x10/0x10
[  703.817943][ T6295]  ret_from_fork_asm+0x1a/0x30
[  703.822709][ T6295]  </TASK>
[  703.826250][ T6295] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  703.830845][ T6295] ---[ end trace 0000000000000000 ]---
[  703.839376][T14119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  703.927141][ T6295] RIP: 0010:iov_iter_revert+0x2da/0x590
[  703.932742][ T6295] Code: 20 00 74 08 4c 89 ef e8 b4 b5 3a fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 1d
[  703.974877][ T6295] RSP: 0018:ffffc90003597630 EFLAGS: 00010203
[  703.984346][ T1143] hsr_slave_0: left promiscuous mode
[  703.990785][ T1143] hsr_slave_1: left promiscuous mode
[  703.991690][ T6295] RAX: 0000000000000023 RBX: ffffc900035977c0 RCX: ffff888025d05a00
[  703.998612][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  704.008258][ T6295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  704.015363][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  704.021751][ T6295] RBP: 000000000000011e R08: ffffffff84ebbd95 R09: ffffffff84ebbc24
[  704.035969][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  704.041818][ T6295] R10: 0000000000000004 R11: ffff888025d05a00 R12: dffffc0000000000
[  704.043479][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  704.061968][ T6295] R13: 0000000000000000 R14: 0000000000000001 R15: 000000000000001e
[  704.072096][ T1143] veth1_macvtap: left promiscuous mode
[  704.080406][ T1143] veth0_macvtap: left promiscuous mode
[  704.085296][ T6295] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  704.094820][ T6295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  704.105734][ T1143] veth1_vlan: left promiscuous mode
[  704.106107][ T6295] CR2: 00005641c1834088 CR3: 000000006ac9c000 CR4: 00000000003526f0
[  704.121721][ T1143] veth0_vlan: left promiscuous mode
[  704.138903][ T6295] Kernel panic - not syncing: Fatal exception
[  704.145144][ T6295] Kernel Offset: disabled
[  704.149459][ T6295] Rebooting in 86400 seconds..