last executing test programs:

10m6.357184848s ago: executing program 4 (id=348):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8800)

9m55.771226538s ago: executing program 4 (id=371):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@buf)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec)
bind$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0xfe19}, 0xe)

9m51.916757829s ago: executing program 4 (id=375):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
syz_open_procfs(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x9, 0xf6, 0x7}], 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m50.0332429s ago: executing program 4 (id=379):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@setlink={0x44, 0x13, 0x1, 0x200000, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x20802, 0x4414}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}]}, 0x44}}, 0x0)

9m49.427701789s ago: executing program 4 (id=382):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240)
write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@buf)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec)

9m47.183848166s ago: executing program 4 (id=384):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
socket(0x10, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

9m31.426585638s ago: executing program 32 (id=384):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1)
socket(0x10, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

9m4.070160896s ago: executing program 5 (id=460):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'})
syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100)=0x2, 0x4)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006)

9m2.680228978s ago: executing program 5 (id=463):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@buf)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = openat$cgroup_type(r7, 0x0, 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec)
bind$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0xfe19}, 0xe)

9m1.240157431s ago: executing program 5 (id=466):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x96, 0x90, 0x34, 0x20, 0x2058, 0x1005, 0xb5f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0x51, 0x8e, 0x3f}}, {{0x9, 0x4, 0x62, 0x0, 0x0, 0xd1, 0xd8, 0xa3, 0xff}}]}}]}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1)
signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x181}, "3f60eb8f2777c39a", "5985ca1ad0d9585bc175cb0cc206f3ba527c85bde06fbf1900", "bc5ec28f", "b200"}, 0x38)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x54, r7, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e179e421a388f7b1ec2e9293f1"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}]}, 0x54}}, 0x0)
write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2)

8m54.601433858s ago: executing program 5 (id=478):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
socket(0x1e, 0x1, 0x0)
r4 = epoll_create1(0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x40, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000001})

8m52.919753264s ago: executing program 5 (id=482):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x4, 0x6)
getpgid(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB, @ANYRES64=r0, @ANYRESHEX=r2, @ANYRESHEX, @ANYRES8=r0, @ANYRES16], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
openat$pidfd(0xffffffffffffff9c, 0x0, 0xac63094eb3328933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

8m49.944139182s ago: executing program 5 (id=487):
iopl(0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = semget$private(0x0, 0x6, 0x3b1)
semctl$SEM_STAT_ANY(r1, 0x1, 0x14, &(0x7f0000000580)=""/133)

8m33.233344809s ago: executing program 33 (id=487):
iopl(0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = semget$private(0x0, 0x6, 0x3b1)
semctl$SEM_STAT_ANY(r1, 0x1, 0x14, &(0x7f0000000580)=""/133)

22.30909753s ago: executing program 2 (id=1578):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000240), 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000c00"])
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x4)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000400000000000000000010000911030000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

18.788117387s ago: executing program 6 (id=1588):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
keyctl$session_to_parent(0x12)

18.407886413s ago: executing program 6 (id=1590):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000001000010400000000fddbdf3200000000", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0xc000)

17.602773517s ago: executing program 6 (id=1592):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001100)=ANY=[@ANYBLOB="12011101000000086d044fc200000000000109022400010000400909040204010300000009210700840122070009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000), 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14)
read(r4, &(0x7f00000019c0)=""/4097, 0x1001)
syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40a04)
ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000d40)={0xbb81, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"})
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x158, 0x500b, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x21, 0x0, 0x41}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@pkttype={{0x28}, {0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x92, &(0x7f00000002c0)=""/146, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)

17.237021122s ago: executing program 2 (id=1595):
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x44, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x44}}, 0x0)
fcntl$setpipe(r0, 0x407, 0x400000000000002)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)

15.829249075s ago: executing program 2 (id=1597):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0xaf, &(0x7f0000000740)=""/175, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
pipe(&(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]})
rseq(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x5, {}, {}, @note={0x4}}], 0x38)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfa, 0xbfff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000340)=0x50)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x210040, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])

14.319991009s ago: executing program 2 (id=1600):
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000280)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

13.465337243s ago: executing program 6 (id=1602):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r0}, 0x38)

12.865347133s ago: executing program 6 (id=1605):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000240), 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000c00"])
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x4)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000400000000000000000010000911030000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

12.786308894s ago: executing program 3 (id=1606):
socket(0x3, 0x5, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = memfd_secret(0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000340)={{0x8, @loopback, 0x4e2c, 0x1, 'ovf\x00', 0x14, 0x2, 0x19}, {@empty, 0x4e22, 0x3, 0x10001, 0x400fc1a, 0x8}}, 0x44)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000003c0)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, &(0x7f0000000400)={<r3=>0x0, <r4=>0x0})
futimesat(r0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000440)={{r1, r2/1000+10000}, {r3, r4/1000+60000}})
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udplite(0x2, 0x2, 0x88)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x50)
r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000002c0)={0x4000, r6}, 0x0)
landlock_restrict_self(r7, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x1, 0x7fffffff, 0x0, 0xf7, 0xb, 0x80000000000000, 0x800, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004})

11.881292869s ago: executing program 2 (id=1608):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
close(r3)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4})

11.78701115s ago: executing program 1 (id=1609):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1000000, 0x0, {0x2130b322, 0x4, 0x20005, 0xc69}})

10.698307588s ago: executing program 3 (id=1611):
socket$alg(0x26, 0x5, 0x0)
mkdir(0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x88040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="f29928063fa19bfc7b33af61b1f9c21823a23923ce74297b981d3dd751473af0ff18d6aebe4a53"], 0x24}}, 0x0)

10.677877708s ago: executing program 1 (id=1612):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001cc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x1a}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0)

9.820996622s ago: executing program 0 (id=1613):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x3, @pix_mp={0x0, 0x4, 0x4745504d, 0x7, 0xa, [{0xfffffffa, 0x2}, {0x49a5fc9e, 0x5}, {0x4d7}, {0x8}, {0x51f, 0x8}, {0x2, 0xffffffff}, {0x2ead, 0x3}, {0x4, 0x2}], 0x0, 0x8, 0x6, 0x0, 0x2}})
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

8.797237208s ago: executing program 3 (id=1614):
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xaf, &(0x7f0000000740)=""/175, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x5, {}, {}, @note={0x4}}], 0x38)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x210040, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])

7.536478859s ago: executing program 3 (id=1615):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.333438892s ago: executing program 0 (id=1616):
socket$kcm(0x10, 0x2, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x8]}, 0x8, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8, 0xfffffffffffffff9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x4, 0xc, 0x0, 0x9, 0x7ffffffd, 0xffffffffffffffff}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

5.350447804s ago: executing program 0 (id=1617):
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0)

5.212847756s ago: executing program 3 (id=1618):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
set_robust_list(&(0x7f0000000500), 0x18)
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
unshare(0x64000600)

5.202778156s ago: executing program 1 (id=1619):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.037255339s ago: executing program 0 (id=1620):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\xed)||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r5, 0x0, 0x0, 0x800000, 0x0)
sendfile(r4, r4, 0x0, 0x24002de8)
ioctl$LOOP_CLR_FD(r4, 0x4c01)

3.73377001s ago: executing program 0 (id=1621):
close(0xffffffffffffffff)
socket(0x1e, 0x4, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20000276, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x3}, {0x6}]})
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

3.69169018s ago: executing program 2 (id=1622):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240f50000000500150004000000050005000000000005000400000000000d000300686173683a6d61"], 0x5c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x65, 0x0, &(0x7f0000000340)="b3bca0cb93b31b3670323f22e577312bb0dd863600ab318406abe327bb6a4f85b6219b3bccfa2550e0ea4e8bcbbf9f536fac5d4f2de6f7a28abe082300bf4e4b0c431ef389b2f8b9d492b1d7c304cacd85ac6357e2374a48cc90fd89434cce3d2468813b98", 0x0, 0x2f00, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r8, {0xb, 0x19}, {0x3f, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.573177823s ago: executing program 1 (id=1623):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0xaf, &(0x7f0000000740)=""/175, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
pipe(&(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r3 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x5, {}, {}, @note={0x4}}], 0x38)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfa, 0xbfff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000340)=0x50)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x210040, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])

2.219949364s ago: executing program 0 (id=1624):
socket$alg(0x26, 0x5, 0x0)
mkdir(0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x88040, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="f29928063fa19bfc7b33af61b1f9c21823a23923ce74297b981d3dd751473af0ff18d6aebe4a53a6"], 0x24}}, 0x0)

2.219527804s ago: executing program 1 (id=1625):
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xaf, &(0x7f0000000740)=""/175, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x7, 0x0, 0x0, 0x7fdfffff}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0x1]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x5, {}, {}, @note={0x4}}], 0x38)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x210040, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])

2.216013614s ago: executing program 6 (id=1626):
timer_create(0x5, &(0x7f0000000080)={0x0, 0x23, 0x4, @thr={&(0x7f0000000100)="a31ddae14ee53bafb3ef878725e6d24ccc5c826fc98c", 0x0}}, 0x0)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

1.045495853s ago: executing program 1 (id=1627):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}]}}]}, 0x9c}}, 0x48004)

0s ago: executing program 3 (id=1628):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

58.715142][ T4298] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  259.100306][ T5658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'.
[  261.114266][ T4298] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  261.147138][ T4298] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  261.184132][ T4298] asix: probe of 5-1:0.0 failed with error -71
[  261.217283][ T4298] usb 5-1: USB disconnect, device number 5
[  261.238167][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x70
[  261.419443][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  261.435565][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  262.947770][ T5686] hub 9-0:1.0: USB hub found
[  262.953820][ T5686] hub 9-0:1.0: 1 port detected
[  264.431677][ T4331] usb 1-1: USB disconnect, device number 3
[  267.298771][ T4267] Bluetooth: hci0: unknown advertising packet type: 0x70
[  268.013383][ T5727] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  269.436531][ T5737] hub 9-0:1.0: USB hub found
[  269.442124][ T5737] hub 9-0:1.0: 1 port detected
[  271.361005][ T4331] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  271.559011][ T4331] usb 3-1: Using ep0 maxpacket: 32
[  271.745866][ T5751] hub 9-0:1.0: USB hub found
[  271.758407][ T5751] hub 9-0:1.0: 1 port detected
[  273.209683][ T4331] usb 3-1: config 0 has an invalid interface number: 61 but max is 1
[  273.356392][ T4331] usb 3-1: config 0 has an invalid interface number: 98 but max is 1
[  273.375233][ T4331] usb 3-1: config 0 has no interface number 0
[  273.386092][ T4331] usb 3-1: config 0 has no interface number 1
[  273.534848][ T4331] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  273.958910][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.017682][ T4331] usb 3-1: Product: syz
[  274.032464][ T4331] usb 3-1: Manufacturer: syz
[  274.037145][ T4331] usb 3-1: SerialNumber: syz
[  274.077540][ T4331] usb 3-1: config 0 descriptor??
[  274.153627][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.1.365'.
[  274.182870][ T4331] usb 3-1: can't set config #0, error -71
[  274.321484][ T4331] usb 3-1: USB disconnect, device number 3
[  274.514505][ T4787] udevd[4787]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory
[  276.627519][ T4267] Bluetooth: hci2: unknown advertising packet type: 0x70
[  278.358895][ T4267] Bluetooth: hci1: unknown advertising packet type: 0x70
[  280.168217][  T128] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  280.610888][  T128] usb 1-1: Using ep0 maxpacket: 32
[  280.659494][  T128] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  280.864805][  T128] usb 1-1: config 0 has an invalid interface number: 98 but max is 1
[  280.967058][  T128] usb 1-1: config 0 has no interface number 0
[  281.048287][ T4267] Bluetooth: hci3: command 0x0405 tx timeout
[  281.056882][  T128] usb 1-1: config 0 has no interface number 1
[  281.198331][  T128] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  281.289124][  T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.343621][  T128] usb 1-1: Product: syz
[  281.385574][  T128] usb 1-1: Manufacturer: syz
[  281.396361][  T128] usb 1-1: SerialNumber: syz
[  281.423747][  T128] usb 1-1: config 0 descriptor??
[  281.588680][  T128] viperboard 1-1:0.61: version 0.00 found at bus 001 address 004
[  281.627172][  T128] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  281.649396][  T128] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  282.530896][ T4267] Bluetooth: hci1: unknown advertising packet type: 0x70
[  283.558838][  T128] viperboard 1-1:0.98: version 0.00 found at bus 001 address 004
[  283.708202][  T128] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  283.717002][  T128] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  285.225409][ T5843] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  285.519249][  T128] usb 1-1: USB disconnect, device number 4
[  285.637547][ T5849] hub 9-0:1.0: USB hub found
[  285.643291][ T5849] hub 9-0:1.0: 1 port detected
[  287.936903][ T5861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'.
[  287.973708][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  287.991613][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  288.000479][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  288.075124][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  288.085151][ T5858] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  290.557002][ T5876] hub 9-0:1.0: USB hub found
[  290.563131][ T5876] hub 9-0:1.0: 1 port detected
[  292.920568][ T4267] Bluetooth: hci2: unknown advertising packet type: 0x70
[  294.859370][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.401'.
[  295.913672][ T4331] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  296.298298][ T4331] usb 2-1: Using ep0 maxpacket: 32
[  296.473550][ T4331] usb 2-1: config 0 has an invalid interface number: 61 but max is 1
[  296.708272][ T4331] usb 2-1: config 0 has an invalid interface number: 98 but max is 1
[  296.742338][ T4331] usb 2-1: config 0 has no interface number 0
[  296.873037][ T4331] usb 2-1: config 0 has no interface number 1
[  296.891428][ T4331] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  296.910582][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.736639][ T4331] usb 2-1: Product: syz
[  297.741776][ T4331] usb 2-1: Manufacturer: syz
[  297.874754][ T4331] usb 2-1: SerialNumber: syz
[  297.889204][ T4331] usb 2-1: config 0 descriptor??
[  298.083256][ T4331] usb 2-1: can't set config #0, error -71
[  298.109589][ T4331] usb 2-1: USB disconnect, device number 4
[  298.888676][ T4267] Bluetooth: hci2: unknown advertising packet type: 0x70
[  302.069605][ T4265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.109276][ T4263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.117650][ T4265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.129121][ T4263] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  302.137040][ T4265] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  302.144907][ T4263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  302.467251][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'.
[  302.879175][  T128] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  303.108736][  T128] usb 2-1: Using ep0 maxpacket: 32
[  303.124952][  T128] usb 2-1: config 0 has an invalid interface number: 61 but max is 1
[  303.228048][  T128] usb 2-1: config 0 has an invalid interface number: 98 but max is 1
[  303.298473][  T128] usb 2-1: config 0 has no interface number 0
[  303.325265][  T128] usb 2-1: config 0 has no interface number 1
[  303.454033][  T128] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  304.421239][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  304.431022][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  304.438725][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  304.461920][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  304.470156][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  304.477859][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  304.497587][ T4267] Bluetooth: hci5: command 0x0409 tx timeout
[  304.668157][  T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.698198][  T128] usb 2-1: Product: syz
[  304.702441][  T128] usb 2-1: Manufacturer: syz
[  304.835661][ T5948] chnl_net:caif_netlink_parms(): no params data found
[  304.863071][  T128] usb 2-1: SerialNumber: syz
[  306.558290][ T4267] Bluetooth: hci5: command 0x041b tx timeout
[  307.067002][ T5972] hub 9-0:1.0: USB hub found
[  307.067810][  T128] usb 2-1: config 0 descriptor??
[  307.073079][ T5972] hub 9-0:1.0: 1 port detected
[  307.095211][  T128] usb 2-1: can't set config #0, error -71
[  307.102383][  T128] usb 2-1: USB disconnect, device number 5
[  307.421899][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.446684][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.506106][ T5948] device bridge_slave_0 entered promiscuous mode
[  307.605630][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.644405][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.685944][ T5948] device bridge_slave_1 entered promiscuous mode
[  307.741230][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.753810][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.295712][ T4265] Bluetooth: hci5: command 0x040f tx timeout
[  309.628710][ T5948] team0: Port device team_slave_0 added
[  309.695005][ T5948] team0: Port device team_slave_1 added
[  309.808734][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.839573][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.913598][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.940588][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.947595][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.055109][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.427'.
[  310.618162][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.842379][ T5948] device hsr_slave_0 entered promiscuous mode
[  310.850332][ T5948] device hsr_slave_1 entered promiscuous mode
[  310.857291][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.865662][ T5948] Cannot create hsr debugfs directory
[  311.226756][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  311.242842][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  311.251208][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  311.321136][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  311.331105][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  311.339882][ T6018] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  311.359808][ T4267] Bluetooth: hci5: command 0x0419 tx timeout
[  311.668201][ T4298] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  311.705554][ T5948] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  311.952690][ T5948] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  312.176769][ T6032] hub 9-0:1.0: USB hub found
[  312.185150][ T6032] hub 9-0:1.0: 1 port detected
[  312.821586][ T5948] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  312.861603][ T5948] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  313.183054][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.237179][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  313.255780][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  313.287242][ T5948] 8021q: adding VLAN 0 to HW filter on device team0
[  313.307334][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  313.325644][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  313.328221][ T4298] usb 3-1: Using ep0 maxpacket: 32
[  313.378863][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.386112][ T4811] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.480517][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  313.529056][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  313.566985][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  313.616812][ T4811] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.624059][ T4811] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.566411][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  314.658861][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  314.709586][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  314.752061][ T4298] usb 3-1: device descriptor read/all, error -71
[  314.760960][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  314.772580][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  314.794950][ T5948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  315.223546][ T5948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  315.810562][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  315.860335][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  315.899197][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  315.916551][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  315.944837][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  315.956278][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  315.974041][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  316.469939][ T4267] Bluetooth: hci0: unknown advertising packet type: 0x70
[  317.088783][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'.
[  317.391461][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  317.404260][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  317.433100][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.857935][ T6092] hub 9-0:1.0: USB hub found
[  317.863840][ T6092] hub 9-0:1.0: 1 port detected
[  318.831075][  T128] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  318.943054][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  319.348174][  T128] usb 2-1: Using ep0 maxpacket: 32
[  319.355264][  T128] usb 2-1: config 0 has an invalid interface number: 61 but max is 1
[  319.537573][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  319.633480][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.447'.
[  319.774673][  T128] usb 2-1: config 0 has an invalid interface number: 98 but max is 1
[  319.783015][  T128] usb 2-1: config 0 has no interface number 0
[  319.789233][  T128] usb 2-1: config 0 has no interface number 1
[  319.807032][  T128] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  319.868151][  T128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.876234][  T128] usb 2-1: Product: syz
[  319.880264][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  319.880493][  T128] usb 2-1: Manufacturer: syz
[  319.892920][  T128] usb 2-1: SerialNumber: syz
[  319.899958][  T128] usb 2-1: config 0 descriptor??
[  319.920182][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  320.028708][  T128] viperboard 2-1:0.61: version 0.00 found at bus 002 address 006
[  320.106143][ T5948] device veth0_vlan entered promiscuous mode
[  320.121525][ T5948] device veth1_vlan entered promiscuous mode
[  320.130915][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  320.138411][  T128] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  320.149164][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  320.178380][  T128] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  320.994234][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  321.015956][  T128] viperboard 2-1:0.98: version 0.00 found at bus 002 address 006
[  321.039955][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'.
[  321.048995][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'.
[  321.216228][  T128] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  321.279236][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  321.290362][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  321.319008][  T128] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  321.357661][ T5948] device veth0_macvtap entered promiscuous mode
[  321.473129][ T5948] device veth1_macvtap entered promiscuous mode
[  321.536187][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.566418][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.585162][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.612671][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.632951][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.653628][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.663976][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.674679][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.685249][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.696090][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.716453][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.742324][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  321.752766][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  321.773690][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  321.805064][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.847278][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.880457][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.905189][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.928682][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.948774][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.970335][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.990089][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.002018][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.019980][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.051853][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.077898][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  322.103812][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  322.141628][ T5948] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.164065][ T5948] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.196345][ T5948] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.247054][ T5948] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.597556][ T4267] Bluetooth: hci4: unknown advertising packet type: 0x70
[  322.645541][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  322.660534][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  323.250941][ T4721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.283915][ T4721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.302476][ T4318] usb 2-1: USB disconnect, device number 6
[  323.364773][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  324.144172][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.160796][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'.
[  324.191311][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.258308][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  325.527451][ T6150] hub 9-0:1.0: USB hub found
[  325.533143][ T6150] hub 9-0:1.0: 1 port detected
[  326.910601][ T6154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.458'.
[  327.399368][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[  327.409425][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'.
[  329.876820][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[  330.068221][   T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  330.748252][   T22] usb 6-1: Using ep0 maxpacket: 32
[  330.847146][ T6199] hub 9-0:1.0: USB hub found
[  330.854036][ T6199] hub 9-0:1.0: 1 port detected
[  330.895477][   T22] usb 6-1: config 0 has an invalid interface number: 61 but max is 1
[  331.090374][   T22] usb 6-1: config 0 has an invalid interface number: 98 but max is 1
[  331.139656][   T22] usb 6-1: config 0 has no interface number 0
[  331.181988][   T22] usb 6-1: config 0 has no interface number 1
[  331.228229][   T22] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  331.298152][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.333728][   T22] usb 6-1: Product: syz
[  331.512196][   T22] usb 6-1: Manufacturer: syz
[  331.516906][   T22] usb 6-1: SerialNumber: syz
[  331.589527][   T22] usb 6-1: config 0 descriptor??
[  331.733801][   T22] viperboard 6-1:0.61: version 0.00 found at bus 006 address 002
[  331.796631][   T22] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  331.836145][   T22] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  332.768382][   T22] viperboard 6-1:0.98: version 0.00 found at bus 006 address 002
[  333.206222][   T22] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  333.288193][   T22] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  333.798128][ T6224] hub 9-0:1.0: USB hub found
[  333.804180][ T6224] hub 9-0:1.0: 1 port detected
[  334.775333][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'.
[  334.785592][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'.
[  335.035251][   T22] usb 6-1: USB disconnect, device number 2
[  335.614931][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'.
[  338.611779][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'.
[  338.766932][ T6263] hub 9-0:1.0: USB hub found
[  338.773121][ T6263] hub 9-0:1.0: 1 port detected
[  341.418832][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'.
[  341.432590][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'.
[  343.135832][ T5144] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  343.282121][ T6294] netlink: 44 bytes leftover after parsing attributes in process `syz.1.486'.
[  343.418151][ T5144] usb 1-1: Using ep0 maxpacket: 32
[  343.425267][ T5144] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  343.461362][ T5144] usb 1-1: config 0 has an invalid interface number: 98 but max is 1
[  343.491487][ T5144] usb 1-1: config 0 has no interface number 0
[  343.518117][ T5144] usb 1-1: config 0 has no interface number 1
[  343.528667][ T5144] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  343.537766][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.106554][ T6312] hub 9-0:1.0: USB hub found
[  345.115952][ T6312] hub 9-0:1.0: 1 port detected
[  346.260933][ T5144] usb 1-1: Product: syz
[  346.266696][ T5144] usb 1-1: Manufacturer: syz
[  346.272027][ T5144] usb 1-1: SerialNumber: syz
[  346.280760][ T5144] usb 1-1: config 0 descriptor??
[  346.505837][ T5144] usb 1-1: can't set config #0, error -71
[  346.533893][ T5144] usb 1-1: USB disconnect, device number 5
[  346.902285][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'.
[  347.924662][ T5144] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  348.905738][ T4267] Bluetooth: hci0: unknown advertising packet type: 0x70
[  348.926893][ T5144] usb 1-1: config index 0 descriptor too short (expected 37067, got 18)
[  349.390156][ T5144] usb 1-1: config 123 has too many interfaces: 206, using maximum allowed: 32
[  349.400285][ T5144] usb 1-1: config 123 has an invalid descriptor of length 82, skipping remainder of the config
[  349.414750][ T5144] usb 1-1: config 123 has 0 interfaces, different from the descriptor's value: 206
[  349.450060][ T5144] usb 1-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=fe.29
[  349.479272][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.487636][ T5144] usb 1-1: Product: syz
[  349.496518][ T5144] usb 1-1: Manufacturer: syz
[  349.503607][ T5144] usb 1-1: SerialNumber: syz
[  349.807218][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'.
[  349.817724][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'.
[  351.151391][ T5144] usb 1-1: USB disconnect, device number 6
[  351.698225][ T5144] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  351.903976][ T5144] usb 3-1: Using ep0 maxpacket: 32
[  351.959760][ T5144] usb 3-1: config 0 has an invalid interface number: 61 but max is 1
[  352.347436][ T5144] usb 3-1: config 0 has an invalid interface number: 98 but max is 1
[  352.412206][ T5144] usb 3-1: config 0 has no interface number 0
[  352.443872][ T5144] usb 3-1: config 0 has no interface number 1
[  352.621056][ T5144] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  352.656237][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.696682][ T5144] usb 3-1: Product: syz
[  352.701305][ T5144] usb 3-1: Manufacturer: syz
[  352.733377][ T5144] usb 3-1: SerialNumber: syz
[  352.760259][ T5144] usb 3-1: config 0 descriptor??
[  352.878977][ T5144] viperboard 3-1:0.61: version 0.00 found at bus 003 address 006
[  353.056248][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'.
[  353.105339][ T5144] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  354.986921][ T5144] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  355.116176][ T5144] viperboard 3-1:0.98: version 0.00 found at bus 003 address 006
[  355.207547][ T5144] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  355.236558][ T5144] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  355.463682][ T4267] Bluetooth: hci0: unknown advertising packet type: 0x70
[  357.535629][ T5144] usb 3-1: USB disconnect, device number 6
[  360.317082][ T4267] Bluetooth: hci2: unknown advertising packet type: 0x70
[  360.343495][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  360.429825][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  360.498790][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.518299][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.526294][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.537605][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.548570][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  360.557569][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.532677][ T4265] Bluetooth: hci2: unknown advertising packet type: 0x70
[  362.625839][ T6412] chnl_net:caif_netlink_parms(): no params data found
[  362.643084][ T4265] Bluetooth: hci1: command 0x0409 tx timeout
[  362.711037][ T6444] hub 9-0:1.0: USB hub found
[  362.716583][ T6444] hub 9-0:1.0: 1 port detected
[  364.721092][ T4265] Bluetooth: hci1: command 0x041b tx timeout
[  364.938243][ T4513] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  365.178348][ T4513] usb 1-1: Using ep0 maxpacket: 32
[  365.234664][ T4513] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  365.245172][ T4513] usb 1-1: config 0 has an invalid interface number: 98 but max is 1
[  365.284009][ T4513] usb 1-1: config 0 has no interface number 0
[  365.318712][ T4513] usb 1-1: config 0 has no interface number 1
[  365.587098][ T4513] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  365.596460][ T4513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.604993][ T4513] usb 1-1: Product: syz
[  365.610790][ T4513] usb 1-1: Manufacturer: syz
[  365.615431][ T4513] usb 1-1: SerialNumber: syz
[  365.802768][ T4513] usb 1-1: config 0 descriptor??
[  365.938348][ T4513] viperboard 1-1:0.61: version 0.00 found at bus 001 address 007
[  365.971013][ T4811] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.198653][ T4265] Bluetooth: hci0: unknown advertising packet type: 0x70
[  366.219152][ T4513] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  366.538091][ T4513] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  366.590803][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.607107][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.689736][ T6412] device bridge_slave_0 entered promiscuous mode
[  366.739794][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  366.814104][ T4265] Bluetooth: hci1: command 0x040f tx timeout
[  366.860341][ T4513] viperboard 1-1:0.98: version 0.00 found at bus 001 address 007
[  367.130026][ T4267] Bluetooth: hci4: unknown advertising packet type: 0x70
[  367.151237][ T4513] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  367.536485][ T4513] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  367.653857][ T4811] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.865463][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  367.892111][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.908202][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.916575][ T6412] device bridge_slave_1 entered promiscuous mode
[  367.939133][ T6478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  367.991898][ T4811] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.154260][ T4811] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.166623][ T4298] usb 1-1: USB disconnect, device number 7
[  368.257476][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.291407][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.865537][ T6498] hub 9-0:1.0: USB hub found
[  368.878807][ T6498] hub 9-0:1.0: 1 port detected
[  368.972062][ T4267] Bluetooth: hci1: command 0x0419 tx timeout
[  369.500847][ T6412] team0: Port device team_slave_0 added
[  369.558619][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  369.611355][ T6412] team0: Port device team_slave_1 added
[  369.728968][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.755764][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.051497][ T6412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.073237][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.135055][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.234752][ T6412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.590836][ T6412] device hsr_slave_0 entered promiscuous mode
[  370.632899][ T6412] device hsr_slave_1 entered promiscuous mode
[  370.718843][ T6412] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  370.767901][ T6412] Cannot create hsr debugfs directory
[  372.673512][ T4267] Bluetooth: hci4: unknown advertising packet type: 0x70
[  372.782329][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  372.879402][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  373.170707][ T6541] overlayfs: failed to resolve './file1': -2
[  373.462658][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x70
[  373.541557][ T6543] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  373.919267][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  374.008337][    T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  374.326456][ T6412] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  374.408138][    T7] usb 4-1: Using ep0 maxpacket: 32
[  374.416295][    T7] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[  374.431240][    T7] usb 4-1: config 0 has an invalid interface number: 98 but max is 1
[  374.445116][    T7] usb 4-1: config 0 has no interface number 0
[  374.465221][    T7] usb 4-1: config 0 has no interface number 1
[  374.476072][ T6412] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  374.481661][    T7] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  374.504980][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.534329][    T7] usb 4-1: Product: syz
[  374.551439][    T7] usb 4-1: Manufacturer: syz
[  374.562809][    T7] usb 4-1: SerialNumber: syz
[  374.605788][    T7] usb 4-1: config 0 descriptor??
[  374.650470][ T6412] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  374.728704][ T6412] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  374.739248][    T7] viperboard 4-1:0.61: version 0.00 found at bus 004 address 004
[  374.792280][    T7] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  374.811811][    T7] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  374.866132][    T7] viperboard 4-1:0.98: version 0.00 found at bus 004 address 004
[  374.917118][    T7] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  374.933065][    T7] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  376.166484][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.415044][ T6412] 8021q: adding VLAN 0 to HW filter on device team0
[  377.594978][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  377.675612][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  377.979021][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  377.992063][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  378.016976][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.024228][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.083450][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  378.092965][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  378.103407][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  378.159048][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.166358][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.175894][  T128] usb 4-1: USB disconnect, device number 4
[  378.418302][ T4811] device hsr_slave_0 left promiscuous mode
[  378.468012][ T4811] device hsr_slave_1 left promiscuous mode
[  378.485877][ T6600] overlayfs: failed to resolve './file1': -2
[  378.605083][ T4811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.660705][ T4811] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.732417][ T4811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.478000][ T4267] Bluetooth: hci0: unknown advertising packet type: 0x70
[  379.479680][ T4811] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.552159][ T4811] device bridge_slave_1 left promiscuous mode
[  379.589752][ T4811] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.803105][ T4811] device bridge_slave_0 left promiscuous mode
[  379.824436][ T4811] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.882804][ T4811] device veth1_macvtap left promiscuous mode
[  379.896332][ T4811] device veth0_macvtap left promiscuous mode
[  379.925606][ T4811] device veth1_vlan left promiscuous mode
[  379.950449][ T4811] device veth0_vlan left promiscuous mode
[  382.200549][ T4811] team0 (unregistering): Port device team_slave_1 removed
[  382.346103][ T4811] team0 (unregistering): Port device team_slave_0 removed
[  382.464238][ T4811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  382.644714][ T4811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.694754][ T6651] overlayfs: failed to resolve './file1': -2
[  382.869039][ T4297] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  383.098255][ T4297] usb 4-1: Using ep0 maxpacket: 32
[  383.105519][ T4297] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[  383.128126][ T4297] usb 4-1: config 0 has an invalid interface number: 98 but max is 1
[  383.156648][ T4297] usb 4-1: config 0 has no interface number 0
[  383.176320][ T4297] usb 4-1: config 0 has no interface number 1
[  383.195641][ T4297] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  383.222416][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.252232][ T4297] usb 4-1: Product: syz
[  383.256473][ T4297] usb 4-1: Manufacturer: syz
[  383.264488][ T4297] usb 4-1: SerialNumber: syz
[  383.289942][ T4297] usb 4-1: config 0 descriptor??
[  383.422058][ T4297] viperboard 4-1:0.61: version 0.00 found at bus 004 address 005
[  383.449562][ T4297] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  383.478144][ T4297] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  383.738187][ T4297] viperboard 4-1:0.98: version 0.00 found at bus 004 address 005
[  383.762095][ T4297] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  383.775618][ T4297] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  384.095231][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  384.101798][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  384.800292][ T4811] bond0 (unregistering): Released all slaves
[  384.970869][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  384.987326][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  385.118939][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  385.139363][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  385.168637][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  385.200435][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  385.332398][ T6412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  385.353077][ T6412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  385.425552][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  385.459646][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  385.491504][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  385.517873][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  385.585871][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  385.615128][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  385.640924][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  385.652460][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  387.369108][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  387.376741][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  387.377716][ T4240] usb 4-1: USB disconnect, device number 5
[  387.451908][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.912213][ T6711] overlayfs: failed to resolve './file0': -2
[  388.551955][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  388.569237][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  388.636512][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  388.656657][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  388.688896][ T6412] device veth0_vlan entered promiscuous mode
[  388.727666][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  388.742564][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  388.777095][ T6412] device veth1_vlan entered promiscuous mode
[  388.873557][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  388.891707][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  388.914736][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  388.943860][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  389.003763][ T6412] device veth0_macvtap entered promiscuous mode
[  389.060308][ T6412] device veth1_macvtap entered promiscuous mode
[  389.220230][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.385487][ T4267] Bluetooth: hci4: unknown advertising packet type: 0x70
[  389.586795][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.911887][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.939876][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.949868][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.961699][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.971631][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.982404][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.992328][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  390.002862][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.020348][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.053282][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  390.062188][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  390.083405][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  390.137782][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  390.234593][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  390.255370][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  390.297837][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.325866][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.356506][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.397831][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.432229][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.514156][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.582698][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.656723][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.757572][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.853958][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.985950][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.051557][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  391.100185][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  391.159531][ T6412] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.176493][ T6412] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.190673][ T6412] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.230021][ T6412] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.601718][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.635090][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.675214][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  391.694306][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.735274][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.792794][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  392.732770][ T6779] overlayfs: failed to resolve './file0': -2
[  392.882846][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'.
[  392.952734][    T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  392.972539][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.514'.
[  392.982590][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.514'.
[  393.748175][    T7] usb 1-1: Using ep0 maxpacket: 32
[  393.755415][    T7] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  393.793154][    T7] usb 1-1: config 0 has an invalid interface number: 98 but max is 1
[  393.813456][    T7] usb 1-1: config 0 has no interface number 0
[  393.843446][    T7] usb 1-1: config 0 has no interface number 1
[  393.859358][    T7] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  393.912228][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.941034][    T7] usb 1-1: Product: syz
[  393.951176][    T7] usb 1-1: Manufacturer: syz
[  394.039460][    T7] usb 1-1: SerialNumber: syz
[  394.062584][    T7] usb 1-1: config 0 descriptor??
[  394.188518][    T7] viperboard 1-1:0.61: version 0.00 found at bus 001 address 008
[  394.259328][    T7] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  394.297111][    T7] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  394.458368][    T7] viperboard 1-1:0.98: version 0.00 found at bus 001 address 008
[  395.438506][    T7] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  395.447356][    T7] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  395.917443][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  395.946338][ T4267] Bluetooth: hci0: unknown advertising packet type: 0x70
[  396.138543][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  397.278457][ T5765] usb 1-1: USB disconnect, device number 8
[  398.708702][ T4267] Bluetooth: hci0: unknown advertising packet type: 0x70
[  399.318112][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'.
[  399.361113][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'.
[  401.729633][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.369771][ T4267] Bluetooth: hci4: unknown advertising packet type: 0x70
[  404.557472][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.669586][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  404.762099][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  404.980032][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.070748][ T4298] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  405.512589][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.668320][ T4298] usb 3-1: Using ep0 maxpacket: 32
[  405.685344][ T4298] usb 3-1: config 0 has an invalid interface number: 61 but max is 1
[  405.744467][ T4298] usb 3-1: config 0 has an invalid interface number: 98 but max is 1
[  406.037510][ T4267] Bluetooth: hci1: unknown advertising packet type: 0x70
[  406.478321][ T4298] usb 3-1: config 0 has no interface number 0
[  406.491608][ T4298] usb 3-1: config 0 has no interface number 1
[  406.524063][ T4298] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  406.550800][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.608645][ T4298] usb 3-1: Product: syz
[  406.650991][ T4298] usb 3-1: Manufacturer: syz
[  406.678343][ T4298] usb 3-1: SerialNumber: syz
[  406.715036][ T4298] usb 3-1: config 0 descriptor??
[  406.874838][ T4298] viperboard 3-1:0.61: version 0.00 found at bus 003 address 007
[  406.916457][ T4298] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  406.956871][ T4298] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  407.235644][ T4298] viperboard 3-1:0.98: version 0.00 found at bus 003 address 007
[  408.782845][ T4298] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100
[  408.835644][ T4298] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5
[  409.289768][ T4296] usb 3-1: USB disconnect, device number 7
[  410.896477][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  411.033762][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  412.512037][ T4267] Bluetooth: hci2: unknown advertising packet type: 0x70
[  416.537631][ T7032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  416.568468][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  418.202529][ T7050] hub 9-0:1.0: USB hub found
[  418.208275][ T7050] hub 9-0:1.0: 1 port detected
[  420.178593][ T4267] Bluetooth: hci2: unknown advertising packet type: 0x70
[  421.339363][    T9] device hsr_slave_0 left promiscuous mode
[  421.398821][    T9] device hsr_slave_1 left promiscuous mode
[  421.554238][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.561841][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.602904][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.725545][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.733566][    T9] device bridge_slave_1 left promiscuous mode
[  421.740128][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.750182][    T9] device bridge_slave_0 left promiscuous mode
[  421.756436][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.198487][ T4267] Bluetooth: hci2: unknown advertising packet type: 0x70
[  423.636137][    T9] device veth1_macvtap left promiscuous mode
[  423.680691][    T9] device veth0_macvtap left promiscuous mode
[  423.686882][    T9] device veth1_vlan left promiscuous mode
[  423.741359][    T9] device veth0_vlan left promiscuous mode
[  426.432722][ T7113] Falling back ldisc for ttyprintk.
[  427.382535][    T9] team0 (unregistering): Port device team_slave_1 removed
[  427.433279][    T9] team0 (unregistering): Port device team_slave_0 removed
[  427.477939][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.524076][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.078569][    T9] bond0 (unregistering): Released all slaves
[  428.195056][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  428.354776][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  432.537813][ T7166] sp0: Synchronizing with TNC
[  433.221756][ T4267] Bluetooth: hci1: unknown advertising packet type: 0x70
[  433.239316][ T7160] [U] è
[  434.551575][ T7182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  434.631080][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x70
[  434.769335][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  439.656982][ T4267] Bluetooth: hci1: unknown advertising packet type: 0x70
[  439.689737][ T7236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  439.774374][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  440.224480][ T7243] sp0: Synchronizing with TNC
[  440.830859][ T7234] [U] è
[  442.528656][ T7260] overlayfs: failed to resolve './file1': -2
[  444.541634][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x70
[  445.363239][ T7291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  445.390870][ T4267] Bluetooth: hci0: unknown advertising packet type: 0x70
[  445.413361][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  445.521300][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  445.527862][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  447.410545][ T7300] Falling back ldisc for ttyprintk.
[  447.708378][ T7314] overlayfs: failed to resolve './file1': -2
[  453.710128][ T4267] Bluetooth: hci4: unknown advertising packet type: 0x70
[  454.389048][ T7357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  454.420277][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  454.590759][ T4267] Bluetooth: hci1: unknown advertising packet type: 0x70
[  455.685558][ T7371] hub 9-0:1.0: USB hub found
[  455.698320][ T7371] hub 9-0:1.0: 1 port detected
[  460.010240][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x70
[  460.587564][ T7420] hub 9-0:1.0: USB hub found
[  460.608263][ T7420] hub 9-0:1.0: 1 port detected
[  462.489057][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x70
[  462.498100][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  462.523804][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  463.198721][ T7428] tmpfs: Bad value for 'mpol'
[  463.829858][ T7444] hub 9-0:1.0: USB hub found
[  463.835583][ T7444] hub 9-0:1.0: 1 port detected
[  465.563325][ T7458] sp0: Synchronizing with TNC
[  465.985242][ T7453] [U] è
[  467.163373][ T7476] hub 9-0:1.0: USB hub found
[  467.169353][ T7476] hub 9-0:1.0: 1 port detected
[  469.018242][ T4330] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  469.433380][ T4330] usb 7-1: Using ep0 maxpacket: 16
[  469.466052][ T4330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  469.503612][ T4330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.602207][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  469.628454][ T4267] Bluetooth: hci4: unknown advertising packet type: 0x70
[  469.725472][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  470.253154][ T4330] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  470.272783][ T4330] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  470.282295][ T4330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.292920][ T4330] usb 7-1: config 0 descriptor??
[  470.298463][ T4330] usb 7-1: can't set config #0, error -71
[  470.305429][ T4330] usb 7-1: USB disconnect, device number 2
[  470.609636][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'.
[  470.620322][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'.
[  471.463874][ T7518] hub 9-0:1.0: USB hub found
[  471.469710][ T7518] hub 9-0:1.0: 1 port detected
[  473.594018][ T7527] sp0: Synchronizing with TNC
[  473.755675][ T7523] [U] è
[  477.247733][ T4267] Bluetooth: hci3: unknown advertising packet type: 0x70
[  477.477338][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  477.896070][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  478.122850][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'.
[  478.132835][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'.
[  480.682643][ T7597] hub 9-0:1.0: USB hub found
[  480.687635][ T7597] hub 9-0:1.0: 1 port detected
[  482.622758][ T7609] sp0: Synchronizing with TNC
[  483.363006][ T7605] [U] è
[  483.928462][ T4265] Bluetooth: hci1: command 0x0406 tx timeout
[  486.109620][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  487.170945][ T4265] Bluetooth: hci4: unknown advertising packet type: 0x70
[  487.198917][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  487.486844][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.771'.
[  487.502360][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.6.771'.
[  488.144750][ T7660] hub 9-0:1.0: USB hub found
[  488.149777][ T7660] hub 9-0:1.0: 1 port detected
[  490.641054][ T7669] sp0: Synchronizing with TNC
[  491.356085][ T7667] [U] è
[  492.688504][ T7681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  492.700326][ T4265] Bluetooth: hci4: unknown advertising packet type: 0x70
[  492.710793][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  493.401458][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'.
[  493.412894][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'.
[  494.927422][ T7726] hub 9-0:1.0: USB hub found
[  494.932386][ T7726] hub 9-0:1.0: 1 port detected
[  495.918804][ T7749] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  495.987886][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  496.769069][ T7748] sp0: Synchronizing with TNC
[  496.781249][ T7748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.794'.
[  496.929272][ T7738] [U] è
[  499.884244][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'.
[  499.893514][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'.
[  501.470017][ T7801] hub 9-0:1.0: USB hub found
[  501.475298][ T7801] hub 9-0:1.0: 1 port detected
[  503.190007][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  503.224090][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  506.107690][ T7862] sp0: Synchronizing with TNC
[  506.126114][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'.
[  506.894683][ T7857] [U] è
[  506.963490][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  506.970044][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  507.343469][ T7874] hub 9-0:1.0: USB hub found
[  507.348652][ T7874] hub 9-0:1.0: 1 port detected
[  507.654069][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  507.745647][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  509.390990][ T4265] Bluetooth: hci2: unknown advertising packet type: 0x70
[  510.894093][ T7920] sp0: Synchronizing with TNC
[  510.925965][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.829'.
[  511.347761][ T7913] [U] è
[  512.407162][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  512.530996][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  513.574517][ T7959] hub 9-0:1.0: USB hub found
[  513.580767][ T7959] hub 9-0:1.0: 1 port detected
[  515.206028][ T4265] Bluetooth: hci4: unknown advertising packet type: 0x70
[  516.701359][ T7993] sp0: Synchronizing with TNC
[  516.725682][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.844'.
[  517.443186][ T7991] [U] è
[  518.057139][  T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  518.194168][ T8009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  518.285428][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  518.318851][  T126] usb 3-1: Using ep0 maxpacket: 8
[  518.340095][  T126] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.600964][  T126] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  518.788145][  T126] usb 3-1: config 0 interface 0 has no altsetting 0
[  518.847443][  T126] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  518.948446][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.960799][  T126] usb 3-1: config 0 descriptor??
[  519.515209][  T126] chicony 0003:04F2:1421.0002: unknown main item tag 0x0
[  519.633977][ T8023] hub 9-0:1.0: USB hub found
[  519.640108][ T8023] hub 9-0:1.0: 1 port detected
[  519.781015][  T126] chicony 0003:04F2:1421.0002: unknown main item tag 0x0
[  519.880888][  T126] chicony 0003:04F2:1421.0002: unknown main item tag 0x0
[  519.934112][  T126] chicony 0003:04F2:1421.0002: unknown main item tag 0x0
[  520.108089][  T126] chicony 0003:04F2:1421.0002: unknown main item tag 0x0
[  520.115213][  T126] chicony 0003:04F2:1421.0002: unknown main item tag 0x0
[  520.178323][  T126] chicony 0003:04F2:1421.0002: unknown main item tag 0x0
[  520.185451][  T126] chicony 0003:04F2:1421.0002: unknown main item tag 0x0
[  520.481900][  T126] chicony 0003:04F2:1421.0002: hidraw0: USB HID v0.02 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0
[  520.499147][  T126] usb 3-1: USB disconnect, device number 8
[  520.719270][ T4265] Bluetooth: hci2: unknown advertising packet type: 0x70
[  521.643989][ T8046] sp0: Synchronizing with TNC
[  521.669178][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.6.855'.
[  522.988374][ T8043] [U] è
[  523.877527][ T8058] process 'syz.6.858' launched './file0' with NULL argv: empty string added
[  524.898519][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  524.933014][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  528.095210][ T8083] device veth0_vlan left promiscuous mode
[  528.103857][ T8083] device veth0_vlan entered promiscuous mode
[  528.866972][ T4265] Bluetooth: hci1: unknown advertising packet type: 0x70
[  528.945272][ T6904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  529.046664][ T6904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  529.060555][ T6904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  529.963885][ T5765] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  531.160739][ T5765] usb 4-1: Using ep0 maxpacket: 8
[  531.275688][ T5765] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  531.325827][ T5765] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  531.361415][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.395340][ T5765] usb 4-1: config 0 descriptor??
[  533.258378][ T8126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  533.462741][ T8135] hub 9-0:1.0: USB hub found
[  533.468097][ T8135] hub 9-0:1.0: 1 port detected
[  533.524592][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  534.616826][ T7272] usb 4-1: USB disconnect, device number 6
[  535.308345][ T4265] Bluetooth: hci1: unknown advertising packet type: 0x70
[  536.889351][ T4296] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  537.848277][ T4296] usb 2-1: Using ep0 maxpacket: 8
[  537.860106][ T4296] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.373107][ T4296] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  538.387702][ T4296] usb 2-1: config 0 interface 0 has no altsetting 0
[  538.395475][ T4296] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  538.405251][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.417521][ T4296] usb 2-1: config 0 descriptor??
[  539.315650][ T4296] usbhid 2-1:0.0: can't add hid device: -71
[  539.329230][ T4296] usbhid: probe of 2-1:0.0 failed with error -71
[  539.435776][ T8200] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  539.509696][ T4296] usb 2-1: USB disconnect, device number 7
[  539.707736][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  540.548034][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  540.557791][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  540.565495][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  540.589063][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  540.597396][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  540.606520][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  540.615222][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  540.623154][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  540.631034][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  540.639343][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  540.647593][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  540.655494][ T8211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  540.663500][ T4296] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  541.448119][ T4298] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  541.648698][ T8223] hub 9-0:1.0: USB hub found
[  541.654723][ T8223] hub 9-0:1.0: 1 port detected
[  541.688130][ T4298] usb 1-1: Using ep0 maxpacket: 8
[  541.695663][ T4298] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  541.761540][ T4298] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  542.030074][ T4296] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  542.946070][ T4265] Bluetooth: hci4: unknown advertising packet type: 0x70
[  542.962180][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.106692][ T4298] usb 1-1: config 0 descriptor??
[  544.313106][ T4298] usb 1-1: USB disconnect, device number 9
[  544.510854][ T4296] usb 3-1: config 0 has no interface number 0
[  544.517107][ T4296] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  544.530116][ T4296] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  544.540145][ T4296] usb 3-1: config 0 interface 2 has no altsetting 0
[  544.546814][ T4296] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  545.064305][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.780151][ T4296] usb 3-1: config 0 descriptor??
[  545.808347][ T4296] usb 3-1: can't set config #0, error -71
[  545.920644][ T4296] usb 3-1: USB disconnect, device number 9
[  546.173144][ T8242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.892'.
[  546.943947][ T8260] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  547.388262][ T8276] hub 9-0:1.0: USB hub found
[  547.393662][ T8276] hub 9-0:1.0: 1 port detected
[  547.524408][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  547.534294][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  547.542078][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  547.565280][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  547.573917][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  547.583990][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  547.591903][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  547.599826][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  547.607750][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  547.615627][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  547.623490][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  547.631441][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  547.814593][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  548.810217][ T8296] hub 9-0:1.0: USB hub found
[  548.818101][ T8296] hub 9-0:1.0: 1 port detected
[  549.263158][ T5765] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  550.148153][ T5765] usb 2-1: Using ep0 maxpacket: 8
[  550.155940][ T5765] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  550.180433][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.301279][ T5765] usb 2-1: config 0 descriptor??
[  550.629516][ T5765] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  550.710540][ T5765] asix: probe of 2-1:0.0 failed with error -32
[  552.180041][ T6662] usb 2-1: USB disconnect, device number 8
[  553.498867][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'.
[  554.900487][ T8328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.910'.
[  555.741563][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'.
[  555.964420][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'.
[  557.520540][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  557.530208][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.538419][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  557.561190][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  557.570922][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  557.580105][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  557.587846][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  557.595799][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  557.603709][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  557.612141][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  557.621226][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  557.629196][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  557.637013][ T8345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  559.523907][ T8363] hub 9-0:1.0: USB hub found
[  559.528914][ T8363] hub 9-0:1.0: 1 port detected
[  561.244838][ T8354] device veth0_vlan left promiscuous mode
[  561.269196][ T8354] device veth0_vlan entered promiscuous mode
[  561.333332][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  561.505808][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  562.423893][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  563.389890][ T8403] netlink: 44 bytes leftover after parsing attributes in process `syz.6.923'.
[  564.866391][ T8420] hub 9-0:1.0: USB hub found
[  564.872617][ T8420] hub 9-0:1.0: 1 port detected
[  568.406504][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  568.416499][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  574.521751][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'.
[  579.721774][ T8589] netlink: 44 bytes leftover after parsing attributes in process `syz.3.965'.
[  584.242750][ T8649] hub 9-0:1.0: USB hub found
[  584.247676][ T8649] hub 9-0:1.0: 1 port detected
[  585.939603][ T8664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.980'.
[  591.421461][ T8727] hub 9-0:1.0: USB hub found
[  591.426461][ T8727] hub 9-0:1.0: 1 port detected
[  591.658132][ T4298] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  591.852876][ T4298] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  591.888373][ T4298] usb 4-1: config 0 has no interface number 0
[  591.942501][ T4298] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  592.079556][ T4298] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.141014][ T4298] usb 4-1: config 0 interface 2 has no altsetting 0
[  592.188129][ T4298] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  592.239143][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.486992][ T4298] usb 4-1: config 0 descriptor??
[  594.938620][ T4298] usbhid 4-1:0.2: can't add hid device: -71
[  594.947247][ T4298] usbhid: probe of 4-1:0.2 failed with error -71
[  595.008385][ T4298] usb 4-1: USB disconnect, device number 7
[  598.247143][ T8812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  598.328781][ T4265] Bluetooth: hci1: unknown advertising packet type: 0x70
[  598.372324][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  601.053314][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1010'.
[  601.063393][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1010'.
[  605.148792][ T4265] Bluetooth: hci2: unknown advertising packet type: 0x70
[  605.720258][ T8898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  605.810584][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  606.737320][ T8909] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  606.785134][ T8909] infiniband s: RDMA CMA: cma_listen_on_dev, error -98
[  608.678189][   T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  608.698701][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'.
[  608.709588][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'.
[  609.102011][   T22] usb 2-1: Using ep0 maxpacket: 8
[  609.129101][   T22] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  609.148035][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.166776][   T22] usb 2-1: config 0 descriptor??
[  609.321121][ T8970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1034'.
[  609.660893][   T22] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  609.874424][   T22] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  609.919471][   T22] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  610.008157][   T22] asix: probe of 2-1:0.0 failed with error -32
[  610.518704][ T8979] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  610.538370][ T4265] Bluetooth: hci1: unknown advertising packet type: 0x70
[  610.549649][ T6904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  612.386359][ T4331] usb 2-1: USB disconnect, device number 9
[  617.803077][    C0] Unknown status report in ack skb
[  619.418181][ T4296] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  619.518100][ T9010] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  619.638092][ T4296] usb 1-1: Using ep0 maxpacket: 8
[  619.645077][ T4296] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  619.664682][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.687915][ T4296] usb 1-1: config 0 descriptor??
[  619.710075][ T9010] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  619.945982][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  620.192729][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  620.265201][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  620.416556][ T4296] asix: probe of 1-1:0.0 failed with error -32
[  620.535653][ T9010] usb 2-1: config 0 has no interface number 0
[  620.544226][ T9010] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  620.555392][ T9010] usb 2-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.565947][ T9010] usb 2-1: config 0 interface 2 has no altsetting 0
[  620.572670][ T9010] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  620.585002][ T9010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.595567][ T9010] usb 2-1: config 0 descriptor??
[  621.685183][ T9070] xt_CT: You must specify a L4 protocol and not use inversions on it
[  621.762245][ T9010] usbhid 2-1:0.2: can't add hid device: -71
[  621.805463][ T9010] usbhid: probe of 2-1:0.2 failed with error -71
[  621.838381][ T9010] usb 2-1: USB disconnect, device number 10
[  622.147624][ T9010] usb 1-1: USB disconnect, device number 10
[  626.311265][ T9158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1064'.
[  627.368054][ T9010] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  627.568179][ T9010] usb 4-1: Using ep0 maxpacket: 8
[  627.576347][ T9010] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  627.603479][ T9010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.623590][ T9010] usb 4-1: config 0 descriptor??
[  627.849503][ T9010] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  628.061964][ T9010] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  628.083094][ T9010] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  628.118254][ T9010] asix: probe of 4-1:0.0 failed with error -32
[  629.844186][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  629.850726][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  630.237902][ T4296] usb 4-1: USB disconnect, device number 8
[  634.003408][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1079'.
[  636.528047][ T4296] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  636.737997][ T4296] usb 1-1: Using ep0 maxpacket: 8
[  636.744965][ T4296] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  636.780214][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.916022][ T4296] usb 1-1: config 0 descriptor??
[  637.278124][ T9010] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  637.296665][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  639.518187][ T9010] usb 7-1: Using ep0 maxpacket: 8
[  639.548785][ T9010] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  639.658222][ T9010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.686683][ T9010] usb 7-1: Product: syz
[  639.692856][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  639.696811][ T9010] usb 7-1: Manufacturer: syz
[  639.728030][ T4296] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  639.747846][ T9010] usb 7-1: SerialNumber: syz
[  639.759243][ T4296] asix: probe of 1-1:0.0 failed with error -71
[  639.796297][ T9010] usb 7-1: config 0 descriptor??
[  639.811429][ T4296] usb 1-1: USB disconnect, device number 11
[  640.081414][ T9010] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  640.128674][ T9010] gspca_sunplus: reg_w_riv err -71
[  640.138160][ T9010] sunplus: probe of 7-1:0.0 failed with error -71
[  640.178205][ T9010] usb 7-1: USB disconnect, device number 3
[  644.026731][ T9304] kernel profiling enabled (shift: 63)
[  644.048084][ T9304] profiling shift: 63 too large
[  644.113061][ T9010] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  644.323599][ T9010] usb 1-1: Using ep0 maxpacket: 8
[  644.340158][ T9010] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  644.366569][ T9010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.437747][ T9010] usb 1-1: config 0 descriptor??
[  645.391689][    T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  645.403419][ T9010] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  645.615306][ T9010] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  645.627971][    T7] usb 4-1: Using ep0 maxpacket: 8
[  645.641678][    T7] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  645.694620][ T9010] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  645.715370][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.733928][ T9010] asix: probe of 1-1:0.0 failed with error -32
[  645.740651][    T7] usb 4-1: Product: syz
[  645.747319][    T7] usb 4-1: Manufacturer: syz
[  645.770988][    T7] usb 4-1: SerialNumber: syz
[  645.787673][    T7] usb 4-1: config 0 descriptor??
[  646.015742][    T7] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  646.694960][  T126] usb 1-1: USB disconnect, device number 12
[  646.701154][    T7] gspca_sunplus: reg_w_riv err -71
[  646.701240][    T7] sunplus: probe of 4-1:0.0 failed with error -71
[  646.744234][    T7] usb 4-1: USB disconnect, device number 9
[  646.889012][ T9334] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1111'.
[  651.547666][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  651.557500][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  651.565254][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  651.588425][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  651.596670][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  651.605643][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  651.613569][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  651.621620][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  651.629827][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  651.638222][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  651.646352][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  651.654214][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  651.662107][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  652.128080][  T126] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  652.341674][  T126] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  652.352015][  T126] usb 3-1: config 0 has no interface number 0
[  652.358634][  T126] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  652.370867][  T126] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.382625][  T126] usb 3-1: config 0 interface 2 has no altsetting 0
[  652.389697][  T126] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  652.401911][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.435546][  T126] usb 3-1: config 0 descriptor??
[  652.960305][ T9379] xt_CT: You must specify a L4 protocol and not use inversions on it
[  653.088666][ T4298] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  653.528121][ T4298] usb 1-1: Using ep0 maxpacket: 8
[  653.543828][ T4298] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  653.563678][ T4296] usb 3-1: USB disconnect, device number 10
[  653.595007][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.636989][ T4298] usb 1-1: config 0 descriptor??
[  653.858029][ T4298] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  654.048162][    T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  654.315508][ T4298] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  654.326013][ T4298] asix: probe of 1-1:0.0 failed with error -32
[  654.358069][    T7] usb 2-1: Using ep0 maxpacket: 8
[  654.578660][    T7] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  654.589001][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.597202][    T7] usb 2-1: Product: syz
[  654.602588][    T7] usb 2-1: Manufacturer: syz
[  654.607336][    T7] usb 2-1: SerialNumber: syz
[  654.615079][    T7] usb 2-1: config 0 descriptor??
[  654.828861][    T7] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  655.226802][    T7] gspca_sunplus: reg_w_riv err -71
[  655.232223][    T7] sunplus: probe of 2-1:0.0 failed with error -71
[  655.249770][    T7] usb 2-1: USB disconnect, device number 11
[  656.492348][   T26] usb 1-1: USB disconnect, device number 13
[  657.288791][ T9424] device vlan2 entered promiscuous mode
[  657.294477][ T9424] device bridge0 entered promiscuous mode
[  657.338963][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  657.348546][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  657.361188][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  657.457561][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  657.471513][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  657.484184][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  657.504764][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  657.517137][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  657.537645][ T9423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  657.548797][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'.
[  658.043491][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'.
[  658.167576][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  661.681217][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  661.690791][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  661.698422][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  661.720506][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  661.728461][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  661.736128][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  661.744907][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  661.753002][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  661.761125][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  662.848105][ T9010] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  663.080290][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1147'.
[  663.093755][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1147'.
[  663.827996][ T9010] usb 3-1: Using ep0 maxpacket: 8
[  663.830011][ T9010] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  663.830044][ T9010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.831928][ T9010] usb 3-1: config 0 descriptor??
[  664.405677][ T9010] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  664.428133][ T9010] asix: probe of 3-1:0.0 failed with error -71
[  664.458453][ T9010] usb 3-1: USB disconnect, device number 11
[  665.966160][ T9512] fuse: Unknown parameter '0x0000000000000000'
[  668.032960][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  668.042582][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  668.050199][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  668.072748][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  668.081973][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  668.089721][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  668.097579][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  668.105796][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  668.113645][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  668.121897][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  668.129636][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  668.137826][ T9533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  668.417304][ T9535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'.
[  669.016741][ T9538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1159'.
[  670.211440][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'.
[  670.221530][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'.
[  671.162192][ T4265] Bluetooth: hci4: Malformed LE Event: 0x0d
[  671.658377][ T4331] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  671.885928][   T27] audit: type=1326 audit(1744837005.811:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.1.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad518e169 code=0x7fc00000
[  672.031081][ T4331] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  672.054484][ T4331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.073394][ T4331] usb 7-1: Product: syz
[  672.081203][ T4331] usb 7-1: Manufacturer: syz
[  672.088431][ T4331] usb 7-1: SerialNumber: syz
[  672.103142][ T4331] usb 7-1: config 0 descriptor??
[  673.965921][ T4331] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  674.052058][ T4331] asix: probe of 7-1:0.0 failed with error -71
[  674.280182][ T4331] usb 7-1: USB disconnect, device number 4
[  675.388777][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'.
[  675.397798][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'.
[  677.547281][ T9615] lo speed is unknown, defaulting to 1000
[  677.610337][ T9615] lo speed is unknown, defaulting to 1000
[  677.625601][ T9615] lo speed is unknown, defaulting to 1000
[  678.148535][ T9615] infiniband syz0: set active
[  678.148698][ T9615] infiniband syz0: added lo
[  678.424194][ T9614] tty tty24: ldisc open failed (-12), clearing slot 23
[  678.509855][ T9611] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1177'.
[  678.606309][ T9618] loop9: detected capacity change from 0 to 7
[  678.618145][ T9618] Dev loop9: unable to read RDB block 7
[  678.623889][ T9618]  loop9: unable to read partition table
[  678.629744][ T9618] loop9: partition table beyond EOD, truncated
[  678.635935][ T9618] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5)
[  678.672420][ T9615] RDS/IB: syz0: added
[  678.677165][ T9615] smc: adding ib device syz0 with port count 1
[  678.683687][ T9615] smc:    ib device syz0 port 1 has pnetid 
[  678.691157][ T9615] lo speed is unknown, defaulting to 1000
[  678.784064][ T9615] lo speed is unknown, defaulting to 1000
[  678.893628][ T9615] lo speed is unknown, defaulting to 1000
[  678.963836][ T9615] lo speed is unknown, defaulting to 1000
[  679.032921][ T9615] lo speed is unknown, defaulting to 1000
[  679.101935][ T9615] lo speed is unknown, defaulting to 1000
[  679.178701][ T6662] lo speed is unknown, defaulting to 1000
[  679.342700][  T126] lo speed is unknown, defaulting to 1000
[  680.088359][ T4299] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  680.308066][ T4299] usb 3-1: Using ep0 maxpacket: 8
[  680.356527][ T4299] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  680.451427][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.459982][ T4299] usb 3-1: Product: syz
[  680.464333][ T4299] usb 3-1: Manufacturer: syz
[  680.469132][ T4299] usb 3-1: SerialNumber: syz
[  680.476245][ T4299] usb 3-1: config 0 descriptor??
[  681.540853][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  681.560163][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  681.571538][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  681.609426][ T4299] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110
[  681.636347][ T4299] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110
[  681.671636][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  681.690881][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  681.723735][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  681.759886][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  681.762845][ T9643] block device autoloading is deprecated and will be removed.
[  681.821559][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  681.983873][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  681.992544][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  682.033017][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  682.093285][ T9658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'.
[  682.867788][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  682.906676][ T9646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  682.925046][ T9652] lo speed is unknown, defaulting to 1000
[  683.171940][ T7272] usb 3-1: USB disconnect, device number 12
[  683.255821][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1190'.
[  683.265860][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1190'.
[  685.035076][ T9686] rdma_rxe: rxe_register_device failed with error -23
[  685.043342][ T9686] rdma_rxe: failed to add lo
[  685.550293][ T9686] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1195'.
[  685.567745][ T9686] loop9: detected capacity change from 0 to 7
[  685.577499][ T9686] Dev loop9: unable to read RDB block 7
[  685.583325][ T9686]  loop9: unable to read partition table
[  685.589421][ T9686] loop9: partition table beyond EOD, truncated
[  685.595639][ T9686] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5)
[  686.248960][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1201'.
[  687.520603][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1204'.
[  687.530807][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1204'.
[  691.292012][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  691.298730][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  691.308235][    T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  691.498138][    T7] usb 7-1: Using ep0 maxpacket: 8
[  691.504935][    T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  691.562197][    T7] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  691.589288][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.674163][    T7] usb 7-1: config 0 descriptor??
[  692.014314][    T7] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  692.579845][ T9749] lo speed is unknown, defaulting to 1000
[  693.093303][ T9755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1212'.
[  694.086082][ T5144] usb 7-1: USB disconnect, device number 5
[  694.257611][ T9766] rdma_rxe: rxe_register_device failed with error -23
[  694.265346][ T9766] rdma_rxe: failed to add lo
[  694.784556][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1216'.
[  694.806887][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1216'.
[  695.172172][ T9766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1213'.
[  695.421656][ T9766] loop9: detected capacity change from 0 to 7
[  696.031000][ T9766] Dev loop9: unable to read RDB block 7
[  696.036764][ T9766]  loop9: unable to read partition table
[  696.043397][ T9766] loop9: partition table beyond EOD, truncated
[  696.049744][ T9766] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5)
[  699.208937][ T9803] kvm [9802]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x100000000000000
[  699.549708][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1226'.
[  701.152100][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'.
[  701.162405][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1229'.
[  701.689357][ T9819] lo speed is unknown, defaulting to 1000
[  701.858636][ T9808] tipc: Started in network mode
[  701.863597][ T9808] tipc: Node identity 3616de5522c7, cluster identity 4711
[  701.871048][ T9808] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  703.464701][ T4296] tipc: Node number set to 349298261
[  704.496848][ T9857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'.
[  706.286755][ T9868] netlink: 'syz.3.1243': attribute type 32 has an invalid length.
[  706.711559][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'.
[  706.721571][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'.
[  707.854769][ T4298] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  708.044624][ T4298] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  708.104503][ T4298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.331546][ T4298] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  708.501232][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.637189][ T4298] usb 4-1: config 0 descriptor??
[  709.168263][ T4298] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  709.426789][ T4298] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  709.439025][ T4331] usb 4-1: USB disconnect, device number 10
[  709.517809][ T4298] usb 1-1: config 0 has no interface number 0
[  709.707226][ T4298] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=c8.a9
[  709.893337][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.037405][ T4298] usb 1-1: Product: syz
[  710.127078][ T4298] usb 1-1: Manufacturer: syz
[  710.206449][ T4298] usb 1-1: SerialNumber: syz
[  710.351081][ T4298] usb 1-1: config 0 descriptor??
[  710.724272][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1248'.
[  710.783913][ T4298] ath6kl: Failed to submit usb control message: -71
[  710.796828][ T4298] ath6kl: unable to send the bmi data to the device: -71
[  710.822105][ T4298] ath6kl: Unable to send get target info: -71
[  710.861026][ T4298] ath6kl: Failed to init ath6kl core: -71
[  710.993552][ T4298] ath6kl_usb: probe of 1-1:0.12 failed with error -71
[  711.062426][ T4298] usb 1-1: USB disconnect, device number 14
[  711.127559][ T9915] lo speed is unknown, defaulting to 1000
[  711.594435][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1252'.
[  712.142326][ T9933] rdma_rxe: rxe_register_device failed with error -23
[  712.149887][ T9933] rdma_rxe: failed to add lo
[  712.460559][ T9933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1257'.
[  713.823387][ T9948] netlink: 'syz.3.1261': attribute type 10 has an invalid length.
[  713.910559][ T9948] batman_adv: batadv0: Adding interface: team0
[  713.938824][ T9948] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.991949][ T9948] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  714.032492][ T9949] netlink: 'syz.3.1261': attribute type 10 has an invalid length.
[  714.179674][ T9949] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1261'.
[  714.236893][ T9949] device team0 entered promiscuous mode
[  714.243238][ T9949] device team_slave_0 entered promiscuous mode
[  714.249790][ T9949] device team_slave_1 entered promiscuous mode
[  714.258884][ T9949] 8021q: adding VLAN 0 to HW filter on device team0
[  714.265972][ T9949] batman_adv: batadv0: Interface activated: team0
[  714.272625][ T9949] batman_adv: batadv0: Interface deactivated: team0
[  714.279414][ T9949] batman_adv: batadv0: Removing interface: team0
[  714.287036][ T9949] bridge0: port 3(team0) entered blocking state
[  714.293609][ T9949] bridge0: port 3(team0) entered disabled state
[  714.340460][ T9949] bridge0: port 3(team0) entered blocking state
[  714.347098][ T9949] bridge0: port 3(team0) entered forwarding state
[  715.044170][ T9949] syz.3.1261 (9949) used greatest stack depth: 19792 bytes left
[  716.838044][ T9973] lo speed is unknown, defaulting to 1000
[  717.408057][  T128] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  717.648030][  T128] usb 3-1: Using ep0 maxpacket: 8
[  717.664744][  T128] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  717.682951][  T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.696820][  T128] usb 3-1: config 0 descriptor??
[  717.918658][  T128] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  718.958240][  T128] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  718.994890][  T128] asix: probe of 3-1:0.0 failed with error -61
[  720.238092][  T128] usb 3-1: USB disconnect, device number 13
[  721.501585][T10031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1282'.
[  724.795500][T10046] lo speed is unknown, defaulting to 1000
[  725.760676][ T4331] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  725.977986][ T4331] usb 2-1: Using ep0 maxpacket: 8
[  725.985235][ T4331] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  726.035514][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.065065][ T4331] usb 2-1: config 0 descriptor??
[  726.286878][ T4331] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  726.563617][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'.
[  726.700306][ T4331] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  727.376567][ T4331] asix: probe of 2-1:0.0 failed with error -61
[  729.376817][ T4331] usb 2-1: USB disconnect, device number 12
[  730.337614][T10114] lo speed is unknown, defaulting to 1000
[  730.485630][ T4265] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  731.458380][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  731.468172][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  731.475710][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  731.500054][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  731.509463][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  731.517106][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  731.525498][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  731.533773][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  731.541575][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  731.549665][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  731.557682][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  731.565983][T10133] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  736.209590][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  736.225844][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  736.234459][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  736.317522][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  736.326540][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  736.335738][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  736.346446][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  736.355431][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  736.365810][T10185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  736.930558][T10184] netlink: 'syz.1.1327': attribute type 1 has an invalid length.
[  737.344834][T10188] 8021q: adding VLAN 0 to HW filter on device bond2
[  737.353679][T10188] bond1: (slave bond2): making interface the new active one
[  737.371580][T10188] bond1: (slave bond2): Enslaving as an active interface with an up link
[  737.383466][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1327'.
[  737.424038][T10191] 8021q: adding VLAN 0 to HW filter on device bond1
[  738.332486][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'.
[  740.175794][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  740.185481][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  740.193308][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  740.217227][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  740.226598][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  740.234673][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  740.242985][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  740.251272][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap7: link becomes ready
[  740.259192][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap8: link becomes ready
[  740.267307][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap9: link becomes ready
[  740.275099][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap10: link becomes ready
[  740.283413][T10239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap11: link becomes ready
[  746.313681][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  746.331786][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  746.340459][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  746.409022][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  746.418088][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  746.426915][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  746.437568][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  746.446673][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  746.457111][T10289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  747.038064][ T9010] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  747.248177][ T9010] usb 3-1: Using ep0 maxpacket: 32
[  747.269805][ T9010] usb 3-1: config 0 has no interfaces?
[  747.312298][ T9010] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  747.324451][ T9010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.353799][ T9010] usb 3-1: config 0 descriptor??
[  747.730755][ T4297] kworker/dying (4297) used greatest stack depth: 19704 bytes left
[  748.264929][ T9010] usb 3-1: USB disconnect, device number 14
[  748.948709][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  748.965709][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  748.974531][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  749.040288][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready
[  749.049149][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap2: link becomes ready
[  749.057987][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap3: link becomes ready
[  749.068204][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap4: link becomes ready
[  749.077075][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap5: link becomes ready
[  749.087399][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap6: link becomes ready
[  750.229047][T10323] nvme_fabrics: missing parameter 'transport=%s'
[  750.237587][T10323] nvme_fabrics: missing parameter 'nqn=%s'
[  750.881933][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'.
[  751.737582][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'.
[  753.118848][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  753.125294][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  756.288344][T10396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1383'.
[  756.992432][T10400] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  760.480962][T10432] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1394'.
[  765.238656][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'.
[  765.248729][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'.
[  767.314921][T10471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1405'.
[  768.773441][T10485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1406'.
[  772.001216][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1413'.
[  772.011398][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1413'.
[  775.638517][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1420'.
[  778.328004][ T4513] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  778.527991][ T4513] usb 4-1: Using ep0 maxpacket: 16
[  778.541552][ T4513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  778.597049][ T4513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  778.642877][ T4513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  778.712993][ T4513] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  778.748135][ T4513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.947709][ T4513] usb 4-1: config 0 descriptor??
[  779.932089][ T4513] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0
[  780.127296][ T4513] hid-generic 0003:0955:7214.0004: unknown main item tag 0xe
[  780.159287][ T4513] hid-generic 0003:0955:7214.0004: item fetching failed at offset 4/5
[  780.221384][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'.
[  780.231664][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'.
[  780.938490][ T4513] hid-generic: probe of 0003:0955:7214.0004 failed with error -22
[  780.962763][ T4513] usb 4-1: USB disconnect, device number 11
[  781.168288][ T4298] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  781.358004][ T4298] usb 7-1: Using ep0 maxpacket: 8
[  781.367739][ T4298] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  781.424938][ T4298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.460952][ T4298] usb 7-1: Product: syz
[  781.475482][ T4298] usb 7-1: Manufacturer: syz
[  781.487239][ T4298] usb 7-1: SerialNumber: syz
[  781.542714][ T4298] usb 7-1: config 0 descriptor??
[  781.596939][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'.
[  782.398005][ T4298] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  784.786403][ T4298] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71
[  784.827270][ T4298] usb 7-1: USB disconnect, device number 6
[  785.453770][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'.
[  785.556428][ T4331] libceph: connect (1)[c::]:6789 error -101
[  785.572272][ T4331] libceph: mon0 (1)[c::]:6789 connect error
[  785.580520][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1442'.
[  785.655361][T10614] ceph: No mds server is up or the cluster is laggy
[  785.669177][ T4331] libceph: connect (1)[c::]:6789 error -101
[  785.693508][ T4331] libceph: mon0 (1)[c::]:6789 connect error
[  786.476857][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1446'.
[  788.358155][ T4294] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  788.656241][T10664] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  789.007899][ T4294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  789.269136][ T4294] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  789.296772][ T4294] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  789.459596][ T4294] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  789.468962][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.482168][ T4294] usb 4-1: Product: syz
[  789.486389][ T4294] usb 4-1: Manufacturer: syz
[  789.492106][ T4294] usb 4-1: SerialNumber: syz
[  789.516662][ T4294] cdc_ncm 4-1:1.0: skipping garbage
[  789.526174][ T4294] usb 4-1: selecting invalid altsetting 1
[  791.493075][ T4294] cdc_ncm 4-1:1.0: bind() failure
[  791.510928][ T4294] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  791.762372][ T4294] cdc_ncm 4-1:1.1: bind() failure
[  791.768397][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1461'.
[  791.771511][ T4294] usb 4-1: USB disconnect, device number 12
[  796.196542][T10744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1474'.
[  798.463845][T10763] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.472061][T10763] bridge0: port 1(bridge_slave_0) entered disabled state
[  799.472105][T10763] device bridge0 left promiscuous mode
[  801.924174][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1486'.
[  803.145142][ T4294] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  804.116678][ T4294] usb 1-1: Using ep0 maxpacket: 16
[  804.124482][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  804.178021][ T4294] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  804.199576][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.233654][ T4294] usb 1-1: config 0 descriptor??
[  804.278953][ T4294] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11
[  805.017890][ T3607] bcm5974 1-1:0.0: could not read from device
[  805.196155][ T3607] bcm5974 1-1:0.0: could not read from device
[  805.263995][ T3607] bcm5974 1-1:0.0: could not read from device
[  805.439044][ T3607] bcm5974 1-1:0.0: could not read from device
[  806.224001][ T4294] usb 1-1: USB disconnect, device number 15
[  806.754892][ T9631] bcm5974 1-1:0.0: could not read from device
[  807.014167][ T3607] bcm5974 1-1:0.0: could not read from device
[  807.066205][ T3607] bcm5974 1-1:0.0: could not read from device
[  808.660267][T10848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1498'.
[  811.200524][ T5144] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  811.527953][ T5144] usb 3-1: Using ep0 maxpacket: 16
[  814.161753][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  814.168313][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  816.404962][T10903] device veth0_vlan left promiscuous mode
[  816.415572][T10903] device veth0_vlan entered promiscuous mode
[  816.515156][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  816.530808][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  816.539128][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  816.633738][ T5144] usb 3-1: unable to get BOS descriptor or descriptor too short
[  816.691571][ T5144] usb 3-1: unable to read config index 0 descriptor/start: -32
[  816.712818][ T5144] usb 3-1: chopping to 0 config(s)
[  816.736016][ T5144] usb 3-1: can't read configurations, error -32
[  816.968396][ T5144] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  817.560397][ T5144] usb 3-1: device descriptor read/64, error -32
[  818.398305][ T5144] usb usb3-port1: attempt power cycle
[  819.217962][ T5144] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  819.418501][ T5144] usb 3-1: device descriptor read/8, error -32
[  819.848410][ T5144] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  819.971438][ T5144] usb 3-1: device descriptor read/8, error -32
[  820.159878][ T5144] usb usb3-port1: unable to enumerate USB device
[  821.066271][T10926] device veth0_vlan left promiscuous mode
[  822.234863][T10926] device veth0_vlan entered promiscuous mode
[  822.318215][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  822.544624][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  822.752477][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  829.168001][   T14] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  829.369509][   T14] usb 3-1: Using ep0 maxpacket: 32
[  829.376649][   T14] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  829.440260][   T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  829.718619][   T14] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  829.739862][   T14] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  829.762963][   T14] usb 3-1: config 0 interface 0 has no altsetting 0
[  830.519931][   T14] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  830.536196][   T14] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  830.545536][   T14] usb 3-1: Product: syz
[  830.556951][   T14] usb 3-1: Manufacturer: syz
[  830.562322][   T14] usb 3-1: SerialNumber: syz
[  830.575542][   T14] usb 3-1: config 0 descriptor??
[  830.597565][   T14] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  830.675262][   T14] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  832.139573][ T4331] usb 3-1: USB disconnect, device number 19
[  832.172885][ T4331] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  835.036620][T11047] lo speed is unknown, defaulting to 1000
[  835.138155][ T4513] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  835.338021][ T4513] usb 1-1: Using ep0 maxpacket: 16
[  835.345438][ T4513] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  835.366089][ T4513] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  835.409217][ T4513] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  835.428230][ T4513] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  835.453648][ T4513] usb 1-1: Manufacturer: syz
[  835.475212][ T4513] usb 1-1: config 0 descriptor??
[  836.360019][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  836.713980][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.402141][ T5144] usb 1-1: USB disconnect, device number 16
[  841.360383][  T128] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  842.309586][  T128] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  842.346441][  T128] usb 7-1: config 0 interface 0 has no altsetting 0
[  842.357103][  T128] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  842.373845][  T128] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  842.393092][  T128] usb 7-1: Product: syz
[  842.417493][  T128] usb 7-1: Manufacturer: syz
[  842.432998][  T128] usb 7-1: SerialNumber: syz
[  842.486145][  T128] usb 7-1: config 0 descriptor??
[  842.524914][  T128] usb 7-1: selecting invalid altsetting 0
[  842.536700][T11090] Bluetooth: MGMT ver 1.22
[  842.794021][  T128] usb 7-1: USB disconnect, device number 7
[  843.189134][ T4513] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  843.681650][ T4513] usb 2-1: unable to get BOS descriptor or descriptor too short
[  843.696026][ T4513] usb 2-1: config 6 has an invalid interface number: 136 but max is 0
[  843.722711][ T4513] usb 2-1: config 6 has no interface number 0
[  843.747798][ T4513] usb 2-1: config 6 interface 136 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  843.767335][ T4513] usb 2-1: config 6 interface 136 has no altsetting 0
[  843.825849][ T4513] usb 2-1: New USB device found, idVendor=050d, idProduct=e68b, bcdDevice= d.8d
[  843.876270][ T4513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.898235][ T4513] usb 2-1: Product: syz
[  843.905304][ T4513] usb 2-1: Manufacturer: syz
[  843.929142][ T4513] usb 2-1: SerialNumber: syz
[  844.179775][ T4513] usb 2-1: USB disconnect, device number 13
[  845.326903][T11108] lo speed is unknown, defaulting to 1000
[  845.567953][ T4259] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  845.758093][ T4259] usb 2-1: Using ep0 maxpacket: 16
[  845.770218][ T4259] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  845.817691][ T4259] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  845.856697][ T4259] usb 2-1: config 0 interface 0 has no altsetting 0
[  845.888221][ T4259] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  845.927072][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.977686][ T4259] usb 2-1: config 0 descriptor??
[  846.226693][ T5144] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  846.378556][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'.
[  846.388558][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'.
[  846.817034][ T4259] hid (null): report_id 0 is invalid
[  846.828389][ T4259] cougar 0003:060B:500A.0005: unexpected long global item
[  846.836196][ T4259] cougar 0003:060B:500A.0005: parse failed
[  846.842314][ T4259] cougar: probe of 0003:060B:500A.0005 failed with error -22
[  846.878005][ T5144] usb 1-1: Using ep0 maxpacket: 16
[  846.885448][ T5144] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  847.028390][ T4259] usb 2-1: USB disconnect, device number 14
[  847.043523][ T5144] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC6, skipping
[  847.063275][ T5144] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  847.170511][ T5144] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  847.185965][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.204617][ T5144] usb 1-1: Product: syz
[  847.213271][ T5144] usb 1-1: Manufacturer: syz
[  847.218376][ T5144] usb 1-1: SerialNumber: syz
[  847.232756][ T5144] usb 1-1: config 0 descriptor??
[  847.240469][ T5144] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  848.177817][ T4331] usb 1-1: USB disconnect, device number 17
[  849.453212][T11151] cgroup: Need name or subsystem set
[  851.322266][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1586'.
[  851.334376][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1586'.
[  851.456320][T11178] lo speed is unknown, defaulting to 1000
[  851.757994][ T4294] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  851.948059][ T4294] usb 1-1: Using ep0 maxpacket: 16
[  853.022591][T11187] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1590'.
[  853.588049][ T4513] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  854.948617][ T4513] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  854.956843][ T4513] usb 7-1: config 0 has no interface number 0
[  854.963466][ T4513] usb 7-1: config 0 interface 2 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  854.977690][ T4513] usb 7-1: config 0 interface 2 has no altsetting 0
[  854.984559][ T4513] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  855.056230][ T4513] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  855.580689][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'.
[  855.590777][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'.
[  856.106370][ T4513] usb 7-1: config 0 descriptor??
[  857.128847][ T4294] usb 1-1: unable to get BOS descriptor or descriptor too short
[  857.238426][ T4294] usb 1-1: unable to read config index 0 descriptor/start: -32
[  857.256185][ T4294] usb 1-1: chopping to 0 config(s)
[  857.261491][ T4294] usb 1-1: can't read configurations, error -32
[  857.305604][ T4513] usb 7-1: can't set config #0, error -71
[  857.318005][ T4513] usb 7-1: USB disconnect, device number 8
[  857.427992][ T4294] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  857.531231][T11229] lo speed is unknown, defaulting to 1000
[  862.242047][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'.
[  862.421808][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'.
[  865.842493][T11295] lo speed is unknown, defaulting to 1000
[  866.264756][T11304] mmap: syz.0.1620 (11304) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  866.495629][T11303] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  866.504775][T11303] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  871.033978][T11328] ------------[ cut here ]------------
[  871.039998][T11328] WARNING: CPU: 1 PID: 11328 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x162/0x190
[  871.050337][T11328] Modules linked in:
[  871.054270][T11328] CPU: 1 PID: 11328 Comm: syz.1.1627 Not tainted 6.1.134-syzkaller #0
[  871.062528][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  871.072627][T11328] RIP: 0010:taprio_get_start_time+0x162/0x190
[  871.078795][T11328] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 b8 8c 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 2a b0 f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b
[  871.098497][T11328] RSP: 0018:ffffc9000c9d6dc0 EFLAGS: 00010283
[  871.104595][T11328] RAX: ffffffff88da8012 RBX: 0000000000000000 RCX: 0000000000080000
[  871.112670][T11328] RDX: ffffc900058c9000 RSI: 0000000000001f3c RDI: 0000000000001f3d
[  871.120726][T11328] RBP: ffff8880527512d4 R08: ffffffff88da7fbf R09: fffffbfff225787e
[  871.128745][T11328] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  871.136724][T11328] R13: 1836e8318137c332 R14: dffffc0000000000 R15: 0000000000000000
[  871.144740][T11328] FS:  00007f7ad600c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  871.153724][T11328] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  871.160351][T11328] CR2: 0000200000101000 CR3: 00000000215ee000 CR4: 00000000003526e0
[  871.168371][T11328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  871.176405][T11328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  871.184422][T11328] Call Trace:
[  871.187714][T11328]  <TASK>
[  871.190683][T11328]  taprio_change+0x4319/0x5600
[  871.195491][T11328]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  871.201495][T11328]  ? taprio_destroy+0x4a0/0x4a0
[  871.206401][T11328]  ? lockdep_init_map_type+0x9d/0x900
[  871.211864][T11328]  ? rtnetlink_rcv_msg+0x822/0x1000
[  871.217077][T11328]  ? netlink_rcv_skb+0x1cd/0x410
[  871.222069][T11328]  ? netlink_unicast+0x7e2/0x970
[  871.227066][T11328]  ? netlink_sendmsg+0xa26/0xd60
[  871.232067][T11328]  ? ____sys_sendmsg+0x5d3/0x9a0
[  871.237017][T11328]  ? __sys_sendmsg+0x2a9/0x390
[  871.241849][T11328]  ? memset+0x1f/0x40
[  871.245843][T11328]  ? fifo_init+0x41e/0x760
[  871.250323][T11328]  ? qdisc_peek_head+0x40/0x40
[  871.255159][T11328]  ? taprio_peek+0x590/0x590
[  871.259824][T11328]  qdisc_create+0x8a1/0x1220
[  871.264449][T11328]  ? qdisc_notify+0x390/0x390
[  871.269184][T11328]  ? lockdep_rtnl_is_held+0x22/0x30
[  871.274401][T11328]  tc_modify_qdisc+0xb6d/0x1e60
[  871.279299][T11328]  ? qdisc_offload_query_caps+0x170/0x170
[  871.285048][T11328]  ? qdisc_offload_query_caps+0x170/0x170
[  871.290806][T11328]  rtnetlink_rcv_msg+0x822/0x1000
[  871.295848][T11328]  ? rtnetlink_bind+0x80/0x80
[  871.300586][T11328]  ? __local_bh_enable_ip+0x164/0x1f0
[  871.305993][T11328]  ? __dev_queue_xmit+0x2d6/0x3d50
[  871.311200][T11328]  ? _local_bh_enable+0xa0/0xa0
[  871.316075][T11328]  ? __dev_queue_xmit+0x2d6/0x3d50
[  871.321252][T11328]  ? __dev_queue_xmit+0x173c/0x3d50
[  871.326475][T11328]  ? __dev_queue_xmit+0x2d6/0x3d50
[  871.331652][T11328]  ? netdev_core_pick_tx+0x320/0x320
[  871.336953][T11328]  ? ref_tracker_free+0x638/0x7d0
[  871.342055][T11328]  ? memcpy+0x3c/0x60
[  871.346151][T11328]  ? refcount_inc+0x80/0x80
[  871.350713][T11328]  ? __copy_skb_header+0x47b/0x600
[  871.355844][T11328]  netlink_rcv_skb+0x1cd/0x410
[  871.360685][T11328]  ? rtnetlink_bind+0x80/0x80
[  871.365385][T11328]  ? netlink_ack+0x12a0/0x12a0
[  871.370217][T11328]  ? __netlink_deliver_tap+0x748/0x780
[  871.375729][T11328]  ? netlink_deliver_tap+0x2e/0x1b0
[  871.380975][T11328]  netlink_unicast+0x7e2/0x970
[  871.385752][T11328]  ? netlink_detachskb+0x90/0x90
[  871.390724][T11328]  ? __virt_addr_valid+0x45b/0x530
[  871.395846][T11328]  ? __phys_addr_symbol+0x2b/0x70
[  871.400953][T11328]  ? __check_object_size+0x4dd/0xa30
[  871.406260][T11328]  ? bpf_lsm_netlink_send+0x5/0x10
[  871.411417][T11328]  netlink_sendmsg+0xa26/0xd60
[  871.416200][T11328]  ? netlink_getsockopt+0x580/0x580
[  871.421458][T11328]  ? aa_sock_msg_perm+0x91/0x150
[  871.426415][T11328]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  871.431769][T11328]  ? security_socket_sendmsg+0x7d/0xa0
[  871.437253][T11328]  ? netlink_getsockopt+0x580/0x580
[  871.442496][T11328]  ____sys_sendmsg+0x5d3/0x9a0
[  871.447277][T11328]  ? __sys_sendmsg_sock+0x30/0x30
[  871.452383][T11328]  __sys_sendmsg+0x2a9/0x390
[  871.456987][T11328]  ? ____sys_sendmsg+0x9a0/0x9a0
[  871.462007][T11328]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  871.468055][T11328]  ? syscall_enter_from_user_mode+0x2e/0x230
[  871.474135][T11328]  ? lockdep_hardirqs_on+0x94/0x130
[  871.479418][T11328]  ? syscall_enter_from_user_mode+0x2e/0x230
[  871.485407][T11328]  do_syscall_64+0x3b/0xb0
[  871.489869][T11328]  ? clear_bhb_loop+0x45/0xa0
[  871.494575][T11328]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  871.500504][T11328] RIP: 0033:0x7f7ad518e169
[  871.504935][T11328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  871.524599][T11328] RSP: 002b:00007f7ad600c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  871.533079][T11328] RAX: ffffffffffffffda RBX: 00007f7ad53b5fa0 RCX: 00007f7ad518e169
[  871.541086][T11328] RDX: 0000000000048004 RSI: 00002000000007c0 RDI: 0000000000000004
[  871.549095][T11328] RBP: 00007f7ad5210a68 R08: 0000000000000000 R09: 0000000000000000
[  871.557070][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  871.565165][T11328] R13: 0000000000000000 R14: 00007f7ad53b5fa0 R15: 00007fff7d8b68c8
[  871.573309][T11328]  </TASK>
[  871.576337][T11328] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  871.583621][T11328] CPU: 1 PID: 11328 Comm: syz.1.1627 Not tainted 6.1.134-syzkaller #0
[  871.591801][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  871.601948][T11328] Call Trace:
[  871.605223][T11328]  <TASK>
[  871.608152][T11328]  dump_stack_lvl+0x1e3/0x2cb
[  871.612859][T11328]  ? nf_tcp_handle_invalid+0x647/0x647
[  871.618320][T11328]  ? panic+0x764/0x764
[  871.622396][T11328]  ? vscnprintf+0x59/0x80
[  871.626741][T11328]  panic+0x318/0x764
[  871.630651][T11328]  ? __warn+0x169/0x520
[  871.634823][T11328]  ? memcpy_page_flushcache+0xfc/0xfc
[  871.640222][T11328]  __warn+0x348/0x520
[  871.644210][T11328]  ? taprio_get_start_time+0x162/0x190
[  871.649770][T11328]  report_bug+0x2af/0x500
[  871.654115][T11328]  ? taprio_get_start_time+0x162/0x190
[  871.659577][T11328]  handle_bug+0x3d/0x70
[  871.663733][T11328]  exc_invalid_op+0x16/0x40
[  871.668245][T11328]  asm_exc_invalid_op+0x16/0x20
[  871.673189][T11328] RIP: 0010:taprio_get_start_time+0x162/0x190
[  871.679260][T11328] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 b8 8c 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3e 2a b0 f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b
[  871.698870][T11328] RSP: 0018:ffffc9000c9d6dc0 EFLAGS: 00010283
[  871.704959][T11328] RAX: ffffffff88da8012 RBX: 0000000000000000 RCX: 0000000000080000
[  871.712927][T11328] RDX: ffffc900058c9000 RSI: 0000000000001f3c RDI: 0000000000001f3d
[  871.720903][T11328] RBP: ffff8880527512d4 R08: ffffffff88da7fbf R09: fffffbfff225787e
[  871.728871][T11328] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  871.736838][T11328] R13: 1836e8318137c332 R14: dffffc0000000000 R15: 0000000000000000
[  871.744847][T11328]  ? taprio_get_start_time+0x10f/0x190
[  871.750306][T11328]  ? taprio_get_start_time+0x162/0x190
[  871.755797][T11328]  taprio_change+0x4319/0x5600
[  871.760570][T11328]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  871.766481][T11328]  ? taprio_destroy+0x4a0/0x4a0
[  871.771352][T11328]  ? lockdep_init_map_type+0x9d/0x900
[  871.776755][T11328]  ? rtnetlink_rcv_msg+0x822/0x1000
[  871.781953][T11328]  ? netlink_rcv_skb+0x1cd/0x410
[  871.786886][T11328]  ? netlink_unicast+0x7e2/0x970
[  871.791838][T11328]  ? netlink_sendmsg+0xa26/0xd60
[  871.796791][T11328]  ? ____sys_sendmsg+0x5d3/0x9a0
[  871.801754][T11328]  ? __sys_sendmsg+0x2a9/0x390
[  871.806525][T11328]  ? memset+0x1f/0x40
[  871.810513][T11328]  ? fifo_init+0x41e/0x760
[  871.814945][T11328]  ? qdisc_peek_head+0x40/0x40
[  871.819741][T11328]  ? taprio_peek+0x590/0x590
[  871.824360][T11328]  qdisc_create+0x8a1/0x1220
[  871.828966][T11328]  ? qdisc_notify+0x390/0x390
[  871.833675][T11328]  ? lockdep_rtnl_is_held+0x22/0x30
[  871.838886][T11328]  tc_modify_qdisc+0xb6d/0x1e60
[  871.843750][T11328]  ? qdisc_offload_query_caps+0x170/0x170
[  871.849488][T11328]  ? qdisc_offload_query_caps+0x170/0x170
[  871.855210][T11328]  rtnetlink_rcv_msg+0x822/0x1000
[  871.860242][T11328]  ? rtnetlink_bind+0x80/0x80
[  871.864951][T11328]  ? __local_bh_enable_ip+0x164/0x1f0
[  871.870329][T11328]  ? __dev_queue_xmit+0x2d6/0x3d50
[  871.875470][T11328]  ? _local_bh_enable+0xa0/0xa0
[  871.880349][T11328]  ? __dev_queue_xmit+0x2d6/0x3d50
[  871.885467][T11328]  ? __dev_queue_xmit+0x173c/0x3d50
[  871.890677][T11328]  ? __dev_queue_xmit+0x2d6/0x3d50
[  871.895792][T11328]  ? netdev_core_pick_tx+0x320/0x320
[  871.901095][T11328]  ? ref_tracker_free+0x638/0x7d0
[  871.906134][T11328]  ? memcpy+0x3c/0x60
[  871.910116][T11328]  ? refcount_inc+0x80/0x80
[  871.914627][T11328]  ? __copy_skb_header+0x47b/0x600
[  871.919743][T11328]  netlink_rcv_skb+0x1cd/0x410
[  871.924531][T11328]  ? rtnetlink_bind+0x80/0x80
[  871.929207][T11328]  ? netlink_ack+0x12a0/0x12a0
[  871.933967][T11328]  ? __netlink_deliver_tap+0x748/0x780
[  871.939464][T11328]  ? netlink_deliver_tap+0x2e/0x1b0
[  871.944664][T11328]  netlink_unicast+0x7e2/0x970
[  871.949433][T11328]  ? netlink_detachskb+0x90/0x90
[  871.954365][T11328]  ? __virt_addr_valid+0x45b/0x530
[  871.959478][T11328]  ? __phys_addr_symbol+0x2b/0x70
[  871.964522][T11328]  ? __check_object_size+0x4dd/0xa30
[  871.969826][T11328]  ? bpf_lsm_netlink_send+0x5/0x10
[  871.974943][T11328]  netlink_sendmsg+0xa26/0xd60
[  871.979718][T11328]  ? netlink_getsockopt+0x580/0x580
[  871.984936][T11328]  ? aa_sock_msg_perm+0x91/0x150
[  871.989871][T11328]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  871.995160][T11328]  ? security_socket_sendmsg+0x7d/0xa0
[  872.000622][T11328]  ? netlink_getsockopt+0x580/0x580
[  872.005819][T11328]  ____sys_sendmsg+0x5d3/0x9a0
[  872.010600][T11328]  ? __sys_sendmsg_sock+0x30/0x30
[  872.015632][T11328]  __sys_sendmsg+0x2a9/0x390
[  872.020220][T11328]  ? ____sys_sendmsg+0x9a0/0x9a0
[  872.025196][T11328]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  872.031191][T11328]  ? syscall_enter_from_user_mode+0x2e/0x230
[  872.037173][T11328]  ? lockdep_hardirqs_on+0x94/0x130
[  872.042370][T11328]  ? syscall_enter_from_user_mode+0x2e/0x230
[  872.048371][T11328]  do_syscall_64+0x3b/0xb0
[  872.052782][T11328]  ? clear_bhb_loop+0x45/0xa0
[  872.057463][T11328]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  872.063381][T11328] RIP: 0033:0x7f7ad518e169
[  872.067794][T11328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  872.087418][T11328] RSP: 002b:00007f7ad600c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  872.095843][T11328] RAX: ffffffffffffffda RBX: 00007f7ad53b5fa0 RCX: 00007f7ad518e169
[  872.103809][T11328] RDX: 0000000000048004 RSI: 00002000000007c0 RDI: 0000000000000004
[  872.111776][T11328] RBP: 00007f7ad5210a68 R08: 0000000000000000 R09: 0000000000000000
[  872.119756][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  872.128003][T11328] R13: 0000000000000000 R14: 00007f7ad53b5fa0 R15: 00007fff7d8b68c8
[  872.136014][T11328]  </TASK>
[  872.139408][T11328] Kernel Offset: disabled
[  872.143826][T11328] Rebooting in 86400 seconds..