last executing test programs:

2m17.152700418s ago: executing program 3 (id=435):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)

2m17.058370851s ago: executing program 3 (id=437):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_dev$vim2m(0x0, 0x33c, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044815}, 0x40850)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @phonet={0x23, 0x3, 0x7, 0x6}, @hci={0x1f, 0x2}, @sco, 0x9, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000040)='virt_wifi0\x00', 0x10, 0x9, 0x2})
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r7 = socket(0x2b, 0x80801, 0x1)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)

2m15.234248062s ago: executing program 3 (id=440):
syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0)
connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, 0x0)
setreuid(0x0, r6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
mq_getsetattr(r7, &(0x7f0000000100)={0x8, 0x1, 0x5, 0x7}, &(0x7f00000001c0))

2m12.510830106s ago: executing program 3 (id=450):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$vim2m(0x0, 0x33c, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044815}, 0x40850)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r7 = socket(0x2b, 0x80801, 0x1)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)

2m11.347815888s ago: executing program 3 (id=454):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

2m11.130185504s ago: executing program 3 (id=456):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
bind$nfc_llcp(r0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000019340), 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
socket$kcm(0x2a, 0x2, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0)
ioctl$TIOCGRS485(r6, 0x5453, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
syz_genetlink_get_family_id$fou(&(0x7f0000019240), r7)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000080)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1m55.436573108s ago: executing program 32 (id=456):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0), 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
bind$nfc_llcp(r0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000019340), 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0x3)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
socket$kcm(0x2a, 0x2, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0)
ioctl$TIOCGRS485(r6, 0x5453, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
syz_genetlink_get_family_id$fou(&(0x7f0000019240), r7)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000080)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

14.64834654s ago: executing program 5 (id=707):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getrlimit(0xa, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
memfd_create(0x0, 0x4)
chdir(&(0x7f0000000140)='./bus\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0xa8242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

11.052763298s ago: executing program 1 (id=715):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)

10.99496649s ago: executing program 0 (id=716):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000340))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setfsgid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

10.774263926s ago: executing program 1 (id=717):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
open(0x0, 0x1, 0x104)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000000c0))

10.546308622s ago: executing program 2 (id=718):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000002c0)={0x3, 0x8000, 0xfffffffb, 0x6}, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})

9.609977907s ago: executing program 0 (id=720):
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r4], 0x5c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10008024}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x3a)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}})
ioctl(0xffffffffffffffff, 0x8b1b, &(0x7f0000000040))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r9 = mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0)
mq_getsetattr(r9, 0x0, 0x0)

8.521706666s ago: executing program 2 (id=721):
syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4)
connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, 0x0)
setreuid(0x0, r6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ede0ff2500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
mq_getsetattr(r7, &(0x7f0000000100)={0x8, 0x1, 0x5, 0x7}, &(0x7f00000001c0))

8.521551456s ago: executing program 4 (id=722):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

8.435865528s ago: executing program 4 (id=723):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32], 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.929074622s ago: executing program 5 (id=724):
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x7, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
syz_open_dev$video4linux(0x0, 0x5, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x674, 0x4080800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

6.87833312s ago: executing program 5 (id=725):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r5, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0])
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0xf, 0x8})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x1d, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x84942, 0x0)

6.711486345s ago: executing program 4 (id=726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(0x0, 0x33c, 0x2)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044815}, 0x40850)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @phonet={0x23, 0x3, 0x7, 0x6}, @hci={0x1f, 0x2}, @sco, 0x9, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000040)='virt_wifi0\x00', 0x10, 0x9, 0x2})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r7 = socket(0x2b, 0x80801, 0x1)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)

5.356645392s ago: executing program 0 (id=727):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)

5.175552788s ago: executing program 5 (id=728):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x8000000, 0x0, 0x0, 0x1003})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5.171267418s ago: executing program 0 (id=729):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r1, 0x3a, 0x6, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$revoke(0x3, r5)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
syz_emit_ethernet(0x8f, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000810015000800450000a50080000000119078ac1e01017f0000018200278e6a0bb540232b0a4994000000050061e0000001ac1414bbffffffffe0000002ac1e0101ac1e01010000004ea000699078c070d7670d8ac43d9ac5797880cf60799aed17691273bf266d23c1286a7acbd80ac8b904c2d25ff626ac4432ba8785c9fe49a8"], 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xe, 0x3, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x7, 0x101, 0xfffffffe, 0x7f, 0x4, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0xffffffff, 0x7, 0x3, 0x4000008, 0x4085, 0x0, 0xfffffff8]})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c4}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x9, 0x1e9100)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0x1}, 0xe)
socket$inet_udp(0x2, 0x2, 0x0)

5.11043245s ago: executing program 1 (id=730):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)

5.11023817s ago: executing program 2 (id=731):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x4800007, 0x2e, 0x4021, 0x3, 0x400b, 0x10, 0x2, 0xa0, 0x1})

5.011344442s ago: executing program 2 (id=732):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000002c0)={0x3, 0x8000, 0xfffffffb, 0x6}, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})

4.684116321s ago: executing program 1 (id=733):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040))
socket$tipc(0x1e, 0x5, 0x0)
r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r4, 0x0, 0x0)
write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0xfc}, 0x2)
close(r4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x4000}, 0xc881)

4.658937992s ago: executing program 4 (id=734):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
memfd_create(0x0, 0x4)
chdir(&(0x7f0000000140)='./bus\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0xa8242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)

4.614423533s ago: executing program 5 (id=735):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x10000f, @mcast2, 0x9}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0)

2.938075559s ago: executing program 1 (id=736):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32], 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.936770889s ago: executing program 2 (id=737):
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r4], 0x5c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10008024}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x3a)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}})
ioctl(0xffffffffffffffff, 0x8b1b, &(0x7f0000000040))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r9 = mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0)
mq_getsetattr(r9, 0x0, 0x0)

2.935576579s ago: executing program 4 (id=738):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r5, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0])
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0xf, 0x8})
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x1d, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x84942, 0x0)

2.92009401s ago: executing program 0 (id=739):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100003600010000000000ffdbdf25010100800c0000000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0)

2.826356493s ago: executing program 5 (id=740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
open(0x0, 0x1, 0x104)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000000c0))

1.600479446s ago: executing program 2 (id=741):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1.547022748s ago: executing program 0 (id=742):
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x80)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/147)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r4], 0x5c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10008024}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r6, 0x8b1b, &(0x7f0000000040))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r8 = mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0)
mq_getsetattr(r8, 0x0, 0x0)

850.482618ms ago: executing program 1 (id=743):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0x2b, 0x1, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

0s ago: executing program 4 (id=744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(0x0, 0x33c, 0x2)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044815}, 0x40850)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0x0, @phonet={0x23, 0x3, 0x7, 0x6}, @hci={0x1f, 0x2}, @sco, 0x9, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000040)='virt_wifi0\x00', 0x10, 0x9, 0x2})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r7 = socket(0x2b, 0x80801, 0x1)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)

kernel console output (not intermixed with test programs):

oo small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.686894][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.707667][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.714647][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.740823][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.753554][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.760853][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.787106][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.801931][ T4200] device hsr_slave_0 entered promiscuous mode
[   65.809023][ T4200] device hsr_slave_1 entered promiscuous mode
[   65.815552][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.823256][ T4200] Cannot create hsr debugfs directory
[   65.919896][ T4194] device hsr_slave_0 entered promiscuous mode
[   65.927078][ T4194] device hsr_slave_1 entered promiscuous mode
[   65.931315][ T4178] Bluetooth: hci0: command 0x0409 tx timeout
[   65.933568][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   65.945951][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   65.953117][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.960893][ T4194] Cannot create hsr debugfs directory
[   66.007401][ T4178] Bluetooth: hci3: command 0x0409 tx timeout
[   66.018634][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[   66.029923][ T4199] device hsr_slave_0 entered promiscuous mode
[   66.037756][ T4199] device hsr_slave_1 entered promiscuous mode
[   66.044365][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.052802][ T4199] Cannot create hsr debugfs directory
[   66.269440][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.281373][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.294856][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.305982][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.374844][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.384350][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.404439][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.438847][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.453959][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.468960][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.479945][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.501991][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.531441][ T4199] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.542324][ T4199] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.570768][ T4199] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.584943][ T4199] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.599066][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.649361][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.659119][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.674264][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   66.708559][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.718712][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.727946][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.735287][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.746852][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.755790][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.764637][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.772034][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.779976][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.790393][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.799386][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.810510][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.819233][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.827775][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.837999][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.856964][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.865909][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.878540][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.901042][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.914427][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.931205][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.943287][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.951914][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.962375][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.987720][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.996240][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.037996][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.082787][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   67.101209][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.110581][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.130134][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.139954][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.150860][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.160885][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.168034][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.180592][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.215746][ T4199] 8021q: adding VLAN 0 to HW filter on device team0
[   67.226566][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.235544][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.245440][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.254332][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.261477][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.270953][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.280739][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.290740][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.299845][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.308862][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.316765][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.325434][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.347695][ T4200] 8021q: adding VLAN 0 to HW filter on device team0
[   67.366872][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.376178][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.385682][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.395430][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.406594][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.413736][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.422658][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.431579][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.441064][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.448204][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.464191][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.472703][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.481197][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.491446][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.500964][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.511311][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.519957][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.529147][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.540307][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.549832][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.559198][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.566378][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.581098][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.589058][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.610291][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.626753][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.642687][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.652209][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.662281][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.669416][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.677045][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.686135][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.696930][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.706445][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.749472][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.758100][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.775905][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.785776][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.798190][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.806840][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.816672][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.825754][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.834953][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.843854][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.855605][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.883742][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.897065][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.910559][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.924822][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.934008][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.944554][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.954153][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.965012][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.973822][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.982801][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.991636][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.000642][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.008933][ T4233] Bluetooth: hci1: command 0x041b tx timeout
[   68.015100][ T4233] Bluetooth: hci0: command 0x041b tx timeout
[   68.021497][ T4233] Bluetooth: hci2: command 0x041b tx timeout
[   68.038695][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.069887][ T4189] device veth0_vlan entered promiscuous mode
[   68.087855][ T4233] Bluetooth: hci4: command 0x041b tx timeout
[   68.094016][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.102183][ T4233] Bluetooth: hci3: command 0x041b tx timeout
[   68.111084][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.123529][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.132066][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.146498][ T4193] 8021q: adding VLAN 0 to HW filter on device team0
[   68.164648][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.189115][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.202233][ T4189] device veth1_vlan entered promiscuous mode
[   68.219660][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.239214][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.268177][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.284490][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.291645][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.300158][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.320631][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.330407][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.340180][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.356257][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.363422][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.373941][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.383237][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.404492][ T4189] device veth0_macvtap entered promiscuous mode
[   68.433527][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.444152][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.454524][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.465165][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.474848][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.485326][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.504835][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.515764][ T4189] device veth1_macvtap entered promiscuous mode
[   68.534004][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.545698][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.565259][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.574033][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.582979][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.592627][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.602553][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.612799][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.620568][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.628367][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.635804][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.643316][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.653048][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.661732][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.679900][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.721829][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.754886][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.769511][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.782099][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.790134][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.805191][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.822746][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.854286][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.878438][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.899000][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.914489][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.923866][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.938986][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.956896][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.970566][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.980181][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.989726][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.025104][ T4199] device veth0_vlan entered promiscuous mode
[   69.043118][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.053061][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.067537][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.076118][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.089062][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.096869][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.124832][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.136544][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.148974][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.164585][ T4199] device veth1_vlan entered promiscuous mode
[   69.185456][ T4194] device veth0_vlan entered promiscuous mode
[   69.192331][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.200910][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.211951][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.262595][ T4194] device veth1_vlan entered promiscuous mode
[   69.280061][ T4199] device veth0_macvtap entered promiscuous mode
[   69.298028][ T4199] device veth1_macvtap entered promiscuous mode
[   69.305360][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.317481][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.325636][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.336353][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.345409][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.354381][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.368581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.390671][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.433249][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.444880][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.460158][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.498199][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.506833][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.517177][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.526457][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.543673][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.555644][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.567553][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.583117][ T4193] device veth0_vlan entered promiscuous mode
[   69.597960][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.605982][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.621484][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.632586][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.641795][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.650930][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.661178][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.669879][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.678582][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.686997][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.697186][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.710225][ T4199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.720302][ T4199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.729798][ T4199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.738819][ T4199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.754901][ T4200] device veth0_vlan entered promiscuous mode
[   69.783667][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.791777][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.800842][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.809818][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.819596][ T4194] device veth0_macvtap entered promiscuous mode
[   69.829080][ T4193] device veth1_vlan entered promiscuous mode
[   69.850365][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.859214][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.862518][ T4194] device veth1_macvtap entered promiscuous mode
[   69.880104][ T4200] device veth1_vlan entered promiscuous mode
[   69.924108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.932882][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.942754][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.951435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.960854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.969507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.016598][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.028127][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.037074][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.068346][ T4193] device veth0_macvtap entered promiscuous mode
[   70.077498][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.086289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.095060][   T21] Bluetooth: hci2: command 0x040f tx timeout
[   70.095165][   T21] Bluetooth: hci0: command 0x040f tx timeout
[   70.095248][   T21] Bluetooth: hci1: command 0x040f tx timeout
[   70.122439][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.147173][ T4193] device veth1_macvtap entered promiscuous mode
[   70.156754][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.167770][   T21] Bluetooth: hci3: command 0x040f tx timeout
[   70.174125][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.184702][   T21] Bluetooth: hci4: command 0x040f tx timeout
[   70.185858][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.201983][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.214071][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.226954][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.237594][ T4200] device veth0_macvtap entered promiscuous mode
[   70.244410][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.261436][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.273263][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.282306][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.291459][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.322851][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.511498][ T4267] securityfs: Unknown parameter ''
[   71.133320][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.143341][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.262792][ T4200] device veth1_macvtap entered promiscuous mode
[   71.447087][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.577029][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.610445][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.649891][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.689273][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.724511][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.779418][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.815837][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.866499][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.890496][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.907601][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.930225][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.975772][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.069093][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.138690][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.168382][ T4229] Bluetooth: hci1: command 0x0419 tx timeout
[   72.174906][ T4229] Bluetooth: hci0: command 0x0419 tx timeout
[   72.193380][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.209366][ T4229] Bluetooth: hci2: command 0x0419 tx timeout
[   72.250364][ T4228] Bluetooth: hci4: command 0x0419 tx timeout
[   72.291674][ T4228] Bluetooth: hci3: command 0x0419 tx timeout
[   72.324254][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.366249][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.402379][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.441763][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.508513][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.532677][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.566062][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.605910][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.711721][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.774304][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.843183][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.880975][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.924680][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.963839][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.004029][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.044584][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.131353][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.195775][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.240286][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.288138][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.351006][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.361038][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.373583][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.388623][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.409717][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.434112][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.454543][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.463556][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.484723][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.498389][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.508474][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.519209][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.529610][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.540251][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.550463][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.562402][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.577167][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.592320][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.622140][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.652371][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.663472][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.682002][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.696192][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.718385][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.738343][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.750309][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.759347][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.818325][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.409217][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short
[   74.568008][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.585311][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.602239][ T4231] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   74.612268][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.621633][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.629294][ T4231] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   74.648589][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.656448][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.699526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.733147][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.774412][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.794966][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.803207][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.813298][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.818732][ T4231] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40
[   74.830509][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.858920][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.887912][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.890835][ T4231] usb 1-1: Product: syz
[   74.896007][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.913681][ T4231] usb 1-1: Manufacturer: syz
[   74.913704][ T4231] usb 1-1: SerialNumber: syz
[   74.916820][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.925083][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.925132][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.925352][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.081657][ T4287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   76.587599][ T4231] usb 1-1: Can't get UAC3 power state for id 10
[   76.997246][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   77.017246][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   77.027242][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   77.037243][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   77.047243][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   77.057242][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   77.067242][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   77.087244][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   77.097247][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   77.107243][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   77.555570][ T4231] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[   78.307176][ T4308] sched: RT throttling activated
[   78.325368][ T4231] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[   78.491093][ T4231] usb 1-1: USB disconnect, device number 2
[   78.589553][ T1326] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   78.894564][ T4318] udevd[4318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.978026][ T4263] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   79.017483][ T4313] netlink: 'syz.1.9': attribute type 10 has an invalid length.
[   79.027522][ T1326] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   79.036523][ T1326] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   79.049384][ T1326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.069389][ T1326] usb 4-1: config 0 descriptor??
[   79.247459][ T4263] usb 5-1: Using ep0 maxpacket: 16
[   80.197462][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.240079][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.829886][ T4263] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   80.848920][ T4263] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   80.858626][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.870309][ T4263] usb 5-1: config 0 descriptor??
[   80.886855][ T4231] Bluetooth: hci5: command 0x1003 tx timeout
[   80.893365][ T4263] usb 5-1: can't set config #0, error -71
[   80.899508][  T146] Bluetooth: hci5: sending frame failed (-49)
[   80.909518][ T4263] usb 5-1: USB disconnect, device number 2
[   82.129273][   T21] usb 4-1: USB disconnect, device number 2
[   83.028192][ T4349] misc userio: Invalid payload size
[   83.033934][ T4349] misc userio: No port type given on /dev/userio
[   83.070663][ T4231] Bluetooth: hci5: command 0x1001 tx timeout
[   83.081670][  T146] Bluetooth: hci5: sending frame failed (-49)
[   83.972021][ T4359] overlayfs: failed to resolve './file0': -2
[   84.272325][   T26] audit: type=1326 audit(1777580789.993:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   84.412640][ T4233] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   85.139985][ T1326] Bluetooth: hci5: command 0x1009 tx timeout
[   85.472491][   T26] audit: type=1326 audit(1777580789.993:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   85.507806][   T26] audit: type=1326 audit(1777580790.093:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   85.834913][ T4372] netlink: 'syz.1.23': attribute type 11 has an invalid length.
[   85.843331][ T4372] netlink: 420 bytes leftover after parsing attributes in process `syz.1.23'.
[   85.877897][   T26] audit: type=1326 audit(1777580790.093:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   85.907782][   T26] audit: type=1326 audit(1777580790.093:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   85.937287][ T4178] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   86.023472][   T26] audit: type=1326 audit(1777580790.203:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   86.067702][ T4233] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   86.326002][ T4367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.711644][ T1106] cfg80211: failed to load regulatory.db
[   86.738764][ T4233] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   86.755519][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.781821][ T4233] usb 4-1: config 0 descriptor??
[   86.817516][ T4233] usb 4-1: can't set config #0, error -71
[   86.827570][ T4233] usb 4-1: USB disconnect, device number 3
[   86.865283][   T26] audit: type=1326 audit(1777580790.203:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   86.890970][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'.
[   87.461024][   T26] audit: type=1326 audit(1777580790.203:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   87.885462][   T26] audit: type=1326 audit(1777580790.293:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   88.087596][   T26] audit: type=1326 audit(1777580790.293:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.1.15" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[   89.182384][ T4399] misc userio: No port type given on /dev/userio
[   89.526157][ T4411] misc userio: Invalid payload size
[   89.532300][ T4411] misc userio: No port type given on /dev/userio
[   90.265133][ T4415] overlayfs: missing 'lowerdir'
[   90.669084][ T4428] netlink: 'syz.4.34': attribute type 11 has an invalid length.
[   90.676785][ T4428] netlink: 420 bytes leftover after parsing attributes in process `syz.4.34'.
[   90.817820][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   90.926622][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'.
[   91.248698][ T4422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.627246][    T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   91.661899][    T7] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   91.671304][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.702752][    T7] usb 3-1: config 0 descriptor??
[   91.819415][ T4439] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   92.147360][ T4447] device syzkaller0 entered promiscuous mode
[   94.081633][ T4456] device syzkaller0 entered promiscuous mode
[   94.259938][ T4466] misc userio: Invalid payload size
[   94.265579][ T4466] misc userio: No port type given on /dev/userio
[   95.419046][ T4178] usb 3-1: USB disconnect, device number 2
[   95.868166][ T4477] misc userio: No port type given on /dev/userio
[   95.918239][ T4473] overlayfs: missing 'lowerdir'
[   96.105942][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'.
[   96.316209][ T4488] netlink: 'syz.0.50': attribute type 11 has an invalid length.
[   96.323989][ T4488] netlink: 420 bytes leftover after parsing attributes in process `syz.0.50'.
[   96.911810][ T4483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.154193][ T4495] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.239422][ T4501] device syzkaller0 entered promiscuous mode
[   98.788752][ T4513] netlink: 'syz.2.58': attribute type 10 has an invalid length.
[   98.821228][ T4514] misc userio: Invalid payload size
[   98.826664][ T4514] misc userio: No port type given on /dev/userio
[   98.988033][ T1106] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.015534][ T1106] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  100.057786][ T1106] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  100.087686][ T1106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.112367][ T1106] usb 2-1: config 0 descriptor??
[  100.525354][ T4532] overlayfs: missing 'lowerdir'
[  101.807357][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  101.807374][   T26] audit: type=1326 audit(1777580808.003:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  101.855412][   T26] audit: type=1326 audit(1777580808.003:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  101.900464][ T4538] netlink: 'syz.2.64': attribute type 11 has an invalid length.
[  101.908562][ T4538] netlink: 420 bytes leftover after parsing attributes in process `syz.2.64'.
[  101.941522][   T26] audit: type=1326 audit(1777580808.003:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  102.022190][   T26] audit: type=1326 audit(1777580808.013:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  102.096614][   T26] audit: type=1326 audit(1777580808.013:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  102.166204][   T26] audit: type=1326 audit(1777580808.023:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  102.221509][   T26] audit: type=1326 audit(1777580808.023:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  102.340775][   T26] audit: type=1326 audit(1777580808.023:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  102.400905][   T26] audit: type=1326 audit(1777580808.023:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  102.433079][   T26] audit: type=1326 audit(1777580808.073:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.0.62" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2022a4fdd9 code=0x7ffc0000
[  102.472260][ T4535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.048913][   T21] usb 2-1: USB disconnect, device number 2
[  103.154672][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[  104.841256][ T4564] misc userio: No port type given on /dev/userio
[  105.227102][ T4570] tipc: Started in network mode
[  105.270526][ T4263] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  105.329880][ T4570] tipc: Node identity d6793fb2775b, cluster identity 4711
[  105.727737][ T4570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.978091][ T4571] netlink: 'syz.4.71': attribute type 10 has an invalid length.
[  107.318855][   T21] tipc: Node number set to 2703376306
[  107.821572][ T4584] overlayfs: missing 'lowerdir'
[  108.544031][ T4579] tipc: Disabling bearer <eth:syzkaller0>
[  108.972843][ T4595] netlink: 'syz.4.76': attribute type 11 has an invalid length.
[  108.981020][ T4595] netlink: 420 bytes leftover after parsing attributes in process `syz.4.76'.
[  109.194621][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.557470][ T4590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.237721][ T4233] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  111.246751][ T4233] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  111.281026][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'.
[  111.295774][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.691199][ T4233] usb 2-1: config 0 descriptor??
[  114.157653][ T4233] usb 2-1: can't set config #0, error -71
[  114.246918][ T4233] usb 2-1: USB disconnect, device number 3
[  115.148583][ T4629] overlayfs: missing 'lowerdir'
[  115.165836][ T4627] netlink: 'syz.2.85': attribute type 10 has an invalid length.
[  116.628493][ T4636] device syzkaller0 entered promiscuous mode
[  118.207287][ T4648] netlink: 'syz.1.89': attribute type 11 has an invalid length.
[  118.215029][ T4648] netlink: 420 bytes leftover after parsing attributes in process `syz.1.89'.
[  118.352873][ T4642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.505267][ T4656] =======================================================
[  119.505267][ T4656] WARNING: The mand mount option has been deprecated and
[  119.505267][ T4656]          and is ignored by this kernel. Remove the mand
[  119.505267][ T4656]          option from the mount to silence this warning.
[  119.505267][ T4656] =======================================================
[  120.115755][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'.
[  120.387445][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  121.967627][   T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  121.984191][   T23] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  122.003829][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.028180][   T23] usb 5-1: config 0 descriptor??
[  122.157711][ T1326] usb 5-1: USB disconnect, device number 4
[  122.319897][ T4663] misc userio: Invalid payload size
[  122.335740][ T4663] misc userio: No port type given on /dev/userio
[  124.571266][ T4685] overlayfs: missing 'lowerdir'
[  124.853642][ T4689] netlink: 'syz.2.103': attribute type 11 has an invalid length.
[  124.861616][ T4689] netlink: 420 bytes leftover after parsing attributes in process `syz.2.103'.
[  125.447590][ T4687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.333884][ T4706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'.
[  128.567490][ T1106] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  128.598389][ T4263] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  129.114280][ T4721] netlink: 'syz.2.112': attribute type 10 has an invalid length.
[  129.928216][ T1106] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  130.317297][ T4263] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  130.327429][ T4263] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  130.336919][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.353655][ T4263] usb 4-1: config 0 descriptor??
[  130.717741][ T1106] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  130.747554][ T4263] usb 4-1: can't set config #0, error -71
[  130.778374][ T4263] usb 4-1: USB disconnect, device number 5
[  130.784128][ T1106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.573505][ T4735] netlink: 'syz.0.115': attribute type 11 has an invalid length.
[  131.581557][ T4735] netlink: 420 bytes leftover after parsing attributes in process `syz.0.115'.
[  131.643739][ T4729] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  131.781981][ T1106] usb 2-1: config 0 descriptor??
[  131.797371][ T1106] usb 2-1: can't set config #0, error -71
[  131.814259][ T1106] usb 2-1: USB disconnect, device number 4
[  132.029369][ T4730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.116703][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.124599][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.571536][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.578228][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  132.929126][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.950261][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.986982][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'.
[  136.227421][ T4233] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  137.147297][ T4263] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  138.037543][ T4233] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  138.058289][ T4233] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  138.079428][ T4785] overlayfs: missing 'lowerdir'
[  138.122535][ T4787] netlink: 'syz.0.129': attribute type 11 has an invalid length.
[  138.130591][ T4787] netlink: 420 bytes leftover after parsing attributes in process `syz.0.129'.
[  138.148038][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.163910][ T4233] usb 2-1: config 0 descriptor??
[  138.267569][ T4263] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  138.281797][ T4263] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  138.291463][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.317281][ T4263] usb 5-1: config 0 descriptor??
[  138.655648][ T4778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.580533][ T1106] usb 2-1: USB disconnect, device number 5
[  140.804668][ T4229] usb 5-1: USB disconnect, device number 5
[  140.903146][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'.
[  143.345187][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  143.345202][   T26] audit: type=1326 audit(1777580849.563:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  143.778808][ T4830] netlink: 'syz.4.140': attribute type 10 has an invalid length.
[  144.559378][ T4837] netlink: 'syz.0.142': attribute type 11 has an invalid length.
[  144.568449][ T4837] netlink: 420 bytes leftover after parsing attributes in process `syz.0.142'.
[  144.590396][ T4838] overlayfs: missing 'lowerdir'
[  144.651868][   T26] audit: type=1326 audit(1777580849.663:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4807 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  144.939653][ T4831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.039241][ T4263] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  145.377381][ T1326] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  145.447553][ T4263] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  146.475164][ T4850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.483569][ T4850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.497761][ T4850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.505471][ T4850] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.637332][ T1326] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  146.646486][ T1326] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  146.689334][ T4263] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  146.698526][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.707244][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.729779][ T4263] usb 4-1: config 0 descriptor??
[  146.737793][ T1326] usb 1-1: config 0 descriptor??
[  148.641614][ T4263] usb 4-1: USB disconnect, device number 6
[  148.716944][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'.
[  148.824252][ T4867] tipc: Started in network mode
[  148.858338][ T4867] tipc: Node identity 2ec444e279b1, cluster identity 4711
[  149.320107][ T4867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.329640][ T4867] device syzkaller0 entered promiscuous mode
[  149.391619][ T4867] tipc: Resetting bearer <eth:syzkaller0>
[  149.570937][ T4866] tipc: Resetting bearer <eth:syzkaller0>
[  149.622941][ T4263] usb 1-1: USB disconnect, device number 3
[  149.855076][ T4866] tipc: Disabling bearer <eth:syzkaller0>
[  150.349663][ T4879] device syzkaller0 entered promiscuous mode
[  150.740215][ T4886] overlayfs: missing 'lowerdir'
[  154.233254][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.257499][ T4914] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.559018][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.578155][ T4914] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.605414][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'.
[  156.387307][ T1109] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  157.177330][ T4233] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  157.337335][ T1109] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  157.346350][ T1109] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  157.374409][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.389565][ T1109] usb 2-1: config 0 descriptor??
[  157.413562][ T4935] device syzkaller0 entered promiscuous mode
[  157.512301][ T4936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.521650][ T4936] device syzkaller0 entered promiscuous mode
[  157.535458][ T4936] Zero length message leads to an empty skb
[  157.552791][ T4936] tipc: Resetting bearer <eth:syzkaller0>
[  157.563400][ T4932] tipc: Resetting bearer <eth:syzkaller0>
[  157.582241][ T4932] tipc: Disabling bearer <eth:syzkaller0>
[  157.932961][ T4942] overlayfs: missing 'lowerdir'
[  157.940684][ T4233] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  158.043830][ T4233] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  158.433318][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.566045][ T1326] usb 2-1: USB disconnect, device number 6
[  158.768369][ T4233] usb 5-1: config 0 descriptor??
[  158.893013][ T4955] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  159.247406][ T1106] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  161.785431][   T23] usb 5-1: USB disconnect, device number 6
[  162.361042][ T4972] netlink: 'syz.3.178': attribute type 11 has an invalid length.
[  162.368951][ T4972] netlink: 420 bytes leftover after parsing attributes in process `syz.3.178'.
[  162.695859][ T4966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.971917][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'.
[  163.066540][ T4979] device syzkaller0 entered promiscuous mode
[  163.824684][ T4985] device syzkaller0 entered promiscuous mode
[  165.025762][ T4263] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  166.232073][ T4994] netlink: 'syz.3.186': attribute type 10 has an invalid length.
[  166.387863][ T4617] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  166.607490][ T4263] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  166.616645][ T4263] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  166.787740][ T4617] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  166.839909][ T4617] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  166.867566][ T5003] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  166.995224][ T4617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.906990][ T4617] usb 2-1: config 0 descriptor??
[  169.407643][ T4617] usb 2-1: can't set config #0, error -71
[  169.442879][ T4617] usb 2-1: USB disconnect, device number 7
[  169.666587][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.676586][ T4263] usb 5-1: config 0 descriptor??
[  169.697318][ T4263] usb 5-1: can't set config #0, error -71
[  169.722612][ T4263] usb 5-1: USB disconnect, device number 7
[  170.019804][ T5024] netlink: 'syz.3.190': attribute type 11 has an invalid length.
[  170.027789][ T5024] netlink: 420 bytes leftover after parsing attributes in process `syz.3.190'.
[  170.518217][ T5013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.019590][ T5030] device syzkaller0 entered promiscuous mode
[  171.110718][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'.
[  172.346325][ T5050] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  173.797421][ T4230] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  174.347370][   T26] audit: type=1326 audit(1777580880.353:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  174.371991][ T4285] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  174.413142][   T26] audit: type=1326 audit(1777580880.353:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  174.454120][   T26] audit: type=1326 audit(1777580880.473:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  174.496350][   T26] audit: type=1326 audit(1777580880.473:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  174.537148][   T26] audit: type=1326 audit(1777580880.473:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  174.597429][ T4230] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  174.632618][ T4230] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  174.719872][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.739676][   T26] audit: type=1326 audit(1777580880.513:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  174.827430][ T4285] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  174.893570][ T4230] usb 4-1: config 0 descriptor??
[  175.036870][   T26] audit: type=1326 audit(1777580880.513:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  175.374320][ T4285] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  175.383926][ T4285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.394506][   T26] audit: type=1326 audit(1777580880.513:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  175.428177][ T4285] usb 2-1: config 0 descriptor??
[  175.433439][   T26] audit: type=1326 audit(1777580880.513:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  176.659292][ T4230] usb 4-1: USB disconnect, device number 8
[  176.666077][   T26] audit: type=1326 audit(1777580880.513:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz.2.204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a5310dd9 code=0x7ffc0000
[  176.690409][ T4285] usb 2-1: can't set config #0, error -71
[  176.726918][ T4285] usb 2-1: USB disconnect, device number 8
[  176.758955][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'.
[  176.822657][ T5087] device syzkaller0 entered promiscuous mode
[  179.793017][ T5101] netlink: 'syz.4.211': attribute type 10 has an invalid length.
[  181.047802][ T5113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.055328][ T5113] device syzkaller0 entered promiscuous mode
[  181.075507][ T5113] tipc: Resetting bearer <eth:syzkaller0>
[  181.351608][ T5110] tipc: Resetting bearer <eth:syzkaller0>
[  181.895835][ T5118] loop2: detected capacity change from 0 to 1024
[  182.051859][ T5110] tipc: Disabling bearer <eth:syzkaller0>
[  182.058764][ T5121] netlink: 'syz.0.216': attribute type 11 has an invalid length.
[  182.066564][ T5121] netlink: 420 bytes leftover after parsing attributes in process `syz.0.216'.
[  182.100672][ T5118] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  182.112893][ T4230] tipc: Node number set to 1467303138
[  182.139535][ T5118] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block
[  182.139535][ T5118] 
[  182.198099][ T5112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.591100][ T4285] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  182.962528][ T5130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.970639][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.052001][ T5130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.060194][ T5130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.295465][ T4305] Bluetooth: hci5: Frame reassembly failed (-84)
[  183.327932][ T5118] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  183.582355][ T5136] netlink: 'syz.0.222': attribute type 10 has an invalid length.
[  183.595797][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  183.595812][   T26] audit: type=1326 audit(1777580889.803:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  183.632646][   T26] audit: type=1326 audit(1777580889.803:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  183.658685][   T26] audit: type=1326 audit(1777580889.803:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  183.685393][   T26] audit: type=1326 audit(1777580889.803:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  183.711203][   T26] audit: type=1326 audit(1777580889.803:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  183.736737][ T4285] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  183.746641][   T26] audit: type=1326 audit(1777580889.803:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  183.774184][ T4285] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  183.785254][ T4285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.807055][ T4285] usb 5-1: config 0 descriptor??
[  183.820041][   T26] audit: type=1326 audit(1777580889.803:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  184.001770][   T26] audit: type=1326 audit(1777580889.803:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  184.015045][ T5143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'.
[  184.038734][   T26] audit: type=1326 audit(1777580889.803:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  184.154591][   T26] audit: type=1326 audit(1777580889.803:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.1.221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38a4d4dd9 code=0x7ffc0000
[  185.367362][ T5153] Bluetooth: hci5: command 0x1003 tx timeout
[  185.398443][  T146] Bluetooth: hci5: sending frame failed (-49)
[  185.725218][ T5153] usb 5-1: USB disconnect, device number 8
[  187.447559][ T4233] Bluetooth: hci5: command 0x1001 tx timeout
[  187.496224][  T146] Bluetooth: hci5: sending frame failed (-49)
[  189.511685][ T5178] misc userio: Invalid payload size
[  189.527456][ T4617] Bluetooth: hci5: command 0x1009 tx timeout
[  189.670467][ T5182] netlink: 'syz.3.232': attribute type 11 has an invalid length.
[  189.678406][ T5182] netlink: 420 bytes leftover after parsing attributes in process `syz.3.232'.
[  190.189959][ T5175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.516847][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'.
[  190.734847][ T5191] netlink: 'syz.1.236': attribute type 10 has an invalid length.
[  190.967366][ T5153] Bluetooth: hci1: command 0x0406 tx timeout
[  190.986509][ T5153] Bluetooth: hci0: command 0x0406 tx timeout
[  191.043032][ T5153] Bluetooth: hci2: command 0x0406 tx timeout
[  191.097307][ T1109] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  191.134488][ T5153] Bluetooth: hci3: command 0x0406 tx timeout
[  191.220242][ T5153] Bluetooth: hci4: command 0x0406 tx timeout
[  191.447557][ T5153] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  191.564592][ T5201] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  192.007921][ T5153] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  192.022185][ T5153] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  192.070150][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.490471][ T5153] usb 2-1: config 0 descriptor??
[  192.808327][ T1109] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  192.817768][ T1109] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  192.826857][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.841527][ T1109] usb 5-1: config 0 descriptor??
[  193.896056][ T5153] usb 2-1: USB disconnect, device number 9
[  194.015611][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.024727][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.286076][ T5224] netlink: 'syz.3.245': attribute type 11 has an invalid length.
[  194.294020][ T5224] netlink: 420 bytes leftover after parsing attributes in process `syz.3.245'.
[  195.333316][ T5224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.477365][ T5153] usb 5-1: USB disconnect, device number 9
[  196.311925][ T5239] PKCS7: Unknown OID: [4] 0.0
[  196.316911][ T5239] PKCS7: Only support pkcs7_signedData type
[  196.595339][ T5236] misc userio: Invalid payload size
[  197.453742][ T5259] loop4: detected capacity change from 0 to 1024
[  197.521901][ T5261] device syzkaller0 entered promiscuous mode
[  197.623850][ T5259] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  197.637337][ T5259] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  197.637337][ T5259] 
[  198.569656][ T5259] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  198.602790][ T4247] Bluetooth: hci5: Frame reassembly failed (-84)
[  198.658029][ T1326] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  198.708724][ T5274] netlink: 'syz.2.256': attribute type 11 has an invalid length.
[  198.716881][ T5274] netlink: 420 bytes leftover after parsing attributes in process `syz.2.256'.
[  198.888093][ T4617] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  199.122846][ T5279] overlayfs: missing 'lowerdir'
[  199.263619][ T5267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.307961][ T1326] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  199.866031][ T1326] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  199.923429][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.955503][ T1326] usb 1-1: config 0 descriptor??
[  200.137384][ T4617] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  200.146527][ T4617] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  200.773844][ T4617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.786052][ T4617] usb 4-1: config 0 descriptor??
[  200.793965][ T5153] Bluetooth: hci5: command 0x1003 tx timeout
[  200.801036][ T4403] Bluetooth: hci5: Frame reassembly failed (-84)
[  200.826433][ T5290] misc userio: Invalid payload size
[  201.619720][ T5153] usb 1-1: USB disconnect, device number 4
[  202.638026][ T1326] usb 4-1: USB disconnect, device number 9
[  202.857340][ T5312] PKCS7: Unknown OID: [4] 0.0
[  202.862082][ T5312] PKCS7: Only support pkcs7_signedData type
[  203.094484][ T4617] Bluetooth: hci5: command 0x1001 tx timeout
[  203.130994][ T4192] Bluetooth: hci5: sending frame failed (-49)
[  205.070200][ T5315] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  205.138086][ T5315] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  205.228109][ T4233] Bluetooth: hci5: command 0x1009 tx timeout
[  205.245699][ T5319] device syzkaller0 entered promiscuous mode
[  205.252897][ T5315] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  205.537454][ T5327] netlink: 'syz.0.270': attribute type 11 has an invalid length.
[  205.545331][ T5327] netlink: 420 bytes leftover after parsing attributes in process `syz.0.270'.
[  205.819345][ T5326] overlayfs: missing 'lowerdir'
[  206.108951][ T5320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.008463][ T4232] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  207.257857][ T4233] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  207.638099][ T4233] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  207.673672][ T4233] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  207.754706][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.810542][ T4233] usb 2-1: config 0 descriptor??
[  208.067569][ T4233] usb 2-1: USB disconnect, device number 10
[  208.647607][ T4232] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  208.679382][ T4232] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  208.707587][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.817249][ T4233] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  208.820927][ T4232] usb 1-1: config 0 descriptor??
[  210.318422][   T23] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  210.489945][   T13] usb 1-1: USB disconnect, device number 5
[  210.673830][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  210.855785][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  210.870702][ T4233] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  210.879877][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.942961][ T5370] netlink: 'syz.2.283': attribute type 11 has an invalid length.
[  211.226099][ T5373] overlayfs: missing 'lowerdir'
[  211.231153][ T5370] netlink: 420 bytes leftover after parsing attributes in process `syz.2.283'.
[  211.436354][ T5370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.508649][ T4233] usb 4-1: config 0 descriptor??
[  211.569552][ T4233] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  211.717386][   T23] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  211.802576][ T5369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.810537][ T5369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.825703][ T5369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.833544][ T5369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.998198][ T4233] usb 4-1: USB disconnect, device number 10
[  212.004431][   T23] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  212.016152][   T23] usb 2-1: config 6 has no interface number 0
[  212.022543][   T23] usb 2-1: config 6 interface 2 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  212.038311][   T23] usb 2-1: config 6 interface 2 has no altsetting 0
[  212.272206][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[  212.290431][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'.
[  212.935215][ T5378] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  212.944482][ T5378] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  212.953362][ T5378] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  212.962251][ T5378] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  213.075174][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'.
[  213.107485][   T23] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  213.136711][   T23] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  213.159103][   T23] usb 2-1: Product: syz
[  213.180656][   T23] usb 2-1: Manufacturer: syz
[  213.359413][   T23] usb 2-1: can't set config #6, error -71
[  213.458447][   T23] usb 2-1: USB disconnect, device number 11
[  213.707745][ T4233] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  213.753215][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'.
[  214.097814][ T4233] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  214.107390][ T4233] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  214.116726][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.143210][ T5400] loop4: detected capacity change from 0 to 1024
[  214.205039][ T5400] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  214.214331][ T4233] usb 4-1: config 0 descriptor??
[  214.237573][ T5400] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  214.237573][ T5400] 
[  214.388214][   T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  214.390376][ T4295] Bluetooth: hci5: Frame reassembly failed (-84)
[  214.411980][ T5400] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  214.445794][ T4295] Bluetooth: hci5: Frame reassembly failed (-84)
[  214.531180][ T4233] usb 4-1: USB disconnect, device number 11
[  214.787827][   T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  214.821346][   T23] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  214.879982][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.940486][   T23] usb 1-1: config 0 descriptor??
[  215.097109][ T5411] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  215.105480][ T5411] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  215.125786][ T5411] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  215.592392][ T5419] netlink: 'syz.1.296': attribute type 11 has an invalid length.
[  215.600311][ T5419] netlink: 420 bytes leftover after parsing attributes in process `syz.1.296'.
[  216.150940][ T5413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.700844][ T4237] Bluetooth: hci5: command 0x1003 tx timeout
[  216.777382][ T4192] Bluetooth: hci5: sending frame failed (-49)
[  217.104989][ T4237] usb 1-1: USB disconnect, device number 6
[  217.152669][ T5435] overlayfs: failed to resolve './file0': -2
[  218.899106][ T5456] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5457] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5456]
[  218.919881][ T4233] Bluetooth: hci5: command 0x1001 tx timeout
[  218.926008][ T4192] Bluetooth: hci5: sending frame failed (-49)
[  218.948906][ T4263] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  218.968214][ T5453] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  219.311378][ T5460] device syzkaller0 entered promiscuous mode
[  219.405358][ T5462] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  219.414660][ T5462] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  219.424100][ T5462] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  219.817594][ T5470] netlink: 'syz.2.311': attribute type 11 has an invalid length.
[  219.825495][ T5470] netlink: 420 bytes leftover after parsing attributes in process `syz.2.311'.
[  219.948507][ T4263] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  219.959618][ T4263] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  219.972162][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.085752][ T4263] usb 4-1: config 0 descriptor??
[  220.292016][ T5463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.622018][ T4263] usb 4-1: USB disconnect, device number 12
[  220.674965][ T5477] tipc: Started in network mode
[  220.693832][ T5477] tipc: Node identity fe169956531c, cluster identity 4711
[  220.703499][ T5477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.711634][ T5477] device syzkaller0 entered promiscuous mode
[  220.731507][ T5477] tipc: Resetting bearer <eth:syzkaller0>
[  220.742588][ T5476] tipc: Resetting bearer <eth:syzkaller0>
[  220.763705][ T5476] tipc: Disabling bearer <eth:syzkaller0>
[  220.946002][ T5482] overlayfs: failed to resolve './file1': -2
[  221.384358][ T4237] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  221.394218][ T4233] Bluetooth: hci5: command 0x1009 tx timeout
[  223.505277][ T5497] xt_SECMARK: invalid mode: 2
[  223.511690][ T5497] netlink: 224 bytes leftover after parsing attributes in process `syz.0.321'.
[  224.106915][ T4237] usb 3-1: unable to read config index 0 descriptor/all
[  224.286891][ T4237] usb 3-1: can't read configurations, error -71
[  224.792759][ T5505] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  224.793132][ T5504] device syzkaller0 entered promiscuous mode
[  224.878688][ T5508] netlink: 'syz.1.324': attribute type 11 has an invalid length.
[  224.886637][ T5508] netlink: 420 bytes leftover after parsing attributes in process `syz.1.324'.
[  225.308510][ T5516] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  225.316972][ T5516] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  225.325658][ T5516] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  225.386906][ T5517] usb usb8: usbfs: process 5517 (syz.3.325) did not claim interface 0 before use
[  225.404830][ T5501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.362013][ T5522] xt_hashlimit: size too large, truncated to 1048576
[  226.517364][ T4237] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  227.047470][ T4237] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  227.056604][ T4237] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  227.113376][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.195748][ T4237] usb 3-1: config 0 descriptor??
[  227.687293][   T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  228.053318][ T5545] capability: warning: `syz.3.335' uses deprecated v2 capabilities in a way that may be insecure
[  228.156263][ T5548] lo speed is unknown, defaulting to 1000
[  228.163069][ T5548] lo speed is unknown, defaulting to 1000
[  228.179149][ T5548] lo speed is unknown, defaulting to 1000
[  228.313551][ T5548] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  228.333280][ T5548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  228.337991][   T13] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  228.403838][   T13] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  228.418230][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.432551][   T13] usb 5-1: config 0 descriptor??
[  228.457661][ T5548] lo speed is unknown, defaulting to 1000
[  228.476097][ T5548] lo speed is unknown, defaulting to 1000
[  228.508065][ T5548] lo speed is unknown, defaulting to 1000
[  228.536534][ T5548] lo speed is unknown, defaulting to 1000
[  228.568731][ T5548] lo speed is unknown, defaulting to 1000
[  229.107850][ T4617] usb 5-1: USB disconnect, device number 10
[  229.185319][ T5557] loop3: detected capacity change from 0 to 1024
[  229.334295][ T5557] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  229.374004][ T5557] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block
[  229.374004][ T5557] 
[  229.722932][ T4295] Bluetooth: hci5: Frame reassembly failed (-84)
[  230.028232][   T13] usb 3-1: USB disconnect, device number 6
[  231.395287][ T5578] netlink: 'syz.4.341': attribute type 11 has an invalid length.
[  231.403781][ T5578] netlink: 420 bytes leftover after parsing attributes in process `syz.4.341'.
[  231.776899][   T21] Bluetooth: hci5: command 0x1003 tx timeout
[  231.934864][ T5571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.092318][ T4302] Bluetooth: hci5: Frame reassembly failed (-84)
[  232.261841][ T4302] Bluetooth: hci5: Frame reassembly failed (-84)
[  234.291551][   T21] Bluetooth: hci5: command 0x1001 tx timeout
[  234.309612][ T4192] Bluetooth: hci5: sending frame failed (-49)
[  234.597345][   T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  235.197272][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  235.257295][   T13] usb 5-1: Using ep0 maxpacket: 8
[  235.377680][   T13] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  235.557782][   T13] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  235.567570][ T4232] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  235.584511][ T4232] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  235.598635][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.624230][   T13] usb 5-1: Product: syz
[  235.631308][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.647001][   T13] usb 5-1: Manufacturer: syz
[  235.661461][   T13] usb 5-1: SerialNumber: syz
[  235.676156][ T4232] usb 3-1: config 0 descriptor??
[  235.701061][   T13] usb 5-1: config 0 descriptor??
[  235.766444][   T13] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  235.805732][   T13] usb 5-1: setting power ON
[  235.834516][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  235.901506][   T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  235.954498][   T13] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  235.965817][ T5595] dvb-usb: bulk message failed: -22 (3/0)
[  236.576178][ T4233] Bluetooth: hci5: command 0x1009 tx timeout
[  236.605473][   T13] usb 5-1: media controller created
[  236.778340][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  236.943665][   T13] usb 5-1: selecting invalid altsetting 6
[  236.971640][   T13] usb 5-1: digital interface selection failed (-22)
[  237.004073][   T13] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  237.137851][   T13] usb 5-1: setting power OFF
[  237.144003][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  237.164182][   T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  237.248342][   T13] (NULL device *): no alternate interface
[  237.340726][   T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  237.422535][   T13] usb 5-1: USB disconnect, device number 11
[  237.484117][ T5620] input: syz1 as /devices/virtual/input/input5
[  240.402088][ T4233] usb 3-1: USB disconnect, device number 7
[  244.802171][ T5678] securityfs: Unknown parameter ''
[  244.812578][ T5678] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  247.383409][ T5681] loop2: detected capacity change from 0 to 1024
[  247.542035][ T5681] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  247.620875][ T5681] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block
[  247.620875][ T5681] 
[  248.677271][ T1326] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  249.101329][ T5693] ubi16: attaching mtd0
[  249.457376][ T1326] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  249.479033][ T1326] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  249.530350][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'.
[  249.530420][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.629035][ T5693] ubi16: scanning is finished
[  249.633909][ T5693] ubi16: empty MTD device detected
[  249.731410][ T1326] usb 1-1: config 0 descriptor??
[  250.857168][ T5693] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4
[  253.217284][ T5153] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  254.146045][ T5725] securityfs: Unknown parameter ''
[  254.154990][ T5725] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  254.247627][ T5153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  255.450753][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  255.460805][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  255.509428][ T5153] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  255.545842][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.633889][ T5153] usb 5-1: config 0 descriptor??
[  256.217645][ T5153] usbhid 5-1:0.0: can't add hid device: -71
[  256.226127][ T5153] usbhid: probe of 5-1:0.0 failed with error -71
[  256.355101][ T5153] usb 5-1: USB disconnect, device number 12
[  258.450158][ T5741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.389'.
[  258.571712][ T4617] usb 1-1: USB disconnect, device number 7
[  258.757299][   T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  260.051915][   T13] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  260.064720][   T13] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  260.188661][ T5757] fuse: Bad value for 'fd'
[  260.901631][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'.
[  260.907731][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.973212][ T5759] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  260.982067][ T5759] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  260.991215][ T5759] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  261.000144][ T5759] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  261.011673][   T13] usb 5-1: config 0 descriptor??
[  261.109619][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'.
[  261.589451][ T5153] kernel read not supported for file /dsp1 (pid: 5153 comm: kworker/1:11)
[  261.598065][   T13] usb 5-1: USB disconnect, device number 13
[  262.417726][ T5774] netlink: 224 bytes leftover after parsing attributes in process `syz.0.401'.
[  262.817335][ T4232] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  262.820378][ T5153] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  263.157374][ T5153] usb 3-1: Using ep0 maxpacket: 32
[  263.523962][ T4232] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  263.538452][ T4232] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  263.560584][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.851023][ T5153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.875210][ T4232] usb 4-1: config 0 descriptor??
[  264.037336][ T5153] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  264.056797][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.071659][ T5153] usb 3-1: Product: syz
[  264.075881][ T5153] usb 3-1: Manufacturer: syz
[  264.169844][ T5153] usb 3-1: SerialNumber: syz
[  264.198595][ T5153] usb 3-1: config 0 descriptor??
[  264.270036][ T5153] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  265.067362][ T5153] usb 3-1: qt2_setup_urbs - submit read urb failed -8
[  265.074591][ T5153] quatech2: probe of 3-1:0.0 failed with error -8
[  265.312874][ T1326] usb 3-1: USB disconnect, device number 8
[  265.637662][ T4263] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  265.707239][   T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  265.947289][   T13] usb 1-1: Using ep0 maxpacket: 32
[  266.018748][ T4263] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  266.071000][   T13] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  266.089955][ T4263] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  266.103184][   T13] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  266.122726][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.319366][   T13] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  267.341491][ T4263] usb 2-1: config 0 descriptor??
[  267.355717][   T13] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  267.372407][   T13] usb 1-1: config 0 interface 0 has no altsetting 0
[  267.537807][   T13] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  267.557186][   T13] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  267.586193][   T13] usb 1-1: Product: syz
[  267.712046][   T13] usb 1-1: Manufacturer: syz
[  267.716961][   T13] usb 1-1: SerialNumber: syz
[  267.759496][ T1326] usb 2-1: USB disconnect, device number 12
[  267.766833][   T13] usb 1-1: config 0 descriptor??
[  267.820196][   T13] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  268.450432][   T13] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  268.933899][ T5828] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  268.942290][ T5828] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  268.950824][ T5828] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  268.998350][ T5829] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  269.761284][ T1326] usb 1-1: USB disconnect, device number 8
[  269.775291][ T1326] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  272.439357][ T5852] sctp: failed to load transform for md5: -2
[  272.574783][ T4617] usb 4-1: USB disconnect, device number 13
[  272.704535][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'.
[  272.801851][ T1326] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  273.716547][ T5881] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  273.725102][ T5881] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  273.733885][ T5881] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  273.784935][ T5882] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  273.977406][ T1326] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  273.992190][ T1326] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  274.002257][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.021218][ T1326] usb 2-1: config 0 descriptor??
[  276.734248][ T5912] netlink: 52 bytes leftover after parsing attributes in process `syz.2.443'.
[  277.227336][ T1326] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  277.677770][ T1326] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  277.719844][ T1326] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  277.801450][ T1326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.964789][ T1326] usb 1-1: config 0 descriptor??
[  279.901338][   T13] usb 2-1: USB disconnect, device number 13
[  279.940762][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  280.319960][ T5957] lo speed is unknown, defaulting to 1000
[  280.326399][ T5957] lo speed is unknown, defaulting to 1000
[  280.536859][ T5957] lo speed is unknown, defaulting to 1000
[  280.653728][ T5957] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  280.842331][ T5957] lo speed is unknown, defaulting to 1000
[  280.857044][ T5957] lo speed is unknown, defaulting to 1000
[  280.867691][ T5957] lo speed is unknown, defaulting to 1000
[  280.877979][ T5957] lo speed is unknown, defaulting to 1000
[  280.890182][ T5957] lo speed is unknown, defaulting to 1000
[  282.473828][ T5975] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  282.482284][ T5975] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  282.490868][ T5975] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  282.693897][ T5978] usb usb8: usbfs: process 5978 (syz.2.460) did not claim interface 0 before use
[  282.705302][ T5978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  283.805067][ T5984] ubi16: attaching mtd0
[  283.815441][ T5984] ubi16: scanning is finished
[  284.395659][ T5984] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB)
[  284.413553][ T5984] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  284.446689][ T5984] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1
[  284.467302][ T5984] ubi16: VID header offset: 64 (aligned 64), data offset: 128
[  284.484851][ T5984] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  284.497387][ T5984] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23
[  284.518896][ T5984] ubi16: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 56369953
[  284.548973][ T5984] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  284.571748][ T5989] ubi16: background thread "ubi_bgt16d" started, PID 5989
[  284.607256][ T4228] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  286.307866][ T4228] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  287.080450][ T4228] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  287.090041][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.118717][ T4228] usb 5-1: config 0 descriptor??
[  287.351732][   T13] usb 5-1: USB disconnect, device number 14
[  287.365376][ T6011] misc userio: Invalid payload size
[  287.371133][ T6011] misc userio: No port type given on /dev/userio
[  287.383671][ T4263] usb 1-1: USB disconnect, device number 9
[  291.567293][    T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  291.574889][ T4263] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  291.741801][ T6061] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  291.773556][ T6061] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  292.006276][ T6068] misc userio: Invalid payload size
[  292.011894][ T6068] misc userio: No port type given on /dev/userio
[  292.087513][ T4263] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  292.096853][    T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  292.800151][    T7] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  292.862296][ T4263] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  292.871889][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.880251][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.891696][ T4263] usb 5-1: config 0 descriptor??
[  292.897810][    T7] usb 3-1: config 0 descriptor??
[  293.297262][ T6076] netlink: 224 bytes leftover after parsing attributes in process `syz.0.488'.
[  293.974871][    T7] usb 5-1: USB disconnect, device number 15
[  294.201674][ T1326] usb 3-1: USB disconnect, device number 9
[  298.620419][ T6125] misc userio: Invalid payload size
[  298.625982][ T6125] misc userio: No port type given on /dev/userio
[  299.879299][ T4285] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  300.835874][ T6143] comedi comedi0: Minor 2 could not be opened
[  301.183030][ T6130] lo speed is unknown, defaulting to 1000
[  302.807200][ T1326] Bluetooth: hci5: command 0x0409 tx timeout
[  303.058673][ T6130] chnl_net:caif_netlink_parms(): no params data found
[  303.077287][ T4285] usb 3-1: device descriptor read/all, error -71
[  305.054455][ T6087] Bluetooth: hci5: command 0x041b tx timeout
[  305.062390][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.070077][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.101072][ T6130] device bridge_slave_0 entered promiscuous mode
[  305.341298][ T6130] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.358430][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.628422][ T6130] device bridge_slave_1 entered promiscuous mode
[  307.521956][ T6087] Bluetooth: hci5: command 0x040f tx timeout
[  308.251520][ T6130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.265536][ T6130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.358822][ T4285] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  308.446548][ T6130] team0: Port device team_slave_0 added
[  308.481897][ T6130] team0: Port device team_slave_1 added
[  308.797665][ T4285] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  308.842310][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.858490][ T4285] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  308.902044][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.931024][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.976363][ T4285] usb 1-1: config 0 descriptor??
[  309.022328][ T6130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.102710][ T6130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.117561][ T6130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.201096][ T6130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.609479][ T4285] Bluetooth: hci5: command 0x0419 tx timeout
[  310.304123][ T6211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  312.376244][ T5003] usb 1-1: USB disconnect, device number 10
[  313.067143][    C1] hrtimer: interrupt took 46842 ns
[  313.648578][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.688469][ T6130] device hsr_slave_0 entered promiscuous mode
[  316.000135][ T6130] device hsr_slave_1 entered promiscuous mode
[  316.014761][ T6130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.026740][ T6130] Cannot create hsr debugfs directory
[  316.161198][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.111992][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  317.118522][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  317.491997][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.522408][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.189672][ T6130] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  321.991271][  T154] tipc: Left network mode
[  321.991577][ T6130] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  322.991197][ T6130] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  324.227454][ T6320] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  324.754995][ T6130] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  325.246320][ T6130] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.421969][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  326.110334][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  326.301253][ T6130] 8021q: adding VLAN 0 to HW filter on device team0
[  326.314311][ T6341] misc userio: Invalid payload size
[  326.319885][ T6341] misc userio: Invalid payload size
[  328.169836][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  328.182515][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  328.207899][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.215000][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.443269][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  329.582380][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  329.593224][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.600340][ T5068] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.756482][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  329.800340][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  329.960284][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  329.982401][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  330.217890][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  330.227064][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  331.149270][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  331.166168][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  331.185449][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  331.204996][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  331.234715][ T6348] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  331.249433][ T6348] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  331.809860][ T6348] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  331.827254][ T6130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  331.860285][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  331.874088][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  332.856069][ T6406] misc userio: Invalid payload size
[  332.861723][ T6406] misc userio: Invalid payload size
[  332.993131][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  333.027086][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  334.261212][ T6130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.441385][ T6456] netlink: 'syz.1.570': attribute type 11 has an invalid length.
[  336.449310][ T6456] netlink: 420 bytes leftover after parsing attributes in process `syz.1.570'.
[  336.784534][  T154] device hsr_slave_0 left promiscuous mode
[  336.823754][  T154] device hsr_slave_1 left promiscuous mode
[  336.866252][  T154] device bridge_slave_1 left promiscuous mode
[  336.877013][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.888615][ T6448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.945377][  T154] device bridge_slave_0 left promiscuous mode
[  336.962580][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.138142][  T154] device veth1_macvtap left promiscuous mode
[  337.144703][  T154] device veth0_macvtap left promiscuous mode
[  337.206562][  T154] device veth1_vlan left promiscuous mode
[  337.226753][  T154] device veth0_vlan left promiscuous mode
[  337.551740][ T6476] misc userio: Invalid payload size
[  337.557526][ T6476] misc userio: Invalid payload size
[  341.974129][ T6518] netlink: 224 bytes leftover after parsing attributes in process `syz.2.583'.
[  342.262245][ T6522] misc userio: Invalid payload size
[  342.269426][ T6522] misc userio: No port type given on /dev/userio
[  345.424367][  T154] team0 (unregistering): Port device team_slave_1 removed
[  345.669332][  T154] team0 (unregistering): Port device team_slave_0 removed
[  346.065861][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.077739][ T6562] netlink: 224 bytes leftover after parsing attributes in process `syz.2.596'.
[  346.102038][ T6563] misc userio: Invalid payload size
[  346.107768][ T6563] misc userio: No port type given on /dev/userio
[  346.130664][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  346.236402][  T154] bond0 (unregistering): Released all slaves
[  347.112908][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  347.115711][ T6547] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  347.115775][ T6547] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  347.115798][ T6547] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  347.115819][ T6547] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  347.122803][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  347.166320][ T6571] fuse: Bad value for 'fd'
[  347.211371][ T6570] process 'syz.2.599' launched './file0' with NULL argv: empty string added
[  347.499412][ T6583] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  347.507942][ T6583] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  347.516532][ T6583] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  347.575730][ T6584] usb usb8: usbfs: process 6584 (syz.0.601) did not claim interface 0 before use
[  349.695777][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  349.797750][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  350.044183][ T6600] PKCS7: Unknown OID: [4] 0.0
[  350.049060][ T6600] PKCS7: Only support pkcs7_signedData type
[  350.375069][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  350.392136][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  350.414769][ T6130] device veth0_vlan entered promiscuous mode
[  350.647623][ T6130] device veth1_vlan entered promiscuous mode
[  350.937271][ T6130] device veth0_macvtap entered promiscuous mode
[  351.005023][ T6130] device veth1_macvtap entered promiscuous mode
[  351.087050][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.115167][ T6130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  351.136241][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  351.165309][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  351.206632][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  351.226439][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  351.244532][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  351.264938][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  351.273583][    T7] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  351.289844][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  351.311423][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  351.322747][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  351.332323][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  351.342189][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  351.352980][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'.
[  351.363111][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'.
[  351.380942][ T6130] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.419240][ T6130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.445620][ T6130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.487428][ T6130] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.715657][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  353.377787][    T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  353.407009][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.441833][    T7] usb 3-1: Product: syz
[  353.465780][    T7] usb 3-1: Manufacturer: syz
[  353.489279][    T7] usb 3-1: SerialNumber: syz
[  353.505578][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.531592][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.556744][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  353.580355][    T7] usb 3-1: config 0 descriptor??
[  353.652396][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.674953][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.699715][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  353.976631][ T6614] netlink: 'syz.2.610': attribute type 39 has an invalid length.
[  354.041817][ T6653] PKCS7: Unknown OID: [4] 0.0
[  354.046660][ T6653] PKCS7: Only support pkcs7_signedData type
[  354.758677][    T7] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110
[  354.766100][    T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110
[  354.861329][ T6655] loop5: detected capacity change from 0 to 7
[  354.878665][ T6655]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  354.884298][ T6655] loop5: partition table partially beyond EOD, truncated
[  354.901955][ T6655] loop5: p1 size 487441168 extends beyond EOD, truncated
[  356.781250][ T3561]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  356.825799][ T3561] loop5: partition table partially beyond EOD, truncated
[  356.960625][ T3561] loop5: p1 size 487441168 extends beyond EOD, truncated
[  357.351911][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'.
[  357.369108][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'.
[  359.768728][ T6697] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  359.778852][ T6697] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  359.787496][ T6697] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  359.861396][ T6705] usb usb8: usbfs: process 6705 (syz.1.626) did not claim interface 0 before use
[  360.027318][ T3561]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  360.032747][ T3561] loop5: partition table partially beyond EOD, truncated
[  360.075542][ T3561] loop5: p1 size 487441168 extends beyond EOD, truncated
[  360.313475][   T21] usb 3-1: USB disconnect, device number 12
[  360.602850][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  361.694970][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  362.004945][ T6740] netlink: 'syz.0.632': attribute type 11 has an invalid length.
[  362.012875][ T6740] netlink: 420 bytes leftover after parsing attributes in process `syz.0.632'.
[  362.078632][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  362.559651][ T6729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.164567][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.642'.
[  367.174570][ T6794] netlink: 35 bytes leftover after parsing attributes in process `syz.4.642'.
[  367.184106][ T6794] netlink: 35 bytes leftover after parsing attributes in process `syz.4.642'.
[  367.844118][ T6798] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  367.852607][ T6798] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  367.861257][ T6798] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  367.907845][ T6799] usb usb8: usbfs: process 6799 (syz.5.641) did not claim interface 0 before use
[  367.920999][ T6799] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  368.247271][ T4285] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  368.728202][ T4285] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  368.822904][ T4285] usb 1-1: config 0 has no interface number 0
[  368.957434][ T6823] siw: device registration error -23
[  371.207431][ T4285] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  371.235671][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.279935][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'.
[  371.296394][ T4285] usb 1-1: Product: syz
[  371.332351][ T4285] usb 1-1: config 0 descriptor??
[  371.371119][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'.
[  371.383106][ T4285] usb 1-1: can't set config #0, error -71
[  371.600204][ T4285] usb 1-1: USB disconnect, device number 11
[  371.624347][ T6846] misc userio: Invalid payload size
[  371.629921][ T6846] misc userio: No port type given on /dev/userio
[  374.042544][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[  374.060433][ T6870] netlink: 27 bytes leftover after parsing attributes in process `syz.1.657'.
[  376.046118][ T6875] usb usb8: usbfs: process 6875 (syz.0.656) did not claim interface 0 before use
[  378.277875][ T6900] siw: device registration error -23
[  378.330720][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  378.337064][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  379.240168][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.663'.
[  379.253901][ T6903] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  379.263228][ T6903] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.272255][ T6903] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  379.281044][ T6903] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.292322][ T6909] misc userio: Invalid payload size
[  379.297986][ T6909] misc userio: No port type given on /dev/userio
[  379.327164][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.663'.
[  381.013821][ T6924] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  381.022651][ T6924] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  381.031327][ T6924] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  381.077189][ T6925] usb usb8: usbfs: process 6925 (syz.5.668) did not claim interface 0 before use
[  382.470720][ T6951] netlink: 224 bytes leftover after parsing attributes in process `syz.2.672'.
[  384.682754][ T6968] misc userio: Invalid payload size
[  384.688233][ T6968] misc userio: No port type given on /dev/userio
[  384.698755][   T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  384.796779][ T6971] tipc: Started in network mode
[  384.815900][ T6971] tipc: Node identity 0a82977de442, cluster identity 4711
[  384.981738][ T6971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.010171][ T6974] device syzkaller0 entered promiscuous mode
[  385.076164][ T6971] tipc: Resetting bearer <eth:syzkaller0>
[  385.084218][ T6970] tipc: Resetting bearer <eth:syzkaller0>
[  385.118296][ T6970] tipc: Disabling bearer <eth:syzkaller0>
[  385.132394][ T6978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.680'.
[  385.141681][ T6978] netlink: 35 bytes leftover after parsing attributes in process `syz.2.680'.
[  385.150683][ T6978] netlink: 35 bytes leftover after parsing attributes in process `syz.2.680'.
[  385.197584][   T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  385.250998][   T23] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  385.291498][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.399661][   T23] usb 2-1: config 0 descriptor??
[  389.349146][ T7035] misc userio: Invalid payload size
[  389.354681][ T7035] misc userio: No port type given on /dev/userio
[  389.563423][ T4285] usb 2-1: USB disconnect, device number 14
[  390.258453][ T7049] xt_SECMARK: invalid mode: 2
[  390.515735][ T7058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.591008][ T7061] device syzkaller0 entered promiscuous mode
[  390.599792][ T7062] siw: device registration error -23
[  391.011967][ T7061] tipc: Resetting bearer <eth:syzkaller0>
[  391.065423][ T7057] tipc: Resetting bearer <eth:syzkaller0>
[  391.396834][ T7057] tipc: Disabling bearer <eth:syzkaller0>
[  391.427473][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'.
[  391.436600][ T7069] netlink: 35 bytes leftover after parsing attributes in process `syz.2.696'.
[  391.445731][ T7069] netlink: 35 bytes leftover after parsing attributes in process `syz.2.696'.
[  391.638639][ T7075] netlink: 224 bytes leftover after parsing attributes in process `syz.5.697'.
[  395.576208][ T7096] xt_SECMARK: invalid mode: 2
[  395.582621][ T7096] netlink: 224 bytes leftover after parsing attributes in process `syz.0.703'.
[  396.456234][ T7113] misc userio: Invalid payload size
[  396.461861][ T7113] misc userio: No port type given on /dev/userio
[  399.314420][ T7127] netlink: 268 bytes leftover after parsing attributes in process `syz.2.709'.
[  400.376524][ T7158] xt_SECMARK: invalid mode: 2
[  400.382102][ T7158] netlink: 224 bytes leftover after parsing attributes in process `syz.1.715'.
[  401.775305][ T7176] misc userio: Invalid payload size
[  401.780933][ T7176] misc userio: No port type given on /dev/userio
[  406.015343][ T7218] xt_SECMARK: invalid mode: 2
[  406.023375][ T7218] netlink: 224 bytes leftover after parsing attributes in process `syz.0.727'.
[  406.271907][ T7226] xt_l2tp: unknown flags: 17
[  406.289884][ T7226] capability: warning: `syz.5.728' uses 32-bit capabilities (legacy support in use)
[  406.418369][ T7224] tmpfs: Unknown parameter 'quota'
[  406.870483][ T7241] misc userio: Invalid payload size
[  406.876080][ T7241] misc userio: No port type given on /dev/userio
[  411.326564][ T7278] 
[  411.328973][ T7278] ======================================================
[  411.336015][ T7278] WARNING: possible circular locking dependency detected
[  411.343077][ T7278] syzkaller #0 Not tainted
[  411.347510][ T7278] ------------------------------------------------------
[  411.354648][ T7278] syz.1.743/7278 is trying to acquire lock:
[  411.360643][ T7278] ffff888026582ad8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  411.372185][ T7278] 
[  411.372185][ T7278] but task is already holding lock:
[  411.379576][ T7278] ffff8880265817a0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  411.388601][ T7278] 
[  411.388601][ T7278] which lock already depends on the new lock.
[  411.388601][ T7278] 
[  411.399030][ T7278] 
[  411.399030][ T7278] the existing dependency chain (in reverse order) is:
[  411.408069][ T7278] 
[  411.408069][ T7278] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  411.416018][ T7278]        lock_sock_nested+0x44/0x100
[  411.421340][ T7278]        smc_listen_out+0x109/0x3d0
[  411.426576][ T7278]        smc_listen_work+0x526/0xd00
[  411.431902][ T7278]        process_one_work+0x85f/0x1010
[  411.437404][ T7278]        worker_thread+0xaa6/0x1290
[  411.442719][ T7278]        kthread+0x436/0x520
[  411.447343][ T7278]        ret_from_fork+0x1f/0x30
[  411.452328][ T7278] 
[  411.452328][ T7278] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  411.462543][ T7278]        __lock_acquire+0x2c42/0x7d10
[  411.467973][ T7278]        lock_acquire+0x19e/0x400
[  411.473035][ T7278]        __flush_work+0x116/0x210
[  411.478087][ T7278]        __cancel_work_timer+0x3f4/0x560
[  411.483758][ T7278]        smc_clcsock_release+0x5c/0xe0
[  411.489242][ T7278]        __smc_release+0x661/0x7d0
[  411.494386][ T7278]        smc_close_non_accepted+0xd1/0x1f0
[  411.500222][ T7278]        smc_close_active+0xb00/0xea0
[  411.505647][ T7278]        __smc_release+0x8d/0x7d0
[  411.510704][ T7278]        smc_release+0x2ca/0x530
[  411.515945][ T7278]        sock_close+0xd5/0x240
[  411.520822][ T7278]        __fput+0x234/0x930
[  411.525377][ T7278]        task_work_run+0x125/0x1a0
[  411.530538][ T7278]        exit_to_user_mode_loop+0x10f/0x130
[  411.536464][ T7278]        exit_to_user_mode_prepare+0xee/0x180
[  411.542604][ T7278]        syscall_exit_to_user_mode+0x16/0x40
[  411.548664][ T7278]        do_syscall_64+0x58/0xa0
[  411.553642][ T7278]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  411.560172][ T7278] 
[  411.560172][ T7278] other info that might help us debug this:
[  411.560172][ T7278] 
[  411.570419][ T7278]  Possible unsafe locking scenario:
[  411.570419][ T7278] 
[  411.577902][ T7278]        CPU0                    CPU1
[  411.583291][ T7278]        ----                    ----
[  411.588673][ T7278]   lock(sk_lock-AF_SMC/1);
[  411.593216][ T7278]                                lock((work_completion)(&new_smc->smc_listen_work));
[  411.602705][ T7278]                                lock(sk_lock-AF_SMC/1);
[  411.609764][ T7278]   lock((work_completion)(&new_smc->smc_listen_work));
[  411.616735][ T7278] 
[  411.616735][ T7278]  *** DEADLOCK ***
[  411.616735][ T7278] 
[  411.624902][ T7278] 2 locks held by syz.1.743/7278:
[  411.630046][ T7278]  #0: ffff888074170e10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  411.640293][ T7278]  #1: ffff8880265817a0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530
[  411.649847][ T7278] 
[  411.649847][ T7278] stack backtrace:
[  411.655769][ T7278] CPU: 0 PID: 7278 Comm: syz.1.743 Not tainted syzkaller #0
[  411.663167][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  411.673352][ T7278] Call Trace:
[  411.676658][ T7278]  <TASK>
[  411.679613][ T7278]  dump_stack_lvl+0x188/0x250
[  411.684321][ T7278]  ? load_image+0x400/0x400
[  411.688855][ T7278]  ? show_regs_print_info+0x20/0x20
[  411.694105][ T7278]  ? print_circular_bug+0x12b/0x1a0
[  411.699340][ T7278]  check_noncircular+0x296/0x330
[  411.704316][ T7278]  ? look_up_lock_class+0x71/0x110
[  411.709485][ T7278]  ? add_chain_block+0x940/0x940
[  411.714453][ T7278]  ? lockdep_lock+0xf1/0x1f0
[  411.719083][ T7278]  ? mark_lock+0x94/0x320
[  411.723441][ T7278]  __lock_acquire+0x2c42/0x7d10
[  411.728340][ T7278]  ? __bfs+0x2a3/0x5c0
[  411.732443][ T7278]  ? verify_lock_unused+0x140/0x140
[  411.737676][ T7278]  ? mark_lock+0x94/0x320
[  411.742037][ T7278]  ? __lock_acquire+0x13bc/0x7d10
[  411.747104][ T7278]  ? lockdep_lock+0xf1/0x1f0
[  411.751734][ T7278]  lock_acquire+0x19e/0x400
[  411.756291][ T7278]  ? __flush_work+0xfa/0x210
[  411.760957][ T7278]  ? verify_lock_unused+0x140/0x140
[  411.766195][ T7278]  ? read_lock_is_recursive+0x10/0x10
[  411.771640][ T7278]  __flush_work+0x116/0x210
[  411.776220][ T7278]  ? __flush_work+0xfa/0x210
[  411.780934][ T7278]  ? flush_work+0x20/0x20
[  411.785561][ T7278]  ? try_to_grab_pending+0xfa/0x7f0
[  411.790793][ T7278]  ? mark_lock+0x94/0x320
[  411.795155][ T7278]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  411.801179][ T7278]  ? lock_chain_count+0x20/0x20
[  411.806063][ T7278]  ? __cancel_work_timer+0x36a/0x560
[  411.811466][ T7278]  __cancel_work_timer+0x3f4/0x560
[  411.816614][ T7278]  ? cancel_work_sync+0x20/0x20
[  411.821500][ T7278]  ? __local_bh_enable_ip+0x136/0x1c0
[  411.826918][ T7278]  ? lockdep_hardirqs_on+0x94/0x140
[  411.832160][ T7278]  ? __local_bh_enable_ip+0x136/0x1c0
[  411.837664][ T7278]  ? _local_bh_enable+0xa0/0xa0
[  411.842553][ T7278]  smc_clcsock_release+0x5c/0xe0
[  411.847525][ T7278]  __smc_release+0x661/0x7d0
[  411.852209][ T7278]  ? do_raw_spin_unlock+0x11d/0x230
[  411.857569][ T7278]  smc_close_non_accepted+0xd1/0x1f0
[  411.862891][ T7278]  smc_close_active+0xb00/0xea0
[  411.867781][ T7278]  ? sock_no_sendpage_locked+0x1a0/0x1a0
[  411.873448][ T7278]  __smc_release+0x8d/0x7d0
[  411.877979][ T7278]  ? do_raw_spin_unlock+0x11d/0x230
[  411.883391][ T7278]  smc_release+0x2ca/0x530
[  411.887841][ T7278]  sock_close+0xd5/0x240
[  411.892114][ T7278]  ? sock_mmap+0x90/0x90
[  411.896408][ T7278]  __fput+0x234/0x930
[  411.900439][ T7278]  task_work_run+0x125/0x1a0
[  411.905069][ T7278]  exit_to_user_mode_loop+0x10f/0x130
[  411.910494][ T7278]  exit_to_user_mode_prepare+0xee/0x180
[  411.916080][ T7278]  syscall_exit_to_user_mode+0x16/0x40
[  411.921711][ T7278]  do_syscall_64+0x58/0xa0
[  411.926161][ T7278]  ? clear_bhb_loop+0x30/0x80
[  411.930868][ T7278]  ? clear_bhb_loop+0x30/0x80
[  411.935578][ T7278]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  411.941521][ T7278] RIP: 0033:0x7fb38a4d4dd9
[  411.946078][ T7278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.965820][ T7278] RSP: 002b:00007fff70aa45c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  411.974264][ T7278] RAX: 0000000000000000 RBX: 00007fff70aa46b0 RCX: 00007fb38a4d4dd9
[  411.982274][ T7278] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  411.990277][ T7278] RBP: 0000000000064650 R08: 0000000000000001 R09: 0000000000000000
[  411.998281][ T7278] R10: 0000001b31920000 R11: 0000000000000246 R12: 00007fff70aa46f0
[  412.006286][ T7278] R13: 00007fb38a74dfac R14: 0000000000064694 R15: 00007fb38a74dfa0
[  412.014301][ T7278]  </TASK>