last executing test programs:

9m19.680963852s ago: executing program 0 (id=289):
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xed00}, 0x92f5e}, 0x6d)

9m18.096773689s ago: executing program 0 (id=291):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet_sctp(r0, &(0x7f0000006240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="814c594d0bd78f542ea6a16cec7785d432e2f8a665a1968faa5d7b0517bec0169c184f9ad000641ab638f707ba01bd87f403d521f2c4ea80d483c6e7709d741f7525d98c7a2d029f8e6f13003417a90a9d4b3b9be5510b7e12246be2714983cb18c82b4bc716ea5f50b26463b53aa2dab41dbd7135c862ac612c19892b810ca51cc005af6bbcbc9430e06f59cf75804d62df7ecbacfa0a6c500b541c8ba3d7958fe338b7c9d9eecc39328a7cf84cf20fa0e26fc9b2a305de84adec380f24ddb80c04333389", 0xc5}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20000000)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bb", 0x6e}, {&(0x7f0000002300)="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", 0x1c0}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
readv(r0, &(0x7f0000003580)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1)
sendto$inet(r0, &(0x7f0000000a80)='\x00', 0x1, 0x10008095, 0x0, 0x0)

9m17.871314795s ago: executing program 0 (id=293):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000001c0)={0x1, 0x0, 0x1, 0xbffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x2)
clock_gettime(0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9m14.816155712s ago: executing program 0 (id=304):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r4, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

9m13.80230145s ago: executing program 0 (id=308):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
unshare(0x22020400)
r0 = syz_ublk_setup_io_uring(0x81a, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x373}, &(0x7f00000005c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xb1d2, 0x100, 0xffffffff, 0x655}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x419b, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x811dc, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92fb, 0x80000, 0xfffffffc, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x2000, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x5e8, 0x0, 0x0}}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8090)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0xfffff000, 0x0)

9m10.795921415s ago: executing program 0 (id=313):
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='b'], 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

8m55.612859582s ago: executing program 32 (id=313):
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='b'], 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

5m36.869632685s ago: executing program 5 (id=1077):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f027, 0x2})

5m35.845358191s ago: executing program 5 (id=1082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x2000850)

5m31.845934527s ago: executing program 5 (id=1091):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x1, 0x100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000002180))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x48c6)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000000480)=@xdp, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)=""/245}, 0x8}, {{&(0x7f0000000840)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000001d00)=[{&(0x7f00000008c0)=""/247}, {&(0x7f00000009c0)=""/99}, {&(0x7f0000000c00)=""/4094}, {&(0x7f0000001c00)=""/88}, {&(0x7f0000001c80)=""/21}], 0x0, &(0x7f0000001d40)=""/49}, 0x800}, {{&(0x7f0000001d80)=@l2tp={0x2, 0x0, @local}, 0x0, &(0x7f0000003540)=[{&(0x7f0000001e00)=""/38}, {&(0x7f00000021c0)=""/4096}, {&(0x7f00000031c0)=""/123}, {&(0x7f0000003240)=""/194}, {&(0x7f0000003340)=""/234}, {&(0x7f0000003440)=""/165}, {&(0x7f0000003500)=""/59}], 0x0, &(0x7f0000003580)=""/180}, 0x6}, {{&(0x7f0000003640)=@l2, 0x0, &(0x7f0000004700)=[{&(0x7f00000036c0)=""/52}, {&(0x7f0000003700)=""/4096}]}, 0x2}, {{&(0x7f0000004740)=@nfc, 0x0, &(0x7f00000048c0)=[{&(0x7f00000047c0)=""/177}, {&(0x7f0000004880)}]}, 0x9}], 0x10133, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
socket(0x2, 0x3, 0x6)
syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4)
tkill(0x0, 0xb)

5m29.958564855s ago: executing program 5 (id=1095):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)

5m29.500348201s ago: executing program 5 (id=1099):
socket(0x2000000000000021, 0x2, 0x10000000000002)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$kcm(0x2b, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

5m28.311130809s ago: executing program 5 (id=1115):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a1", 0x1}], 0x1}}], 0x1, 0x4000000)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m27.781977371s ago: executing program 33 (id=1115):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a1", 0x1}], 0x1}}], 0x1, 0x4000000)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m8.323988474s ago: executing program 1 (id=1197):
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
setresuid(0xee00, 0xee01, 0x0)
setuid(0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r4 = syz_pidfd_open(r2, 0x0)
setns(r4, 0x24020000)

5m7.474483352s ago: executing program 1 (id=1201):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x0, 0x10)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00')
r0 = socket$inet6(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r0], 0x22)

5m6.902924155s ago: executing program 1 (id=1203):
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r2)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES64=r0])
socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14)

5m1.677332032s ago: executing program 1 (id=1210):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00')
epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

4m47.522512187s ago: executing program 1 (id=1231):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r2, 0x0, 0x0, 0x4100, 0x0, 0x0)

4m47.521904371s ago: executing program 4 (id=1232):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(r3, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0)

4m46.118662251s ago: executing program 1 (id=1235):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000005c0060008"], 0x4a)

4m44.924740067s ago: executing program 4 (id=1238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf4000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_audit(0x10, 0x3, 0x9)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x41, 0x107, 0xfffffffe, 0xfffffffb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008084)

4m43.055984576s ago: executing program 4 (id=1239):
socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x1694, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

4m37.116363084s ago: executing program 4 (id=1247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b", 0x9c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a", 0x1e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m30.650005417s ago: executing program 34 (id=1235):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000005c0060008"], 0x4a)

4m26.124885544s ago: executing program 4 (id=1263):
r0 = socket(0x40000000015, 0x5, 0x0)
mount(0x0, 0x0, 0x0, 0x10, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x2, r1)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$rds(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

4m24.205286622s ago: executing program 4 (id=1264):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b97", 0x9d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a2411", 0xc1}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m8.223147807s ago: executing program 35 (id=1264):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b97", 0x9d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a2411", 0xc1}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17.079393095s ago: executing program 2 (id=1507):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94)
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x1, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@typed={0x9, 0x5d, 0x0, 0x0, @str='ceph\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000003540)={0x2020}, 0x2020)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)

15.635408998s ago: executing program 2 (id=1508):
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000000c0)={0x3, 0x6})
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x24, 0x21e880)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
futimesat(r2, 0x0, &(0x7f0000000400)={{0x77359400}, {0x77359400}})
syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00004000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7, 0x2}}}}}}, 0x0)
read$midi(r1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

14.742724495s ago: executing program 2 (id=1511):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x4202c78)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
write$ppp(r2, 0x0, 0x0)
write$ppp(r2, &(0x7f0000000080)="bbc408c5", 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x4, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000440)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000100))
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x8, 0x200001, 0x0, 0x0, 0xfffffffd, 0x401}, [@TCA_NETEM_CORR={0x10, 0x1, {0xd, 0xffff, 0x1000}}]}}}]}, 0x5c}}, 0x0)

14.471146368s ago: executing program 2 (id=1513):
r0 = shmget(0x2, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x88}}, 0x8c0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
sendmsg$inet6(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="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", 0xabf}], 0x1}, 0x4000)
sendmsg$can_raw(r7, &(0x7f0000000800)={&(0x7f0000000600)={0x1d, r2}, 0x10, &(0x7f00000007c0)={&(0x7f0000000740)=@canfd={{0x1, 0x1, 0x1}, 0x34, 0x1, 0x0, 0x0, "809efff2c5145bbf86ab773c0c9f28ac607ad9f44c9ee8f56dd518981edb148dcdd23238f729b4f6e901d9e3526fcf55261d15230e6ed628034e7f692d23967c"}, 0x48}}, 0x2400080d)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, 0x0)
getpid()
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000005c0)=0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0x2}, {0x4, 0xfff8}, {0x4, 0x3}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="6701000000000000b70500000800000085000000a5000000184cbd1b663868502bcca1f99527cc000000e76300000000"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x88, &(0x7f0000000340)=""/136, 0x9220ae811b1fad15, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x80f, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x1, 0xd, 0x9}, {0x1, 0x2, 0xa, 0xb1507155d8c6348d}, {0x5, 0x2, 0x9, 0x6}], 0x10, 0x5}, 0x94)
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r9, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000004640)=[{{&(0x7f0000001180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001300)=""/207, 0xcf}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001a40)=""/4091, 0xffb}, 0x6}, {{&(0x7f0000002a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002ac0)=""/244, 0xf4}, {&(0x7f0000002bc0)=""/148, 0x94}, {&(0x7f0000002c80)=""/20, 0x14}, {&(0x7f0000002cc0)=""/118, 0x76}, {&(0x7f0000002d40)=""/122, 0x7a}, {&(0x7f0000002dc0)=""/117, 0x75}], 0x6, &(0x7f0000002ec0)=""/177, 0xb1}, 0x81}, {{0x0, 0x32, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/71, 0x47}], 0x1, &(0x7f0000003040)=""/36, 0x24}, 0xfffffffe}, {{&(0x7f0000003080)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003100)=""/113, 0x71}, {&(0x7f0000003180)=""/177, 0xb1}], 0x2}, 0x5}, {{&(0x7f0000003280)=@hci, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003300)=""/164, 0xa4}], 0x1, &(0x7f0000003400)=""/60, 0x3c}, 0x7f}, {{&(0x7f0000003440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000034c0)=""/231, 0xe7}], 0x1, &(0x7f0000003600)=""/9, 0x9}, 0xe}, {{&(0x7f0000003640)=@hci, 0x80, &(0x7f0000003b00)=[{&(0x7f00000036c0)=""/215, 0xd7}, {&(0x7f00000037c0)=""/152, 0x98}, {&(0x7f0000003880)=""/225, 0xe1}, {&(0x7f0000003980)=""/127, 0x7f}, {&(0x7f0000003a00)=""/210, 0xd2}], 0x5, &(0x7f0000003b80)=""/32, 0x20}, 0x1efb}, {{&(0x7f0000003bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003c40)=""/67, 0x43}, {&(0x7f0000003cc0)=""/60, 0x3c}], 0x2, &(0x7f0000003d40)=""/208, 0xd0}, 0xc0f8}, {{&(0x7f0000003e40)=@tipc, 0x80, &(0x7f0000004280)=[{&(0x7f0000001200)=""/19, 0xc}, {&(0x7f0000003f00)=""/149, 0x95}, {&(0x7f0000003fc0)=""/168, 0xa8}, {&(0x7f0000004080)=""/21, 0x15}, {&(0x7f00000040c0)=""/152, 0x98}, {&(0x7f0000004180)=""/170, 0xaa}, {&(0x7f0000004240)=""/32, 0x20}], 0x7, &(0x7f0000004300)=""/204, 0xcc}, 0xffff}, {{&(0x7f0000004400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004480)=""/123, 0x7b}, {&(0x7f0000004500)=""/62, 0x3e}], 0x2, &(0x7f0000004580)=""/179, 0xb3}, 0x10001}], 0xa, 0x1, &(0x7f00000048c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
ioctl$UFFDIO_MOVE(r9, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1})

14.28199954s ago: executing program 3 (id=1514):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x4202c78)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
write$ppp(r2, 0x0, 0x0)
write$ppp(r2, &(0x7f0000000080)="bbc408c5", 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x4, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000440)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000100))
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x8, 0x200001, 0x0, 0x0, 0xfffffffd, 0x401}, [@TCA_NETEM_CORR={0x10, 0x1, {0xd, 0xffff, 0x1000}}]}}}]}, 0x5c}}, 0x0)

11.371030821s ago: executing program 3 (id=1515):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
syz_open_dev$tty1(0xc, 0x4, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff7b)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/ftrace_dump_on_oops\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x45, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20)

9.913374433s ago: executing program 2 (id=1516):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94)
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x1, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@typed={0x9, 0x5d, 0x0, 0x0, @str='ceph\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000003540)={0x2020}, 0x2020)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)

8.273031124s ago: executing program 3 (id=1517):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94)
mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x40000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x1, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@typed={0x9, 0x5d, 0x0, 0x0, @str='ceph\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000003540)={0x2020}, 0x2020)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)

4.875405721s ago: executing program 2 (id=1518):
r0 = shmget(0x2, 0x2000, 0x80, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x88}}, 0x8c0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
sendmsg$inet6(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)="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", 0xac0}], 0x1}, 0x4000)
sendmsg$can_raw(r7, &(0x7f0000000800)={&(0x7f0000000600)={0x1d, r2}, 0x10, &(0x7f00000007c0)={&(0x7f0000000740)=@canfd={{0x1, 0x1, 0x1}, 0x34, 0x1, 0x0, 0x0, "809efff2c5145bbf86ab773c0c9f28ac607ad9f44c9ee8f56dd518981edb148dcdd23238f729b4f6e901d9e3526fcf55261d15230e6ed628034e7f692d23967c"}, 0x48}}, 0x2400080d)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, 0x0)
getpid()
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000005c0)=0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0x2}, {0x4, 0xfff8}, {0x4, 0x3}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="6701000000000000b70500000800000085000000a5000000184cbd1b663868502bcca1f99527cc000000e76300000000"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x88, &(0x7f0000000340)=""/136, 0x9220ae811b1fad15, 0x4, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x80f, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x1, 0xd, 0x9}, {0x1, 0x2, 0xa, 0xb1507155d8c6348d}, {0x5, 0x2, 0x9, 0x6}], 0x10, 0x5}, 0x94)
r9 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
ioctl$UFFDIO_MOVE(r9, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1})

3.020586992s ago: executing program 3 (id=1519):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x800000000000000)
splice(r4, 0x0, r7, 0x0, 0x80, 0x8)
write$tun(r5, &(0x7f00000033c0)=ANY=[], 0x107c)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r8, 0x401c5504, 0x0)
gettid()

1.357656591s ago: executing program 3 (id=1520):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r3, &(0x7f0000002f40)=""/4084, 0xff4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
ioctl$XFS_IOC_BULKSTAT(r4, 0x8040587f, &(0x7f0000000680)={{0x2, 0x0, 0xffff7fff, 0x2, 0x6}, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00)
write(r5, &(0x7f0000000080)='0', 0x1)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x6)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84001, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r6], 0x13}, 0x1, 0x0, 0x0, 0x804}, 0x4800)

0s ago: executing program 3 (id=1521):
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000000c0)={0x3, 0x6})
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x24, 0x21e880)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0)
fcntl$lock(r3, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
futimesat(r2, 0x0, &(0x7f0000000400)={{0x77359400}, {0x77359400}})
syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00004000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7, 0x2}}}}}}, 0x0)
read$midi(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 leftover after parsing attributes in process `syz.0.240'.
[  173.057361][ T6519] bond0: entered promiscuous mode
[  173.057379][ T6519] bond_slave_0: entered promiscuous mode
[  173.057690][ T6519] bond_slave_1: entered promiscuous mode
[  173.057856][ T6519] dummy0: entered promiscuous mode
[  173.208606][ T6526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.208625][ T6526] IPv6: NLM_F_CREATE should be set when creating new route
[  173.268327][ T6519] gretap0: entered promiscuous mode
[  173.272868][ T6519] team0: entered promiscuous mode
[  173.272891][ T6519] team_slave_0: entered promiscuous mode
[  173.273113][ T6519] team_slave_1: entered promiscuous mode
[  173.296003][ T6519] debugfs: 'hsr1' already exists in 'hsr'
[  173.296035][ T6519] Cannot create hsr debugfs directory
[  173.296277][ T6519] hsr1: entered promiscuous mode
[  173.745863][ T6535] netlink: 'syz.0.247': attribute type 10 has an invalid length.
[  175.525009][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.527517][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.809283][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.822848][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.446820][ T6562] 9pnet_virtio: no channels available for device 127.0.0.1
[  177.683591][ T1126] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.683787][   T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.683829][   T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.683868][   T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.891693][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[  180.952021][ T6126] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  181.102607][ T6126] usb 2-1: Using ep0 maxpacket: 32
[  181.103858][ T6126] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  181.107951][ T6126] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.142486][ T6126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.142515][ T6126] usb 2-1: Product: syz
[  181.142530][ T6126] usb 2-1: Manufacturer: syz
[  181.142545][ T6126] usb 2-1: SerialNumber: syz
[  181.147006][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.268'.
[  181.212835][ T6126] usb 2-1: config 0 descriptor??
[  181.257798][ T6126] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  181.951453][ T6606] cgroup: No subsys list or none specified
[  181.985906][ T6126] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110
[  181.986974][ T6126] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  182.328161][ T5709] usb 2-1: USB disconnect, device number 5
[  182.610499][ T6625] program syz.1.277 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.698203][ T6627] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  183.121942][ T5709] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  183.383072][ T5709] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  183.384559][ T5709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.384615][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.426035][ T5709] as10x_usb: device has been detected
[  184.427328][ T5709] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  185.823054][ T5709] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  188.191382][ T5709] as10x_usb: error during firmware upload part1
[  188.198389][ T5709] Registered device Abilis Systems DVB-Titan
[  188.261684][ T5709] usb 2-1: USB disconnect, device number 6
[  189.786258][ T5709] Unregistered device Abilis Systems DVB-Titan
[  190.038871][ T5709] as10x_usb: device has been disconnected
[  191.066966][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.298'.
[  191.214945][ T6699] hfs: unable to load iocharset "io#harset"
[  192.591451][ T5605] Bluetooth: hci3: command 0x2016 tx timeout
[  193.621860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  193.631864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  193.641843][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  193.651844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  193.661845][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  193.671863][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  194.718239][ T5605] Bluetooth: hci3: command 0x2016 tx timeout
[  195.041585][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  195.041660][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  197.078674][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'.
[  197.261735][ T6760] hfs: unable to load iocharset "io#harset"
[  202.990056][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  202.990301][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  202.990415][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  202.990536][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  202.990650][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  202.990762][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.895437][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.895571][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.895670][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.895795][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.895902][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896007][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896111][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896221][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896321][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896414][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896503][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896598][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896686][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.896771][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.981685][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.982214][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.982481][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.982740][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  203.997136][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.098621][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.098709][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.098779][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.098847][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.098914][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.098981][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.099048][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.099115][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.099233][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.099300][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.099367][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.099450][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.108805][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.109092][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.109348][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.109613][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.109905][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.114615][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.114729][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.114916][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.115196][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.115453][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.115714][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.116001][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.121427][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.121734][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.123560][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.123862][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.170544][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.170889][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.171180][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.171432][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.171665][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.205613][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.205896][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.206195][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.206446][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.206740][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.221573][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.221988][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.222260][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.222578][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.227187][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.227440][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.227747][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.228009][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.228265][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.235096][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.235417][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.235768][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.289481][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.289798][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.290111][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.290368][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.290629][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.312398][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.312702][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.312989][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.313275][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.313486][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.318118][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.318396][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.318691][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.318962][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.325586][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.325897][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.326159][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.326424][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.332545][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.332878][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.333148][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.333412][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.333658][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.346342][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.346679][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.346941][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.347216][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.347465][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.360242][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.360627][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.360910][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.361187][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.361399][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.369844][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.390219][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.390576][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.390839][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.391120][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.391426][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.412216][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.412612][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.412886][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.413173][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.418354][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.418695][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.419165][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.419452][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.435526][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.435870][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.436113][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.436384][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.462356][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.462675][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.462937][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.463203][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.463484][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.467758][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.468115][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.468426][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.468681][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.469068][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.473503][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.473828][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.474094][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.474381][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.474644][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.497116][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.497433][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.497678][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.497947][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.498289][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.501763][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.502484][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.502754][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.502962][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.503256][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.520276][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.520554][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.520816][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.521064][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.529630][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.530353][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.530580][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.530841][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.611305][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.611618][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.616722][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.617092][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.627667][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.627955][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.628224][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.628473][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.634420][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.634731][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.635049][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.635302][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.635555][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.679516][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.679853][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.680135][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.680460][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.750485][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.750886][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.751159][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.751438][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.751698][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.821224][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.836832][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.837388][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.837669][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.847783][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.848085][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.848354][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.848615][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.848811][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.855135][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.855542][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.855822][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.856090][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.856341][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.856608][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.865350][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.865708][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.865964][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.866259][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.866564][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.866824][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.878623][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.878909][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.879175][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.879434][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.879726][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.887163][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.887460][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.887729][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.888013][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.932138][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.932498][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.932755][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.933022][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.933276][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.933548][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.933809][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.934071][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.934326][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.934531][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.934815][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.935060][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.935312][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.935574][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.935828][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.936010][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.936300][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.936562][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.936812][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.937080][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.937333][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.937607][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.937877][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.938115][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.938373][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.938640][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.938892][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.939199][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.939470][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.939766][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.940026][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.940271][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.940600][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.940861][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.941033][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.941337][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.941601][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  204.993478][ T6791] ieee802154 phy0 wpan0: encryption failed: -22
[  206.865416][ T6807] zram0: detected capacity change from 0 to 8
[  207.324600][ T6816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.325'.
[  207.399227][ T6814] hfs: unable to load iocharset "io#harset"
[  209.447869][ T6836] hfs: unable to load iocharset "io#harset"
[  209.473755][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.331'.
[  213.893960][ T6873] netlink: 'syz.3.340': attribute type 10 has an invalid length.
[  214.020559][ T6873] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  214.977365][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.020822][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.040672][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.090185][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.104756][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.271873][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  215.291871][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  215.301862][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  215.311871][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  217.337174][   T59] Bluetooth: hci5: command tx timeout
[  218.260726][ T6891] fuse: Bad value for 'fd'
[  218.275117][ T6891] netlink: zone id is out of range
[  218.275135][ T6891] netlink: zone id is out of range
[  218.275144][ T6891] netlink: zone id is out of range
[  218.275153][ T6891] netlink: zone id is out of range
[  218.275161][ T6891] netlink: zone id is out of range
[  218.275170][ T6891] netlink: zone id is out of range
[  218.275178][ T6891] netlink: zone id is out of range
[  218.275195][ T6891] netlink: zone id is out of range
[  218.275204][ T6891] netlink: zone id is out of range
[  218.275212][ T6891] netlink: zone id is out of range
[  219.351999][   T59] Bluetooth: hci5: command tx timeout
[  222.129834][ T5596] Bluetooth: hci5: command tx timeout
[  222.391962][ T5596] Bluetooth: hci2: command 0x0406 tx timeout
[  222.392328][ T5596] Bluetooth: hci3: command 0x2016 tx timeout
[  222.392360][ T5596] Bluetooth: hci1: command 0x0406 tx timeout
[  224.005481][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.353'.
[  224.152301][   T59] Bluetooth: hci5: command tx timeout
[  224.177867][ T6929] hfs: unable to load iocharset "io#harset"
[  226.433684][ T6943] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  226.446861][ T6943] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  228.459554][ T6968] Invalid ELF header magic: != ELF
[  230.215967][   T59] Bluetooth: hci2: unexpected event for opcode 0x1003
[  230.937116][ T6975] hfs: unable to load iocharset "io#harset"
[  230.941210][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'.
[  231.248570][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.248701][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.248906][ T6875] bridge_slave_0: entered allmulticast mode
[  231.289435][ T6875] bridge_slave_0: entered promiscuous mode
[  231.310523][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.310710][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.310947][ T6875] bridge_slave_1: entered allmulticast mode
[  231.347864][ T6875] bridge_slave_1: entered promiscuous mode
[  231.450797][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.481658][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.704721][ T5770] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  231.854513][ T5770] usb 2-1: Using ep0 maxpacket: 8
[  231.857076][ T5770] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  231.910273][ T5770] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  231.910296][ T5770] usb 2-1: config 0 has no interface number 0
[  231.956654][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.956675][ T5770] usb 2-1: Product: syz
[  231.956686][ T5770] usb 2-1: Manufacturer: syz
[  231.956696][ T5770] usb 2-1: SerialNumber: syz
[  232.000449][ T5770] usb 2-1: config 0 descriptor??
[  232.284063][ T5770] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  232.284139][ T5770] uvcvideo 2-1:0.31: No valid video chain found.
[  232.869837][ T5770] usb 2-1: USB disconnect, device number 7
[  232.994009][ T1187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.657859][   T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  234.699989][   T59] Bluetooth: hci2: Injecting HCI hardware error event
[  234.705528][ T5590] Bluetooth: hci2: hardware error 0x00
[  234.977972][ T6875] team0: Port device team_slave_0 added
[  235.000518][ T6875] team0: Port device team_slave_1 added
[  235.244898][ T7013] fuse: fd is not a fuse device
[  236.039931][ T1126] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  236.559035][ T1187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.609542][ T7020] hfs: unable to load iocharset "io#harset"
[  237.989069][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'.
[  238.001010][ T1137] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.001176][ T1137] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.001300][ T1137] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.060036][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.060056][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.060085][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.083010][ T5590] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  238.126969][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.126988][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.127019][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.290602][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'.
[  238.316178][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'.
[  238.376185][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'.
[  239.586696][ T1187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.485175][ T1187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.938038][ T7060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.998661][ T6875] hsr_slave_0: entered promiscuous mode
[  241.014807][ T6875] hsr_slave_1: entered promiscuous mode
[  241.016026][ T6875] debugfs: 'hsr0' already exists in 'hsr'
[  241.016053][ T6875] Cannot create hsr debugfs directory
[  241.749814][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'.
[  241.934984][ T7076] hfs: unable to load iocharset "io#harset"
[  242.252005][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  244.419021][    T9] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  244.464112][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.464175][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  244.464215][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.019734][    T9] usb 5-1: can't set config #1, error -71
[  245.029842][    T9] usb 5-1: USB disconnect, device number 4
[  248.242279][ T7119] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  250.734199][ T7123] hfs: unable to load iocharset "io#harset"
[  251.219647][ T1187] bridge_slave_1: left allmulticast mode
[  251.259423][ T1187] bridge_slave_1: left promiscuous mode
[  251.360827][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.957082][ T1187] bridge_slave_0: left allmulticast mode
[  251.957122][ T1187] bridge_slave_0: left promiscuous mode
[  251.957378][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.635223][ T7166] Bluetooth: MGMT ver 1.23
[  256.075609][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  256.075685][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  256.663842][ T1187] gretap0 (unregistering): left promiscuous mode
[  257.103150][ T1187] bond0 (unregistering): left promiscuous mode
[  257.103178][ T1187] bond_slave_0: left promiscuous mode
[  257.103391][ T1187] bond_slave_1: left promiscuous mode
[  257.106154][ T1187] dummy0: left promiscuous mode
[  257.162664][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.223265][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.283313][ T1187] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  257.316599][ T1187] bond0 (unregistering): Released all slaves
[  257.367906][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.404'.
[  257.431541][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1
[  257.515859][ T7185] veth0_macvtap: left promiscuous mode
[  257.545010][ T7185] macvtap0: entered allmulticast mode
[  259.482498][ T6875] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  260.559252][ T6875] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  260.660056][ T6875] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  261.737317][ T6875] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  261.933090][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.938143][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.980502][ T6875] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  263.114191][ T6875] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  263.239914][ T7238] process '/newroot/100/file0' started with executable stack
[  265.921362][ T6875] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  265.981607][ T6875] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  266.034855][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2
[  266.828178][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'.
[  267.470784][  T916] IPVS: starting estimator thread 0...
[  268.669374][ T7290] IPVS: using max 8 ests per chain, 19200 per kthread
[  269.094006][ T7266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  269.094026][ T7266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  269.174753][ T7266] vhci_hcd vhci_hcd.0: Device attached
[  269.199924][ T7302] vhci_hcd: connection closed
[  269.314791][ T3350] vhci_hcd vhci_hcd.1: stop threads
[  269.315861][ T3350] vhci_hcd vhci_hcd.1: release socket
[  269.387682][ T3350] vhci_hcd vhci_hcd.1: disconnect device
[  270.218663][ T6126] usb usb36-port1: attempt power cycle
[  270.383949][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.064593][ T6126] usb usb36-port1: unable to enumerate USB device
[  275.732382][ T1187] team0: left promiscuous mode
[  275.732407][ T1187] team_slave_0: left promiscuous mode
[  275.732661][ T1187] team_slave_1: left promiscuous mode
[  275.969725][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'.
[  276.948762][   T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  276.988795][   T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  277.010626][   T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  277.024967][   T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  277.029497][   T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  277.268548][ T7355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.449'.
[  277.415046][ T1187] hsr_slave_0: left promiscuous mode
[  277.459869][ T1187] hsr_slave_1: left promiscuous mode
[  277.461094][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.461279][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.552833][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.552863][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.779062][ T1187] veth1_macvtap: left promiscuous mode
[  277.794661][ T1187] veth0_macvtap: left promiscuous mode
[  277.797725][ T1187] veth1_vlan: left promiscuous mode
[  277.798283][ T1187] veth0_vlan: left promiscuous mode
[  279.132911][ T1187] team0 (unregistering): Port device team_slave_1 removed
[  279.213302][ T1187] team0 (unregistering): Port device team_slave_0 removed
[  279.271950][   T59] Bluetooth: hci4: command tx timeout
[  279.504702][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.365151][   T59] Bluetooth: hci4: command tx timeout
[  282.431289][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3
[  283.595921][   T59] Bluetooth: hci4: command tx timeout
[  284.034567][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'.
[  284.113630][ T5574] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  284.292629][ T5574] usb 5-1: Using ep0 maxpacket: 16
[  284.299173][ T5574] usb 5-1: New USB device found, idVendor=0403, idProduct=e88b, bcdDevice=5e.3f
[  284.341725][ T5574] usb 5-1: config 6 has an invalid interface number: 221 but max is 0
[  284.341857][ T5574] usb 5-1: config 6 has no interface number 0
[  284.341906][ T5574] usb 5-1: config 6 interface 221 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  284.341934][ T5574] usb 5-1: config 6 interface 221 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  284.341957][ T5574] usb 5-1: config 6 interface 221 has no altsetting 0
[  284.402669][ T5574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.402694][ T5574] usb 5-1: Product: syz
[  284.402707][ T5574] usb 5-1: Manufacturer: syz
[  284.402719][ T5574] usb 5-1: SerialNumber: syz
[  284.773987][ T5574] ftdi_sio 5-1:6.221: FTDI USB Serial Device converter detected
[  284.904137][ T5574] ftdi_sio ttyUSB0: unknown device type: 0x5e3f
[  285.073968][ T5574] usb 5-1: USB disconnect, device number 5
[  285.673002][   T59] Bluetooth: hci4: command tx timeout
[  285.688287][ T5574] ftdi_sio 5-1:6.221: device disconnected
[  289.274162][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4
[  296.003579][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'.
[  296.078813][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.094997][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.095262][ T7342] bridge_slave_0: entered allmulticast mode
[  296.124501][ T7342] bridge_slave_0: entered promiscuous mode
[  300.080883][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.081244][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.081488][ T7342] bridge_slave_1: entered allmulticast mode
[  300.861765][ T7342] bridge_slave_1: entered promiscuous mode
[  302.111486][ T7531] fuse: fd is not a fuse device
[  302.918436][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.178113][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.587321][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'.
[  309.592017][ T7342] team0: Port device team_slave_0 added
[  309.595959][ T7342] team0: Port device team_slave_1 added
[  309.650707][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.650752][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.650836][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.724550][ T7570] overlayfs: failed to resolve './file1': -2
[  309.849831][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.849849][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  309.849878][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.320270][ T7582] tipc: Started in network mode
[  310.320289][ T7582] tipc: Node identity , cluster identity 4711
[  310.320305][ T7582] tipc: Failed to obtain node identity
[  310.320333][ T7582] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  311.435633][ T7342] hsr_slave_0: entered promiscuous mode
[  311.440848][ T7342] hsr_slave_1: entered promiscuous mode
[  311.450606][ T7342] debugfs: 'hsr0' already exists in 'hsr'
[  311.450689][ T7342] Cannot create hsr debugfs directory
[  313.656810][   T37] audit: type=1326 audit(1786564765.187:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7629 comm="syz.3.506" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd628de0d9 code=0x0
[  313.719039][ T7620] warning: `syz.2.504' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  316.126971][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'.
[  317.706395][ T7648] hfs: unable to load iocharset "io#harset"
[  317.711325][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  317.711402][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  318.398348][ T7664] hpfs: Bad magic ... probably not HPFS
[  318.521576][ T7667] tmpfs: Bad value for 'nr_inodes'
[  320.472735][ T7682] 9pnet_fd: p9_fd_create_tcp (7682): problem connecting socket to 127.0.0.1
[  323.722122][ T1187] bridge_slave_1: left allmulticast mode
[  323.722160][ T1187] bridge_slave_1: left promiscuous mode
[  323.722440][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.793825][ T7717] overlayfs: failed to clone lowerpath
[  325.274027][ T1187] bridge_slave_0: left allmulticast mode
[  325.274054][ T1187] bridge_slave_0: left promiscuous mode
[  325.761748][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.528'.
[  326.001499][ T7717] overlayfs: failed to clone lowerpath
[  326.057328][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.511387][ T7733] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  330.933645][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.056602][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.133095][ T1187] bond0 (unregistering): Released all slaves
[  335.881285][ T1187] hsr_slave_0: left promiscuous mode
[  335.917853][ T1187] hsr_slave_1: left promiscuous mode
[  335.918906][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.964256][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.799769][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  336.950022][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  336.966508][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  336.983326][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  337.014813][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.368088][ T1187] team0 (unregistering): Port device team_slave_1 removed
[  338.478632][ T1187] team0 (unregistering): Port device team_slave_0 removed
[  339.192035][   T59] Bluetooth: hci5: command tx timeout
[  339.539600][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'.
[  340.251983][  T916] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  340.418808][  T916] usb 5-1: Using ep0 maxpacket: 32
[  340.419650][  T916] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  340.421269][  T916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  340.421312][  T916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  340.421340][  T916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  340.421364][  T916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  340.514321][  T916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.514352][  T916] usb 5-1: Product: syz
[  340.514369][  T916] usb 5-1: Manufacturer: syz
[  340.514384][  T916] usb 5-1: SerialNumber: syz
[  340.578301][  T916] usb 5-1: config 0 descriptor??
[  340.851609][ T1575] usb 5-1: USB disconnect, device number 6
[  341.281920][   T59] Bluetooth: hci5: command tx timeout
[  342.223590][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.762268][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'.
[  343.221424][   T59] Bluetooth: hci3: unexpected event for opcode 0x0404
[  343.361924][   T59] Bluetooth: hci5: command tx timeout
[  343.724874][ T7962] net_ratelimit: 48 callbacks suppressed
[  343.724907][ T7962] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  345.330283][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.377055][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.377386][ T7804] bridge_slave_0: entered allmulticast mode
[  345.380584][ T7804] bridge_slave_0: entered promiscuous mode
[  345.433290][   T59] Bluetooth: hci5: command tx timeout
[  345.436768][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.436899][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.437148][ T7804] bridge_slave_1: entered allmulticast mode
[  345.473447][ T7804] bridge_slave_1: entered promiscuous mode
[  345.565343][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.569725][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.733838][ T7804] team0: Port device team_slave_0 added
[  345.854782][   T13] bridge_slave_1: left allmulticast mode
[  345.854820][   T13] bridge_slave_1: left promiscuous mode
[  345.861360][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.023221][   T13] bridge_slave_0: left allmulticast mode
[  346.023250][   T13] bridge_slave_0: left promiscuous mode
[  346.023560][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.073109][ T5722] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  346.266277][ T5722] usb 5-1: unable to get BOS descriptor or descriptor too short
[  346.266345][ T5722] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  346.267882][ T5722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  346.267911][ T5722] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  346.328181][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.328213][ T5722] usb 5-1: Product: syz
[  346.328229][ T5722] usb 5-1: Manufacturer: syz
[  346.328244][ T5722] usb 5-1: SerialNumber: syz
[  347.561213][ T5722] usb 5-1: selecting invalid altsetting 1
[  347.615528][ T5722] usb 5-1: unit 6 not found!
[  347.877724][ T5722] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  348.287595][ T5722] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  348.307573][ T5722] usb 5-1: USB disconnect, device number 7
[  348.350843][ T8034] udevd[8034]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  348.533078][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.653493][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.766280][   T13] bond0 (unregistering): Released all slaves
[  348.821566][ T7804] team0: Port device team_slave_1 added
[  349.131991][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  349.132204][ T8029] netlink: 30 bytes leftover after parsing attributes in process `syz.2.633'.
[  349.707369][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.707383][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.707403][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.968409][   T13] hsr_slave_0: left promiscuous mode
[  350.006251][   T13] hsr_slave_1: left promiscuous mode
[  350.007352][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.070649][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.935508][ T8081] 9p: Bad value for 'rfdno'
[  351.123315][   T13] team0 (unregistering): Port device team_slave_1 removed
[  351.222888][   T13] team0 (unregistering): Port device team_slave_0 removed
[  351.523461][ T8094] netlink: 'syz.4.659': attribute type 1 has an invalid length.
[  351.523487][ T8094] netlink: 240 bytes leftover after parsing attributes in process `syz.4.659'.
[  351.523505][ T8094] netlink: 'syz.4.659': attribute type 1 has an invalid length.
[  351.735869][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.735882][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.735902][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.197399][ T7804] hsr_slave_0: entered promiscuous mode
[  352.198839][ T7804] hsr_slave_1: entered promiscuous mode
[  352.252279][ T7804] debugfs: 'hsr0' already exists in 'hsr'
[  352.252309][ T7804] Cannot create hsr debugfs directory
[  352.474314][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.672'.
[  352.491924][ T5722] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  352.510817][ T8121] hfs: unable to load iocharset "io#harset"
[  352.662877][ T5722] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  352.664563][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.664598][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.664639][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.717394][ T5722] usb 2-1: config 0 descriptor??
[  353.395204][ T5722] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71
[  353.400024][ T5722] usb 2-1: USB disconnect, device number 8
[  353.676669][ T8150] binder: 8147:8150 ioctl 541b 0 returned -22
[  354.342128][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'.
[  354.930307][ T7804] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  354.983250][ T8182] netlink: 'syz.4.698': attribute type 2 has an invalid length.
[  355.017229][ T7804] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  355.040964][ T7804] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  355.097009][ T7804] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  355.099813][ T7804] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  355.151205][ T7804] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  355.160454][ T7804] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  355.192799][ T7804] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  355.779578][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.873685][ T7804] 8021q: adding VLAN 0 to HW filter on device team0
[  355.918643][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.918735][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.076664][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.076805][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  356.657144][ T8218] netlink: 277 bytes leftover after parsing attributes in process `syz.4.711'.
[  358.002420][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.147221][   T59] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  360.212874][ T7804] veth0_vlan: entered promiscuous mode
[  360.239084][ T7804] veth1_vlan: entered promiscuous mode
[  360.401491][ T7804] veth0_macvtap: entered promiscuous mode
[  360.416377][ T7804] veth1_macvtap: entered promiscuous mode
[  360.467138][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.583442][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.775275][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.775681][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.776071][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.785904][ T5770] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  360.964998][ T5770] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  360.983671][ T5770] usb 2-1: config index 0 descriptor too short (expected 69, got 51)
[  360.983735][ T5770] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9
[  360.983761][ T5770] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 26213, setting to 1024
[  361.036783][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.036813][ T5770] usb 2-1: Product: syz
[  361.036829][ T5770] usb 2-1: Manufacturer: syz
[  361.036845][ T5770] usb 2-1: SerialNumber: syz
[  361.166762][ T5770] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  361.518644][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.596309][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  361.613668][ T5770] usb 2-1: Scarlett Gen 2 USB request result cmd 0 was -32
[  361.613896][ T5770] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  362.254682][ T5770] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  362.305150][ T5770] usb 2-1: USB disconnect, device number 9
[  362.628010][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.628033][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.633553][ T8034] udevd[8034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  363.103726][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.103751][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.917658][ T8343] hpfs: Bad magic ... probably not HPFS
[  365.734422][ T8358] netlink: 'syz.5.761': attribute type 1 has an invalid length.
[  365.734447][ T8358] netlink: 232 bytes leftover after parsing attributes in process `syz.5.761'.
[  365.734464][ T8358] netlink: 'syz.5.761': attribute type 1 has an invalid length.
[  367.109278][ T8387] 9p: Bad value for 'rfdno'
[  367.225193][ T8390] netlink: 132 bytes leftover after parsing attributes in process `syz.3.776'.
[  367.365626][ T8396] 9p: Bad value for 'rfdno'
[  368.195003][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.780'.
[  368.919357][ T8406] hfs: unable to load iocharset "io#harset"
[  369.621887][ T5574] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  369.661580][ T8427] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  369.772885][ T5574] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  369.774756][ T5574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.811893][ T5574] usb 6-1: config 0 descriptor??
[  369.833963][ T5574] cp210x 6-1:0.0: cp210x converter detected
[  370.098037][ T8431] hpfs: Bad magic ... probably not HPFS
[  370.247621][ T5574] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  370.349816][ T5574] usb 6-1: cp210x converter now attached to ttyUSB0
[  370.479281][ T5574] usb 6-1: USB disconnect, device number 2
[  370.659072][ T5574] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  370.885029][ T5574] cp210x 6-1:0.0: device disconnected
[  372.485118][ T8469] fuse: Bad value for 'fd'
[  372.774215][ T8481] block2mtd: illegal erase size
[  372.921869][ T5574] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  373.373844][ T5574] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  373.376969][ T5574] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  373.377057][ T5574] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  373.377087][ T5574] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  373.377129][ T5574] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  373.381618][ T5574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.381647][ T5574] usb 6-1: Product: syz
[  373.381663][ T5574] usb 6-1: Manufacturer: syz
[  373.381678][ T5574] usb 6-1: SerialNumber: syz
[  373.474725][ T8475] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  373.479552][ T5574] cdc_mbim 6-1:1.0: skipping garbage
[  374.315824][ T5574] cdc_mbim 6-1:1.0: bind() failure
[  374.359950][ T5574] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  374.360000][ T5574] cdc_ncm 6-1:1.1: bind() failure
[  374.405543][ T5574] usb 6-1: USB disconnect, device number 3
[  375.896200][ T8531] input: syz1 as /devices/virtual/input/input8
[  377.483454][ T8561] scsi_dev_info_list_add_str: bad dev info string 'n(¤áº~¨1««b£§ªì
[  377.483454][ T8561] Ó«õ|*%Ãü<›m#îžu)n�H)ž2@!ÝÅráƒJäTàëÍ,¬\Q³ëïŽ0g! lò�' '?' ''
[  378.348258][ T8582] 9p: Bad value for 'rfdno'
[  378.811145][ T8598] hpfs: Bad magic ... probably not HPFS
[  378.884158][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  378.884231][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  380.591886][ T5708] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  380.791850][ T5708] usb 2-1: Using ep0 maxpacket: 8
[  380.792827][ T5708] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  380.794580][ T5708] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  380.794620][ T5708] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  380.794663][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  380.794702][ T5708] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  380.794730][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  380.794756][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  380.794784][ T5708] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  380.794813][ T5708] usb 2-1: config 168 interface 0 has no altsetting 0
[  380.798870][ T5708] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  380.798912][ T5708] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  380.798962][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  380.798992][ T5708] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  380.799019][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  380.799046][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  380.799075][ T5708] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  380.799102][ T5708] usb 2-1: config 168 interface 0 has no altsetting 0
[  380.801064][ T5708] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  380.801102][ T5708] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  380.801144][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  380.801173][ T5708] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  380.801198][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  380.801226][ T5708] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  380.801254][ T5708] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  380.801283][ T5708] usb 2-1: config 168 interface 0 has no altsetting 0
[  381.014441][ T5708] usb 2-1: string descriptor 0 read error: -22
[  381.184105][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.614069][ T5708] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  381.639562][ T5708] usb 2-1: USB disconnect, device number 10
[  383.429328][ T8650] 9p: Bad value for 'rfdno'
[  385.691877][ T5597] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  385.862847][ T5597] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  385.866490][ T5597] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  385.866528][ T5597] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  385.866643][ T5597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.941209][ T8693] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  385.956156][ T5597] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  386.866396][ T8724] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  386.871146][ T5709] IPVS: starting estimator thread 0...
[  386.961984][ T8728] IPVS: using max 8 ests per chain, 19200 per kthread
[  387.854882][ T5597] usb 2-1: USB disconnect, device number 11
[  390.924749][ T8823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.951'.
[  390.924785][ T8823] netlink: 43 bytes leftover after parsing attributes in process `syz.1.951'.
[  390.924802][ T8823] netlink: 'syz.1.951': attribute type 5 has an invalid length.
[  390.924815][ T8823] netlink: 43 bytes leftover after parsing attributes in process `syz.1.951'.
[  391.109655][ T8828] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  391.197391][ T6126] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  391.342590][ T6126] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  391.343857][ T6126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  391.343890][ T6126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.343929][ T6126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.361076][ T6126] usb 6-1: config 0 descriptor??
[  391.361858][ T5708] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  391.561963][ T5708] usb 2-1: Using ep0 maxpacket: 8
[  391.562847][ T5708] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  391.564523][ T5708] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[  391.564581][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  391.564611][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  391.564639][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  391.567954][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.567981][ T5708] usb 2-1: Product: syz
[  391.567995][ T5708] usb 2-1: Manufacturer: syz
[  391.568011][ T5708] usb 2-1: SerialNumber: syz
[  391.671930][ T5708] usb 2-1: config 0 descriptor??
[  391.674306][ T8830] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  391.897337][ T5708] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  391.974851][ T5708] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9
[  392.237386][ T6126] usb 6-1: string descriptor 0 read error: -22
[  392.447344][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  392.448232][ T6126] uclogic 0003:256C:006D.0003: interface is invalid, ignoring
[  392.525614][    C0] powermate: config urb returned -71
[  392.534443][    C0] powermate: config urb returned -71
[  392.535157][    C0] powermate: config urb returned -71
[  392.535433][    C0] powermate: config urb returned -71
[  392.586018][ T6126] usb 6-1: USB disconnect, device number 4
[  392.762056][ T5770] usb 2-1: USB disconnect, device number 12
[  392.762075][    C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  393.513637][ T8861] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(17)
[  393.522085][ T6126] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  393.671926][ T6126] usb 6-1: Using ep0 maxpacket: 16
[  393.672780][ T6126] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  393.674275][ T6126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  393.674330][ T6126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  393.674355][ T6126] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  393.734742][ T6126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.734772][ T6126] usb 6-1: Product: syz
[  393.734788][ T6126] usb 6-1: Manufacturer: syz
[  393.734804][ T6126] usb 6-1: SerialNumber: syz
[  393.823413][ T6126] usb 6-1: config 0 descriptor??
[  393.835773][ T6126] mcba_usb 6-1:0.0: Can't find endpoints
[  394.085443][ T6126] usb 6-1: USB disconnect, device number 5
[  395.532196][ T5709] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  395.721897][ T5709] usb 5-1: Using ep0 maxpacket: 32
[  395.723560][ T5709] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00
[  395.726481][ T5709] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  395.726539][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.726568][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  395.726612][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.801787][ T5709] usb 5-1: config 0 descriptor??
[  396.276543][ T5709] hid_parser_main: 4002 callbacks suppressed
[  396.276602][ T5709] saitek 0003:06A3:0CFA.0004: unknown main item tag 0x1
[  396.320893][ T5709] saitek 0003:06A3:0CFA.0004: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.4-1/input0
[  396.392880][ T8934] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  396.481979][ T5709] usb 5-1: USB disconnect, device number 8
[  396.672634][ T8936] fido_id[8936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  397.203745][ T8955] pim6reg1: tun_chr_ioctl cmd 1074025675
[  397.203767][ T8955] pim6reg1: persist disabled
[  397.204179][ T8955] pim6reg1: tun_chr_ioctl cmd 35108
[  397.507619][ T8970] binder: 8969:8970 ioctl c0306201 200000000080 returned -14
[  397.509715][ T8970] binder: 8969:8970 ioctl c0306201 0 returned -14
[  397.705643][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1021'.
[  397.705788][ T8979] bond0: Unable to set down delay as MII monitoring is disabled
[  398.185992][ T8982] block nbd1: NBD_DISCONNECT
[  399.639437][ T8974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.803385][ T8983] hfs: unable to load iocharset "io#harset"
[  399.881914][ T5770] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  400.034461][ T5770] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  400.042148][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.042177][ T5770] usb 5-1: Product: syz
[  400.042194][ T5770] usb 5-1: Manufacturer: syz
[  400.042209][ T5770] usb 5-1: SerialNumber: syz
[  400.102563][ T5770] usb 5-1: config 0 descriptor??
[  400.849670][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  401.147634][ T9025] netlink: 'syz.3.1035': attribute type 10 has an invalid length.
[  401.147658][ T9025] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1035'.
[  401.172386][ T5770] usb 5-1: non-Atmel transceiver xxxx511f
[  401.378370][ T5770] usb 5-1: Firmware version (0.0) predates our first public release.
[  401.378400][ T5770] usb 5-1: Please update to version 0.2 or newer
[  401.379009][ T5770] usb 5-1: atusb_probe: initialization failed, error = -19
[  401.447714][ T5770] usb 5-1: USB disconnect, device number 9
[  401.552023][ T6126] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  401.712849][ T6126] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  401.714724][ T6126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.714750][ T6126] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  401.719041][ T6126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  401.719068][ T6126] usb 2-1: SerialNumber: syz
[  401.868649][ T9033] hfs: unable to load iocharset "io#harset"
[  403.125454][ T6126] usb 2-1: 0:2 : does not exist
[  403.627385][ T9059] fuse: Bad value for 'fd'
[  403.698056][ T6126] usb 2-1: USB disconnect, device number 13
[  403.772086][ T9064] netlink: 'syz.1.1050': attribute type 6 has an invalid length.
[  404.108757][ T8996] udevd[8996]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  406.682320][ T9074] hfs: unable to load iocharset "io#harset"
[  410.653192][ T9133] hfs: unable to load iocharset "io#harset"
[  411.524439][ T9160] netlink: 'syz.3.1079': attribute type 1 has an invalid length.
[  411.562547][   T37] audit: type=1326 audit(1786564863.097:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.562881][   T37] audit: type=1326 audit(1786564863.107:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.654818][   T37] audit: type=1326 audit(1786564863.127:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.654877][   T37] audit: type=1326 audit(1786564863.197:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.654925][   T37] audit: type=1326 audit(1786564863.197:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.654974][   T37] audit: type=1326 audit(1786564863.197:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.655022][   T37] audit: type=1326 audit(1786564863.197:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.655070][   T37] audit: type=1326 audit(1786564863.197:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.656674][   T37] audit: type=1326 audit(1786564863.197:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  411.656743][   T37] audit: type=1326 audit(1786564863.197:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1080" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ccd4e0d9 code=0x7ffc0000
[  412.363747][ T9160] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  414.772468][ T9173] veth3: entered allmulticast mode
[  415.301028][ T9177] hfs: unable to load iocharset "io#harset"
[  415.765440][ T9178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1085'.
[  417.673303][   T37] kauditd_printk_skb: 11 callbacks suppressed
[  417.673325][   T37] audit: type=1326 audit(1786564869.207:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.680334][   T37] audit: type=1326 audit(1786564869.217:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.689559][   T37] audit: type=1326 audit(1786564869.227:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.691009][   T37] audit: type=1326 audit(1786564869.227:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.691856][   T37] audit: type=1326 audit(1786564869.227:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.763832][   T37] audit: type=1326 audit(1786564869.307:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.763985][   T37] audit: type=1326 audit(1786564869.307:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.764300][   T37] audit: type=1326 audit(1786564869.307:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.767953][   T37] audit: type=1326 audit(1786564869.307:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.768016][   T37] audit: type=1326 audit(1786564869.307:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9202 comm="syz.2.1093" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f21de0d9 code=0x7ffc0000
[  417.854581][    C0] wlan0: beacon TX faster than countdown (channel/color switch) completion
[  420.395720][ T9269] hfs: unable to load iocharset "io#harset"
[  420.963512][ T5590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  421.005118][ T5590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  421.008391][ T5590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  421.060401][ T5590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  421.069624][ T5590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  421.590013][ T5590] Bluetooth: hci1: unexpected event for opcode 0x2002
[  421.725358][ T1171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.882738][ T5708] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  422.031863][ T5708] usb 2-1: Using ep0 maxpacket: 32
[  422.033171][ T5708] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  422.067288][ T5708] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  422.067320][ T5708] usb 2-1: config 0 has no interface number 0
[  422.101016][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.101048][ T5708] usb 2-1: Product: syz
[  422.101064][ T5708] usb 2-1: Manufacturer: syz
[  422.101080][ T5708] usb 2-1: SerialNumber: syz
[  422.150987][ T5708] usb 2-1: config 0 descriptor??
[  422.161606][ T5708] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  422.376346][ T9296] hfs: unable to load iocharset "io#harset"
[  422.464554][ T5708] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  422.506940][ T5708] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  422.687922][ T9272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1121'.
[  422.703703][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1129'.
[  422.876108][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  422.876992][ T5708] usb 2-1: USB disconnect, device number 14
[  422.966183][ T5708] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  423.065354][ T5708] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  423.090791][ T5708] quatech2 2-1:0.51: device disconnected
[  423.191998][ T5590] Bluetooth: hci4: command tx timeout
[  424.797943][ T1171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.271843][ T5590] Bluetooth: hci4: command tx timeout
[  425.521960][ T1171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.040555][ T9351] uprobe: syz.2.1144:9351 failed to unregister, leaking uprobe
[  426.066937][ T9351] uprobe: syz.2.1144:9351 failed to unregister, leaking uprobe
[  426.246087][ T9360] netlink: 'syz.3.1147': attribute type 1 has an invalid length.
[  426.363882][ T1171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.820571][ T9360] 8021q: adding VLAN 0 to HW filter on device bond1
[  426.998940][ T9362] bond1: (slave gretap1): making interface the new active one
[  427.022959][ T9362] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  427.580608][ T5590] Bluetooth: hci4: command tx timeout
[  427.707250][ T9365] bond0: (slave dummy0): Releasing backup interface
[  427.782891][ T9365] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  429.681875][ T5590] Bluetooth: hci4: command tx timeout
[  429.865134][ T9415] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  431.690725][ T5590] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  432.606367][ T9445] netlink: 'syz.3.1173': attribute type 4 has an invalid length.
[  432.806657][ T9447] netlink: 'syz.3.1173': attribute type 4 has an invalid length.
[  433.222451][ T9276] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.222598][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.222845][ T9276] bridge_slave_0: entered allmulticast mode
[  433.228301][ T9276] bridge_slave_0: entered promiscuous mode
[  433.415931][ T9276] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.416225][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.416473][ T9276] bridge_slave_1: entered allmulticast mode
[  433.806710][ T9276] bridge_slave_1: entered promiscuous mode
[  434.642597][ T1171] bridge_slave_1: left allmulticast mode
[  434.642634][ T1171] bridge_slave_1: left promiscuous mode
[  434.645534][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.871490][ T1171] bridge_slave_0: left allmulticast mode
[  434.871530][ T1171] bridge_slave_0: left promiscuous mode
[  434.872189][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.822408][ T9481] netlink: 'syz.1.1186': attribute type 11 has an invalid length.
[  438.034161][ T9493] netlink: 'syz.2.1190': attribute type 16 has an invalid length.
[  438.406863][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'.
[  438.514923][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  438.662821][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  438.707605][ T1171] bond0 (unregistering): Released all slaves
[  439.777370][ T9509] syz.2.1194 (9509) used greatest stack depth: 18336 bytes left
[  440.413106][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  440.413184][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  440.681993][ T5590] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15
[  440.682043][ T5590] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  441.260116][ T9276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.276619][ T9562] uprobe: syz.2.1205:9562 failed to unregister, leaking uprobe
[  444.421959][ T9276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.424883][ T9552] syzkaller0: entered promiscuous mode
[  444.424912][ T9552] syzkaller0: entered allmulticast mode
[  444.925504][ T9562] uprobe: syz.2.1205:9562 failed to unregister, leaking uprobe
[  446.472775][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5
[  446.665445][ T9276] team0: Port device team_slave_0 added
[  446.711120][ T9276] team0: Port device team_slave_1 added
[  447.109590][ T9276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.109609][ T9276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.109638][ T9276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.165450][ T9276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.165468][ T9276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.165499][ T9276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.623963][ T9276] hsr_slave_0: entered promiscuous mode
[  449.624978][ T9276] hsr_slave_1: entered promiscuous mode
[  449.630595][ T9276] debugfs: 'hsr0' already exists in 'hsr'
[  449.630625][ T9276] Cannot create hsr debugfs directory
[  460.420570][ T1171] hsr_slave_0: left promiscuous mode
[  460.764941][ T1171] hsr_slave_1: left promiscuous mode
[  460.766078][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.766106][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.791177][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  461.791209][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1
[  465.476369][ T1171] veth1_macvtap: left promiscuous mode
[  465.476470][ T1171] veth0_macvtap: left promiscuous mode
[  465.476748][ T1171] veth1_vlan: left promiscuous mode
[  465.476945][ T1171] veth0_vlan: left promiscuous mode
[  466.262242][   T37] kauditd_printk_skb: 23 callbacks suppressed
[  466.262264][   T37] audit: type=1804 audit(1786564917.077:58): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1237" name="file1" dev="ramfs" ino=24993 res=1 errno=0
[  467.157277][   T37] audit: type=1800 audit(1786564918.667:59): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1237" name="file1" dev="ramfs" ino=24993 res=0 errno=0
[  467.284329][   T37] audit: type=1800 audit(1786564918.787:60): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1237" name="file1" dev="ramfs" ino=24993 res=0 errno=0
[  467.937009][ T9714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1243'.
[  470.284241][ T9725] ceph: No mds server is up or the cluster is laggy
[  470.323624][    T9] libceph: connect (1)[c::]:6789 error -101
[  470.406511][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  473.506805][ T1171] team0 (unregistering): Port device team_slave_1 removed
[  473.583288][ T1171] team0 (unregistering): Port device team_slave_0 removed
[  473.982323][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6
[  476.294178][ T9761] hfs: unable to load iocharset "io#harset"
[  476.642289][ T9763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1254'.
[  478.228410][   T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  478.309141][   T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  478.321168][   T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  478.337947][   T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  478.353033][   T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  480.230329][ T9797] overlayfs: failed to clone lowerpath
[  480.908200][   T59] Bluetooth: hci5: command tx timeout
[  483.759039][   T59] Bluetooth: hci5: command tx timeout
[  485.887278][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'.
[  485.911933][   T59] Bluetooth: hci5: command tx timeout
[  486.161713][ T9815] hfs: unable to load iocharset "io#harset"
[  486.370989][ T5590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  486.411500][ T5590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  486.416771][ T5590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  486.434896][ T5590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  486.435988][ T5590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  487.126315][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7
[  487.991966][ T5590] Bluetooth: hci5: command tx timeout
[  488.717667][ T5590] Bluetooth: hci6: command tx timeout
[  490.791930][ T5590] Bluetooth: hci6: command tx timeout
[  492.871991][ T5590] Bluetooth: hci6: command tx timeout
[  494.548862][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8
[  494.951798][ T5590] Bluetooth: hci6: command tx timeout
[  496.302023][ T9777] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.302224][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.302485][ T9777] bridge_slave_0: entered allmulticast mode
[  496.305820][ T9777] bridge_slave_0: entered promiscuous mode
[  496.594660][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.594792][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.595042][ T9777] bridge_slave_1: entered allmulticast mode
[  496.647943][ T9777] bridge_slave_1: entered promiscuous mode
[  497.273194][ T9890] overlayfs: failed to clone upperpath
[  499.843962][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  499.910374][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  499.912303][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  499.954960][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  499.970780][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  501.546408][ T9777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.814686][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  501.814764][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  501.956301][ T9777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.170463][   T59] Bluetooth: hci1: command tx timeout
[  504.534082][   T59] Bluetooth: hci1: command tx timeout
[  504.893087][ T9777] team0: Port device team_slave_0 added
[  505.065548][ T9777] team0: Port device team_slave_1 added
[  505.917452][ T9945] mmap: syz.3.1286 (9945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  507.148607][   T59] Bluetooth: hci1: command tx timeout
[  507.299407][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.299423][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.299449][ T9777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.698488][ T9950] netlink: 'syz.2.1288': attribute type 1 has an invalid length.
[  507.824267][ T9950] bridge0: port 3(vlan2) entered blocking state
[  507.824431][ T9950] bridge0: port 3(vlan2) entered forwarding state
[  507.934272][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.934463][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.960044][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.960062][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.960094][ T9777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.735872][ T9954] syz.2.1289 (9954) used greatest stack depth: 17472 bytes left
[  509.193415][   T59] Bluetooth: hci1: command tx timeout
[  513.517321][ T9777] hsr_slave_0: entered promiscuous mode
[  513.518965][ T9777] hsr_slave_1: entered promiscuous mode
[  513.521528][ T9777] debugfs: 'hsr0' already exists in 'hsr'
[  513.521557][ T9777] Cannot create hsr debugfs directory
[  519.391973][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.392224][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.392484][ T9819] bridge_slave_0: entered allmulticast mode
[  519.444238][ T9819] bridge_slave_0: entered promiscuous mode
[  520.095514][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.095643][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.095917][ T9819] bridge_slave_1: entered allmulticast mode
[  520.517525][ T9819] bridge_slave_1: entered promiscuous mode
[  523.934151][ T9819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.286214][ T9819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.801010][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'.
[  527.847645][ T9819] team0: Port device team_slave_0 added
[  527.977080][ T9819] team0: Port device team_slave_1 added
[  529.666797][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.666810][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  529.666832][ T9819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.707866][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.707887][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.707920][ T9819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.903512][ T9819] hsr_slave_0: entered promiscuous mode
[  537.905442][ T9819] hsr_slave_1: entered promiscuous mode
[  537.908822][ T9819] debugfs: 'hsr0' already exists in 'hsr'
[  537.908850][ T9819] Cannot create hsr debugfs directory
[  539.859760][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  539.960513][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  539.970092][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.186590][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  540.255983][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.256302][ T9898] bridge_slave_0: entered allmulticast mode
[  540.258475][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  540.259467][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  540.309870][ T9898] bridge_slave_0: entered promiscuous mode
[  541.939064][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.939207][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.939488][ T9898] bridge_slave_1: entered allmulticast mode
[  541.946116][ T9898] bridge_slave_1: entered promiscuous mode
[  542.570541][ T5590] Bluetooth: hci2: command tx timeout
[  544.284389][T10159] overlayfs: failed to clone upperpath
[  544.735299][   T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  544.863710][   T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  544.866137][   T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  544.878531][   T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  544.879432][   T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  545.356220][   T59] Bluetooth: hci2: command tx timeout
[  545.694107][ T9898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.698769][ T9898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.905161][ T9898] team0: Port device team_slave_0 added
[  547.432112][ T5590] Bluetooth: hci4: command tx timeout
[  547.432760][ T5590] Bluetooth: hci2: command tx timeout
[  549.104920][ T9898] team0: Port device team_slave_1 added
[  550.224624][   T59] Bluetooth: hci2: command tx timeout
[  550.224661][   T59] Bluetooth: hci4: command tx timeout
[  550.280840][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.287128][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.287168][ T9898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.636745][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.636764][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.636794][ T9898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.737091][T10195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1325'.
[  550.826224][ T9898] hsr_slave_0: entered promiscuous mode
[  550.827728][ T9898] hsr_slave_1: entered promiscuous mode
[  550.828819][ T9898] debugfs: 'hsr0' already exists in 'hsr'
[  550.828846][ T9898] Cannot create hsr debugfs directory
[  552.338521][ T5590] Bluetooth: hci4: command tx timeout
[  554.781232][ T5590] Bluetooth: hci4: command tx timeout
[  557.974120][T10247] netlink: 'syz.3.1332': attribute type 30 has an invalid length.
[  560.504312][T10263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1336'.
[  560.560530][   T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  560.626769][   T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  560.635171][T10265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1337'.
[  560.725958][   T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  560.754426][   T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  560.755418][   T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  563.045763][ T5590] Bluetooth: hci5: command tx timeout
[  563.417173][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  563.417250][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  565.988100][ T5590] Bluetooth: hci5: command tx timeout
[  568.240775][ T5590] Bluetooth: hci5: command tx timeout
[  571.496103][ T5590] Bluetooth: hci5: command tx timeout
[  573.427840][T10130] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.428093][T10130] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.428387][T10130] bridge_slave_0: entered allmulticast mode
[  573.431273][T10130] bridge_slave_0: entered promiscuous mode
[  573.534732][T10130] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.534831][T10130] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.535023][T10130] bridge_slave_1: entered allmulticast mode
[  573.537319][T10130] bridge_slave_1: entered promiscuous mode
[  573.784435][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1350'.
[  575.949959][T10361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1353'.
[  578.084231][T10130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.328125][T10130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.889359][T10153] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.889495][T10153] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.889737][T10153] bridge_slave_0: entered allmulticast mode
[  578.920494][T10153] bridge_slave_0: entered promiscuous mode
[  579.146976][T10153] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.147090][T10153] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.147672][T10153] bridge_slave_1: entered allmulticast mode
[  579.150697][T10153] bridge_slave_1: entered promiscuous mode
[  579.245641][T10130] team0: Port device team_slave_0 added
[  579.408390][T10130] team0: Port device team_slave_1 added
[  579.903993][T10153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.939284][T10267] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.939426][T10267] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.939743][T10267] bridge_slave_0: entered allmulticast mode
[  580.016016][T10267] bridge_slave_0: entered promiscuous mode
[  580.072048][T10153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.072482][T10267] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.072622][T10267] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.072845][T10267] bridge_slave_1: entered allmulticast mode
[  580.102091][T10267] bridge_slave_1: entered promiscuous mode
[  580.131867][T10130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.131885][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.131916][T10130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.304696][T10130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.304711][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.304739][T10130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.308382][T10153] team0: Port device team_slave_0 added
[  580.364761][T10267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.426343][T10153] team0: Port device team_slave_1 added
[  580.880775][T10267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.382600][T10153] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.382619][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.382668][T10153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.449294][T10267] team0: Port device team_slave_0 added
[  581.450293][T10153] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.450309][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.450339][T10153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.595005][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1356'.
[  582.181261][T10267] team0: Port device team_slave_1 added
[  582.272502][T10130] hsr_slave_0: entered promiscuous mode
[  582.281577][T10130] hsr_slave_1: entered promiscuous mode
[  582.291968][T10130] debugfs: 'hsr0' already exists in 'hsr'
[  582.292013][T10130] Cannot create hsr debugfs directory
[  583.279672][T10267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.279693][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.279725][T10267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  583.373954][T10153] hsr_slave_0: entered promiscuous mode
[  583.376508][T10153] hsr_slave_1: entered promiscuous mode
[  583.377590][T10153] debugfs: 'hsr0' already exists in 'hsr'
[  583.377617][T10153] Cannot create hsr debugfs directory
[  583.520111][T10267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.520130][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.520160][T10267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.739712][T10384] hfs: unable to load iocharset "io#harset"
[  583.770310][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1358'.
[  585.579298][T10267] hsr_slave_0: entered promiscuous mode
[  585.587749][T10267] hsr_slave_1: entered promiscuous mode
[  585.593550][T10267] debugfs: 'hsr0' already exists in 'hsr'
[  585.593582][T10267] Cannot create hsr debugfs directory
[  587.720779][T10400] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1362'.
[  591.401156][T10414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1365'.
[  593.376746][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1367'.
[  593.465536][T10420] hfs: unable to load iocharset "io#harset"
[  599.196691][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  600.286648][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  600.294718][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  600.298577][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  600.299406][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  601.144949][T10467] overlayfs: failed to clone lowerpath
[  602.438639][T10479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1378'.
[  602.995153][   T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  603.149786][   T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  603.230607][   T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  603.272121][   T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  603.272999][   T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  603.671759][ T5590] Bluetooth: hci1: command tx timeout
[  603.716667][T10493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1380'.
[  605.581802][ T5590] Bluetooth: hci6: command tx timeout
[  605.751967][ T5590] Bluetooth: hci1: command tx timeout
[  606.178968][T10454] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.180671][T10454] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.181395][T10454] bridge_slave_0: entered allmulticast mode
[  606.206400][T10454] bridge_slave_0: entered promiscuous mode
[  606.235808][T10454] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.236081][T10454] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.236485][T10454] bridge_slave_1: entered allmulticast mode
[  606.274863][T10454] bridge_slave_1: entered promiscuous mode
[  606.446030][T10454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.484747][T10454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.629208][T10454] team0: Port device team_slave_0 added
[  606.666913][T10454] team0: Port device team_slave_1 added
[  606.925939][T10454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.925960][T10454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.925992][T10454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  607.672093][ T5590] Bluetooth: hci6: command tx timeout
[  607.840385][ T5590] Bluetooth: hci1: command tx timeout
[  608.749841][T10454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.749861][T10454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.749893][T10454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.583845][T10454] hsr_slave_0: entered promiscuous mode
[  609.585823][T10454] hsr_slave_1: entered promiscuous mode
[  609.588724][T10454] debugfs: 'hsr0' already exists in 'hsr'
[  609.588752][T10454] Cannot create hsr debugfs directory
[  609.742468][T10526] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1385'.
[  609.753102][ T5590] Bluetooth: hci6: command tx timeout
[  609.912268][   T59] Bluetooth: hci1: command tx timeout
[  610.523247][T10536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1386'.
[  612.090294][ T5590] Bluetooth: hci6: command tx timeout
[  612.650292][T10482] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.663052][T10482] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.663357][T10482] bridge_slave_0: entered allmulticast mode
[  612.687081][T10482] bridge_slave_0: entered promiscuous mode
[  612.728619][T10482] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.728754][T10482] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.729080][T10482] bridge_slave_1: entered allmulticast mode
[  612.755164][T10482] bridge_slave_1: entered promiscuous mode
[  612.955661][T10482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  612.960212][T10482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  613.035351][T10482] team0: Port device team_slave_0 added
[  613.039221][T10482] team0: Port device team_slave_1 added
[  613.538977][T10551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1389'.
[  614.553056][ T5590] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  615.312619][T10482] batman_adv: batadv0: Adding interface: batadv_slave_0
[  615.312640][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  615.312672][T10482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  615.319984][T10482] batman_adv: batadv0: Adding interface: batadv_slave_1
[  615.320002][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  615.320031][T10482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  615.606280][T10482] hsr_slave_0: entered promiscuous mode
[  615.622456][T10482] hsr_slave_1: entered promiscuous mode
[  615.624593][T10482] debugfs: 'hsr0' already exists in 'hsr'
[  615.624624][T10482] Cannot create hsr debugfs directory
[  620.749821][   T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  620.803441][   T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  620.805316][   T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  620.832224][   T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  620.849857][   T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  623.161856][   T59] Bluetooth: hci7: command tx timeout
[  623.540064][T10607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1397'.
[  624.161006][T10583] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.170556][T10583] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.171019][T10583] bridge_slave_0: entered allmulticast mode
[  624.208425][T10583] bridge_slave_0: entered promiscuous mode
[  624.219166][T10583] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.219416][T10583] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.219751][T10583] bridge_slave_1: entered allmulticast mode
[  624.272719][T10583] bridge_slave_1: entered promiscuous mode
[  624.389374][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  624.416895][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  625.500309][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  625.500477][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  625.522113][   T59] Bluetooth: hci7: command tx timeout
[  625.974589][T10583] team0: Port device team_slave_0 added
[  625.979360][T10583] team0: Port device team_slave_1 added
[  626.060889][T10583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  626.060909][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  626.060941][T10583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  626.124806][T10583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  626.124825][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  626.124858][T10583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  627.291970][T10583] hsr_slave_0: entered promiscuous mode
[  627.293722][T10583] hsr_slave_1: entered promiscuous mode
[  627.294973][T10583] debugfs: 'hsr0' already exists in 'hsr'
[  627.295000][T10583] Cannot create hsr debugfs directory
[  627.592884][   T59] Bluetooth: hci7: command tx timeout
[  628.408793][T10626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1401'.
[  629.403277][T10635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1403'.
[  629.672639][   T59] Bluetooth: hci7: command tx timeout
[  634.096724][T10654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1408'.
[  635.468412][T10660] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1409'.
[  637.124947][T10670] overlayfs: failed to clone lowerpath
[  645.152141][T10713] overlayfs: failed to clone lowerpath
[  645.824377][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1425'.
[  651.513856][T10749] overlayfs: failed to clone lowerpath
[  663.949282][T10762] netlink: 'syz.2.1438': attribute type 10 has an invalid length.
[  666.471507][T10771] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  666.770696][T10771] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  666.965724][T10771] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  667.159255][T10771] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  667.230945][T10771] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  667.474340][T10771] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  667.510294][T10771] Bluetooth: hci2: command 0x0406 tx timeout
[  667.564110][T10771] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  667.595196][T10771] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  667.640732][T10771] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  667.652015][T10771] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  667.671981][T10771] Bluetooth: hci4: command 0x0406 tx timeout
[  669.467544][T10794] overlayfs: failed to clone lowerpath
[  673.911515][T10820] overlayfs: failed to clone lowerpath
[  673.991831][   T59] Bluetooth: hci8: command tx timeout
[  674.012831][   T59] Bluetooth: hci9: command tx timeout
[  676.071865][   T59] Bluetooth: hci9: command tx timeout
[  676.071914][   T59] Bluetooth: hci8: command tx timeout
[  677.146972][T10770] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.147174][T10770] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.147499][T10770] bridge_slave_0: entered allmulticast mode
[  677.175684][T10770] bridge_slave_0: entered promiscuous mode
[  677.755736][T10770] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.755885][T10770] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.756229][T10770] bridge_slave_1: entered allmulticast mode
[  678.153474][T10770] bridge_slave_1: entered promiscuous mode
[  678.575785][T10763] Bluetooth: hci8: command tx timeout
[  678.575824][T10763] Bluetooth: hci9: command tx timeout
[  680.279864][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1453'.
[  680.399248][T10770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.506973][T10770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.632126][   T59] Bluetooth: hci9: command tx timeout
[  680.632162][   T59] Bluetooth: hci8: command tx timeout
[  681.106913][T10774] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.107996][T10774] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.108322][T10774] bridge_slave_0: entered allmulticast mode
[  681.178039][T10774] bridge_slave_0: entered promiscuous mode
[  681.365066][T10770] team0: Port device team_slave_0 added
[  681.366721][T10774] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.366853][T10774] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.367191][T10774] bridge_slave_1: entered allmulticast mode
[  681.410618][T10774] bridge_slave_1: entered promiscuous mode
[  682.198276][ T5590] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  682.277781][ T5590] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  682.311391][ T5590] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  682.332027][ T5590] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  682.334592][ T5590] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  683.043962][T10763] Bluetooth: hci5: command 0x0406 tx timeout
[  683.588686][T10770] team0: Port device team_slave_1 added
[  684.244279][T10774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  684.266931][T10770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.266951][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.266982][T10770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.361122][T10774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  684.378214][T10770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.378235][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.378268][T10770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  684.829015][ T5590] Bluetooth: hci10: command tx timeout
[  684.946533][T10774] team0: Port device team_slave_0 added
[  686.122183][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  686.122245][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  686.872049][   T59] Bluetooth: hci10: command tx timeout
[  689.125269][   T59] Bluetooth: hci10: command tx timeout
[  689.712122][T10774] team0: Port device team_slave_1 added
[  690.085909][T10770] hsr_slave_0: entered promiscuous mode
[  690.103429][T10770] hsr_slave_1: entered promiscuous mode
[  690.121147][T10770] debugfs: 'hsr0' already exists in 'hsr'
[  690.121178][T10770] Cannot create hsr debugfs directory
[  690.434810][T10774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  690.434829][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.434862][T10774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  690.626236][T10774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.626255][T10774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  690.626286][T10774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  691.253869][   T59] Bluetooth: hci10: command tx timeout
[  692.273513][T10898] overlayfs: failed to clone lowerpath
[  692.486287][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1460'.
[  692.753830][T10774] hsr_slave_0: entered promiscuous mode
[  692.770834][T10774] hsr_slave_1: entered promiscuous mode
[  692.784601][T10774] debugfs: 'hsr0' already exists in 'hsr'
[  692.784634][T10774] Cannot create hsr debugfs directory
[  698.114996][T10930] netlink: 'syz.2.1467': attribute type 10 has an invalid length.
[  699.451132][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1469'.
[  700.300555][T10864] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.300793][T10864] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.301141][T10864] bridge_slave_0: entered allmulticast mode
[  700.340612][T10864] bridge_slave_0: entered promiscuous mode
[  700.389091][T10864] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.389226][T10864] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.389576][T10864] bridge_slave_1: entered allmulticast mode
[  700.426659][T10864] bridge_slave_1: entered promiscuous mode
[  700.630990][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  700.714137][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  702.689341][T10956] overlayfs: failed to clone lowerpath
[  703.393234][T10864] team0: Port device team_slave_0 added
[  703.409183][T10864] team0: Port device team_slave_1 added
[  703.518241][T10967] netlink: 'syz.3.1478': attribute type 10 has an invalid length.
[  704.546272][T10967] bond1: (slave dummy0): Releasing active interface
[  704.615213][T10967] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  707.477182][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  707.477197][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.477239][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  707.545785][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  707.545806][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.545838][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  708.060757][T10864] hsr_slave_0: entered promiscuous mode
[  708.076539][T10864] hsr_slave_1: entered promiscuous mode
[  708.095406][T10864] debugfs: 'hsr0' already exists in 'hsr'
[  708.095438][T10864] Cannot create hsr debugfs directory
[  708.276759][T10982] netlink: 'syz.3.1482': attribute type 10 has an invalid length.
[  715.683334][ T1171] IPVS: stop unused estimator thread 0...
[  718.071010][T11035] netlink: 'syz.3.1498': attribute type 10 has an invalid length.
[  724.153138][   T59] Bluetooth: hci1: command 0x0406 tx timeout
[  724.213228][T10763] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  724.266010][T10763] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  724.317969][T10763] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  724.334064][T10763] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  724.358485][T10763] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  726.968830][ T5590] Bluetooth: hci11: command tx timeout
[  728.296178][T10763] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  728.666806][T10763] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  728.734965][T10763] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  728.756211][T10763] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  728.758663][T10763] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  729.033156][   T59] Bluetooth: hci11: command tx timeout
[  729.591986][   T59] Bluetooth: hci6: command 0x0406 tx timeout
[  730.795783][T11090] hfs: unable to load iocharset "io#harset"
[  731.031793][   T59] Bluetooth: hci12: command tx timeout
[  731.112138][   T59] Bluetooth: hci11: command tx timeout
[  731.967819][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1507'.
[  733.066289][T11048] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.070257][T11048] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.074850][T11048] bridge_slave_0: entered allmulticast mode
[  733.111728][ T5590] Bluetooth: hci12: command tx timeout
[  733.112962][T11048] bridge_slave_0: entered promiscuous mode
[  733.148295][T11048] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.148384][T11048] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.148638][T11048] bridge_slave_1: entered allmulticast mode
[  733.175612][T11048] bridge_slave_1: entered promiscuous mode
[  733.191776][ T5590] Bluetooth: hci11: command tx timeout
[  733.459304][T11048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.570936][T11048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  735.192806][ T5590] Bluetooth: hci12: command tx timeout
[  736.417930][T11048] team0: Port device team_slave_0 added
[  736.468448][T11048] team0: Port device team_slave_1 added
[  736.604762][T11122] netlink: 'syz.3.1515': attribute type 10 has an invalid length.
[  736.706136][T11048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  736.706161][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.706185][T11048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  736.759352][T11048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  736.759372][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  736.759404][T11048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  737.224894][T11048] hsr_slave_0: entered promiscuous mode
[  737.229720][T11048] hsr_slave_1: entered promiscuous mode
[  737.231017][T11048] debugfs: 'hsr0' already exists in 'hsr'
[  737.231046][T11048] Cannot create hsr debugfs directory
[  737.272319][ T5590] Bluetooth: hci12: command tx timeout
[  738.177053][T11126] hfs: unable to load iocharset "io#harset"
[  739.678540][T11130] hfs: unable to load iocharset "io#harset"
[  739.857499][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1516'.
[  743.790380][T10763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  743.887245][T10763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  743.906691][T10763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  743.941806][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1517'.
[  743.946619][T10763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  743.949312][T10763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  745.534748][T10763] Bluetooth: hci7: command 0x0406 tx timeout
[  746.071876][T10763] Bluetooth: hci2: command tx timeout
[  747.699986][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[  747.700048][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[  748.153163][   T59] Bluetooth: hci2: command tx timeout
[  749.431924][   T38] INFO: task syz-executor:10267 blocked for more than 143 seconds.
[  749.431957][   T38]       Tainted: G             L      syzkaller #0
[  749.431978][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  749.431990][   T38] task:syz-executor    state:D stack:18688 pid:10267 tgid:10267 ppid:1      task_flags:0x40[  749.431990][   T38] task:syz-executor    state:D stack:18688 pid:10267 tgid:10267 ppid:1      task_flags:0x400140 flags:0x00080002
[  749.432069][   T38] Call Trace:
[  749.432155][   T38]  <TASK>
[  749.432229][   T38]  __schedule+0x16dc/0x5500
[  749.432429][   T38]  ? __pfx___schedule+0x10/0x10
[  749.432504][   T38]  rt_mutex_schedule+0x76/0xf0
[  749.432623][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[  749.432667][   T38]  rt_mutex_slowlock+0x2d4/0x780
[  749.432696][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[  749.432723][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  749.432761][   T38]  ? del_device_store+0xd6/0x370
[  749.432886][   T38]  ? del_device_store+0xd6/0x370
[  749.432926][   T38]  ? del_device_store+0xd6/0x370
[  749.432958][   T38]  mutex_lock_nested+0x168/0x1d0
[  749.432989][   T38]  ? sysfs_file_kobj+0x1a/0x230
[  749.433111][   T38]  del_device_store+0xd6/0x370
[  749.433147][   T38]  ? sysfs_file_kobj+0x1a/0x230
[  749.433179][   T38]  ? __pfx_del_device_store+0x10/0x10
[  749.433213][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[  749.433248][   T38]  ? sysfs_kf_write+0x166/0x260
[  749.433287][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[  749.433318][   T38]  kernfs_fop_write_iter+0x3a5/0x540
[  749.433355][   T38]  vfs_write+0x61e/0xbb0
[  749.433465][   T38]  ? __pfx_vfs_write+0x10/0x10
[  749.433497][   T38]  ? do_sys_openat2+0x14e/0x200
[  749.433529][   T38]  ? kmem_cache_free+0x187/0x6c0
[  749.433703][   T38]  ksys_write+0x156/0x270
[  749.433735][   T38]  ? __pfx_ksys_write+0x10/0x10
[  749.433773][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.433827][   T38]  do_syscall_64+0x174/0x580
[  749.433862][   T38]  ? clear_bhb_loop+0x70/0xc0
[  749.433890][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.433914][   T38] RIP: 0033:0x7fb3d255e90e
[  749.433946][   T38] RSP: 002b:00007ffcb3fc9688 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  749.434007][   T38] RAX: ffffffffffffffda RBX: 0000555582698500 RCX: 00007fb3d255e90e
[  749.434025][   T38] RDX: 0000000000000001 RSI: 00007ffcb3fc9710 RDI: 0000000000000005
[  749.434039][   T38] RBP: 00007fb3d26358a7 R08: 0000000000000000 R09: 0000000000000000
[  749.434055][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.434068][   T38] R13: 00007ffcb3fc9710 R14: 00007fb3d3354620 R15: 0000000000000003
[  749.434104][   T38]  </TASK>
[  749.434157][   T38] 
[  749.434157][   T38] Showing all locks held in the system:
[  749.434194][   T38] 9 locks held by ksoftirqd/0/15:
[  749.434238][   T38] 4 locks held by rcuc/1/28:
[  749.434250][   T38] 6 locks held by ksoftirqd/1/30:
[  749.434263][   T38] 1 lock held by khungtaskd/38:
[  749.434275][   T38]  #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  749.434380][   T38] 3 locks held by kworker/u8:2/41:
[  749.434392][   T38]  #0: ffff888031c71138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  749.434488][   T38]  #1: ffffc90000b27c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  749.434547][   T38]  #2: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  749.434693][   T38] 3 locks held by kworker/u8:5/67:
[  749.434707][   T38]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  749.434763][   T38]  #1: ffffc9000152fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  749.434817][   T38]  #2: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  749.434936][   T38] 6 locks held by kworker/u8:11/1171:
[  749.434950][   T38]  #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  749.435012][   T38]  #1: ffffc90005eafc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  749.435068][   T38]  #2: ffffffff8f59d8a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  749.435159][   T38]  #3: ffff88805fe15160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  749.435295][   T38]  #4: ffff888035c20310 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  749.435373][   T38]  #5: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800
[  749.436416][   T38] 2 locks held by getty/5341:
[  749.436433][   T38]  #0: ffff888035bc30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  749.436582][   T38]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[  749.436670][   T38] 1 lock held by syz-executor/5585:
[  749.436682][   T38] 3 locks held by napi/wg2-0/5693:
[  749.436691][   T38]  #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  749.436774][   T38]  #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: net_tx_action+0x5bb/0xc30
[  749.436855][   T38]  #2: ffff8880401bb230 (&sch->root_lock_key#20){+...}-{3:3}, at: net_tx_action+0x69e/0xc30
[  749.436913][   T38] 7 locks held by syz-executor/10153:
[  749.436922][   T38]  #0: ffff888035ce6500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  749.436972][   T38]  #1: ffff888032ef5478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  749.437014][   T38]  #2: ffff88802908f0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  749.437060][   T38]  #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  749.437105][   T38]  #4: ffff88804092b160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  749.437203][   T38]  #5: ffff88803bc44310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  749.437243][   T38]  #6: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  749.437310][   T38] 4 locks held by syz-executor/10267:
[  749.437319][   T38]  #0: ffff888035ce6500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  749.437360][   T38]  #1: ffff88803e013878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  749.437402][   T38]  #2: ffff88802908f0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  749.437447][   T38]  #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  749.437496][   T38] 4 locks held by syz-executor/10454:
[  749.437505][   T38]  #0: ffff888035ce6500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  749.437569][   T38]  #1: ffff888060838078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  749.437611][   T38]  #2: ffff88802908f0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  749.437656][   T38]  #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  749.437701][   T38] 4 locks held by syz-executor/10482:
[  749.437709][   T38]  #0: ffff888035ce6500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  749.437750][   T38]  #1: ffff888063097078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  749.437792][   T38]  #2: ffff88802908f0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  749.437836][   T38]  #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  749.437883][   T38] 4 locks held by syz-executor/10583:
[  749.437891][   T38]  #0: ffff888035ce6500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  749.437932][   T38]  #1: ffff88807ac58078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  749.438034][   T38]  #2: ffff88802908f0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  749.438081][   T38]  #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  749.438126][   T38] 4 locks held by syz-executor/10770:
[  749.438135][   T38]  #0: ffff888035ce6500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  749.438176][   T38]  #1: ffff88807e129c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  749.444179][   T38]  #2: ffff88802908f0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  749.444372][   T38]  #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  749.444551][   T38] 4 locks held by syz-executor/10774:
[  749.444584][   T38]  #0: ffff888035ce6500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  749.444764][   T38]  #1: ffff88806e6f3c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  749.444938][   T38]  #2: ffff88802908f0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  749.445140][   T38]  #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  749.445316][   T38] 4 locks held by syz-executor/10864:
[  749.445349][   T38]  #0: ffff888035ce6500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  749.445496][   T38]  #1: ffff8880395b7878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  749.445651][   T38]  #2: ffff88802908f0f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  749.451324][   T38]  #3: ffffffff8ee21098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  749.451481][   T38] 2 locks held by syz-executor/11048:
[  749.451504][   T38]  #0: ffffffff8ecef5e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  749.451919][   T38]  #1: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  749.452074][   T38] 1 lock held by syz-executor/11073:
[  749.452114][   T38]  #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  749.452242][   T38] 1 lock held by syz-executor/11139:
[  749.452256][   T38]  #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  749.452463][   T38] 1 lock held by udevd/11140:
[  749.452507][   T38]  #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x7c8/0x2360
[  749.452746][   T38] 1 lock held by syz.3.1521/11161:
[  749.452787][   T38]  #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00
[  749.452920][   T38] 4 locks held by syz.2.1522/11163:
[  749.452956][   T38] 
[  749.453017][   T38] =============================================
[  749.453017][   T38] 
[  749.458353][   T38] NMI backtrace for cpu 1
[  749.458447][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  749.458537][   T38] Tainted: [L]=SOFTLOCKUP
[  749.458558][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  749.458591][   T38] Call Trace:
[  749.458613][   T38]  <TASK>
[  749.458651][   T38]  dump_stack_lvl+0xe8/0x150
[  749.458791][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  749.458867][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  749.459055][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  749.459159][   T38]  sys_info+0x135/0x170
[  749.459215][   T38]  watchdog+0xfd7/0x1030
[  749.459401][   T38]  ? watchdog+0x1c7/0x1030
[  749.459488][   T38]  kthread+0x388/0x470
[  749.459597][   T38]  ? __pfx_watchdog+0x10/0x10
[  749.459672][   T38]  ? __pfx_kthread+0x10/0x10
[  749.459756][   T38]  ret_from_fork+0x514/0xb70
[  749.459924][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  749.459978][   T38]  ? __switch_to+0xc89/0x1420
[  749.460137][   T38]  ? __pfx_kthread+0x10/0x10
[  749.460232][   T38]  ret_from_fork_asm+0x1a/0x30
[  749.460361][   T38]  </TASK>
[  749.460446][   T38] Sending NMI from CPU 1 to CPUs 0:
[  749.460500][    C0] NMI backtrace for cpu 0
[  749.460524][    C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  749.460549][    C0] Tainted: [L]=SOFTLOCKUP
[  749.460557][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  749.460568][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  749.460644][    C0] Code: e8 ee 1f 70 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4f 96 d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  749.460661][    C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202
[  749.460678][    C0] RAX: 1ffffffff33c8c00 RBX: 00000000000003fd RCX: 0000000000000000
[  749.460691][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[  749.460703][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  749.460715][    C0] R10: dffffc0000000000 R11: ffffffff8555a7f0 R12: dffffc0000000000
[  749.460729][    C0] R13: 0000000000000000 R14: ffffffff99e46340 R15: 0000000000000000
[  749.460742][    C0] FS:  0000000000000000(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000
[  749.460757][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  749.460770][    C0] CR2: 0000564a2661d088 CR3: 000000004e064000 CR4: 00000000003526f0
[  749.460786][    C0] Call Trace:
[  749.460793][    C0]  <TASK>
[  749.460802][    C0]  wait_for_lsr+0x190/0x300
[  749.460828][    C0]  serial8250_console_write+0x113a/0x1b40
[  749.460859][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  749.460883][    C0]  ? console_flush_one_record+0xfa/0xb50
[  749.460959][    C0]  ? console_flush_one_record+0x472/0xb50
[  749.460991][    C0]  console_flush_one_record+0x642/0xb50
[  749.461023][    C0]  ? console_flush_one_record+0xfa/0xb50
[  749.461053][    C0]  ? __pfx_console_flush_one_record+0x10/0x10
[  749.461084][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  749.461114][    C0]  legacy_kthread_func+0x1b6/0x250
[  749.461144][    C0]  ? __pfx_legacy_kthread_func+0x10/0x10
[  749.461172][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  749.461221][    C0]  ? __kthread_parkme+0x71/0x1f0
[  749.461246][    C0]  ? __kthread_parkme+0x196/0x1f0
[  749.461271][    C0]  kthread+0x388/0x470
[  749.461295][    C0]  ? __pfx_legacy_kthread_func+0x10/0x10
[  749.461323][    C0]  ? __pfx_kthread+0x10/0x10
[  749.461348][    C0]  ret_from_fork+0x514/0xb70
[  749.461376][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  749.461403][    C0]  ? __switch_to+0xc89/0x1420
[  749.461426][    C0]  ? __pfx_kthread+0x10/0x10
[  749.461452][    C0]  ret_from_fork_asm+0x1a/0x30
[  749.461499][    C0]  </TASK>
[  749.478814][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  749.478938][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  749.479041][   T38] Tainted: [L]=SOFTLOCKUP
[  749.479072][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  749.479106][   T38] Call Trace:
[  749.479129][   T38]  <TASK>
[  749.479159][   T38]  vpanic+0x56c/0xa60
[  749.479267][   T38]  ? __pfx___schedule+0x10/0x10
[  749.479345][   T38]  ? __pfx_vpanic+0x10/0x10
[  749.479462][   T38]  panic+0xc5/0xd0
[  749.479536][   T38]  ? __pfx_panic+0x10/0x10
[  749.479622][   T38]  ? preempt_schedule_common+0x82/0xd0
[  749.479698][   T38]  ? preempt_schedule_thunk+0x16/0x40
[  749.479774][   T38]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  749.479851][   T38]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  749.479928][   T38]  watchdog+0x1030/0x1030
[  749.480036][   T38]  ? watchdog+0x1c7/0x1030
[  749.480142][   T38]  kthread+0x388/0x470
[  749.480244][   T38]  ? __pfx_watchdog+0x10/0x10
[  749.480340][   T38]  ? __pfx_kthread+0x10/0x10
[  749.480437][   T38]  ret_from_fork+0x514/0xb70
[  749.480539][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  749.480617][   T38]  ? __switch_to+0xc89/0x1420
[  749.480702][   T38]  ? __pfx_kthread+0x10/0x10
[  749.480789][   T38]  ret_from_fork_asm+0x1a/0x30
[  749.480912][   T38]  </TASK>
[  749.481574][   T38] Kernel Offset: disabled