last executing test programs:

11m1.356598581s ago: executing program 1 (id=2):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0x63}], 0x2}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)

11m1.172191625s ago: executing program 1 (id=6):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xffffc}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x10)
setitimer(0x2, 0x0, 0x0)
r1 = syz_usbip_server_init(0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b09"], 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x4c, 0x30, 0xb, 0x0, 0x0, {}, [{0x38, 0x1, [@m_pedit={0x34, 0x2, 0x0, 0x0, {{0xa}, {0x8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x3, 0x3d, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
lsm_set_self_attr(0x69, &(0x7f00000000c0)={0x65, 0x1, 0x20}, 0x20, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35)

10m54.855048237s ago: executing program 1 (id=11):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x1f4, 0x0, 0x0, 0x54}, 0x9c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)

10m47.40076642s ago: executing program 1 (id=13):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0x63}], 0x2}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)

10m46.0196075s ago: executing program 1 (id=15):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfe10)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, 0x0, <r4=>0x0, 0x0, 0xdead, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, r4, 0x0})
ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28})
ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000440)={0x8})
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="7199dab04e1b", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x5, 0xe54, 0x26, @dev={0xfe, 0x80, '\x00', 0x17}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x7b91, 0x9}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)

10m27.95972052s ago: executing program 32 (id=15):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfe10)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, 0x0, <r4=>0x0, 0x0, 0xdead, 0x0, 0x0})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000280)={0x20, r4, 0x0})
ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28})
ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000440)={0x8})
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="7199dab04e1b", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x5, 0xe54, 0x26, @dev={0xfe, 0x80, '\x00', 0x17}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x7b91, 0x9}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)

9m15.873589043s ago: executing program 0 (id=95):
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1)
setresgid(0xee00, 0xee01, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00'})
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

9m10.221401875s ago: executing program 0 (id=98):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = io_uring_setup(0x7a60, &(0x7f00000002c0)={0x0, 0x8270, 0x10, 0x3, 0xbd})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000000), 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x25, 0x0, 0x1)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x47ffe, 0x7c9d03)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
syz_open_dev$loop(&(0x7f0000000280), 0x7, 0x140000)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
sendto$inet(r5, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x400c0)

9m7.190884208s ago: executing program 0 (id=100):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0xfffffffc, 0x1, 0xffffffff, 0x6dc, 0x100, 0x200, 0x10, 0x368, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f0000000380)=[0x4], 0x1, 0x0})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
io_setup(0x5, &(0x7f0000000140))
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r2, 0x5407, &(0x7f00000001c0)={0x6, 0x8, 0x9, 0xfdff, 0x7})
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)

8m55.34933915s ago: executing program 0 (id=108):
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1)
setresgid(0xee00, 0xee01, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00'})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

8m47.522092248s ago: executing program 0 (id=112):
syz_emit_ethernet(0x21c, &(0x7f0000000cc0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "1cee7d", 0x1e6, 0x11, 0xff, @remote, @mcast1, {[@dstopts={0x16, 0x0, '\x00', [@ra]}, @routing={0x16, 0x4, 0x0, 0x5, 0x0, [@loopback, @mcast2]}, @fragment={0x73, 0x0, 0xed, 0x0, 0x0, 0x10, 0x67}, @srh={0x6c, 0xc, 0x4, 0x6, 0xe5, 0x20, 0x8, [@loopback, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, @private0]}, @srh={0x62, 0xc, 0x4, 0x6, 0x9, 0x48, 0x7, [@dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, @remote, @loopback, @empty, @empty]}, @routing={0x3a, 0xe, 0x2, 0x86, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @mcast2, @loopback]}, @fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x67}, @dstopts={0xf7, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xd}, @ra={0x5, 0x2, 0x8}, @pad1, @pad1]}, @hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @pad1]}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x2, 0x65}], {0x4e21, 0x4e21, 0xe, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x100, @void}, "144c"}}}}}}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000002740), 0x80080)
r3 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r4, 0xfffd, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003000000000200000002000000030000000000000000000001050000000800000000000000016f0005000000000067e00008276b22c1effaffbce3"], 0x0, 0x5a}, 0x20)

8m42.532755074s ago: executing program 0 (id=118):
syz_emit_ethernet(0x224, &(0x7f0000000cc0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "1cee7d", 0x1ee, 0x11, 0xff, @remote, @mcast1, {[@dstopts={0x16, 0x0, '\x00', [@ra]}, @routing={0x16, 0x4, 0x0, 0x5, 0x0, [@loopback, @mcast2]}, @fragment={0x73, 0x0, 0xed, 0x0, 0x0, 0x10, 0x67}, @srh={0x6c, 0xc, 0x4, 0x6, 0xe5, 0x20, 0x8, [@loopback, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, @private0]}, @srh={0x62, 0xc, 0x4, 0x6, 0x9, 0x48, 0x7, [@dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, @remote, @loopback, @empty, @empty]}, @routing={0x3a, 0xc, 0x2, 0x86, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @loopback]}, @fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x67}, @dstopts={0xf7, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xd}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x3ff, [0x7fff, 0x0]}}, @pad1, @pad1]}, @hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @pad1]}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x2, 0x65}], {0x4e21, 0x4e21, 0xe, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x100, @void}, "144c"}}}}}}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000002740), 0x80080)
r3 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r4, 0xfffd, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003000000000200000002000000030000000000000000000001050000000800000000000000016f0005000000000067e00008276b22c1effaffbce3"], 0x0, 0x5a}, 0x20)

8m25.396745707s ago: executing program 33 (id=118):
syz_emit_ethernet(0x224, &(0x7f0000000cc0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "1cee7d", 0x1ee, 0x11, 0xff, @remote, @mcast1, {[@dstopts={0x16, 0x0, '\x00', [@ra]}, @routing={0x16, 0x4, 0x0, 0x5, 0x0, [@loopback, @mcast2]}, @fragment={0x73, 0x0, 0xed, 0x0, 0x0, 0x10, 0x67}, @srh={0x6c, 0xc, 0x4, 0x6, 0xe5, 0x20, 0x8, [@loopback, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, @private0]}, @srh={0x62, 0xc, 0x4, 0x6, 0x9, 0x48, 0x7, [@dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, @remote, @loopback, @empty, @empty]}, @routing={0x3a, 0xc, 0x2, 0x86, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @loopback]}, @fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x67}, @dstopts={0xf7, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xd}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x3ff, [0x7fff, 0x0]}}, @pad1, @pad1]}, @hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @pad1]}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x2, 0x65}], {0x4e21, 0x4e21, 0xe, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x100, @void}, "144c"}}}}}}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000002740), 0x80080)
r3 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r4, 0xfffd, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003000000000200000002000000030000000000000000000001050000000800000000000000016f0005000000000067e00008276b22c1effaffbce3"], 0x0, 0x5a}, 0x20)

4m2.423160258s ago: executing program 3 (id=391):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4000050, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0xf)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x400c044)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r5, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
syz_open_procfs(0x0, &(0x7f0000000700)='net/softnet_stat\x00')

3m59.690645553s ago: executing program 3 (id=396):
timer_create(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
rmdir(0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r1, &(0x7f0000000200)="a3", 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0xfff)

3m58.996641495s ago: executing program 3 (id=399):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x28014014)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116", 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x20004000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

3m58.725986173s ago: executing program 3 (id=401):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x122)

3m58.520673018s ago: executing program 3 (id=402):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064"}, 0x96)
close(r2)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800}, 0x38)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00')
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0)
write$cgroup_pid(r4, &(0x7f0000000140), 0x12)

3m47.604879283s ago: executing program 3 (id=412):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4000050, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0xf)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3m31.577913086s ago: executing program 34 (id=412):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4000050, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0xf)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2m35.159641094s ago: executing program 4 (id=492):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socket$inet6(0xa, 0x80000, 0x1ff)
socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000048, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
accept$alg(r3, 0x0, 0x0)

2m33.788286789s ago: executing program 4 (id=494):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m31.209910904s ago: executing program 4 (id=496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000580)='./file1\x00', 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0)

2m29.593462299s ago: executing program 4 (id=499):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0)
dup(r2)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)

2m28.539773824s ago: executing program 4 (id=500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

2m27.514155036s ago: executing program 4 (id=501):
prctl$PR_SET_MM_EXE_FILE(0x52, 0xd, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain)
r0 = epoll_create1(0x0)
fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314241}})

2m11.231183961s ago: executing program 35 (id=501):
prctl$PR_SET_MM_EXE_FILE(0x52, 0xd, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain)
r0 = epoll_create1(0x0)
fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314241}})

13.129162901s ago: executing program 6 (id=752):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10)
close(0x3)

11.372947516s ago: executing program 6 (id=756):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x5, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x1, 0x4000003, 0x0, 0x29, 0x0, 0x200000006, 0xdb, 0xbda], 0xffff1001, 0x43100})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x4f5c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x10, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x9000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x4, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf5, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x11, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x12024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

9.579837361s ago: executing program 6 (id=759):
socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}})
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x19, 0xfe}, {0x9, 0x5, 0x8f44bf2897946724, 0x2, 0x260, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x72}}}}}}]}}, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0040d07, &(0x7f0000000040)=0x121)

9.485133594s ago: executing program 8 (id=760):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc048)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28)

6.901622834s ago: executing program 5 (id=767):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
r6 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, &(0x7f00000021c0)=0x1e)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getaddr={0x40, 0x16, 0x11, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x40, 0xff, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @private2}]}, 0x40}}, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x14d000)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000200))
ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
ioctl$VT_ACTIVATE(r9, 0x5606, 0x3)
sendmmsg$sock(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)="646262a6d9745ba0bd63d7494773690f40c8435e4b4473d46fe26d59dfe17f04acc32eaa1bb0038e468e0bedc8d2bcb8a3f95fe9915497684d15261d6f1db5df", 0x40}], 0x1}}], 0x1, 0x0)
socket(0x11, 0x5, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204"], 0x14}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"})
syz_open_pts(r10, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x17)

6.125521667s ago: executing program 8 (id=769):
socket$netlink(0x10, 0x3, 0x12)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x4c}}, 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x14, 0x29, 0x37, {0x3c}}}], 0x14}, 0xc044)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.35677577s ago: executing program 7 (id=772):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.331451101s ago: executing program 5 (id=773):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done], 0x0, 0x0, 0x0})

4.221118596s ago: executing program 8 (id=774):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_emit_ethernet(0x40, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x1e, 0x0, @wg=@data={0x220, 0x0, 0x0, "200200000000"}}}}}}, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/20, 0x14}, {0x0}, {0x0}], 0x3}, 0x60002000)

3.897873247s ago: executing program 7 (id=775):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

3.686971609s ago: executing program 2 (id=776):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000280)={{@local, 0xd9}, {@local, 0x7}, 0x400, "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"}, 0x418, 0x823})

3.597244826s ago: executing program 8 (id=777):
syz_open_dev$media(&(0x7f0000000100), 0x2, 0x101000)
socket(0x10, 0x803, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

3.462596316s ago: executing program 2 (id=778):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100100, 0x256}, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket(0x10, 0x3, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

3.397227129s ago: executing program 7 (id=779):
msgget$private(0x0, 0x0)
pipe2(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000001580), 0x7, 0x0)
ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

3.259595564s ago: executing program 8 (id=780):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c)
r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

3.156293128s ago: executing program 5 (id=781):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.942693063s ago: executing program 2 (id=782):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
r6 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, &(0x7f00000021c0)=0x1e)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getaddr={0x40, 0x16, 0x11, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x40, 0xff, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @private2}]}, 0x40}}, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x14d000)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000200))
ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
ioctl$VT_ACTIVATE(r9, 0x5606, 0x3)
sendmmsg$sock(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)="646262a6d9745ba0bd63d7494773690f40c8435e4b4473d46fe26d59dfe17f04acc32eaa1bb0038e468e0bedc8d2bcb8a3f95fe9915497684d15261d6f1db5df", 0x40}], 0x1}}], 0x1, 0x0)
socket(0x11, 0x5, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204"], 0x14}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"})
r11 = syz_open_pts(r10, 0x0)
r12 = dup3(r11, r3, 0x80000)
ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000200)=0x17)

2.709193049s ago: executing program 6 (id=783):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
read$dsp(r1, 0x0, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2.681651925s ago: executing program 5 (id=784):
mprotect(&(0x7f00001ad000/0x3000)=nil, 0x3000, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cb", 0x0, 0x20})
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)

2.369309452s ago: executing program 8 (id=785):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000040)=[{0x1, 0x8011, 0x0, &(0x7f0000000080)}], 0x1})

2.251630319s ago: executing program 5 (id=786):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x5, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x1, 0x4000003, 0x0, 0x29, 0x0, 0x200000006, 0xdb, 0xbda], 0xffff1001, 0x43100})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x4f5c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x10, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x9000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x4, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf5, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x11, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x12024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

2.243099608s ago: executing program 2 (id=787):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f0000000700)={{@host, 0x2}, {@any, 0x200}, 0x400, "73b5a1bf2e7f85bb0cacaba21c7330828ad0adf3d715b6d53bb54c33d8e557fa59894c23d6ee7c71629b1f2ea4913c8831e99e5e4b501c0d60da4f2ac4dbd258c8bd9e439e55a5e1b16cdf9d27c863aa81c778d191130a7cece41267e42a9586a61f07ef04836b8fc29c1e77e3ca9c3d5806f70e77936725eb5d872279ec251486705dfde49a2509518b936a883e5305859d67e42fb709b1eaacada2f9a81f9da9b1e5e6a7bfd49a9072e1d82563e20eecdc5e5ebc04612649e046cb2c8d4869fa74ad126d95f106aa1d12905f58e995a02449d25fd72af07ae5551937744c4aaad5595996cebb5048877fe77db70edbbee35036d4db36cd1d8949b9748f435d747bb7b9b2f662c8db10d21bbebaf3611f8fc9fc82262aa60deaf272d4b70adf1773ba7224e5e2c4e21264765d7d84bce70deaa1503780e70df32901d9240309dd6cc5d428a2ea8f49f88b48d38eac66daa12bee77ab192f238e7c56d9e681212ffb073ea9038b681f5a03ef39d9d5b866149ee95ed415c3fe3d921b9c1966921ed69e1d777b5420b3f24a01261927131780a672d335444a1424b0904a2cec3c4483e059c033389abb8474bdbbcc0cff29244cf213ff63da9ef01566feaee43e665f080c97c2b4aea152b91ef3ef1876e999ed24c57b96452db23b7ff6d0f169ef45b645ea1a1500699fac801c9c39ddc516c0033050b7fdd9580f6aa59e2b6b14db2869cc26b56acd877d6dc527a367c48221519f43178f226a64c289859bbc21b257e71e5bb8a13b2cd4aabdeb371ab186bbf4382b0e66a59288548ec0a534e7ce8797b4f94e41563b5464119a1a5d7c8dbc3619110f9c16324eaeef69d71f1c7c615a6dfd6726dbce3099c909690cf1dcefde535fd8c71d6b8ddbd491d32e42b33875d8db46775f1e6c36add9a2977cbc35ea6d9388b4fa021c0fddf971efd0b5c344c77817f5b6f4c1d858add76e04bd54726dcbaf247ecdeb58e85153b21e301450767e8e2676bd68f8309aeb3d455e6d80a0ffe7a00c2875330b19039fe74696d1beea84e7d0c01dc3be49d576065629e5fdf3ccffad1741a5293b3ae28eabfd68c304ea4870ba3134ce87ad1748723ae56d2d4cfe4b1453aafb0d909edb72958fe7904ac1ad34fbc31b731a3be16b85b7be494c338691450b1e0a36e2f00adf51c3f37c57ed2579050c9d9b641837055b73eac76ccaa0f4c9f354f78fd833466e2c7cd9ebade84d0c68e2cbf7afe579e48098a47410ce400450d4e98080ab4f13c33623bad982e1ea59584dbb3c2c5588ad58c2546a8920455bb1e2800441915e8d5823d2ad854af09e895f4c91fca33bf0e0a73a83334a9bbfdacf066a0bfcfe75f833cf7f82bd2431bd0abac7bd1a73258c428d6408d90512972d0a13e47be5fbf41f9b92572a9b4d322c1a1f8db96a060334990c815067f0aa861a"}, 0x418, 0xffffffff})

2.238579069s ago: executing program 7 (id=788):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @broadcast}, 0x0, 0x3, 0x0, 0x4}}, 0x80)

912.818478ms ago: executing program 7 (id=789):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000280)={{@local, 0xd9}, {@local, 0x7}, 0x400, "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"}, 0x418, 0x823})

871.068076ms ago: executing program 2 (id=790):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e13", @ANYRES16=r0], 0x24)

795.955708ms ago: executing program 6 (id=791):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x28014014)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116", 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0xa, 0x4e23, 0xfffffbff, @empty, 0xffff8428}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dstopts={{0x18, 0x29, 0x37, {0x67}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x30}, 0x800)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

759.602973ms ago: executing program 7 (id=792):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0xd00, 0x4, 0x10001, 0x0, 0x3, 0xcc7, 0x8, 0x7, 0x5, 0xff, 0x2, 0x1, 0x8, 0x2, 0x9, 0x9, 0xbc76146, 0x9, 0x43, 0x40000003, 0x8c, 0x8, 0xf27, 0x6, 0x800b, 0x48, 0x5, 0x6, 0xd, 0x0, 0x8000]})
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0)

644.626524ms ago: executing program 2 (id=793):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x8800)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r5 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r5, r4, 0x9, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c)
kexec_load(0x0, 0x0, 0x0, 0x0)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0)

520.26931ms ago: executing program 6 (id=794):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 5 (id=795):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x4c, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

tive
[  297.696177][   T60] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  297.774902][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[  297.922961][ T6769] nbd: socks must be embedded in a SOCK_ITEM attr
[  297.979964][ T3526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.056733][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.056753][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.056785][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.118459][ T6580] team0: Port device team_slave_0 added
[  298.295045][ T6580] team0: Port device team_slave_1 added
[  298.735434][ T6229] udevd[6229]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  298.793134][ T3526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.057568][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.057588][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.057618][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.798919][ T3526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.830796][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.830815][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  300.830843][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.977487][ T6578] hsr_slave_0: entered promiscuous mode
[  300.990961][ T6578] hsr_slave_1: entered promiscuous mode
[  300.991806][ T6578] debugfs: 'hsr0' already exists in 'hsr'
[  300.991825][ T6578] Cannot create hsr debugfs directory
[  301.709395][ T6580] hsr_slave_0: entered promiscuous mode
[  301.728767][ T6580] hsr_slave_1: entered promiscuous mode
[  301.729602][ T6580] debugfs: 'hsr0' already exists in 'hsr'
[  301.729635][ T6580] Cannot create hsr debugfs directory
[  303.162306][ T3526] bridge_slave_1: left allmulticast mode
[  303.162339][ T3526] bridge_slave_1: left promiscuous mode
[  303.162549][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.241001][ T3526] bridge_slave_0: left allmulticast mode
[  303.241036][ T3526] bridge_slave_0: left promiscuous mode
[  303.241352][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.895655][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.994191][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.895421][ T3526] bond0 (unregistering): Released all slaves
[  311.250610][ T3526] bond0 (unregistering): Released all slaves
[  315.608791][ T6855] kAFS: No cell specified
[  315.948807][ T6578] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  317.185443][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  317.185521][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  318.841486][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  318.865061][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  318.866355][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  318.867584][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.869269][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.266017][ T6885] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  321.143916][   T60] Bluetooth: hci3: command tx timeout
[  321.200942][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.219498][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.232444][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.246570][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.266953][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.775226][ T6899] kAFS: No cell specified
[  323.947271][   T60] Bluetooth: hci3: command tx timeout
[  324.142664][   T60] Bluetooth: hci4: command tx timeout
[  324.624576][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  325.000709][ T6925] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  325.804600][   T10] usb 3-1: Using ep0 maxpacket: 32
[  325.855186][   T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  325.855247][   T10] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  325.889662][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  325.889685][   T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  325.889700][   T10] usb 3-1: Product: syz
[  325.889711][   T10] usb 3-1: Manufacturer: syz
[  325.946699][   T10] hub 3-1:4.0: bad descriptor, ignoring hub
[  325.946742][   T10] hub 3-1:4.0: probe with driver hub failed with error -5
[  325.950249][   T10] usbhid 3-1:4.0: couldn't find an input interrupt endpoint
[  325.964760][   T60] Bluetooth: hci3: command tx timeout
[  326.205056][   T60] Bluetooth: hci4: command tx timeout
[  326.311229][ T5884] usb 3-1: USB disconnect, device number 4
[  326.388086][   T60] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  326.470650][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'.
[  328.121730][   T60] Bluetooth: hci3: command tx timeout
[  328.328521][   T60] Bluetooth: hci4: command tx timeout
[  328.880650][ T5962] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  329.145255][ T5962] usb 4-1: Using ep0 maxpacket: 32
[  329.215208][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.215246][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.215371][ T5962] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  329.215450][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.583525][ T5962] usb 4-1: config 0 descriptor??
[  329.890932][ T5962] hub 4-1:0.0: USB hub found
[  330.100234][ T5962] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  330.684910][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  330.685360][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  330.685794][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  330.685967][ T5962] usbhid 4-1:0.0: can't add hid device: -32
[  330.686100][ T5962] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  330.724674][   T60] Bluetooth: hci4: command tx timeout
[  330.817034][ T5962] usb 4-1: USB disconnect, device number 4
[  330.980890][   T60] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  333.916673][ T6930] nbd: socks must be embedded in a SOCK_ITEM attr
[  334.458731][ T3526] hsr_slave_0: left promiscuous mode
[  335.614631][ T3526] hsr_slave_1: left promiscuous mode
[  335.615756][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.615783][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.731441][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.731472][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.976695][ T6128] udevd[6128]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  336.095405][ T3526] veth1_macvtap: left promiscuous mode
[  336.095506][ T3526] veth0_macvtap: left promiscuous mode
[  336.095766][ T3526] veth1_vlan: left promiscuous mode
[  336.095925][ T3526] veth0_vlan: left promiscuous mode
[  337.593871][ T6972] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  337.958380][ T3526] team0 (unregistering): Port device team_slave_1 removed
[  339.014282][ T3526] team0 (unregistering): Port device team_slave_0 removed
[  340.909377][   T60] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  342.093343][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'.
[  342.844124][ T6994] nbd: socks must be embedded in a SOCK_ITEM attr
[  346.405068][   T60] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  346.490313][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'.
[  347.171171][ T7011] nbd: socks must be embedded in a SOCK_ITEM attr
[  351.080618][ T7032] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  352.373772][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[  352.373809][ T7039] IPv6: NLM_F_CREATE should be specified when creating new route
[  352.497032][ T6128] udevd[6128]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  352.579332][ T6128] udevd[6128]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  352.838203][ T6128] udevd[6128]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  354.042507][ T6869] chnl_net:caif_netlink_parms(): no params data found
[  354.641819][ T7057] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  355.558054][ T7054] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  357.471796][ T6888] chnl_net:caif_netlink_parms(): no params data found
[  358.041270][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.043748][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.044054][ T6869] bridge_slave_0: entered allmulticast mode
[  358.083591][ T6869] bridge_slave_0: entered promiscuous mode
[  358.221844][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.222060][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.222304][ T6869] bridge_slave_1: entered allmulticast mode
[  358.261142][ T6869] bridge_slave_1: entered promiscuous mode
[  360.119135][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.137059][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.185932][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.186423][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.186613][ T6888] bridge_slave_0: entered allmulticast mode
[  360.189404][ T6888] bridge_slave_0: entered promiscuous mode
[  360.494374][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.494896][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.496489][ T6888] bridge_slave_1: entered allmulticast mode
[  360.499483][ T6888] bridge_slave_1: entered promiscuous mode
[  360.503471][ T6869] team0: Port device team_slave_0 added
[  361.545482][ T6869] team0: Port device team_slave_1 added
[  363.750070][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.835772][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.845550][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.845568][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.845597][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.803170][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.803229][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.803299][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.466984][ T6888] team0: Port device team_slave_0 added
[  366.507533][ T6888] team0: Port device team_slave_1 added
[  366.640559][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.640579][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.640607][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.699688][ T6869] hsr_slave_0: entered promiscuous mode
[  366.701121][ T6869] hsr_slave_1: entered promiscuous mode
[  366.702155][ T6869] debugfs: 'hsr0' already exists in 'hsr'
[  366.702181][ T6869] Cannot create hsr debugfs directory
[  366.703241][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.703255][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.703284][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.979596][ T7140] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  366.982688][ T7140] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  371.701338][ T6888] hsr_slave_0: entered promiscuous mode
[  371.703214][ T6888] hsr_slave_1: entered promiscuous mode
[  371.704183][ T6888] debugfs: 'hsr0' already exists in 'hsr'
[  371.704209][ T6888] Cannot create hsr debugfs directory
[  374.838885][ T3526] bridge_slave_1: left allmulticast mode
[  374.838909][ T3526] bridge_slave_1: left promiscuous mode
[  374.839106][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.956133][ T3526] bridge_slave_0: left allmulticast mode
[  374.956165][ T3526] bridge_slave_0: left promiscuous mode
[  374.956546][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.077475][ T3526] bridge_slave_1: left allmulticast mode
[  375.077507][ T3526] bridge_slave_1: left promiscuous mode
[  375.077756][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.196585][ T3526] bridge_slave_0: left allmulticast mode
[  375.196617][ T3526] bridge_slave_0: left promiscuous mode
[  375.196914][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.897774][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.914655][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.936559][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.959116][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.984814][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  378.564643][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.618821][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  378.618897][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  380.126611][ T5802] Bluetooth: hci5: command tx timeout
[  381.284639][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.366487][ T3526] bond0 (unregistering): Released all slaves
[  381.577690][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  381.655481][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.778585][ T3526] bond0 (unregistering): Released all slaves
[  382.142449][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.191898][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.204750][   T60] Bluetooth: hci5: command tx timeout
[  382.214218][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.306965][ T5904] IPVS: starting estimator thread 0...
[  382.309124][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  382.327761][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  382.426362][   T60] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  382.426629][ T7229] IPVS: using max 11 ests per chain, 26400 per kthread
[  382.527830][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'.
[  382.652756][ T7224] nbd: socks must be embedded in a SOCK_ITEM attr
[  383.391991][ T7228] udevd[7228]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  383.474607][ T3526] hsr_slave_0: left promiscuous mode
[  383.514919][ T3526] hsr_slave_1: left promiscuous mode
[  383.516092][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  383.567431][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  383.836465][ T3526] hsr_slave_0: left promiscuous mode
[  383.894822][ T3526] hsr_slave_1: left promiscuous mode
[  383.895807][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.005454][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.235128][ T5802] Bluetooth: hci5: command tx timeout
[  385.235193][ T5802] Bluetooth: hci6: command tx timeout
[  388.942036][ T5802] Bluetooth: hci6: command tx timeout
[  388.942071][ T5802] Bluetooth: hci5: command tx timeout
[  389.937754][ T7272] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  390.185217][ T7275] Bluetooth: MGMT ver 1.23
[  390.213445][ T3526] team0 (unregistering): Port device team_slave_1 removed
[  390.266985][ T3526] team0 (unregistering): Port device team_slave_0 removed
[  390.705813][ T3526] team0 (unregistering): Port device team_slave_1 removed
[  390.756186][ T3526] team0 (unregistering): Port device team_slave_0 removed
[  391.005205][   T60] Bluetooth: hci6: command 0x040f tx timeout
[  393.842341][ T5113] Bluetooth: hci6: command 0x040f tx timeout
[  396.191754][ T5113] Bluetooth: hci6: command 0x040f tx timeout
[  396.581679][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[  397.413585][ T7310] nbd: socks must be embedded in a SOCK_ITEM attr
[  400.854306][ T7274] udevd[7274]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  400.859399][ T7283] udevd[7283]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  402.659786][ T7205] chnl_net:caif_netlink_parms(): no params data found
[  403.755025][ T7216] chnl_net:caif_netlink_parms(): no params data found
[  404.029435][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.029564][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.029815][ T7205] bridge_slave_0: entered allmulticast mode
[  404.044760][ T7205] bridge_slave_0: entered promiscuous mode
[  404.327384][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'.
[  404.990270][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.990759][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.152029][ T7205] bridge_slave_1: entered allmulticast mode
[  405.254179][ T7205] bridge_slave_1: entered promiscuous mode
[  409.024897][ T7366] nbd: socks must be embedded in a SOCK_ITEM attr
[  409.385854][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.508593][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.621378][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.621519][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.621776][ T7216] bridge_slave_0: entered allmulticast mode
[  409.623970][ T7216] bridge_slave_0: entered promiscuous mode
[  409.726725][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.726995][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.727214][ T7216] bridge_slave_1: entered allmulticast mode
[  409.762004][ T7216] bridge_slave_1: entered promiscuous mode
[  409.777091][ T7205] team0: Port device team_slave_0 added
[  409.886494][ T7205] team0: Port device team_slave_1 added
[  409.966373][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.039121][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.057864][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.057883][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.057921][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.139691][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.139705][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.139725][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.552400][ T7216] team0: Port device team_slave_0 added
[  411.682560][ T7400] process 'syz.3.285' launched './file0' with NULL argv: empty string added
[  411.897500][ T7216] team0: Port device team_slave_1 added
[  412.174218][ T3526] bridge_slave_1: left allmulticast mode
[  412.174242][ T3526] bridge_slave_1: left promiscuous mode
[  412.180557][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.265658][ T3526] bridge_slave_0: left allmulticast mode
[  412.265681][ T3526] bridge_slave_0: left promiscuous mode
[  412.265880][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.348216][ T3526] bridge_slave_1: left allmulticast mode
[  412.348240][ T3526] bridge_slave_1: left promiscuous mode
[  412.348419][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.426048][ T3526] bridge_slave_0: left allmulticast mode
[  412.426072][ T3526] bridge_slave_0: left promiscuous mode
[  412.426263][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.801413][ T7410] netlink: 5132 bytes leftover after parsing attributes in process `syz.2.291'.
[  413.900980][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.256530][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'.
[  414.523398][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.733228][ T7414] nbd: socks must be embedded in a SOCK_ITEM attr
[  416.134690][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  417.710323][ T3526] bond0 (unregistering): Released all slaves
[  418.254944][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  418.522281][ T7283] udevd[7283]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  418.805286][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.906942][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.977977][ T3526] bond0 (unregistering): Released all slaves
[  419.101698][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.101718][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.101746][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.169773][ T7205] hsr_slave_0: entered promiscuous mode
[  419.172200][ T7205] hsr_slave_1: entered promiscuous mode
[  419.173177][ T7205] debugfs: 'hsr0' already exists in 'hsr'
[  419.173203][ T7205] Cannot create hsr debugfs directory
[  419.208545][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.208558][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.208578][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.568390][ T7442] ALSA: seq fatal error: cannot create timer (-22)
[  419.984126][ T7216] hsr_slave_0: entered promiscuous mode
[  419.994492][ T7216] hsr_slave_1: entered promiscuous mode
[  420.000674][ T7216] debugfs: 'hsr0' already exists in 'hsr'
[  420.000703][ T7216] Cannot create hsr debugfs directory
[  420.246770][ T5113] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  420.303706][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'.
[  420.466209][ T7456] nbd: socks must be embedded in a SOCK_ITEM attr
[  420.510637][ T7455] netlink: 5132 bytes leftover after parsing attributes in process `syz.2.300'.
[  424.849733][ T7274] udevd[7274]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  424.881302][ T7283] udevd[7283]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  425.058268][ T3526] hsr_slave_0: left promiscuous mode
[  425.097184][ T3526] hsr_slave_1: left promiscuous mode
[  425.100445][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.276436][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.534579][ T3526] hsr_slave_0: left promiscuous mode
[  425.574601][ T3526] hsr_slave_1: left promiscuous mode
[  425.575516][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.653797][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.827086][ T3526] team0 (unregistering): Port device team_slave_1 removed
[  426.927558][ T3526] team0 (unregistering): Port device team_slave_0 removed
[  428.704011][ T3526] team0 (unregistering): Port device team_slave_1 removed
[  428.766573][ T3526] team0 (unregistering): Port device team_slave_0 removed
[  429.715152][ T7498] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  430.802264][ T7501] netlink: 5132 bytes leftover after parsing attributes in process `syz.3.309'.
[  430.960698][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'.
[  432.670094][ T7499] nbd: socks must be embedded in a SOCK_ITEM attr
[  436.856453][ T7520] netlink: 9 bytes leftover after parsing attributes in process `syz.3.312'.
[  436.939531][ T7274] udevd[7274]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  436.955571][ T7520] netlink: 9 bytes leftover after parsing attributes in process `syz.3.312'.
[  437.059207][ T7283] udevd[7283]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  438.326618][ T7544] netlink: 9 bytes leftover after parsing attributes in process `syz.2.317'.
[  438.425264][ T7544] netlink: 9 bytes leftover after parsing attributes in process `syz.2.317'.
[  438.508571][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  438.545999][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  438.549952][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  438.641946][ T7216] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  438.689319][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  438.714805][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  439.251992][ T7216] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  439.410649][ T7216] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  439.783809][ T7216] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  440.090128][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  440.090184][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  440.764693][ T5113] Bluetooth: hci3: command tx timeout
[  442.821283][ T7546] chnl_net:caif_netlink_parms(): no params data found
[  442.844644][ T5113] Bluetooth: hci3: command tx timeout
[  443.610627][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  443.634938][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  443.660815][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  443.686434][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  443.688256][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  445.174062][ T5113] Bluetooth: hci3: command tx timeout
[  445.807025][ T5113] Bluetooth: hci4: command tx timeout
[  445.974724][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.974863][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.975131][ T7546] bridge_slave_0: entered allmulticast mode
[  445.977991][ T7546] bridge_slave_0: entered promiscuous mode
[  446.037378][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.037549][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.037802][ T7546] bridge_slave_1: entered allmulticast mode
[  446.101878][ T7546] bridge_slave_1: entered promiscuous mode
[  446.999970][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.221781][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.409059][ T5113] Bluetooth: hci3: command tx timeout
[  448.274505][ T5113] Bluetooth: hci4: command tx timeout
[  449.615607][ T7546] team0: Port device team_slave_0 added
[  449.682817][ T7546] team0: Port device team_slave_1 added
[  449.782473][ T3526] bridge_slave_1: left allmulticast mode
[  449.782517][ T3526] bridge_slave_1: left promiscuous mode
[  449.797359][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.920669][ T3526] bridge_slave_0: left allmulticast mode
[  449.920701][ T3526] bridge_slave_0: left promiscuous mode
[  449.920976][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.284720][ T5113] Bluetooth: hci4: command tx timeout
[  450.572581][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.976377][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  451.036966][ T3526] bond0 (unregistering): Released all slaves
[  451.112412][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.112427][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.112448][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.361368][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.361391][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.361425][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.906913][ T3526] hsr_slave_0: left promiscuous mode
[  451.925502][ T3526] hsr_slave_1: left promiscuous mode
[  451.926463][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.926542][   T36] audit: type=1326 audit(1772797766.226:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  451.926580][   T36] audit: type=1326 audit(1772797766.226:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  451.926612][   T36] audit: type=1326 audit(1772797766.226:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c42b code=0x7ffc0000
[  451.926643][   T36] audit: type=1326 audit(1772797766.226:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c42b code=0x7ffc0000
[  451.926679][   T36] audit: type=1326 audit(1772797766.226:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c42b code=0x7ffc0000
[  451.926710][   T36] audit: type=1326 audit(1772797766.226:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c42b code=0x7ffc0000
[  451.926741][   T36] audit: type=1326 audit(1772797766.226:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c42b code=0x7ffc0000
[  451.926772][   T36] audit: type=1326 audit(1772797766.226:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c42b code=0x7ffc0000
[  451.926809][   T36] audit: type=1326 audit(1772797766.226:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c42b code=0x7ffc0000
[  451.926841][   T36] audit: type=1326 audit(1772797766.226:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7673 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c42b code=0x7ffc0000
[  452.073059][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.365339][ T5113] Bluetooth: hci4: command tx timeout
[  453.187183][ T3526] team0 (unregistering): Port device team_slave_1 removed
[  453.339305][ T3526] team0 (unregistering): Port device team_slave_0 removed
[  454.286431][ T7546] hsr_slave_0: entered promiscuous mode
[  454.315975][ T7546] hsr_slave_1: entered promiscuous mode
[  454.316943][ T7546] debugfs: 'hsr0' already exists in 'hsr'
[  454.316962][ T7546] Cannot create hsr debugfs directory
[  455.500331][ T7606] chnl_net:caif_netlink_parms(): no params data found
[  458.354862][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.496723][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.496991][ T7606] bridge_slave_0: entered allmulticast mode
[  458.500405][ T7606] bridge_slave_0: entered promiscuous mode
[  458.581138][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.581259][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.581466][ T7606] bridge_slave_1: entered allmulticast mode
[  458.597338][ T7606] bridge_slave_1: entered promiscuous mode
[  460.428839][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.493580][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.371684][ T7606] team0: Port device team_slave_0 added
[  461.615598][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  461.764657][ T5904] usb 5-1: Using ep0 maxpacket: 16
[  461.774002][ T5904] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.774038][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0
[  461.774092][ T5904] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  461.774109][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.842551][ T5904] usb 5-1: config 0 descriptor??
[  462.239047][ T7606] team0: Port device team_slave_1 added
[  463.801355][ T5904] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  464.537775][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.537791][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.538047][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.611103][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.611123][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.611152][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.562989][ T7606] hsr_slave_0: entered promiscuous mode
[  465.585996][ T7606] hsr_slave_1: entered promiscuous mode
[  465.588030][ T7606] debugfs: 'hsr0' already exists in 'hsr'
[  465.588050][ T7606] Cannot create hsr debugfs directory
[  466.485498][ T5885] usb 5-1: USB disconnect, device number 7
[  468.078245][ T5113] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  468.143332][ T7546] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  468.196592][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'.
[  468.563193][ T7752] nbd: socks must be embedded in a SOCK_ITEM attr
[  471.983676][ T7546] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  472.433202][ T7546] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  472.522517][ T7546] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  472.713051][ T7764] udevd[7764]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  472.733619][ T7283] udevd[7283]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  472.929637][ T3526] bridge_slave_1: left allmulticast mode
[  472.929662][ T3526] bridge_slave_1: left promiscuous mode
[  472.929843][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.076818][ T3526] bridge_slave_0: left allmulticast mode
[  473.076844][ T3526] bridge_slave_0: left promiscuous mode
[  473.077095][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.968983][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.055702][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.168137][ T3526] bond0 (unregistering): Released all slaves
[  474.815005][ T3526] hsr_slave_0: left promiscuous mode
[  474.855463][ T3526] hsr_slave_1: left promiscuous mode
[  474.856277][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.892373][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.829764][ T3526] team0 (unregistering): Port device team_slave_1 removed
[  476.087998][ T3526] team0 (unregistering): Port device team_slave_0 removed
[  480.319626][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.866835][ T7546] 8021q: adding VLAN 0 to HW filter on device team0
[  480.985285][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.985384][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.061138][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.068189][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.862428][ T7606] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  483.920561][ T7606] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  483.977527][ T7606] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  484.024285][ T7606] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  484.224116][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.472156][ T7875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  486.215715][   T60] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  488.836577][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.968816][ T7606] 8021q: adding VLAN 0 to HW filter on device team0
[  489.976284][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.976378][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.026152][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.026250][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.936424][ T7546] veth0_vlan: entered promiscuous mode
[  490.984267][ T7546] veth1_vlan: entered promiscuous mode
[  491.515580][ T7546] veth0_macvtap: entered promiscuous mode
[  491.738872][ T7546] veth1_macvtap: entered promiscuous mode
[  491.908620][   T60] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  492.169713][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'.
[  493.877690][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.814092][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.904681][ T5113] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  496.001106][ T7910] nbd: socks must be embedded in a SOCK_ITEM attr
[  496.382567][ T7606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.391807][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.392277][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.530646][ T6571] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.676004][ T6571] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.871699][ T7927] udevd[7927]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  500.979121][ T7927] udevd[7927]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  501.092255][   T36] kauditd_printk_skb: 21 callbacks suppressed
[  501.092290][   T36] audit: type=1326 audit(1772797815.426:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea198dc799 code=0x7ffc0000
[  501.117922][   T36] audit: type=1326 audit(1772797815.456:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea198dc799 code=0x7ffc0000
[  501.192848][   T36] audit: type=1326 audit(1772797815.526:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea198dc799 code=0x7ffc0000
[  501.192908][   T36] audit: type=1326 audit(1772797815.526:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7946 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea198dc799 code=0x7ffc0000
[  501.372717][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  501.396108][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  501.397637][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  501.398975][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  501.399843][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  501.490852][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  501.490927][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  501.631949][ T7606] veth0_vlan: entered promiscuous mode
[  501.719272][ T7606] veth1_vlan: entered promiscuous mode
[  504.049259][   T60] Bluetooth: hci5: command tx timeout
[  504.175860][   T60] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  506.125139][ T5113] Bluetooth: hci5: command tx timeout
[  506.953498][ T5113] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  507.057197][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'.
[  507.732653][ T7989] nbd: socks must be embedded in a SOCK_ITEM attr
[  508.362059][ T5113] Bluetooth: hci5: command tx timeout
[  510.530469][ T5113] Bluetooth: hci5: command tx timeout
[  511.285193][ T8007] udevd[8007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  511.416276][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  511.434670][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  511.436392][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  511.441942][ T8007] udevd[8007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  511.444096][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  511.455030][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  512.786853][ T5936] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.146106][   T36] audit: type=1326 audit(1772797827.486:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  513.146172][   T36] audit: type=1326 audit(1772797827.486:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  513.152709][   T36] audit: type=1326 audit(1772797827.486:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  513.152786][   T36] audit: type=1326 audit(1772797827.486:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  513.174449][   T36] audit: type=1326 audit(1772797827.506:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  513.564938][ T5113] Bluetooth: hci3: command tx timeout
[  513.623367][ T5113] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  513.783495][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'.
[  514.454147][ T8033] nbd: socks must be embedded in a SOCK_ITEM attr
[  516.249387][ T5113] Bluetooth: hci3: command tx timeout
[  518.235606][ T8010] udevd[8010]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  518.264036][ T5936] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.285253][ T5113] Bluetooth: hci3: command tx timeout
[  518.449297][ T8007] udevd[8007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  519.077615][ T5936] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.668781][ T5936] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.364532][ T5113] Bluetooth: hci3: command tx timeout
[  520.580697][ T7955] chnl_net:caif_netlink_parms(): no params data found
[  521.223048][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.223136][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.223342][ T7955] bridge_slave_0: entered allmulticast mode
[  521.260887][ T7955] bridge_slave_0: entered promiscuous mode
[  521.275254][   T36] audit: type=1326 audit(1772797835.616:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  521.280472][   T36] audit: type=1326 audit(1772797835.616:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  521.280749][   T36] audit: type=1326 audit(1772797835.616:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  521.298651][   T36] audit: type=1326 audit(1772797835.616:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  521.407915][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.426364][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.426661][ T7955] bridge_slave_1: entered allmulticast mode
[  521.431443][ T7955] bridge_slave_1: entered promiscuous mode
[  521.683675][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.696485][ T8003] chnl_net:caif_netlink_parms(): no params data found
[  521.779240][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.083968][ T7955] team0: Port device team_slave_0 added
[  522.137114][ T7955] team0: Port device team_slave_1 added
[  522.138633][ T5936] bridge_slave_1: left allmulticast mode
[  522.138665][ T5936] bridge_slave_1: left promiscuous mode
[  522.139069][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.300125][ T5936] bridge_slave_0: left allmulticast mode
[  522.300150][ T5936] bridge_slave_0: left promiscuous mode
[  522.300401][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.532239][ T5113] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  524.592042][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'.
[  525.138929][ T8104] nbd: socks must be embedded in a SOCK_ITEM attr
[  525.629580][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  528.058465][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  528.799576][ T5936] bond0 (unregistering): Released all slaves
[  530.088133][ T8007] udevd[8007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  530.130950][ T8007] udevd[8007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  530.336462][   T36] audit: type=1326 audit(1772797844.676:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8117 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  530.337039][   T36] audit: type=1326 audit(1772797844.676:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8117 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  530.337313][   T36] audit: type=1326 audit(1772797844.676:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8117 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  531.184908][   T36] audit: type=1326 audit(1772797845.526:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8117 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  531.663574][ T5113] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  531.774734][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'.
[  532.478966][ T8131] nbd: socks must be embedded in a SOCK_ITEM attr
[  535.019248][ T5936] hsr_slave_0: left promiscuous mode
[  536.062796][ T8146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.365334][ T5936] hsr_slave_1: left promiscuous mode
[  538.366200][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.366220][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.676773][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.676803][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.891560][ T8007] udevd[8007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  539.429996][ T5936] veth1_macvtap: left promiscuous mode
[  539.430112][ T5936] veth0_macvtap: left promiscuous mode
[  539.430383][ T5936] veth1_vlan: left promiscuous mode
[  539.430585][ T5936] veth0_vlan: left promiscuous mode
[  539.633068][   T60] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  539.749991][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[  541.874671][ T8157] nbd: socks must be embedded in a SOCK_ITEM attr
[  547.261846][   T36] audit: type=1326 audit(1772797861.596:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  547.262048][   T36] audit: type=1326 audit(1772797861.596:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  547.262364][   T36] audit: type=1326 audit(1772797861.596:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  547.262756][   T36] audit: type=1326 audit(1772797861.596:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  547.285428][   T36] audit: type=1326 audit(1772797861.626:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8172 comm="syz.4.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ecc5c799 code=0x7ffc0000
[  547.892976][ T5936] team0 (unregistering): Port device team_slave_1 removed
[  548.115917][ T5936] team0 (unregistering): Port device team_slave_0 removed
[  548.249773][    T9] IPVS: starting estimator thread 0...
[  548.344682][ T8187] IPVS: using max 7 ests per chain, 16800 per kthread
[  549.459792][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.460016][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.460295][ T8003] bridge_slave_0: entered allmulticast mode
[  549.501657][ T8003] bridge_slave_0: entered promiscuous mode
[  549.547663][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.547681][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.547709][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.593154][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.593498][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.594231][ T8003] bridge_slave_1: entered allmulticast mode
[  549.678697][ T8003] bridge_slave_1: entered promiscuous mode
[  549.705172][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.705185][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.705205][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.928512][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  549.957712][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  549.960541][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  549.961767][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  549.962583][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  550.076914][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.217135][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.519200][ T7955] hsr_slave_0: entered promiscuous mode
[  550.535362][ T7955] hsr_slave_1: entered promiscuous mode
[  550.536602][ T7955] debugfs: 'hsr0' already exists in 'hsr'
[  550.536631][ T7955] Cannot create hsr debugfs directory
[  550.595710][ T8003] team0: Port device team_slave_0 added
[  550.616914][ T8003] team0: Port device team_slave_1 added
[  552.045150][   T60] Bluetooth: hci4: command tx timeout
[  552.056285][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  552.056330][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  552.056404][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  552.209250][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.209269][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  552.209297][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.868266][ T8003] hsr_slave_0: entered promiscuous mode
[  552.872658][ T8003] hsr_slave_1: entered promiscuous mode
[  552.886467][ T8003] debugfs: 'hsr0' already exists in 'hsr'
[  552.886505][ T8003] Cannot create hsr debugfs directory
[  553.880484][ T8227] Malformed UNC in devname
[  553.880484][ T8227] 
[  553.880806][ T8227] CIFS: VFS: Malformed UNC in devname
[  554.127493][   T60] Bluetooth: hci4: command tx timeout
[  554.757539][ T5936] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.795159][ T5885] IPVS: starting estimator thread 0...
[  555.884857][ T8236] IPVS: using max 8 ests per chain, 19200 per kthread
[  556.203321][ T5936] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.207545][   T60] Bluetooth: hci4: command tx timeout
[  557.023705][ T5936] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.532654][ T5936] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.774820][ T8189] chnl_net:caif_netlink_parms(): no params data found
[  558.285178][   T60] Bluetooth: hci4: command tx timeout
[  559.317108][   T60] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  562.805676][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.805882][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.806165][ T8189] bridge_slave_0: entered allmulticast mode
[  562.850375][ T8189] bridge_slave_0: entered promiscuous mode
[  562.931539][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  562.931615][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  562.949825][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.950451][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.950680][ T8189] bridge_slave_1: entered allmulticast mode
[  562.985111][ T8189] bridge_slave_1: entered promiscuous mode
[  564.367477][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  564.395545][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  564.401853][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  564.403794][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  564.410198][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  564.729908][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.786937][ T8281] Malformed UNC in devname
[  564.786937][ T8281] 
[  564.787009][ T8281] CIFS: VFS: Malformed UNC in devname
[  565.750697][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.821163][ T8189] team0: Port device team_slave_0 added
[  565.835364][ T8189] team0: Port device team_slave_1 added
[  565.901838][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.901857][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.901887][ T8189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.959763][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.959783][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.959813][ T8189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.079792][ T5936] bridge_slave_1: left allmulticast mode
[  566.079826][ T5936] bridge_slave_1: left promiscuous mode
[  566.080093][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.178464][ T5936] bridge_slave_0: left allmulticast mode
[  566.178499][ T5936] bridge_slave_0: left promiscuous mode
[  566.178797][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.269208][ T5936] bridge_slave_1: left allmulticast mode
[  566.269241][ T5936] bridge_slave_1: left promiscuous mode
[  566.269498][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.655715][   T60] Bluetooth: hci2: command tx timeout
[  566.658902][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  566.702381][ T5936] bridge_slave_0: left allmulticast mode
[  566.702423][ T5936] bridge_slave_0: left promiscuous mode
[  566.702742][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.719368][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  566.738412][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  566.759195][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  566.762357][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  567.435485][   T36] audit: type=1326 audit(1772797881.733:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8292 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  567.435759][   T36] audit: type=1326 audit(1772797881.733:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8292 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  567.436115][   T36] audit: type=1326 audit(1772797881.733:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8292 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  567.474526][   T36] audit: type=1326 audit(1772797881.761:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8292 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d16ec799 code=0x7ffc0000
[  568.275022][ T8300] Malformed UNC in devname
[  568.275022][ T8300] 
[  568.275092][ T8300] CIFS: VFS: Malformed UNC in devname
[  568.818342][ T5113] Bluetooth: hci2: command tx timeout
[  569.042886][ T5113] Bluetooth: hci6: command tx timeout
[  569.233677][ T5938] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  569.266768][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  569.330827][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  569.376950][ T5936] bond0 (unregistering): Released all slaves
[  569.436841][ T5938] usb 3-1: Using ep0 maxpacket: 32
[  569.443188][ T5938] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  569.443219][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.443233][ T5938] usb 3-1: Product: syz
[  569.443244][ T5938] usb 3-1: Manufacturer: syz
[  569.443255][ T5938] usb 3-1: SerialNumber: syz
[  569.466116][ T5938] usb 3-1: config 0 descriptor??
[  569.532378][ T5938] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  569.535737][ T5938] dvb-usb: bulk message failed: -22 (4/0)
[  569.535793][ T5938] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  569.536000][ T5938] dvb-usb: bulk message failed: -22 (5/0)
[  569.536044][ T5938] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  569.587834][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  569.588878][ T5938] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  569.589026][ T5938] usb 3-1: media controller created
[  569.637009][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  569.742037][ T8302] dvb-usb: bulk message failed: -22 (7/0)
[  569.742064][ T8302] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  569.742138][ T8302] ttusb2: i2c transfer failed.
[  569.837511][ T5938] usb 3-1: selecting invalid altsetting 3
[  569.837535][ T5938] ttusb2: set interface to alts=3 failed
[  569.910251][ T5938] DVB: Unable to find symbol tda10086_attach()
[  569.910270][ T5938] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  569.911287][ T5938] dvb-usb: bulk message failed: -22 (4/0)
[  569.911308][ T5938] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  569.911443][ T5938] dvb-usb: bulk message failed: -22 (5/0)
[  569.911458][ T5938] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  569.911547][ T5938] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  569.929222][ T5938] usb 3-1: USB disconnect, device number 5
[  570.123564][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.126579][ T5938] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  570.217532][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.242072][ T5936] bond0 (unregistering): Released all slaves
[  570.776393][ T5936] !: left promiscuous mode
[  571.040288][ T5113] Bluetooth: hci2: command tx timeout
[  571.132028][ T8189] hsr_slave_0: entered promiscuous mode
[  571.133096][ T8189] hsr_slave_1: entered promiscuous mode
[  571.147700][ T8189] debugfs: 'hsr0' already exists in 'hsr'
[  571.147722][ T8189] Cannot create hsr debugfs directory
[  571.221078][ T5113] Bluetooth: hci6: command tx timeout
[  571.242925][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  571.427929][    T9] usb 3-1: Using ep0 maxpacket: 16
[  571.484492][    T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  571.484525][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.484546][    T9] usb 3-1: Product: syz
[  571.484561][    T9] usb 3-1: Manufacturer: syz
[  571.484576][    T9] usb 3-1: SerialNumber: syz
[  572.014861][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  572.021196][    T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  572.041215][    T9] usb 3-1: USB disconnect, device number 6
[  573.263630][ T5113] Bluetooth: hci2: command tx timeout
[  573.433315][ T5113] Bluetooth: hci6: command tx timeout
[  573.454859][ T5936] hsr_slave_0: left promiscuous mode
[  573.499318][ T5936] hsr_slave_1: left promiscuous mode
[  573.500100][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  573.500119][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.522716][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  573.522737][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.732787][ T5936] hsr_slave_0: left promiscuous mode
[  573.764703][ T5936] hsr_slave_1: left promiscuous mode
[  573.770585][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.838970][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.862526][ T5113] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  574.047990][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'.
[  574.626510][ T8331] nbd: socks must be embedded in a SOCK_ITEM attr
[  575.318355][ T5936] veth1_macvtap: left promiscuous mode
[  575.377170][ T5936] veth0_macvtap: left promiscuous mode
[  575.386464][ T5936] veth1_vlan: left promiscuous mode
[  575.532142][ T5936] veth0_vlan: left promiscuous mode
[  575.619099][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  575.659792][ T5802] Bluetooth: hci6: command tx timeout
[  575.837014][ T5936] veth1_vlan: left promiscuous mode
[  575.880074][ T5936] veth0_vlan: left promiscuous mode
[  575.887650][    T9] usb 5-1: Using ep0 maxpacket: 16
[  576.098561][    T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  576.098610][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  576.098734][    T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  576.099045][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.311160][    T9] usb 5-1: config 0 descriptor??
[  578.416224][    T9] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  578.474697][ T8010] udevd[8010]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  578.585305][ T8010] udevd[8010]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  580.112150][ T5884] usb 5-1: USB disconnect, device number 8
[  580.454185][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  580.637232][ T5936] team0 (unregistering): Port device team_slave_1 removed
[  580.658631][    T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  580.658663][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.658687][    T9] usb 3-1: Product: syz
[  580.658698][    T9] usb 3-1: Manufacturer: syz
[  580.658708][    T9] usb 3-1: SerialNumber: syz
[  580.711236][    T9] usb 3-1: config 0 descriptor??
[  580.754498][ T5936] team0 (unregistering): Port device team_slave_0 removed
[  581.587909][ T5936] team0 (unregistering): Port device team_slave_1 removed
[  581.612777][    T9] usb 3-1: Firmware version (0.0) predates our first public release.
[  581.612798][    T9] usb 3-1: Please update to version 0.2 or newer
[  581.705361][ T5936] team0 (unregistering): Port device team_slave_0 removed
[  582.138780][ T8274] chnl_net:caif_netlink_parms(): no params data found
[  582.444824][    T9] usb 3-1: USB disconnect, device number 7
[  583.230109][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.230327][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.230598][ T8274] bridge_slave_0: entered allmulticast mode
[  583.282877][ T8274] bridge_slave_0: entered promiscuous mode
[  583.339236][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  583.411557][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.411682][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.411905][ T8274] bridge_slave_1: entered allmulticast mode
[  583.418084][ T8274] bridge_slave_1: entered promiscuous mode
[  583.530455][    T9] usb 3-1: Using ep0 maxpacket: 16
[  583.538836][    T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  583.538869][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.538889][    T9] usb 3-1: Product: syz
[  583.538904][    T9] usb 3-1: Manufacturer: syz
[  583.538920][    T9] usb 3-1: SerialNumber: syz
[  583.589348][ T8274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.589436][ T8189] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  583.594876][    T9] usb 3-1: config 0 descriptor??
[  583.651343][ T8274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.652359][ T8189] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  583.790011][ T8189] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  584.190986][    T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  584.194669][ T8289] chnl_net:caif_netlink_parms(): no params data found
[  584.213633][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  584.220494][    T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  584.220584][    T9] usb 3-1: media controller created
[  584.242194][ T8189] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  584.347842][ T8375] overlayfs: missing 'lowerdir'
[  584.603544][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  584.656030][ T8362] dtv5100: wlen = 0, aborting.
[  584.663777][ T8274] team0: Port device team_slave_0 added
[  584.738100][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  584.738290][    T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  584.738308][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  584.777941][    T9] usb 3-1: USB disconnect, device number 8
[  584.951010][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  585.012806][ T8274] team0: Port device team_slave_1 added
[  586.360289][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.360319][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.360352][ T8274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.468706][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.468727][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.468759][ T8274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.491601][ T5938] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  586.626222][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.627315][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.717822][ T8395] overlayfs: missing 'lowerdir'
[  586.951124][ T5938] usb 5-1: Using ep0 maxpacket: 16
[  586.963151][ T5938] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.963187][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0
[  586.963221][ T5938] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  586.963244][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.966430][ T8289] bridge_slave_0: entered allmulticast mode
[  586.969409][ T8289] bridge_slave_0: entered promiscuous mode
[  587.037635][ T5938] usb 5-1: config 0 descriptor??
[  587.100922][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.101203][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.101593][ T8289] bridge_slave_1: entered allmulticast mode
[  587.107035][ T8289] bridge_slave_1: entered promiscuous mode
[  587.434263][ T8274] hsr_slave_0: entered promiscuous mode
[  587.435773][ T8274] hsr_slave_1: entered promiscuous mode
[  587.436872][ T8274] debugfs: 'hsr0' already exists in 'hsr'
[  587.436899][ T8274] Cannot create hsr debugfs directory
[  587.523625][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  587.545211][ T5938] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  587.580760][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  587.821787][ T5936] IPVS: stop unused estimator thread 0...
[  587.957948][ T8289] team0: Port device team_slave_0 added
[  588.001736][ T8289] team0: Port device team_slave_1 added
[  588.059972][ T8403] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  588.416126][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0
[  588.416147][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  588.416257][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  588.442289][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1
[  588.442360][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  588.444757][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  588.532786][ T5962] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  588.693470][ T5962] usb 3-1: Using ep0 maxpacket: 16
[  588.722123][ T5962] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  588.722156][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.722178][ T5962] usb 3-1: Product: syz
[  588.722193][ T5962] usb 3-1: Manufacturer: syz
[  588.722209][ T5962] usb 3-1: SerialNumber: syz
[  588.790373][ T5962] usb 3-1: config 0 descriptor??
[  589.267407][ T5962] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  589.291506][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  589.292889][ T5962] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  589.292978][ T5962] usb 3-1: media controller created
[  589.354062][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  589.547309][ T8289] hsr_slave_0: entered promiscuous mode
[  589.563162][ T8289] hsr_slave_1: entered promiscuous mode
[  589.566089][ T8289] debugfs: 'hsr0' already exists in 'hsr'
[  589.566131][ T8289] Cannot create hsr debugfs directory
[  590.004028][ T5962] zl10353_read_register: readreg error (reg=127, ret==0)
[  590.004098][ T5962] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  590.004113][ T5962] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  590.032189][ T8406] dtv5100: wlen = 0, aborting.
[  590.158244][ T5962] usb 3-1: USB disconnect, device number 9
[  590.362521][ T5962] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  590.840989][ T5962] usb 5-1: USB disconnect, device number 9
[  591.382795][ T8413] overlayfs: missing 'lowerdir'
[  592.239734][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.568815][ T8189] 8021q: adding VLAN 0 to HW filter on device team0
[  592.605193][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.610392][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  592.645989][ T8419] overlayfs: missing 'lowerdir'
[  592.660656][ T5936] bridge_slave_1: left allmulticast mode
[  592.660682][ T5936] bridge_slave_1: left promiscuous mode
[  592.660860][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.844757][ T5936] bridge_slave_0: left allmulticast mode
[  592.844792][ T5936] bridge_slave_0: left promiscuous mode
[  592.845114][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.940177][ T5936] bridge_slave_1: left allmulticast mode
[  592.940212][ T5936] bridge_slave_1: left promiscuous mode
[  592.940469][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.044043][ T5936] bridge_slave_0: left allmulticast mode
[  593.044078][ T5936] bridge_slave_0: left promiscuous mode
[  593.044351][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.781585][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  593.897982][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.969747][ T5936] bond0 (unregistering): Released all slaves
[  594.495222][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  594.658532][ T8432] overlayfs: missing 'lowerdir'
[  594.966517][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.034852][ T5936] bond0 (unregistering): Released all slaves
[  595.342894][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.343069][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state
[  595.757033][ T5936] hsr_slave_0: left promiscuous mode
[  595.809958][ T5936] hsr_slave_1: left promiscuous mode
[  595.811047][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0
[  595.874439][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1
[  595.927813][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  596.536542][ T5884] usb 3-1: Using ep0 maxpacket: 16
[  596.539035][ T5884] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.539072][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0
[  596.539109][ T5884] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  596.539134][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.621574][ T5884] usb 3-1: config 0 descriptor??
[  596.738287][ T5936] hsr_slave_0: left promiscuous mode
[  596.795850][ T5936] hsr_slave_1: left promiscuous mode
[  596.796909][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.840942][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1
[  597.147912][ T5884] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  597.864358][ T5936] team0 (unregistering): Port device team_slave_1 removed
[  597.990730][ T5936] team0 (unregistering): Port device team_slave_0 removed
[  599.253612][ T5936] team0 (unregistering): Port device team_slave_1 removed
[  599.340340][ T5936] team0 (unregistering): Port device team_slave_0 removed
[  600.585579][    T9] usb 3-1: USB disconnect, device number 10
[  602.131603][ T8274] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  602.215469][ T8274] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  602.497855][ T8274] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  602.593891][ T8475] overlayfs: missing 'lowerdir'
[  603.070321][ T8274] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  603.411909][ T8289] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  603.501166][ T8289] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  603.546318][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.573207][ T8289] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  603.638597][ T8289] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  604.159362][ T8274] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.247074][ T8274] 8021q: adding VLAN 0 to HW filter on device team0
[  604.290353][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.290567][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state
[  604.370791][  T117] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.372504][  T117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.488286][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.807218][ T8289] 8021q: adding VLAN 0 to HW filter on device team0
[  605.040613][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.041149][ T6208] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.251180][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.251320][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.484737][ T8189] veth0_vlan: entered promiscuous mode
[  605.577820][ T8189] veth1_vlan: entered promiscuous mode
[  606.789753][ T8507] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  606.945268][ T8189] veth0_macvtap: entered promiscuous mode
[  606.957251][ T8507] usb 3-1: Using ep0 maxpacket: 16
[  607.028692][ T8507] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  607.028740][ T8507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.028762][ T8507] usb 3-1: Product: syz
[  607.028778][ T8507] usb 3-1: Manufacturer: syz
[  607.028795][ T8507] usb 3-1: SerialNumber: syz
[  607.065245][ T8274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.067933][ T8189] veth1_macvtap: entered promiscuous mode
[  607.113433][ T8507] usb 3-1: config 0 descriptor??
[  607.180679][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.298596][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.366880][ T1408] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.385751][ T1408] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.389332][ T1408] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.427481][   T42] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.562760][ T8507] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  607.594525][ T8507] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  607.598461][ T8507] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  607.598513][ T8507] usb 3-1: media controller created
[  607.696817][ T8507] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  607.868582][ T6167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.868606][ T6167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.960542][ T8507] zl10353_read_register: readreg error (reg=127, ret==0)
[  607.960608][ T8507] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  607.960623][ T8507] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  608.002730][ T8507] usb 3-1: USB disconnect, device number 11
[  608.107586][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.107621][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.220247][ T8289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  608.294867][ T8507] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  608.931999][ T8274] veth0_vlan: entered promiscuous mode
[  609.023567][ T8571] overlayfs: missing 'lowerdir'
[  609.505373][ T8274] veth1_vlan: entered promiscuous mode
[  610.001422][ T8274] veth0_macvtap: entered promiscuous mode
[  610.066209][ T8274] veth1_macvtap: entered promiscuous mode
[  610.346251][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.351891][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  610.467745][ T8589] overlayfs: missing 'lowerdir'
[  610.824945][  T117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.831378][  T117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.833305][  T117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.864762][  T117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.028411][ T8289] veth0_vlan: entered promiscuous mode
[  613.057957][ T6169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.057975][ T6169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.189773][ T8289] veth1_vlan: entered promiscuous mode
[  613.567956][ T6169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.567981][ T6169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.796869][ T8606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  613.852251][ T8289] veth0_macvtap: entered promiscuous mode
[  613.904549][ T8289] veth1_macvtap: entered promiscuous mode
[  614.005770][ T8607] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  614.346718][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.383983][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.443756][ T6167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.444277][ T6167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.458785][ T6167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.483293][ T6167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.765713][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.765739][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.274189][ T8644] overlayfs: missing 'lowerdir'
[  617.307807][ T1299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.307832][ T1299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.274929][ T8669] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  623.305108][ T5962] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  623.384467][ T8711] overlayfs: missing 'lowerdir'
[  623.497354][ T5962] usb 7-1: Using ep0 maxpacket: 16
[  623.504171][ T5962] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  623.504204][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.504227][ T5962] usb 7-1: Product: syz
[  623.504243][ T5962] usb 7-1: Manufacturer: syz
[  623.504267][ T5962] usb 7-1: SerialNumber: syz
[  624.047685][ T5962] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71
[  624.069010][ T5962] usb 7-1: USB disconnect, device number 2
[  625.704149][ T8507] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  625.891325][ T8507] usb 7-1: Using ep0 maxpacket: 32
[  625.912560][ T8507] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  625.912594][ T8507] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.912675][ T8507] usb 7-1: Product: syz
[  625.912692][ T8507] usb 7-1: Manufacturer: syz
[  625.912707][ T8507] usb 7-1: SerialNumber: syz
[  625.966630][ T8507] usb 7-1: config 0 descriptor??
[  625.995949][ T8507] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  625.996070][ T8507] dvb-usb: bulk message failed: -22 (4/0)
[  625.996088][ T8507] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  625.996223][ T8507] dvb-usb: bulk message failed: -22 (5/0)
[  625.996240][ T8507] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  626.126882][ T8507] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  626.128100][ T8507] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  626.128182][ T8507] usb 7-1: media controller created
[  626.145491][ T8507] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  626.230054][ T8507] usb 7-1: selecting invalid altsetting 3
[  626.230076][ T8507] ttusb2: set interface to alts=3 failed
[  626.402110][ T8507] DVB: Unable to find symbol tda10086_attach()
[  626.402129][ T8507] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  626.435567][ T8507] dvb-usb: bulk message failed: -22 (4/0)
[  626.435592][ T8507] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  626.435729][ T8507] dvb-usb: bulk message failed: -22 (5/0)
[  626.435745][ T8507] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  626.435808][ T8507] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  626.492890][ T8507] usb 7-1: USB disconnect, device number 3
[  626.583021][ T8507] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  628.329316][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  628.331830][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  628.356227][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  628.510508][   T10] usb 6-1: Using ep0 maxpacket: 16
[  628.518273][   T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  628.518307][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.518328][   T10] usb 6-1: Product: syz
[  628.518352][   T10] usb 6-1: Manufacturer: syz
[  628.518367][   T10] usb 6-1: SerialNumber: syz
[  628.585356][   T10] usb 6-1: config 0 descriptor??
[  629.045529][   T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  629.069824][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  629.071318][   T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  629.071432][   T10] usb 6-1: media controller created
[  629.126151][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  629.261288][   T10] zl10353_read_register: readreg error (reg=127, ret==0)
[  629.261351][   T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  629.261367][   T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  629.297241][   T10] usb 6-1: USB disconnect, device number 2
[  629.419615][   T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  629.886908][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  630.698726][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  630.715475][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  630.740610][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  630.750198][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  631.855355][ T8795] chnl_net:caif_netlink_parms(): no params data found
[  632.031915][   T36] audit: type=1326 audit(1772797942.176:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8826 comm="syz.7.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eee65c799 code=0x7ffc0000
[  632.032425][   T36] audit: type=1326 audit(1772797942.176:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8826 comm="syz.7.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eee65c799 code=0x7ffc0000
[  632.274281][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.281633][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.281925][ T8795] bridge_slave_0: entered allmulticast mode
[  632.298441][ T8795] bridge_slave_0: entered promiscuous mode
[  632.368352][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.368488][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.368761][ T8795] bridge_slave_1: entered allmulticast mode
[  632.422267][ T8795] bridge_slave_1: entered promiscuous mode
[  632.934081][ T5802] Bluetooth: hci3: command tx timeout
[  635.538802][ T8795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  635.545232][ T8795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  635.608080][ T5802] Bluetooth: hci3: command tx timeout
[  635.811790][ T8795] team0: Port device team_slave_0 added
[  635.828208][ T8795] team0: Port device team_slave_1 added
[  636.939930][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  636.939951][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.939980][ T8795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  637.601445][   T10] IPVS: starting estimator thread 0...
[  637.681074][ T8795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  637.681093][ T8795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  637.681140][ T8795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  637.690197][ T8888] IPVS: using max 8 ests per chain, 19200 per kthread
[  637.806187][ T5802] Bluetooth: hci3: command tx timeout
[  638.894349][ T6167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.205370][ T8795] hsr_slave_0: entered promiscuous mode
[  639.232480][ T8795] hsr_slave_1: entered promiscuous mode
[  639.233484][ T8795] debugfs: 'hsr0' already exists in 'hsr'
[  639.233512][ T8795] Cannot create hsr debugfs directory
[  639.722227][ T6167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.028838][ T5802] Bluetooth: hci3: command tx timeout
[  640.332731][ T6167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.558274][ T8917] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0)
[  640.802336][   T36] audit: type=1326 audit(1772797950.393:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8919 comm="syz.6.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4633cc799 code=0x7ffc0000
[  640.802398][   T36] audit: type=1326 audit(1772797950.393:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8919 comm="syz.6.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4633cc799 code=0x7ffc0000
[  640.802447][   T36] audit: type=1326 audit(1772797950.393:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8919 comm="syz.6.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4633cc799 code=0x7ffc0000
[  640.805071][   T36] audit: type=1326 audit(1772797950.393:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8919 comm="syz.6.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4633cc799 code=0x7ffc0000
[  641.162679][ T6167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.187636][ T6167] bridge_slave_1: left allmulticast mode
[  645.187671][ T6167] bridge_slave_1: left promiscuous mode
[  645.339726][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.466507][ T6167] bridge_slave_0: left allmulticast mode
[  645.466532][ T6167] bridge_slave_0: left promiscuous mode
[  645.466771][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.219095][   T36] audit: type=1326 audit(1772797956.391:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30eefbc799 code=0x7ffc0000
[  647.219160][   T36] audit: type=1326 audit(1772797956.391:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30eefbc799 code=0x7ffc0000
[  647.219210][   T36] audit: type=1326 audit(1772797956.391:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30eefbc799 code=0x7ffc0000
[  647.219258][   T36] audit: type=1326 audit(1772797956.391:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30eefbc799 code=0x7ffc0000
[  647.219314][   T36] audit: type=1326 audit(1772797956.391:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.5.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30eefbc799 code=0x7ffc0000
[  648.450790][ T6167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  648.469136][ T8998] ALSA: seq fatal error: cannot create timer (-22)
[  648.543004][ T8998] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present
[  648.599841][ T6167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  648.659175][ T6167] bond0 (unregistering): Released all slaves
[  649.002487][ T6167] !: left promiscuous mode
[  649.482716][ T8795] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  649.592684][ T8795] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  649.693845][ T8795] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  649.753464][ T8766] IPVS: starting estimator thread 0...
[  649.760380][ T8795] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  649.849705][ T9012] IPVS: using max 9 ests per chain, 21600 per kthread
[  651.330858][   T36] audit: type=1326 audit(1772797960.237:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eee65c799 code=0x7ffc0000
[  651.331403][   T36] audit: type=1326 audit(1772797960.237:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0eee65c799 code=0x7ffc0000
[  651.341650][   T36] audit: type=1326 audit(1772797960.247:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eee65c799 code=0x7ffc0000
[  651.358591][   T36] audit: type=1326 audit(1772797960.256:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.7.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eee65c799 code=0x7ffc0000
[  653.012871][ T6167] hsr_slave_0: left promiscuous mode
[  653.202665][ T6167] hsr_slave_1: left promiscuous mode
[  653.203780][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  653.203809][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_0
[  653.353951][ T6167] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  653.356320][ T6167] batman_adv: batadv0: Removing interface: batadv_slave_1
[  653.997804][ T6167] veth1_macvtap: left promiscuous mode
[  653.997916][ T6167] veth0_macvtap: left promiscuous mode
[  653.998183][ T6167] veth1_vlan: left promiscuous mode
[  653.998365][ T6167] veth0_vlan: left promiscuous mode
[  658.002632][ T9117] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0)
[  660.386377][ T6167] team0 (unregistering): Port device team_slave_1 removed
[  660.644507][ T9134] overlayfs: missing 'lowerdir'
[  661.237177][ T6167] team0 (unregistering): Port device team_slave_0 removed
[  662.608672][ T9145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.638410][ T9150] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  668.638441][ T9150] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  668.638468][ T9150] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  668.641720][ T8795] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.835021][ T8795] 8021q: adding VLAN 0 to HW filter on device team0
[  668.859348][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.860403][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.996735][  T140] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.023403][  T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.188804][ T5884] IPVS: starting estimator thread 0...
[  669.372556][ T9186] IPVS: using max 8 ests per chain, 19200 per kthread
[  670.659708][ T8795] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.833009][ T6167] IPVS: stop unused estimator thread 0...
[  670.890115][ T5785] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  671.057648][ T5785] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  671.057672][ T5785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.057688][ T5785] usb 7-1: Product: syz
[  671.057699][ T5785] usb 7-1: Manufacturer: syz
[  671.057710][ T5785] usb 7-1: SerialNumber: syz
[  671.107991][ T5785] usb 7-1: config 0 descriptor??
[  671.963502][ T8795] veth0_vlan: entered promiscuous mode
[  672.027630][ T8795] veth1_vlan: entered promiscuous mode
[  672.155998][ T8795] veth0_macvtap: entered promiscuous mode
[  672.199653][ T8795] veth1_macvtap: entered promiscuous mode
[  672.275615][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_0
[  672.314184][ T8795] batman_adv: batadv0: Interface activated: batadv_slave_1
[  672.382638][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  672.382915][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  672.383465][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  672.383953][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.450196][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.450220][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.830627][ T1299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.830651][ T1299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.849190][ T8507] usb 7-1: USB disconnect, device number 4
[  677.592944][ T9318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  680.420122][ T9323] CIFS mount error: No usable UNC path provided in device string!
[  680.420122][ T9323] 
[  680.420219][ T9323] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  681.223330][ T5113] Bluetooth: hci4: command 0x0406 tx timeout
[  683.359032][ T9352] overlayfs: missing 'lowerdir'
[  684.287353][ T9361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  689.847040][ T8766] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  689.968831][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'.
[  690.026679][ T9397] vlan2: entered promiscuous mode
[  690.026703][ T9397] team0: entered promiscuous mode
[  690.026714][ T9397] team_slave_0: entered promiscuous mode
[  690.026928][ T9397] team_slave_1: entered promiscuous mode
[  690.050863][ T8766] usb 6-1: Using ep0 maxpacket: 32
[  690.062910][ T8766] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  690.080228][ T8766] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  690.080263][ T8766] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  690.080285][ T8766] usb 6-1: Product: syz
[  690.080301][ T8766] usb 6-1: Manufacturer: syz
[  690.080317][ T8766] usb 6-1: SerialNumber: syz
[  690.120621][ T8766] usb 6-1: config 0 descriptor??
[  690.123013][ T9385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  690.144057][ T8766] hub 6-1:0.0: bad descriptor, ignoring hub
[  690.144101][ T8766] hub 6-1:0.0: probe with driver hub failed with error -5
[  691.317401][ T5904] usb 6-1: USB disconnect, device number 3
[  691.985626][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  692.283633][    T9] usb 6-1: Using ep0 maxpacket: 32
[  692.286379][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  692.287172][    T9] usb 6-1: language id specifier not provided by device, defaulting to English
[  692.294699][    T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  692.294732][    T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  692.294754][    T9] usb 6-1: Product: syz
[  692.294770][    T9] usb 6-1: SerialNumber: ఇ
[  692.428535][    T9] usb 6-1: config 0 descriptor??
[  692.430277][ T9385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  692.457098][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[  692.457140][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[  693.859493][ T9445] ALSA: seq fatal error: cannot create timer (-22)
[  693.861039][ T5904] usb 6-1: USB disconnect, device number 4
[  694.001517][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  694.001574][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  694.573494][ T9445] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present
[  695.328966][ T1237] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  695.521417][ T1237] usb 7-1: Using ep0 maxpacket: 16
[  695.527335][ T1237] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  695.527370][ T1237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.527392][ T1237] usb 7-1: Product: syz
[  695.527409][ T1237] usb 7-1: Manufacturer: syz
[  695.527424][ T1237] usb 7-1: SerialNumber: syz
[  695.707811][ T1237] usb 7-1: config 0 descriptor??
[  696.194611][ T5113] Bluetooth: hci2: command 0x0406 tx timeout
[  696.207809][ T1237] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  696.244656][ T1237] usb 7-1: USB disconnect, device number 5
[  696.835678][ T1237] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  696.996051][ T1237] usb 6-1: Using ep0 maxpacket: 16
[  696.998118][ T1237] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  696.998156][ T1237] usb 6-1: config 0 interface 0 has no altsetting 0
[  696.998194][ T1237] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  696.998221][ T1237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.105018][ T1237] usb 6-1: config 0 descriptor??
[  697.724537][ T1237] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  699.325590][ T5904] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  699.491989][ T5904] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  699.492029][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.492046][ T5904] usb 7-1: Product: syz
[  699.492075][ T5904] usb 7-1: Manufacturer: syz
[  699.492092][ T5904] usb 7-1: SerialNumber: syz
[  699.568449][ T5904] usb 7-1: config 0 descriptor??
[  700.332752][ T5904] usb 7-1: Firmware version (0.0) predates our first public release.
[  700.332781][ T5904] usb 7-1: Please update to version 0.2 or newer
[  701.073264][ T5962] usb 6-1: USB disconnect, device number 5
[  701.131869][ T5904] usb 7-1: USB disconnect, device number 6
[  701.695363][ T5802] Bluetooth: hci6: command 0x0406 tx timeout
[  703.225901][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  703.375852][ T9537] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  703.375998][ T9537] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  703.376055][ T9537] netdevsim netdevsim7: Falling back to sysfs fallback for: .
[  703.729241][   T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  703.729277][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.729298][   T10] usb 3-1: Product: syz
[  703.729314][   T10] usb 3-1: Manufacturer: syz
[  703.729330][   T10] usb 3-1: SerialNumber: syz
[  704.099553][   T10] usb 3-1: config 0 descriptor??
[  705.550463][   T10] usb 3-1: Firmware version (0.0) predates our first public release.
[  705.550560][   T10] usb 3-1: Please update to version 0.2 or newer
[  709.149068][   T10] usb 3-1: USB disconnect, device number 12
[  709.391841][ T5904] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  710.599699][ T5904] usb 7-1: Using ep0 maxpacket: 16
[  710.602838][ T5904] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  710.602878][ T5904] usb 7-1: config 0 interface 0 has no altsetting 0
[  710.602915][ T5904] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  710.602939][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.743241][ T5904] usb 7-1: config 0 descriptor??
[  711.284521][ T5904] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0
[  713.067831][ T1229] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  713.780199][ T1229] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[  713.780232][ T1229] usb 9-1: config 1 has no interface number 0
[  713.780283][ T1229] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  713.780308][ T1229] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  713.780342][ T1229] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608
[  713.780360][ T1229] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  713.923028][ T1229] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  713.923062][ T1229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.923083][ T1229] usb 9-1: Product: syz
[  713.923099][ T1229] usb 9-1: Manufacturer: syz
[  713.923114][ T1229] usb 9-1: SerialNumber: syz
[  714.146775][ T9606] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  714.147735][ T9606] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  714.193766][ T1229] usb 9-1: Error in usbnet_get_endpoints (-22)
[  714.287286][ T5904] usb 7-1: USB disconnect, device number 7
[  714.974803][ T9629] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  714.974863][ T9629] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  714.974932][ T9629] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  718.750758][ T8507] usb 9-1: USB disconnect, device number 2
[  720.996830][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  721.213401][    T9] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[  721.213430][    T9] usb 9-1: config 1 has no interface number 0
[  721.213467][    T9] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  721.213487][    T9] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  721.213506][    T9] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608
[  721.213523][    T9] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  721.227078][    T9] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  721.227102][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.227116][    T9] usb 9-1: Product: syz
[  721.227127][    T9] usb 9-1: Manufacturer: syz
[  721.227138][    T9] usb 9-1: SerialNumber: syz
[  721.232706][ T9645] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  721.236267][ T9645] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  721.251405][    T9] usb 9-1: Error in usbnet_get_endpoints (-22)
[  721.563171][ T5904] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  722.046365][ T5904] usb 8-1: config 1 has an invalid interface number: 7 but max is 0
[  722.046397][ T5904] usb 8-1: config 1 has no interface number 0
[  722.046449][ T5904] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  722.046476][ T5904] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  722.046502][ T5904] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608
[  722.046527][ T5904] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  722.165143][ T5904] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  722.165179][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.165200][ T5904] usb 8-1: Product: syz
[  722.165216][ T5904] usb 8-1: Manufacturer: syz
[  722.165232][ T5904] usb 8-1: SerialNumber: syz
[  722.218102][ T9654] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  722.218459][ T9654] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  722.224341][ T5904] usb 8-1: Error in usbnet_get_endpoints (-22)
[  725.110002][ T9691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  727.777255][ T5785] usb 9-1: USB disconnect, device number 3
[  729.739280][  T809] usb 8-1: USB disconnect, device number 2
[  729.934020][ T9720] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present
[  729.937087][ T8507] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  730.036926][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.8.721'.
[  730.386507][ T9723] nbd: socks must be embedded in a SOCK_ITEM attr
[  731.126887][ T8507] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  731.126921][ T8507] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.126942][ T8507] usb 7-1: Product: syz
[  731.126972][ T8507] usb 7-1: Manufacturer: syz
[  731.126988][ T8507] usb 7-1: SerialNumber: syz
[  731.166186][ T8507] usb 7-1: config 0 descriptor??
[  733.237593][ T8507] usb 7-1: Firmware version (0.0) predates our first public release.
[  733.237678][ T8507] usb 7-1: Please update to version 0.2 or newer
[  734.131086][  T809] usb 7-1: USB disconnect, device number 8
[  734.437942][ T9564] udevd[9564]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  734.547775][ T9564] udevd[9564]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  735.252126][  T809] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  735.444461][ T5962] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  735.449794][  T809] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  735.449868][  T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.449884][  T809] usb 7-1: Product: syz
[  735.449895][  T809] usb 7-1: Manufacturer: syz
[  735.449906][  T809] usb 7-1: SerialNumber: syz
[  735.516126][  T809] usb 7-1: config 0 descriptor??
[  735.654832][ T5962] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[  735.654854][ T5962] usb 9-1: config 1 has no interface number 0
[  735.654888][ T5962] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  735.654949][ T5962] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  735.654967][ T5962] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608
[  735.654985][ T5962] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  735.795809][ T5962] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  735.795879][ T5962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.795895][ T5962] usb 9-1: Product: syz
[  735.795906][ T5962] usb 9-1: Manufacturer: syz
[  735.795917][ T5962] usb 9-1: SerialNumber: syz
[  736.916037][ T9751] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  736.916453][ T9751] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  737.087809][ T5962] usb 9-1: Error in usbnet_get_endpoints (-22)
[  737.241506][  T809] usb 7-1: Firmware version (0.0) predates our first public release.
[  737.241536][  T809] usb 7-1: Please update to version 0.2 or newer
[  737.242733][  T809] usb 7-1: Firmware: build 
[  737.684302][  T809] usb 7-1: USB disconnect, device number 9
[  739.127211][ T9785] netlink: 52 bytes leftover after parsing attributes in process `syz.6.733'.
[  739.157181][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.196065][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.149012][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  740.354763][    T9] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  740.354794][    T9] usb 6-1: config 1 has no interface number 0
[  740.354842][    T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  740.354869][    T9] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  740.354896][    T9] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608
[  740.354921][    T9] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  740.362680][    T9] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  740.362775][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.362831][    T9] usb 6-1: Product: syz
[  740.362873][    T9] usb 6-1: Manufacturer: syz
[  740.362921][    T9] usb 6-1: SerialNumber: syz
[  740.514890][ T9781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  740.515919][ T9781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  740.562756][    T9] usb 6-1: Error in usbnet_get_endpoints (-22)
[  740.894223][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  741.086650][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  741.086711][    T9] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  741.086735][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.171876][    T9] usb 3-1: config 0 descriptor??
[  741.228767][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  741.410368][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'.
[  741.495946][    T9] usb 3-1: USB disconnect, device number 13
[  743.578794][  T809] usb 9-1: USB disconnect, device number 4
[  744.441242][ T9828] netlink: 76 bytes leftover after parsing attributes in process `syz.7.744'.
[  744.442636][ T9828] netlink: 52 bytes leftover after parsing attributes in process `syz.7.744'.
[  744.449838][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.458202][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.167282][ T8507] usb 6-1: USB disconnect, device number 6
[  746.525744][ T8507] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  746.687396][ T8507] usb 9-1: Using ep0 maxpacket: 16
[  746.692543][ T8507] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  746.692582][ T8507] usb 9-1: config 0 interface 0 has no altsetting 0
[  746.692619][ T8507] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  746.692644][ T8507] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.782316][ T8507] usb 9-1: config 0 descriptor??
[  747.319472][ T8507] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[  750.874023][  T809] usb 8-1: new low-speed USB device number 3 using dummy_hcd
[  751.054639][  T809] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  751.054670][  T809] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  751.054720][  T809] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  751.054764][  T809] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  751.054788][  T809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.084775][ T9875] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  751.087973][ T5962] usb 9-1: USB disconnect, device number 5
[  751.233873][  T809] hub 8-1:1.0: bad descriptor, ignoring hub
[  751.233902][  T809] hub 8-1:1.0: probe with driver hub failed with error -5
[  751.234638][  T809] cdc_wdm 8-1:1.0: skipping garbage
[  751.234654][  T809] cdc_wdm 8-1:1.0: skipping garbage
[  751.340106][  T809] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  751.340144][  T809] cdc_wdm 8-1:1.0: Unknown control protocol
[  751.400592][  T809] usb 8-1: USB disconnect, device number 3
[  752.121230][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  752.304287][ T9900] 9pnet_virtio: no channels available for device syz
[  752.370984][   T10] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  752.371014][   T10] usb 7-1: config 1 has no interface number 0
[  752.372736][   T10] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  752.377312][   T10] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4
[  752.377620][   T10] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608
[  752.378316][   T10] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  752.545419][   T10] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  752.545452][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.545473][   T10] usb 7-1: Product: syz
[  752.545488][   T10] usb 7-1: Manufacturer: syz
[  752.545502][   T10] usb 7-1: SerialNumber: syz
[  752.627091][ T9888] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  752.628159][ T9888] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  752.659159][   T10] usb 7-1: Error in usbnet_get_endpoints (-22)
[  756.569557][ T9948] binder_alloc: 9945: binder_alloc_buf, no vma
[  757.817057][  T809] usb 7-1: USB disconnect, device number 10
[  758.761453][ T1229] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  758.813589][T10002] kvm: requested 82133 ns i8254 timer period limited to 200000 ns
[  758.907686][ T1229] usb 9-1: device descriptor read/64, error -71
[  759.409931][ T1229] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  759.548314][ T1229] usb 9-1: device descriptor read/64, error -71
[  759.673058][ T1229] usb usb9-port1: attempt power cycle
[  759.680922][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  759.680996][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  760.086507][ T1229] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  760.119402][ T1229] usb 9-1: device descriptor read/8, error -71
[  760.322170][T10027] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0)
[  760.385526][ T1229] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  760.408374][ T1229] usb 9-1: device descriptor read/8, error -71
[  760.526058][ T1229] usb usb9-port1: unable to enumerate USB device
[  760.694685][T10028] ==================================================================
[  760.694700][T10028] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60
[  760.694888][T10028] Read of size 1 at addr ffff888034d9c068 by task syz.6.794/10028
[  760.694902][T10028] 
[  760.694918][T10028] CPU: 1 UID: 0 PID: 10028 Comm: syz.6.794 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  760.694938][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  760.694954][T10028] Call Trace:
[  760.694964][T10028]  <TASK>
[  760.694973][T10028]  dump_stack_lvl+0xe8/0x150
[  760.695034][T10028]  print_report+0xba/0x230
[  760.695063][T10028]  ? _raw_spin_lock_irqsave+0x40/0x60
[  760.695083][T10028]  kasan_report+0x117/0x150
[  760.695213][T10028]  ? _raw_spin_lock_irqsave+0x40/0x60
[  760.695238][T10028]  __kasan_check_byte+0x2a/0x40
[  760.695269][T10028]  lock_acquire+0x79/0x2e0
[  760.695323][T10028]  ? rcu_is_watching+0x15/0xb0
[  760.695357][T10028]  _raw_spin_lock_irqsave+0x40/0x60
[  760.695384][T10028]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  760.695407][T10028]  rt_mutex_slowunlock+0xbf/0x8b0
[  760.695434][T10028]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  760.695461][T10028]  ? rt_spin_unlock+0x160/0x200
[  760.695485][T10028]  dma_buf_fd+0x189/0x370
[  760.695591][T10028]  vb2_core_expbuf+0x37e/0x620
[  760.695687][T10028]  __video_do_ioctl+0x88c/0xc50
[  760.695758][T10028]  ? __pfx___video_do_ioctl+0x10/0x10
[  760.695782][T10028]  video_usercopy+0x876/0x14b0
[  760.695803][T10028]  ? __pfx___video_do_ioctl+0x10/0x10
[  760.695822][T10028]  ? __pfx_video_usercopy+0x10/0x10
[  760.695839][T10028]  ? smack_file_ioctl+0x2c2/0x360
[  760.695922][T10028]  ? __fget_files+0x2a/0x420
[  760.695984][T10028]  ? __fget_files+0x3a6/0x420
[  760.696005][T10028]  v4l2_ioctl+0x190/0x1e0
[  760.696022][T10028]  ? __pfx_v4l2_ioctl+0x10/0x10
[  760.696039][T10028]  __se_sys_ioctl+0xff/0x170
[  760.696101][T10028]  do_syscall_64+0x14d/0xf80
[  760.696148][T10028]  ? trace_irq_disable+0x3b/0x150
[  760.696180][T10028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.696208][T10028]  ? clear_bhb_loop+0x40/0x90
[  760.696226][T10028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.696243][T10028] RIP: 0033:0x7fa4633cc799
[  760.696263][T10028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.696279][T10028] RSP: 002b:00007fa46161e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  760.696297][T10028] RAX: ffffffffffffffda RBX: 00007fa463645fa0 RCX: 00007fa4633cc799
[  760.696310][T10028] RDX: 0000200000000040 RSI: 00000000c0405610 RDI: 0000000000000004
[  760.696321][T10028] RBP: 00007fa463462bd9 R08: 0000000000000000 R09: 0000000000000000
[  760.696332][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  760.696341][T10028] R13: 00007fa463646038 R14: 00007fa463645fa0 R15: 00007ffe4429d3d8
[  760.696361][T10028]  </TASK>
[  760.696367][T10028] 
[  760.696371][T10028] Allocated by task 10028:
[  760.696380][T10028]  kasan_save_track+0x3e/0x80
[  760.696429][T10028]  __kasan_kmalloc+0x93/0xb0
[  760.696458][T10028]  __kmalloc_noprof+0x3e7/0x7b0
[  760.696553][T10028]  dma_buf_export+0x3ba/0xb10
[  760.696573][T10028]  vb2_vmalloc_get_dmabuf+0x10e/0x210
[  760.696621][T10028]  vb2_core_expbuf+0x314/0x620
[  760.696640][T10028]  __video_do_ioctl+0x88c/0xc50
[  760.696664][T10028]  video_usercopy+0x876/0x14b0
[  760.696684][T10028]  v4l2_ioctl+0x190/0x1e0
[  760.696706][T10028]  __se_sys_ioctl+0xff/0x170
[  760.696742][T10028]  do_syscall_64+0x14d/0xf80
[  760.696762][T10028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.696778][T10028] 
[  760.696782][T10028] Freed by task 10031:
[  760.696789][T10028]  kasan_save_track+0x3e/0x80
[  760.696810][T10028]  kasan_save_free_info+0x46/0x50
[  760.696833][T10028]  __kasan_slab_free+0x5c/0x80
[  760.696855][T10028]  kfree+0x1c1/0x6c0
[  760.696874][T10028]  __dentry_kill+0x211/0x5e0
[  760.696888][T10028]  finish_dput+0xc9/0x480
[  760.696906][T10028]  __fput+0x6a3/0xa90
[  760.696947][T10028]  task_work_run+0x1d9/0x270
[  760.696968][T10028]  exit_to_user_mode_loop+0xed/0x480
[  760.696995][T10028]  do_syscall_64+0x32d/0xf80
[  760.697014][T10028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.697029][T10028] 
[  760.697032][T10028] The buggy address belongs to the object at ffff888034d9c000
[  760.697032][T10028]  which belongs to the cache kmalloc-1k of size 1024
[  760.697047][T10028] The buggy address is located 104 bytes inside of
[  760.697047][T10028]  freed 1024-byte region [ffff888034d9c000, ffff888034d9c400)
[  760.697065][T10028] 
[  760.697069][T10028] The buggy address belongs to the physical page:
[  760.697086][T10028] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34d98
[  760.697100][T10028] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  760.697113][T10028] flags: 0x80000000000040(head|node=0|zone=1)
[  760.697133][T10028] page_type: f5(slab)
[  760.697147][T10028] raw: 0080000000000040 ffff88813fe1cdc0 dead000000000100 dead000000000122
[  760.697162][T10028] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  760.697178][T10028] head: 0080000000000040 ffff88813fe1cdc0 dead000000000100 dead000000000122
[  760.697192][T10028] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  760.697207][T10028] head: 0080000000000003 ffffea0000d36601 00000000ffffffff 00000000ffffffff
[  760.697220][T10028] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  760.697229][T10028] page dumped because: kasan: bad access detected
[  760.697242][T10028] page_owner tracks the page as allocated
[  760.697247][T10028] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6221, tgid 6216 (syz.3.71), ts 173025510293, free_ts 172769017733
[  760.697276][T10028]  post_alloc_hook+0x231/0x280
[  760.697338][T10028]  get_page_from_freelist+0x28bb/0x2950
[  760.697353][T10028]  __alloc_frozen_pages_noprof+0x18d/0x380
[  760.697369][T10028]  allocate_slab+0x77/0x660
[  760.697403][T10028]  refill_objects+0x334/0x3c0
[  760.697419][T10028]  __pcs_replace_empty_main+0x328/0x5f0
[  760.697438][T10028]  __kmalloc_cache_noprof+0x44e/0x690
[  760.697462][T10028]  snd_seq_oss_open+0x125/0xfc0
[  760.697526][T10028]  odev_open+0x67/0xd0
[  760.697539][T10028]  chrdev_open+0x4d0/0x5f0
[  760.697573][T10028]  do_dentry_open+0x83d/0x13e0
[  760.697606][T10028]  vfs_open+0x3b/0x350
[  760.697621][T10028]  path_openat+0x2e43/0x38a0
[  760.697643][T10028]  do_file_open+0x23e/0x4a0
[  760.697665][T10028]  do_sys_openat2+0x113/0x200
[  760.697682][T10028]  __x64_sys_openat+0x138/0x170
[  760.697699][T10028] page last free pid 6219 tgid 6219 stack trace:
[  760.697707][T10028]  __free_frozen_pages+0xfe3/0x1170
[  760.697730][T10028]  __slab_free+0x24f/0x2a0
[  760.697753][T10028]  qlist_free_all+0x97/0x100
[  760.697772][T10028]  kasan_quarantine_reduce+0x148/0x160
[  760.697793][T10028]  __kasan_slab_alloc+0x22/0x80
[  760.697814][T10028]  kmem_cache_alloc_noprof+0x33b/0x680
[  760.697836][T10028]  vm_area_dup+0x2b/0x670
[  760.697871][T10028]  __split_vma+0x1e4/0xa30
[  760.697889][T10028]  vma_modify+0x94b/0x1f00
[  760.697905][T10028]  vma_modify_flags+0x24b/0x330
[  760.697921][T10028]  mprotect_fixup+0x47a/0xa80
[  760.697953][T10028]  do_mprotect_pkey+0x8ab/0xcd0
[  760.697969][T10028]  __x64_sys_mprotect+0x80/0x90
[  760.697984][T10028]  do_syscall_64+0x14d/0xf80
[  760.698004][T10028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.698019][T10028] 
[  760.698023][T10028] Memory state around the buggy address:
[  760.698031][T10028]  ffff888034d9bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  760.698042][T10028]  ffff888034d9bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  760.698055][T10028] >ffff888034d9c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  760.698063][T10028]                                                           ^
[  760.698073][T10028]  ffff888034d9c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  760.698084][T10028]  ffff888034d9c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  760.698093][T10028] ==================================================================
[  760.698109][T10028] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  760.698122][T10028] CPU: 1 UID: 0 PID: 10028 Comm: syz.6.794 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  760.698141][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  760.698151][T10028] Call Trace:
[  760.698159][T10028]  <TASK>
[  760.698166][T10028]  vpanic+0x56c/0xa60
[  760.698193][T10028]  ? __pfx_vpanic+0x10/0x10
[  760.698221][T10028]  panic+0xc5/0xd0
[  760.698244][T10028]  ? __pfx_panic+0x10/0x10
[  760.698269][T10028]  ? _raw_spin_lock_irqsave+0x40/0x60
[  760.698291][T10028]  ? rcu_is_watching+0x15/0xb0
[  760.698310][T10028]  ? _raw_spin_lock_irqsave+0x40/0x60
[  760.698331][T10028]  ? _raw_spin_lock_irqsave+0x40/0x60
[  760.698351][T10028]  check_panic_on_warn+0x89/0xb0
[  760.698381][T10028]  ? _raw_spin_lock_irqsave+0x40/0x60
[  760.698401][T10028]  end_report+0x73/0x180
[  760.698426][T10028]  ? _raw_spin_lock_irqsave+0x40/0x60
[  760.698446][T10028]  kasan_report+0x128/0x150
[  760.698472][T10028]  ? _raw_spin_lock_irqsave+0x40/0x60
[  760.698496][T10028]  __kasan_check_byte+0x2a/0x40
[  760.698520][T10028]  lock_acquire+0x79/0x2e0
[  760.698536][T10028]  ? rcu_is_watching+0x15/0xb0
[  760.698560][T10028]  _raw_spin_lock_irqsave+0x40/0x60
[  760.698580][T10028]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  760.698597][T10028]  rt_mutex_slowunlock+0xbf/0x8b0
[  760.698617][T10028]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  760.698638][T10028]  ? rt_spin_unlock+0x160/0x200
[  760.698655][T10028]  dma_buf_fd+0x189/0x370
[  760.698673][T10028]  vb2_core_expbuf+0x37e/0x620
[  760.698692][T10028]  __video_do_ioctl+0x88c/0xc50
[  760.698715][T10028]  ? __pfx___video_do_ioctl+0x10/0x10
[  760.698739][T10028]  video_usercopy+0x876/0x14b0
[  760.698760][T10028]  ? __pfx___video_do_ioctl+0x10/0x10
[  760.698779][T10028]  ? __pfx_video_usercopy+0x10/0x10
[  760.698796][T10028]  ? smack_file_ioctl+0x2c2/0x360
[  760.698823][T10028]  ? __fget_files+0x2a/0x420
[  760.698843][T10028]  ? __fget_files+0x3a6/0x420
[  760.698863][T10028]  v4l2_ioctl+0x190/0x1e0
[  760.698880][T10028]  ? __pfx_v4l2_ioctl+0x10/0x10
[  760.698896][T10028]  __se_sys_ioctl+0xff/0x170
[  760.698922][T10028]  do_syscall_64+0x14d/0xf80
[  760.698944][T10028]  ? trace_irq_disable+0x3b/0x150
[  760.698962][T10028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.698979][T10028]  ? clear_bhb_loop+0x40/0x90
[  760.698997][T10028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.699014][T10028] RIP: 0033:0x7fa4633cc799
[  760.699029][T10028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.699043][T10028] RSP: 002b:00007fa46161e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  760.699063][T10028] RAX: ffffffffffffffda RBX: 00007fa463645fa0 RCX: 00007fa4633cc799
[  760.699075][T10028] RDX: 0000200000000040 RSI: 00000000c0405610 RDI: 0000000000000004
[  760.699087][T10028] RBP: 00007fa463462bd9 R08: 0000000000000000 R09: 0000000000000000
[  760.699097][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  760.699107][T10028] R13: 00007fa463646038 R14: 00007fa463645fa0 R15: 00007ffe4429d3d8
[  760.699127][T10028]  </TASK>
[  760.699779][T10028] Kernel Offset: disabled