last executing test programs:

9m8.932737705s ago: executing program 0 (id=1):
socket$inet6(0xa, 0x1, 0x8010000000000084)
openat$hwrng(0xffffffffffffff9c, 0x0, 0xd01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000140)={@broadcast, @local, @void, {@generic={0x6000}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082)
fallocate(r2, 0x0, 0x1000000, 0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x83, 0x0, &(0x7f0000000380)=""/131, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x4, 0x0, 0x5389}, 0x50)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r2, 0x2000)

9m6.887499112s ago: executing program 0 (id=11):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000380", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1400c004)

9m6.496590983s ago: executing program 0 (id=13):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4002, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
mkdirat$cgroup(r8, 0x0, 0x1ff)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x44)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10040010)
r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000007c0))

9m4.152419695s ago: executing program 0 (id=19):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1)
read(r0, &(0x7f00000002c0)=""/95, 0x5f)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
read$FUSE(r2, &(0x7f0000003ac0)={0x2020}, 0x2020)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, 0x0, 0x42000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0)
socket$inet(0xa, 0x801, 0x84)
syz_clone(0x4008000, &(0x7f0000000480)="eee9a49bf6b33b97ae0e059800cad56b099f76e60a93655a75157941e27f3d7b1d14d3e26f12431baa1c3cc42502ba5aa5e8d001fdaac59bb6f3d6c7f5dfa0baaff982ede192f81252c2c6963171cd1d52ae518d5af16db2926e1c2c931da1f692609c0f8c9e0c59867d1d11f832a8449f903d82aabfe10c5363411ebc905b61a86aadafb6887ea4bb897592f9b6348c70be6cc841352697", 0x98, &(0x7f0000000540), &(0x7f0000000580), 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x18, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x83}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x9, 0x3, 0x8, 0x2d, 0x4}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80003}, @alu={0x7, 0x1, 0x2, 0x1, 0x5, 0x8, 0x10}, @generic={0xf, 0x7, 0x8, 0x5, 0x4}]}, &(0x7f0000000340)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x8}, @const={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x38}, 0x28)

8m58.958735452s ago: executing program 0 (id=27):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
close(r1)
socket$kcm(0x2, 0x200000000000001, 0x106)
close(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)

8m55.991887477s ago: executing program 0 (id=31):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
io_setup(0x80004, &(0x7f0000000180))
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
fchown(r0, 0xffffffffffffffff, 0xee01)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001bf40)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x20}}]}}, 0x0, 0x32}, 0x28)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x68)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe)
r4 = semget$private(0x0, 0x4000000009, 0x0)
semop(r4, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1)
r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.log\x00', 0x1c10c1, 0x9c37611dc13d0de3)
fchown(r5, 0xffffffffffffffff, 0x0)

8m39.997398496s ago: executing program 32 (id=31):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
io_setup(0x80004, &(0x7f0000000180))
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
fchown(r0, 0xffffffffffffffff, 0xee01)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001bf40)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x20}}]}}, 0x0, 0x32}, 0x28)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x68)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe)
r4 = semget$private(0x0, 0x4000000009, 0x0)
semop(r4, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1)
r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.log\x00', 0x1c10c1, 0x9c37611dc13d0de3)
fchown(r5, 0xffffffffffffffff, 0x0)

7m25.894781906s ago: executing program 2 (id=206):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffffff, 0x0, 0xe9)
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x401, 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000)
r2 = timerfd_create(0x8, 0x0)
timerfd_settime(r2, 0x3, &(0x7f000000b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x5, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
close(r0)

7m22.7305717s ago: executing program 2 (id=211):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x11}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

7m19.959692967s ago: executing program 2 (id=216):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0)
r1 = fsopen(0x0, 0xbd3d92d421aeb6fd)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(r0, 0x23, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8004})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = fsmount(r1, 0x0, 0x9)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = socket$kcm(0x23, 0x5, 0x0)
listen(r4, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00010000000000000000000700000088d9b338b39b490c4549914f6b3b0d4a70f1f3a9f8469dd0892658dd968c949164fef46b735a6e994002014b7cb201ebd891f92f4e97a2045553d895bf5c5f8121721cc85ec838e8e24e73f14709e08eac032e6d293635eba883346c762375551b8a263272b254", @ANYRES32=r8, @ANYBLOB="000002000a000200aaaaaaaaaabb0000"], 0x28}}, 0x4000800)
r9 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000010)
sendmsg$inet(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r10, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
sendto$phonet(r10, 0x0, 0x0, 0x80, 0x0, 0x0)
r11 = accept4(r4, 0x0, 0x0, 0x80000)
sendmsg$nl_crypto(r11, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e00000001500020028bd7000fddbdf2561656769733235362d6165736e690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000005166f987b1c82cc90000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000715579d20000000400007601c0d600000000000000004a5844b851ae1d78aa74f40e82e824c23c48177f9d64f1be2e64b6de5454017f7b68f04ae232d14c8356f865e85272e7a6df40f892036fc544fbf0cc11d6ff2af19c2d9cd0e74f886568"], 0xe0}, 0x1, 0x0, 0x0, 0xf2901ca589b3d74b}, 0x4)
poll(&(0x7f0000000140)=[{r0, 0x8}], 0x1, 0x400)
mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0)

7m17.673235699s ago: executing program 6 (id=220):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000940)}], 0x1}}], 0x1, 0x40)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffff247}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f)

7m16.901028689s ago: executing program 2 (id=222):
iopl(0x3)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x0, 0x2)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r4)
fchdir(r3)
readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8)

7m15.365057093s ago: executing program 6 (id=224):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r3, 0x40304580, 0x0)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)

7m13.577468809s ago: executing program 6 (id=226):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c0005"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

7m13.081392972s ago: executing program 2 (id=227):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003)
r5 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000001f00)={0x26, 0x0, 0x12, 0xd, 0x2, 0x4090, 0x6, 0x4c, 0xffffffffffffffff})
r6 = syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681)
ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x400)
ioctl$BLKROGET(r6, 0x125e, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m12.601244628s ago: executing program 6 (id=229):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd24, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x82004}, 0x80000)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x2000, 0x0)
ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000016800)={0x0, 0x0})

7m10.488476969s ago: executing program 2 (id=231):
syz_open_dev$usbfs(0x0, 0x76, 0x4040)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_clone(0x34a00011, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000040), 0x2)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB='+cpu'], 0x5)

7m4.639467576s ago: executing program 6 (id=244):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003)
r5 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000001f00)={0x26, 0x0, 0x12, 0xd, 0x2, 0x4090, 0x6, 0x4c, 0xffffffffffffffff})
r6 = syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681)
ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x400)
ioctl$BLKROGET(r6, 0x125e, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'})
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

7m1.447052924s ago: executing program 6 (id=248):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x3, 0x6, 0x2, 0xb, 0xffffffffffffffff, 0xffffffffffffffe4}, @jmp={0x5, 0x0, 0xd, 0xb, 0x4, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0x8, 0x8, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x20, &(0x7f0000000400)=""/32, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x1, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xff3}, 0x94)
r3 = socket(0x28, 0x1, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x0, @void}, 0x10)
close(0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)

6m55.16162566s ago: executing program 33 (id=231):
syz_open_dev$usbfs(0x0, 0x76, 0x4040)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_clone(0x34a00011, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000040), 0x2)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB='+cpu'], 0x5)

6m46.219357961s ago: executing program 34 (id=248):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x3, 0x6, 0x2, 0xb, 0xffffffffffffffff, 0xffffffffffffffe4}, @jmp={0x5, 0x0, 0xd, 0xb, 0x4, 0x50, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbf}, @alu={0x7, 0x0, 0x8, 0x8, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x20, &(0x7f0000000400)=""/32, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x1, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xff3}, 0x94)
r3 = socket(0x28, 0x1, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = syz_open_dev$video(&(0x7f00000002c0), 0x3, 0x1c0201)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x0, @void}, 0x10)
close(0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)

3m33.652759041s ago: executing program 5 (id=596):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlockall(0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit='])
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r1, 0xc)
r2 = socket(0x40000000015, 0x5, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040))
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet(0x2, 0x5, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240))

3m28.69184915s ago: executing program 5 (id=604):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x4000050)

3m26.278770226s ago: executing program 5 (id=608):
syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, &(0x7f0000000080), &(0x7f0000000040), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
r1 = socket(0x2b, 0x1, 0x1)
listen(r1, 0x5)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
close(r2)
socket$l2tp6(0xa, 0x2, 0x73)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})

3m19.353761927s ago: executing program 5 (id=617):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='dummy_hcd.0', 0xb)

3m18.141243239s ago: executing program 5 (id=620):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003)
r4 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000001f00)={0x26, 0x0, 0x12, 0xd, 0x2, 0x4090, 0x6, 0x4c, 0xffffffffffffffff})
r5 = syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681)
ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x400)
ioctl$BLKROGET(r5, 0x125e, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

3m15.098632219s ago: executing program 5 (id=626):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0)
r1 = fsopen(0x0, 0xbd3d92d421aeb6fd)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(r0, 0x23, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8004})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = fsmount(r1, 0x0, 0x9)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = socket$kcm(0x23, 0x5, 0x0)
listen(r4, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00010000000000000000000700000088d9b338b39b490c4549914f6b3b0d4a70f1f3a9f8469dd0892658dd968c949164fef46b735a6e994002014b7cb201ebd891f92f4e97a2045553d895bf5c5f8121721cc85ec838e8e24e73f14709e08eac032e6d293635eba883346c762375551b8a263272b254", @ANYRES32=r8, @ANYBLOB="000002000a000200aaaaaaaaaabb0000"], 0x28}}, 0x4000800)
r9 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r10, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
sendto$phonet(r10, 0x0, 0x0, 0x80, 0x0, 0x0)
r11 = accept4(r4, 0x0, 0x0, 0x80000)
sendmsg$nl_crypto(r11, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e00000001500020028bd7000fddbdf2561656769733235362d6165736e690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000005166f987b1c82cc90000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000715579d20000000400007601c0d600000000000000004a5844b851ae1d78aa74f40e82e824c23c48177f9d64f1be2e64b6de5454017f7b68f04ae232d14c8356f865e85272e7a6df40f892036fc544fbf0cc11d6ff2af19c2d9cd0e74f886568"], 0xe0}, 0x1, 0x0, 0x0, 0xf2901ca589b3d74b}, 0x4)
poll(&(0x7f0000000140)=[{r0, 0x8}], 0x1, 0x400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)

3m7.521244624s ago: executing program 1 (id=645):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffffff, 0x0, 0xe9)
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x401, 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000)
r2 = timerfd_create(0x8, 0x0)
timerfd_settime(r2, 0x3, &(0x7f000000b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
close(r0)

3m5.626470126s ago: executing program 1 (id=648):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x1, 0x0, [{0x0, 0x5d, &(0x7f00000025c0)=""/93}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="83800377591dd55c"}})
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

3m4.157017875s ago: executing program 1 (id=652):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c00"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

3m1.516715151s ago: executing program 1 (id=654):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a4010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000a000100cd00000000000000480002006362632873657270656e74290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x1a4}}, 0x0)

3m1.348531929s ago: executing program 1 (id=656):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0xff}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003)
r5 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000001f00)={0x26, 0x0, 0x12, 0xd, 0x2, 0x4090, 0x6, 0x4c, 0xffffffffffffffff})
r6 = syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681)
ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x400)
ioctl$BLKROGET(r6, 0x125e, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

2m58.203494723s ago: executing program 35 (id=626):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0)
r1 = fsopen(0x0, 0xbd3d92d421aeb6fd)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(r0, 0x23, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8004})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = fsmount(r1, 0x0, 0x9)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = socket$kcm(0x23, 0x5, 0x0)
listen(r4, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00010000000000000000000700000088d9b338b39b490c4549914f6b3b0d4a70f1f3a9f8469dd0892658dd968c949164fef46b735a6e994002014b7cb201ebd891f92f4e97a2045553d895bf5c5f8121721cc85ec838e8e24e73f14709e08eac032e6d293635eba883346c762375551b8a263272b254", @ANYRES32=r8, @ANYBLOB="000002000a000200aaaaaaaaaabb0000"], 0x28}}, 0x4000800)
r9 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r10, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
sendto$phonet(r10, 0x0, 0x0, 0x80, 0x0, 0x0)
r11 = accept4(r4, 0x0, 0x0, 0x80000)
sendmsg$nl_crypto(r11, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0xf2901ca589b3d74b}, 0x4)
poll(&(0x7f0000000140)=[{r0, 0x8}], 0x1, 0x400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)

2m58.185305118s ago: executing program 1 (id=660):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffffff, 0x0, 0xe9)
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x401, 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000)
r2 = timerfd_create(0x8, 0x0)
timerfd_settime(r2, 0x3, &(0x7f000000b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
close(r0)

2m42.801300759s ago: executing program 36 (id=660):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffffff, 0x0, 0xe9)
r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x401, 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000)
r2 = timerfd_create(0x8, 0x0)
timerfd_settime(r2, 0x3, &(0x7f000000b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x2, 0x4)
close(r0)

2m31.222644457s ago: executing program 4 (id=716):
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0x8, 0xc00)
userfaultfd(0x80001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1)

2m29.408891708s ago: executing program 4 (id=720):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000400))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12)
readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0000000000000000000000000000001000"/28], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000600)='1(', 0x2)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendmmsg$inet(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)='D', 0x1}], 0x1}}], 0x1, 0x2090)

2m27.641624214s ago: executing program 4 (id=723):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)

2m26.855890031s ago: executing program 4 (id=725):
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
r0 = socket$kcm(0x29, 0x5, 0x0)
syz_open_dev$vcsa(0x0, 0x4, 0xd49100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x20000)
socketpair(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
close(r0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000))
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0)

2m21.623314908s ago: executing program 4 (id=733):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x2, 0x200000000000001, 0x106)
close(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)

2m20.305217237s ago: executing program 4 (id=734):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000)
timerfd_create(0x8, 0x0)

2m9.259897797s ago: executing program 7 (id=752):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c)
r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd24, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x82004}, 0x80000)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{0x0}], 0x1, 0x2000, 0x0)
ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000016800)={0x0, 0x0})

2m7.300290242s ago: executing program 7 (id=754):
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8)

2m4.763922189s ago: executing program 37 (id=734):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000)
timerfd_create(0x8, 0x0)

1m54.109500798s ago: executing program 7 (id=767):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0x8, 0xc00)
userfaultfd(0x80001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1)

1m52.717471215s ago: executing program 7 (id=769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x2, 0x3b9ac9bf, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd})

1m50.669146095s ago: executing program 7 (id=771):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000240)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

1m49.489828471s ago: executing program 7 (id=772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

1m33.993453371s ago: executing program 38 (id=772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

10.818855336s ago: executing program 8 (id=919):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='dummy_', 0x6)

7.955072911s ago: executing program 3 (id=925):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100)
close_range(r0, 0xffffffffffffffff, 0x0)

6.779507947s ago: executing program 3 (id=926):
r0 = syz_usb_connect$uac2(0x5, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="2012bf000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.933898649s ago: executing program 8 (id=927):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x2264da698a9eb67e, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x80000001, 0xfff, 0xf, 0x9, 0x59, "d10900080000000000ffff0900000000000f00", 0x800, 0x3})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9)

5.199054434s ago: executing program 8 (id=928):
socket$inet_icmp(0x2, 0x2, 0x1)
pipe(&(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
write$cgroup_int(r4, &(0x7f0000000100)=0x8000000000000000, 0x12)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}}, 0x40)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5)

3.769752467s ago: executing program 8 (id=929):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndseq(0xffffff9c, 0x0, 0x101100)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r3, 0x0, 0x9, 0x2, &(0x7f0000000140)='!;', 0x1})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x69)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r4, r6)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r5], 0x9)
r7 = fanotify_init(0xf00, 0x80000)
fanotify_mark(r7, 0x105, 0x40009975, 0xffffffffffffffff, 0x0)

3.769120641s ago: executing program 3 (id=930):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000300), 0x4, 0x5730c2)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r1=>0x0)
sched_setaffinity(r1, 0xffffffffffffff70, &(0x7f00000002c0)=0x6)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCFLSH(r5, 0x540b, 0x2)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x5901, 0x0, 0x3, 0x1ac}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2000, 0x10000007, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2b5, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1042, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0f4, 0x2, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x3)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.07886079s ago: executing program 3 (id=931):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
listen(r0, 0x0)
r1 = add_key(&(0x7f0000000300)='logon\x00', 0x0, &(0x7f0000000380), 0x0, 0xfffffffffffffff9)
add_key$user(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000200), 0x0, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x6f0e, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000f060102000000000000000000000009050001000700000005000107000000690acf6d3ae8dc83ecc29ef004421ba030f8f165a5f40724c8905c556a14290900000000ae96003652b60a8021123d00000069657b85e7c9dec19f35c596a670508e76dc9e4c5a8d688d69d478aa3ca9a776477d44dbcdae8c088299282c574d7199d092530c76a3ea2dabacb78ef6d7333b773034a16e6e2c731e84dd5489"], 0x24}}, 0x8000)

1.125102269s ago: executing program 8 (id=932):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
writev(r1, &(0x7f0000000040), 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000900)="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", 0x1a4, 0x12, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

1.123974312s ago: executing program 3 (id=933):
syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, &(0x7f0000000080), &(0x7f0000000040), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
r1 = socket(0x2b, 0x1, 0x1)
listen(r1, 0x5)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
socket$l2tp6(0xa, 0x2, 0x73)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

44.408786ms ago: executing program 3 (id=934):
recvmsg(0xffffffffffffffff, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x22)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_open_pts(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82)

0s ago: executing program 8 (id=935):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x801a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  334.999389][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  335.004185][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'.
[  335.016141][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  335.071363][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.109773][ T5641] Bluetooth: hci2: unexpected event for opcode 0x041c
[  335.286513][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14
[  335.490568][ T7400] team0: Port device team_slave_0 added
[  335.500933][ T7400] team0: Port device team_slave_1 added
[  336.235073][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.432'.
[  336.433077][ T5756] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  336.643474][ T5756] usb 2-1: Using ep0 maxpacket: 8
[  336.657105][ T5756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.696671][ T5756] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[  336.738522][ T5756] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  336.805623][ T5756] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  336.850890][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.865713][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.906610][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.937557][ T5756] usb 2-1: Product: syz
[  336.974506][ T5756] usb 2-1: Manufacturer: syz
[  336.987405][ T5756] usb 2-1: SerialNumber: syz
[  337.034235][ T5756] usb 2-1: config 0 descriptor??
[  337.061186][ T5756] powermate 2-1:0.0: probe with driver powermate failed with error -22
[  337.074362][ T5641] Bluetooth: hci4: command tx timeout
[  337.085913][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.692056][   T24] usb 2-1: USB disconnect, device number 10
[  338.261155][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.365752][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.478347][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.932516][ T5641] Bluetooth: hci4: command tx timeout
[  340.938077][ T5641] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  340.953807][ T5641] Bluetooth: hci2: Injecting HCI hardware error event
[  340.962814][ T5641] Bluetooth: hci2: hardware error 0x00
[  342.088828][ T7621] 9pnet_virtio: no channels available for device syz
[  343.235062][ T5641] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  343.254839][ T5641] Bluetooth: hci4: command tx timeout
[  344.601927][ T7400] hsr_slave_0: entered promiscuous mode
[  344.610465][ T7400] hsr_slave_1: entered promiscuous mode
[  344.619014][ T7400] debugfs: 'hsr0' already exists in 'hsr'
[  344.626164][ T7400] Cannot create hsr debugfs directory
[  344.919049][   T49] bridge_slave_1: left allmulticast mode
[  344.925302][   T49] bridge_slave_1: left promiscuous mode
[  344.945512][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.978851][   T49] bridge_slave_0: left allmulticast mode
[  344.994867][   T49] bridge_slave_0: left promiscuous mode
[  345.015693][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.140388][   T49] bridge_slave_1: left allmulticast mode
[  345.154976][   T49] bridge_slave_1: left promiscuous mode
[  345.171053][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.189265][   T49] bridge_slave_0: left allmulticast mode
[  345.199464][   T49] bridge_slave_0: left promiscuous mode
[  345.214582][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.313943][ T4937] Bluetooth: hci4: command tx timeout
[  345.382357][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.443'.
[  346.493008][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  346.537438][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.564031][   T49] bond0 (unregistering): Released all slaves
[  346.987575][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.026049][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.048339][   T49] bond0 (unregistering): Released all slaves
[  347.156165][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15
[  347.967359][   T49] hsr_slave_0: left promiscuous mode
[  349.829853][   T49] hsr_slave_1: left promiscuous mode
[  349.867521][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.914752][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.977907][   T49] hsr_slave_0: left promiscuous mode
[  350.007019][   T49] hsr_slave_1: left promiscuous mode
[  350.023767][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.050516][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.687376][   T49] team0 (unregistering): Port device team_slave_1 removed
[  351.759106][   T49] team0 (unregistering): Port device team_slave_0 removed
[  351.788463][ T4937] Bluetooth: hci0: unexpected event for opcode 0x041c
[  352.286473][ T7693] netlink: 'syz.5.456': attribute type 2 has an invalid length.
[  352.412319][ T7694] netlink: 'syz.5.456': attribute type 4 has an invalid length.
[  352.420177][ T7694] netlink: 'syz.5.456': attribute type 8 has an invalid length.
[  352.428227][ T7694] netlink: 212 bytes leftover after parsing attributes in process `syz.5.456'.
[  353.494602][   T49] team0 (unregistering): Port device team_slave_1 removed
[  353.540336][   T49] team0 (unregistering): Port device team_slave_0 removed
[  353.901402][ T7693] : entered promiscuous mode
[  355.793406][ T4937] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  355.794113][ T5756] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  355.802279][ T4937] Bluetooth: hci0: Injecting HCI hardware error event
[  355.822269][ T4937] Bluetooth: hci0: hardware error 0x00
[  356.033889][ T5756] usb 2-1: Using ep0 maxpacket: 8
[  356.056120][ T5756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  356.093064][ T5756] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[  356.130412][ T5756] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  356.156836][ T5756] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  356.167365][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.178327][ T5756] usb 2-1: Product: syz
[  356.182604][ T5756] usb 2-1: Manufacturer: syz
[  356.187769][ T5756] usb 2-1: SerialNumber: syz
[  356.201227][ T5756] usb 2-1: config 0 descriptor??
[  356.208257][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.218916][ T5756] powermate 2-1:0.0: probe with driver powermate failed with error -22
[  356.246885][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.277992][ T7571] bridge_slave_0: entered allmulticast mode
[  356.308632][ T7571] bridge_slave_0: entered promiscuous mode
[  356.346933][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'.
[  356.475066][ T5756] usb 2-1: USB disconnect, device number 11
[  356.511536][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.540759][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.560454][ T7571] bridge_slave_1: entered allmulticast mode
[  356.580182][ T7571] bridge_slave_1: entered promiscuous mode
[  356.868119][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16
[  356.898242][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.060781][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.037500][ T4937] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  358.493706][ T7571] team0: Port device team_slave_0 added
[  358.533702][ T7571] team0: Port device team_slave_1 added
[  358.683307][ T5748] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  358.811118][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.831424][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  358.865651][ T5748] usb 2-1: unable to get BOS descriptor or descriptor too short
[  358.891370][ T5748] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  358.892145][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.943883][ T5748] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  358.957378][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.999626][ T5748] usb 2-1: Product: syz
[  359.019435][ T5748] usb 2-1: Manufacturer: syz
[  359.037405][ T5748] usb 2-1: SerialNumber: syz
[  359.113491][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.139175][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.418645][ T5748] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  359.421513][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.517786][ T5748] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  359.566001][ T5748] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  359.630421][ T7400] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  359.667103][ T7400] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  359.683639][ T7400] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  359.715449][ T7400] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  359.729871][ T7400] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  359.771628][ T7400] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  359.923621][ T5748] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  359.955966][ T7400] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  360.011206][ T7400] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  360.221451][ T5748] usb 2-1: USB disconnect, device number 12
[  360.238377][   T49] bridge_slave_1: left allmulticast mode
[  360.268720][   T49] bridge_slave_1: left promiscuous mode
[  360.290870][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.340248][   T49] bridge_slave_0: left allmulticast mode
[  360.352871][   T49] bridge_slave_0: left promiscuous mode
[  360.359357][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.422894][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  361.501880][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.476'.
[  361.603156][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  361.636957][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.642849][ T7795] netlink: 48 bytes leftover after parsing attributes in process `syz.4.476'.
[  361.700450][   T49] bond0 (unregistering): Released all slaves
[  361.859465][ T7571] hsr_slave_0: entered promiscuous mode
[  361.878812][ T7571] hsr_slave_1: entered promiscuous mode
[  361.895518][ T7571] debugfs: 'hsr0' already exists in 'hsr'
[  361.912952][ T7571] Cannot create hsr debugfs directory
[  362.675218][   T49] hsr_slave_0: left promiscuous mode
[  362.718138][   T49] hsr_slave_1: left promiscuous mode
[  362.743760][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.765947][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.359515][ T7826] 9pnet_virtio: no channels available for device syz
[  367.367251][   T49] team0 (unregistering): Port device team_slave_1 removed
[  367.962539][   T49] team0 (unregistering): Port device team_slave_0 removed
[  368.108076][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  368.118696][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  368.126749][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  368.137694][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  368.146704][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  368.411843][ T7805] vlan2: entered promiscuous mode
[  368.419893][ T7805] batadv0: entered promiscuous mode
[  370.193291][ T4937] Bluetooth: hci3: command tx timeout
[  372.327481][ T4937] Bluetooth: hci3: command tx timeout
[  372.382766][ T5810] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  372.575992][ T5810] usb 2-1: unable to get BOS descriptor or descriptor too short
[  372.602082][ T5810] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  372.638602][ T5810] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  372.665240][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.680518][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.695707][ T5810] usb 2-1: Product: syz
[  372.705473][ T5810] usb 2-1: Manufacturer: syz
[  372.722427][ T5810] usb 2-1: SerialNumber: syz
[  372.978852][ T5810] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  373.169864][ T5810] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  373.192870][ T5810] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  373.245118][ T7400] 8021q: adding VLAN 0 to HW filter on device team0
[  373.405162][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.412361][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.530350][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.537584][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.593641][ T5810] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  373.807560][ T5810] usb 2-1: USB disconnect, device number 13
[  373.976453][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  374.359800][ T4937] Bluetooth: hci3: command tx timeout
[  374.563416][ T7400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  374.592338][ T7400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  375.614697][ T7571] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  375.708399][ T7571] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.744038][ T7571] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  375.806128][ T7571] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.895573][ T7571] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  376.548560][ T4937] Bluetooth: hci3: command tx timeout
[  377.974867][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  377.986591][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  378.054034][ T7571] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  378.097456][ T7571] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  378.170028][ T7571] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  378.627914][ T5641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  378.638755][ T5641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  378.647100][ T5641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.656478][ T5641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.665413][ T5641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.008947][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.031891][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.054638][ T7829] bridge_slave_0: entered allmulticast mode
[  379.073233][ T7829] bridge_slave_0: entered promiscuous mode
[  379.110946][   T49] bridge_slave_1: left allmulticast mode
[  379.126050][   T49] bridge_slave_1: left promiscuous mode
[  379.143307][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.161599][   T49] bridge_slave_0: left allmulticast mode
[  379.182729][   T49] bridge_slave_0: left promiscuous mode
[  379.188611][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.472968][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.500023][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.521200][   T49] bond0 (unregistering): Released all slaves
[  379.699726][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.724874][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.755626][ T7829] bridge_slave_1: entered allmulticast mode
[  379.784490][ T7829] bridge_slave_1: entered promiscuous mode
[  379.935605][   T49] hsr_slave_0: left promiscuous mode
[  379.968961][   T49] hsr_slave_1: left promiscuous mode
[  379.983535][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.207293][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.867939][ T5641] Bluetooth: hci6: command tx timeout
[  381.877122][   T49] team0 (unregistering): Port device team_slave_1 removed
[  381.908736][   T49] team0 (unregistering): Port device team_slave_0 removed
[  382.912785][ T5641] Bluetooth: hci6: command tx timeout
[  383.244298][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.277605][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.563428][ T7829] team0: Port device team_slave_0 added
[  383.626022][ T7829] team0: Port device team_slave_1 added
[  383.767888][ T7975] random: crng reseeded on system resumption
[  383.854988][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.863530][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.895893][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.021588][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.051478][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.104405][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.122600][ T5641] Bluetooth: hci6: command tx timeout
[  386.906715][ T7829] hsr_slave_0: entered promiscuous mode
[  386.939680][ T7829] hsr_slave_1: entered promiscuous mode
[  386.962441][ T7829] debugfs: 'hsr0' already exists in 'hsr'
[  386.989624][ T7829] Cannot create hsr debugfs directory
[  387.031580][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.562188][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9
[  387.692245][ T7571] 8021q: adding VLAN 0 to HW filter on device team0
[  387.930216][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.937425][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.014360][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.021607][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.205083][ T5641] Bluetooth: hci6: command tx timeout
[  388.961549][ T4937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  388.979580][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  388.989636][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  389.008089][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  389.016230][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  389.198450][   T49] bridge_slave_1: left allmulticast mode
[  389.213852][   T49] bridge_slave_1: left promiscuous mode
[  389.223946][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.254282][   T49] bridge_slave_0: left allmulticast mode
[  389.265294][   T49] bridge_slave_0: left promiscuous mode
[  389.280760][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.646359][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.748912][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.080413][ T4937] Bluetooth: hci0: command tx timeout
[  391.127258][   T49] bond0 (unregistering): Released all slaves
[  391.580130][   T49] hsr_slave_0: left promiscuous mode
[  391.597696][   T49] hsr_slave_1: left promiscuous mode
[  391.619265][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.642037][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.938847][   T31] audit: type=1800 audit(1785008827.070:6): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.521" name="fn_play" dev="configfs" ino=20766 res=0 errno=0
[  392.036448][   T49] team0 (unregistering): Port device team_slave_1 removed
[  392.085547][   T49] team0 (unregistering): Port device team_slave_0 removed
[  392.610660][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.621073][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.629631][ T7931] bridge_slave_0: entered allmulticast mode
[  392.644356][ T7931] bridge_slave_0: entered promiscuous mode
[  392.813071][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.822009][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.831620][ T7931] bridge_slave_1: entered allmulticast mode
[  392.879182][ T7931] bridge_slave_1: entered promiscuous mode
[  393.095210][ T7931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.164892][ T4937] Bluetooth: hci0: command tx timeout
[  393.266685][ T7931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.670593][ T7931] team0: Port device team_slave_0 added
[  393.816331][ T7931] team0: Port device team_slave_1 added
[  394.025305][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.060147][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.122038][ T7931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.151964][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.168375][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.232804][ T7931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.180780][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  395.191892][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  395.201445][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  395.215028][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  395.228177][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  395.242766][ T5641] Bluetooth: hci0: command tx timeout
[  395.363809][ T7931] hsr_slave_0: entered promiscuous mode
[  395.382190][ T7931] hsr_slave_1: entered promiscuous mode
[  395.394167][ T7931] debugfs: 'hsr0' already exists in 'hsr'
[  395.410175][ T7931] Cannot create hsr debugfs directory
[  395.699051][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  395.708433][ T7829] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  395.715512][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  395.726744][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  395.736022][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  395.736100][ T7829] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  395.759898][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  395.814454][ T7829] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  395.865541][ T7829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  396.186067][ T7829] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  396.230294][ T7829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  396.338826][ T7829] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  396.376790][ T7829] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  396.562589][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12
[  397.312945][ T4937] Bluetooth: hci0: command tx timeout
[  397.317155][ T5641] Bluetooth: hci1: command tx timeout
[  397.802959][ T5641] Bluetooth: hci5: command tx timeout
[  398.531624][ T8165] netlink: 48 bytes leftover after parsing attributes in process `syz.5.534'.
[  398.648146][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.813068][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.832532][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.845800][ T8022] bridge_slave_0: entered allmulticast mode
[  398.867229][ T8022] bridge_slave_0: entered promiscuous mode
[  398.933415][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.966536][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.981588][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.999248][ T8022] bridge_slave_1: entered allmulticast mode
[  399.015028][ T8022] bridge_slave_1: entered promiscuous mode
[  399.152308][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.228455][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.294193][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.393485][ T5641] Bluetooth: hci1: command tx timeout
[  399.444296][ T8022] team0: Port device team_slave_0 added
[  399.537887][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.601549][ T8022] team0: Port device team_slave_1 added
[  399.816314][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.823475][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.850020][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.875297][ T5641] Bluetooth: hci5: command tx timeout
[  400.053187][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.062451][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.088740][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.579064][ T8022] hsr_slave_0: entered promiscuous mode
[  400.594509][ T8022] hsr_slave_1: entered promiscuous mode
[  400.603997][ T8022] debugfs: 'hsr0' already exists in 'hsr'
[  400.614262][ T8022] Cannot create hsr debugfs directory
[  400.734877][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.032285][ T7931] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  401.055824][ T7931] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  401.083581][ T7931] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  401.109052][ T7931] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  401.203695][   T49] bridge_slave_1: left allmulticast mode
[  401.210367][   T49] bridge_slave_1: left promiscuous mode
[  401.224557][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.249563][   T49] bridge_slave_0: left allmulticast mode
[  401.256026][   T49] bridge_slave_0: left promiscuous mode
[  401.269262][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.320635][   T49] bridge_slave_1: left allmulticast mode
[  401.330818][   T49] bridge_slave_1: left promiscuous mode
[  401.351186][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.374103][   T49] bridge_slave_0: left allmulticast mode
[  401.379776][   T49] bridge_slave_0: left promiscuous mode
[  401.405729][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.475658][ T5641] Bluetooth: hci1: command tx timeout
[  401.835646][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  401.887337][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  401.912775][   T49] bond0 (unregistering): Released all slaves
[  401.953202][ T5641] Bluetooth: hci5: command tx timeout
[  402.268906][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.287980][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.304391][   T49] bond0 (unregistering): Released all slaves
[  402.330021][ T7931] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  402.351015][ T7931] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  402.502331][ T7931] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  402.519494][ T7931] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  402.527385][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.546533][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.554998][ T8083] bridge_slave_0: entered allmulticast mode
[  402.563709][ T8083] bridge_slave_0: entered promiscuous mode
[  402.579285][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.583079][   T49] IPVS: stopping master sync thread 7464 ...
[  402.588721][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.623396][ T8083] bridge_slave_1: entered allmulticast mode
[  402.636898][ T8083] bridge_slave_1: entered promiscuous mode
[  402.650970][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.658861][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.667497][ T8094] bridge_slave_0: entered allmulticast mode
[  402.677161][ T8094] bridge_slave_0: entered promiscuous mode
[  402.963777][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.988900][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.003749][ T8094] bridge_slave_1: entered allmulticast mode
[  403.013913][ T8094] bridge_slave_1: entered promiscuous mode
[  403.227623][ T7829] 8021q: adding VLAN 0 to HW filter on device team0
[  403.259608][ T8083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.376839][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.459526][ T8083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.532488][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.554633][ T5641] Bluetooth: hci1: command tx timeout
[  403.815658][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.822880][ T6638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.033133][ T5641] Bluetooth: hci5: command tx timeout
[  404.483079][ T8094] team0: Port device team_slave_0 added
[  404.596791][ T8094] team0: Port device team_slave_1 added
[  404.662504][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.669737][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.724511][ T8083] team0: Port device team_slave_0 added
[  404.758918][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20
[  404.920858][ T8083] team0: Port device team_slave_1 added
[  405.101671][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.118814][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.184108][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.425165][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.432146][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.461661][ T8083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.491494][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.501105][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.542817][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.590380][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.608835][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.658367][ T8083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.002371][ T8094] hsr_slave_0: entered promiscuous mode
[  406.022340][ T8094] hsr_slave_1: entered promiscuous mode
[  406.035700][ T8094] debugfs: 'hsr0' already exists in 'hsr'
[  406.049518][ T8094] Cannot create hsr debugfs directory
[  406.355009][ T8083] hsr_slave_0: entered promiscuous mode
[  406.362015][ T8083] hsr_slave_1: entered promiscuous mode
[  406.386516][ T8083] debugfs: 'hsr0' already exists in 'hsr'
[  406.399084][ T8083] Cannot create hsr debugfs directory
[  407.751880][   T49] hsr_slave_0: left promiscuous mode
[  407.765162][   T49] hsr_slave_1: left promiscuous mode
[  407.776158][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.795666][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.821018][   T49] hsr_slave_0: left promiscuous mode
[  407.830746][   T49] hsr_slave_1: left promiscuous mode
[  407.845401][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.860540][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.878939][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.897981][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.934906][   T49] veth1_macvtap: left promiscuous mode
[  407.940443][   T49] veth0_macvtap: left promiscuous mode
[  407.960328][   T49] veth1_vlan: left promiscuous mode
[  407.972824][   T49] veth0_vlan: left promiscuous mode
[  408.672473][   T49] team0 (unregistering): Port device team_slave_1 removed
[  408.729534][   T49] team0 (unregistering): Port device team_slave_0 removed
[  409.785395][ T8281] netlink: 48 bytes leftover after parsing attributes in process `syz.5.546'.
[  410.086537][   T49] team0 (unregistering): Port device team_slave_1 removed
[  410.140197][   T49] team0 (unregistering): Port device team_slave_0 removed
[  411.029694][ T7931] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.100386][ T8022] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  411.167929][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  411.217966][ T7931] 8021q: adding VLAN 0 to HW filter on device team0
[  411.240581][ T8022] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  411.318800][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  411.347149][ T8022] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  411.443513][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  411.652227][ T8022] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  411.762340][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  411.826778][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.834083][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.088950][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.096144][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.231936][   T49] IPVS: stop unused estimator thread 0...
[  412.694569][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.868422][   T49] bridge_slave_1: left allmulticast mode
[  412.885389][   T49] bridge_slave_1: left promiscuous mode
[  412.901399][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.926022][   T49] bridge_slave_0: left allmulticast mode
[  412.948137][   T49] bridge_slave_0: left promiscuous mode
[  412.959697][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.432125][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  413.462000][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.485382][   T49] bond0 (unregistering): Released all slaves
[  413.570307][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9
[  413.771321][   T49] hsr_slave_0: left promiscuous mode
[  413.809898][   T49] hsr_slave_1: left promiscuous mode
[  413.832434][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.857059][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.493316][   T49] team0 (unregistering): Port device team_slave_1 removed
[  414.539331][   T49] team0 (unregistering): Port device team_slave_0 removed
[  415.444766][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.522300][ T8022] 8021q: adding VLAN 0 to HW filter on device team0
[  416.625143][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.632537][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.382053][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.389243][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.602527][ T7829] veth0_vlan: entered promiscuous mode
[  417.767949][ T8083] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  417.813850][ T8083] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  417.845089][ T7829] veth1_vlan: entered promiscuous mode
[  417.891828][ T8083] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  418.396648][ T8083] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  418.416495][ T8083] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  418.450915][ T8083] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  418.476915][ T8083] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  418.522208][ T8083] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  418.774208][ T7931] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.056595][ T7829] veth0_macvtap: entered promiscuous mode
[  419.087084][ T8094] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  419.114262][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  419.145731][ T8094] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  419.184361][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  419.198718][ T8094] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  419.250769][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  419.291641][ T7829] veth1_macvtap: entered promiscuous mode
[  419.327970][ T8094] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  419.352464][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  419.492275][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.585848][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.680354][ T1020] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.722061][ T1020] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.788623][ T1020] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.876600][ T1020] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.192870][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.604646][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.667095][ T8083] 8021q: adding VLAN 0 to HW filter on device team0
[  420.726530][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.747869][ T7931] veth0_vlan: entered promiscuous mode
[  420.750811][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.780052][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.787263][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.834103][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.841317][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.907074][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.924629][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.946607][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.977932][ T7931] veth1_vlan: entered promiscuous mode
[  421.021135][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.071647][ T8094] 8021q: adding VLAN 0 to HW filter on device team0
[  421.116453][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.123697][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.168986][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.176222][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  423.193040][ T7931] veth0_macvtap: entered promiscuous mode
[  423.232111][ T8022] veth0_vlan: entered promiscuous mode
[  423.279597][ T8421] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  423.321865][ T7931] veth1_macvtap: entered promiscuous mode
[  423.414528][ T8022] veth1_vlan: entered promiscuous mode
[  423.571142][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.641938][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.706222][   T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.723286][   T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.780238][   T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.824888][   T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.991567][ T8022] veth0_macvtap: entered promiscuous mode
[  424.082299][ T8022] veth1_macvtap: entered promiscuous mode
[  424.247223][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.270123][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.282378][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.384857][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.449941][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.477557][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.497758][   T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.522718][   T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.595983][   T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.624329][   T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.012928][ T8452] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  425.349942][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.465375][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.630513][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.369815][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.380626][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.030454][ T5353] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  428.046259][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.073165][ T5353] usb 2-1: unable to get BOS descriptor or descriptor too short
[  430.149008][ T5353] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  430.213314][ T5353] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  430.250084][ T5353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.251406][ T8094] veth0_vlan: entered promiscuous mode
[  430.291879][ T5353] usb 2-1: Product: syz
[  430.309918][ T5353] usb 2-1: Manufacturer: syz
[  430.339677][ T5353] usb 2-1: SerialNumber: syz
[  430.846145][ T8094] veth1_vlan: entered promiscuous mode
[  432.122501][ T5353] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  432.131387][ T5353] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  432.158354][ T5353] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  432.216118][ T5353] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  432.376919][ T8094] veth0_macvtap: entered promiscuous mode
[  432.434891][ T8094] veth1_macvtap: entered promiscuous mode
[  432.526099][ T5353] usb 2-1: USB disconnect, device number 14
[  432.556449][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.972512][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.100790][ T1112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.146980][ T1112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.199831][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  436.209959][ T1112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.275820][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.316655][ T8508] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  436.356018][ T8510] netlink: 32 bytes leftover after parsing attributes in process `syz.5.568'.
[  436.645472][ T8515] tmpfs: Bad value for 'mpol'
[  436.672187][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.689771][ T8083] veth0_vlan: entered promiscuous mode
[  436.702992][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.807596][ T8083] veth1_vlan: entered promiscuous mode
[  436.839906][  T859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.857281][  T859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.873377][   T29] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  436.951578][ T8083] veth0_macvtap: entered promiscuous mode
[  436.988310][ T8083] veth1_macvtap: entered promiscuous mode
[  437.048624][   T29] usb 8-1: config 0 has an invalid interface number: 146 but max is 0
[  437.069776][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.085516][   T29] usb 8-1: config 0 has no interface number 0
[  437.104763][   T29] usb 8-1: config 0 interface 146 has no altsetting 0
[  437.129128][   T29] usb 8-1: string descriptor 0 read error: -22
[  437.148861][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.164520][   T29] usb 8-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=37.4c
[  437.169265][  T186] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  437.195411][   T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.219628][ T1112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.248333][ T1112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.259519][   T29] usb 8-1: config 0 descriptor??
[  437.277042][ T1112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.310739][   T29] snd-usb-caiaq 8-1:0.146: can't set alt interface.
[  437.313009][ T1112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.330819][   T29] usb 8-1: unable to init card! (ret=-5)
[  437.346378][   T29] snd-usb-caiaq 8-1:0.146: probe with driver snd-usb-caiaq failed with error -5
[  437.357326][  T186] usb 6-1: Using ep0 maxpacket: 8
[  437.386848][  T186] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  437.411878][  T186] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  437.470270][  T186] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  437.500096][  T186] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  437.532833][  T186] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  437.547335][ T5770] usb 8-1: USB disconnect, device number 2
[  437.552940][  T186] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  437.578027][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.591862][  T186] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  437.610338][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.620986][  T186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.778527][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.817027][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.877033][  T186] usb 6-1: GET_CAPABILITIES returned 0
[  437.891603][  T186] usbtmc 6-1:16.0: can't read capabilities
[  438.298582][ T8517] sch_tbf: burst 0 is lower than device veth0_to_hsr mtu (1514) !
[  438.657443][ T8538] syzkaller0: entered promiscuous mode
[  438.697218][ T8538] syzkaller0: entered allmulticast mode
[  438.727689][   T24] usb 6-1: USB disconnect, device number 5
[  439.938193][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  439.959806][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  440.039808][ T8556] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  440.334685][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.579'.
[  440.542767][ T5755] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  441.485547][ T5755] usb 2-1: unable to get BOS descriptor or descriptor too short
[  441.703254][ T5755] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  441.745003][ T8576] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  441.751876][ T5755] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  441.838797][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.864671][ T5755] usb 2-1: Product: syz
[  441.874061][ T5755] usb 2-1: Manufacturer: syz
[  441.886012][ T5755] usb 2-1: SerialNumber: syz
[  442.266373][ T5755] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  442.283393][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.7.583'.
[  442.316817][ T5755] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  442.359706][ T5755] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  442.406276][ T5755] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  442.474443][ T8584] netlink: 180 bytes leftover after parsing attributes in process `syz.8.584'.
[  444.017113][ T5755] usb 2-1: USB disconnect, device number 15
[  444.355557][ T8598] netlink: 'syz.5.586': attribute type 12 has an invalid length.
[  446.408116][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  446.924112][ T8610] syzkaller0: entered promiscuous mode
[  446.955608][ T8610] syzkaller0: entered allmulticast mode
[  446.980356][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.8.594'.
[  447.092746][ T5810] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  448.231061][ T5810] usb 2-1: Using ep0 maxpacket: 8
[  448.257120][ T5810] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  448.281370][ T5810] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  448.291465][ T5810] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  448.316004][ T5810] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  448.344458][ T5810] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  448.412430][ T5810] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  448.483297][ T5810] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  448.525739][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.779666][ T8634] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  448.889150][    T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  448.934772][ T5810] usb 2-1: GET_CAPABILITIES returned 0
[  448.952217][ T5810] usbtmc 2-1:16.0: can't read capabilities
[  450.181565][    T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  450.556207][    T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  450.629398][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  450.690901][    T9] usb 9-1: Product: syz
[  450.732351][    T9] usb 9-1: Manufacturer: syz
[  450.754051][ T5755] usb 2-1: USB disconnect, device number 16
[  450.769827][    T9] usb 9-1: SerialNumber: syz
[  451.796680][    T9] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  451.888960][    T9] usb 9-1: USB disconnect, device number 2
[  451.994113][ T5755] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  452.006993][    T9] usblp0: removed
[  453.505371][ T5755] usb 2-1: unable to get BOS descriptor or descriptor too short
[  453.552903][ T5755] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  453.601268][ T5755] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  453.647127][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.674371][ T5755] usb 2-1: Product: syz
[  453.696865][ T5755] usb 2-1: Manufacturer: syz
[  453.716727][ T5755] usb 2-1: SerialNumber: syz
[  454.185386][ T5755] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  454.220108][ T5755] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  454.262047][ T5755] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  454.292745][ T5755] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  457.230571][ T5755] usb 2-1: USB disconnect, device number 17
[  459.300773][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  463.459844][ T8717] netlink: 60 bytes leftover after parsing attributes in process `syz.4.619'.
[  465.762291][ T8735] netlink: 180 bytes leftover after parsing attributes in process `syz.1.625'.
[  465.879189][ T8737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  466.681607][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.8.628'.
[  469.293650][   T24] IPVS: starting estimator thread 0...
[  469.312832][ T5641] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  469.321875][ T5641] Bluetooth: hci1: Injecting HCI hardware error event
[  469.331748][ T5641] Bluetooth: hci1: hardware error 0x00
[  469.482346][ T8765] IPVS: using max 29 ests per chain, 69600 per kthread
[  471.101724][ T4937] Bluetooth: hci1: unexpected event for opcode 0x0000
[  472.652491][ T5641] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  472.758727][ T8785] netlink: 180 bytes leftover after parsing attributes in process `syz.4.640'.
[  473.062405][ T8791] Bluetooth: MGMT ver 1.23
[  473.362010][ T8793] xt_hashlimit: size too large, truncated to 1048576
[  477.867023][ T8818] syzkaller0: entered promiscuous mode
[  477.882714][ T8818] syzkaller0: entered allmulticast mode
[  479.423797][ T8831] netlink: 180 bytes leftover after parsing attributes in process `syz.1.654'.
[  484.550687][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  484.561849][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  484.576790][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  484.600510][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  484.618318][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  486.683970][ T5641] Bluetooth: hci4: command tx timeout
[  487.660641][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.666'.
[  488.021024][ T8882] netlink: 180 bytes leftover after parsing attributes in process `syz.4.669'.
[  488.766935][ T5641] Bluetooth: hci4: command tx timeout
[  489.784294][ T8889] syz.3.670 (8889): drop_caches: 2
[  489.903528][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  490.833539][ T5641] Bluetooth: hci4: command tx timeout
[  490.995923][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  491.052059][    T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  491.100806][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  491.140065][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.189936][    T9] usb 5-1: Product: syz
[  491.219413][    T9] usb 5-1: Manufacturer: syz
[  491.251345][    T9] usb 5-1: SerialNumber: syz
[  491.564119][    T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  492.703752][ T5641] Bluetooth: hci3: command 0x0406 tx timeout
[  492.996557][ T5641] Bluetooth: hci4: command tx timeout
[  493.426093][ T8918] tmpfs: Bad value for 'mpol'
[  493.466103][    T9] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  493.687064][    T9] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[  493.695924][    T9] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  494.716643][    T9] usb 5-1: USB disconnect, device number 5
[  497.644298][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  498.799634][ T8949] syz.3.688 (8949): drop_caches: 2
[  499.308832][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  499.327423][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  499.347699][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  499.365759][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  499.388909][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  499.605649][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  499.830465][   T24] usb 1-1: Dual-Role OTG device on HNP port
[  499.908445][   T24] usb 1-1: New USB device found, idVendor=17b3, idProduct=0000, bcdDevice= 7.02
[  499.965933][ T8943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.687'.
[  499.988881][ T5943] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.990534][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.097754][   T24] usb 1-1: Product: ACMESynth
[  500.384693][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  500.479380][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.520656][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.579001][ T8851] bridge_slave_0: entered allmulticast mode
[  500.679334][ T8851] bridge_slave_0: entered promiscuous mode
[  501.622724][ T5641] Bluetooth: hci2: command tx timeout
[  501.630913][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  501.641569][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  501.654487][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.753329][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.811695][ T8851] bridge_slave_1: entered allmulticast mode
[  501.859924][ T8851] bridge_slave_1: entered promiscuous mode
[  502.767403][ T8973] syz.4.694 (8973): drop_caches: 2
[  503.012713][ T5943] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.247292][ T5641] Bluetooth: hci6: command 0x0406 tx timeout
[  503.587301][ T5943] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.643935][ T4937] Bluetooth: hci2: command tx timeout
[  503.728906][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.812160][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.166541][ T5943] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.438277][ T8851] team0: Port device team_slave_0 added
[  504.504624][ T8851] team0: Port device team_slave_1 added
[  504.619481][ T8995] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  505.682941][ T9001] syz.8.701 (9001): drop_caches: 2
[  505.715012][ T4937] Bluetooth: hci2: command tx timeout
[  505.881713][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.917085][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.483330][ T8851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.515089][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.601801][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.717626][ T8851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.024684][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'.
[  507.192413][ T8851] hsr_slave_0: entered promiscuous mode
[  507.202037][ T8851] hsr_slave_1: entered promiscuous mode
[  507.793821][ T4937] Bluetooth: hci2: command tx timeout
[  508.105364][ T5943] bridge_slave_1: left allmulticast mode
[  508.121011][ T5943] bridge_slave_1: left promiscuous mode
[  508.152710][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.216644][ T5943] bridge_slave_0: left allmulticast mode
[  508.243772][ T5943] bridge_slave_0: left promiscuous mode
[  508.275821][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.009138][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  510.342470][ T9051] syz.4.716 (9051): drop_caches: 2
[  511.061331][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.116712][ T5943] bond0 (unregistering): Released all slaves
[  511.743677][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.8.719'.
[  511.863908][ T5943] : left promiscuous mode
[  512.155421][ T5943] IPVS: stopping master sync thread 8421 ...
[  513.598657][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9
[  515.754580][ T8851] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  515.827381][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  516.042289][ T5943] hsr_slave_0: left promiscuous mode
[  516.109158][ T5943] hsr_slave_1: left promiscuous mode
[  516.167304][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.212933][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.278390][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  516.326254][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.455826][ T5943] veth1_macvtap: left promiscuous mode
[  516.495439][ T5943] veth0_macvtap: left promiscuous mode
[  516.530651][ T5943] veth1_vlan: left promiscuous mode
[  516.567022][ T5943] veth0_vlan: left promiscuous mode
[  518.277323][ T4937] Bluetooth: hci5: command 0x0406 tx timeout
[  518.831151][ T9112] syz.3.731 (9112): drop_caches: 2
[  519.717658][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'.
[  522.028406][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  522.116805][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  523.309926][ T8851] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  523.349241][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  524.116669][ T5282] 8021q: adding VLAN 0 to HW filter on device eth10
[  524.154169][ T8851] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  524.238675][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  524.298356][ T8851] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  524.603347][ T8851] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  524.633179][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.601295][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.608730][ T8951] bridge_slave_0: entered allmulticast mode
[  525.616601][ T8951] bridge_slave_0: entered promiscuous mode
[  525.628444][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.638731][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.646079][ T8951] bridge_slave_1: entered allmulticast mode
[  526.607692][ T8951] bridge_slave_1: entered promiscuous mode
[  527.722695][ T9162] syz.8.743 (9162): drop_caches: 2
[  528.206708][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.482776][ T9167] affs: No valid root block on device nullb0
[  528.851355][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  529.957706][ T8951] team0: Port device team_slave_0 added
[  530.228039][ T8951] team0: Port device team_slave_1 added
[  530.539857][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.592090][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.687007][ T8951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.205737][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.231604][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.326070][ T8951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  531.716668][ T5943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.119332][ T9190] netlink: 'syz.7.752': attribute type 12 has an invalid length.
[  533.285956][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  533.507590][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  533.585907][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  533.633144][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  533.661624][ T5943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.676913][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.707474][   T10] usb 4-1: Product: syz
[  533.733974][   T10] usb 4-1: Manufacturer: syz
[  533.768244][   T10] usb 4-1: SerialNumber: syz
[  533.891884][ T8951] hsr_slave_0: entered promiscuous mode
[  533.917487][ T8951] hsr_slave_1: entered promiscuous mode
[  533.943687][ T8951] debugfs: 'hsr0' already exists in 'hsr'
[  533.972800][ T8951] Cannot create hsr debugfs directory
[  534.046982][   T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  534.662931][   T10] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  534.703421][   T10] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  534.752126][ T5943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.934877][   T10] usb 4-1: invalid uac2 rates
[  534.960028][   T10] usb 4-1: invalid uac2 rates
[  535.026664][   T10] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  535.061237][   T10] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  535.140365][   T10] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  535.584282][   T10] usb 4-1: USB disconnect, device number 7
[  535.799732][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  535.990273][ T5943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.038739][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.751142][ T4937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  540.786065][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  540.796536][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  540.813574][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  540.835803][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  540.895943][ T8851] 8021q: adding VLAN 0 to HW filter on device team0
[  540.991746][ T5641] Bluetooth: hci6: unexpected event for opcode 0x0c1c
[  541.107048][ T5282] 8021q: adding VLAN 0 to HW filter on device eth11
[  541.153994][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.161184][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.200998][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.208518][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.652018][ T9236] Bluetooth: MGMT ver 1.23
[  542.499585][ T5943] bridge_slave_1: left allmulticast mode
[  542.538412][ T5943] bridge_slave_1: left promiscuous mode
[  542.559356][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.611789][ T5943] bridge_slave_0: left allmulticast mode
[  542.649806][ T5943] bridge_slave_0: left promiscuous mode
[  542.696200][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.914844][ T5641] Bluetooth: hci0: command tx timeout
[  544.144807][ T9261] netlink: 'syz.3.765': attribute type 12 has an invalid length.
[  545.269944][ T5641] Bluetooth: hci0: command tx timeout
[  545.807456][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  545.886077][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  545.922176][ T5943] bond0 (unregistering): Released all slaves
[  545.923013][ T4937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  545.941237][ T4937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  545.949772][ T4937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  545.961800][ T4937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  545.970589][ T4937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  547.525364][ T5641] Bluetooth: hci0: command tx timeout
[  547.885784][ T9282] syz.7.767 (9282): drop_caches: 2
[  548.032744][ T5641] Bluetooth: hci1: command tx timeout
[  548.057260][ T5282] 8021q: adding VLAN 0 to HW filter on device eth12
[  548.704128][ T9285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  549.270938][ T5943] hsr_slave_0: left promiscuous mode
[  549.555901][ T5641] Bluetooth: hci0: command tx timeout
[  549.753491][ T5943] hsr_slave_1: left promiscuous mode
[  549.759759][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  549.798489][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.872934][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.902047][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.981111][ T5943] veth1_macvtap: left promiscuous mode
[  550.005727][ T5943] veth0_macvtap: left promiscuous mode
[  550.032954][ T5943] veth1_vlan: left promiscuous mode
[  550.050046][ T5943] veth0_vlan: left promiscuous mode
[  550.113737][ T5641] Bluetooth: hci1: command tx timeout
[  551.518694][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  551.585968][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  552.192891][ T5641] Bluetooth: hci1: command tx timeout
[  554.272714][ T5641] Bluetooth: hci1: command tx timeout
[  554.966887][ T8951] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  555.026044][ T8951] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  555.338933][ T8951] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  555.428358][ T8951] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  555.440514][ T8951] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  555.700145][ T8951] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  555.720704][ T5943] IPVS: stop unused estimator thread 0...
[  556.025739][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.090462][ T8951] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  556.153851][ T8951] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  557.664844][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17
[  557.681062][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.716084][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.729720][ T9228] bridge_slave_0: entered allmulticast mode
[  557.766038][ T9228] bridge_slave_0: entered promiscuous mode
[  557.863533][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.884857][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.914304][ T9228] bridge_slave_1: entered allmulticast mode
[  557.949533][ T9228] bridge_slave_1: entered promiscuous mode
[  558.569739][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  558.658208][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  558.947193][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  559.097313][ T9228] team0: Port device team_slave_0 added
[  559.144278][ T9228] team0: Port device team_slave_1 added
[  559.186740][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  559.199854][    T9] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  559.271399][    T9] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  559.280776][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.304238][    T9] usb 9-1: Product: syz
[  559.313360][    T9] usb 9-1: Manufacturer: syz
[  559.359723][    T9] usb 9-1: SerialNumber: syz
[  559.457320][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  559.515386][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  559.592369][    T9] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  559.604543][ T9228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  559.777357][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  559.791047][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  559.829572][    T9] usb 9-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  559.842064][    T9] usb 9-1: found format II with max.bitrate = 4, frame size=7372
[  559.843244][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  559.907783][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  559.908598][ T9228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  559.930851][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  559.980581][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  559.999346][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  560.266409][    T9] usb 9-1: invalid uac2 rates
[  560.298977][    T9] usb 9-1: invalid uac2 rates
[  560.323521][    T9] usb 9-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  560.346218][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.382890][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.389296][    T9] usb 9-1: found format II with max.bitrate = 4, frame size=7372
[  560.425454][ T9269] bridge_slave_0: entered allmulticast mode
[  560.472196][    T9] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  560.529391][ T9269] bridge_slave_0: entered promiscuous mode
[  560.744489][    T9] usb 9-1: USB disconnect, device number 3
[  560.829837][ T5943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.922245][ T9229] udevd[9229]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  561.057427][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.100891][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.141338][ T9269] bridge_slave_1: entered allmulticast mode
[  561.176769][ T9269] bridge_slave_1: entered promiscuous mode
[  562.136522][ T5641] Bluetooth: hci4: command tx timeout
[  562.302418][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  562.380621][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  562.455922][ T9228] hsr_slave_0: entered promiscuous mode
[  562.489590][ T9228] hsr_slave_1: entered promiscuous mode
[  562.536500][ T9228] debugfs: 'hsr0' already exists in 'hsr'
[  562.562888][ T9228] Cannot create hsr debugfs directory
[  562.673675][ T5943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.894276][ T9269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  563.001516][ T9269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  563.451992][ T5943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.635581][ T9269] team0: Port device team_slave_0 added
[  563.674849][ T9269] team0: Port device team_slave_1 added
[  563.851388][ T5943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.926652][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18
[  564.322222][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.352864][ T5641] Bluetooth: hci4: command tx timeout
[  565.114861][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.141546][ T9269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.215382][ T9412] bridge0: port 3(erspan0) entered blocking state
[  565.222530][ T9412] bridge0: port 3(erspan0) entered disabled state
[  565.229359][ T9412] erspan0: entered allmulticast mode
[  565.236717][ T9412] erspan0: entered promiscuous mode
[  565.242800][ T9412] bridge0: port 3(erspan0) entered blocking state
[  565.249552][ T9412] bridge0: port 3(erspan0) entered forwarding state
[  565.393914][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.422516][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.453791][   T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  565.512915][ T9269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.518456][ T9415] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  565.612787][   T24] usb 9-1: Using ep0 maxpacket: 8
[  565.628314][   T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  565.677096][   T24] usb 9-1: config 0 has no interface number 0
[  565.685555][   T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  565.696332][   T24] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  565.729041][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.790182][   T24] usb 9-1: config 0 descriptor??
[  565.838237][   T24] iowarrior 9-1:0.1: no interrupt-in endpoint found
[  566.451854][ T5641] Bluetooth: hci4: command tx timeout
[  566.578852][ T9421] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  566.861420][ T9420] xfrm0: entered promiscuous mode
[  566.888568][ T9420] xfrm0: entered allmulticast mode
[  567.028993][ T9269] hsr_slave_0: entered promiscuous mode
[  567.062990][ T9269] hsr_slave_1: entered promiscuous mode
[  567.084937][ T9269] debugfs: 'hsr0' already exists in 'hsr'
[  567.100591][ T9269] Cannot create hsr debugfs directory
[  567.610611][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  567.630253][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  567.642095][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  567.651820][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  567.660510][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  568.064395][ T5943] bridge_slave_1: left allmulticast mode
[  568.070102][ T5943] bridge_slave_1: left promiscuous mode
[  568.076167][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.094519][ T5943] bridge_slave_0: left allmulticast mode
[  568.260106][ T9446] i2c i2c-0: new_device: Missing parameters
[  568.537555][ T5641] Bluetooth: hci4: command tx timeout
[  569.120374][ T5943] bridge_slave_0: left promiscuous mode
[  569.126346][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.277431][ T5943] bridge_slave_1: left allmulticast mode
[  569.312101][ T5943] bridge_slave_1: left promiscuous mode
[  569.394677][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.425683][ T5943] bridge_slave_0: left allmulticast mode
[  569.442343][ T5943] bridge_slave_0: left promiscuous mode
[  569.448376][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.712914][ T5641] Bluetooth: hci2: command tx timeout
[  570.299225][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.334269][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.360382][ T5943] bond0 (unregistering): Released all slaves
[  570.947435][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.007254][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.030219][ T5943] bond0 (unregistering): Released all slaves
[  571.379218][ T5943] IPVS: stopping master sync thread 8576 ...
[  571.803949][ T5641] Bluetooth: hci2: command tx timeout
[  572.026596][ T9421] Cannot find set identified by id 0 to match
[  573.563583][ T7941] usb 9-1: USB disconnect, device number 4
[  573.873611][ T5641] Bluetooth: hci2: command tx timeout
[  574.328004][ T9496] se_dev->se_dev_ptr already set for storage object
[  574.405521][ T9302] Set syz1 is full, maxelem 65536 reached
[  574.563922][ T5943] hsr_slave_0: left promiscuous mode
[  574.583916][ T5943] hsr_slave_1: left promiscuous mode
[  574.603177][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.644491][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  574.700258][ T5943] hsr_slave_0: left promiscuous mode
[  574.724731][ T5943] hsr_slave_1: left promiscuous mode
[  574.748289][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  574.757872][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.777324][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  574.790594][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.709582][ T5943] veth1_macvtap: left promiscuous mode
[  575.722731][ T5943] veth0_macvtap: left promiscuous mode
[  575.749413][ T5943] veth1_vlan: left promiscuous mode
[  575.754887][ T5943] veth0_vlan: left promiscuous mode
[  575.952897][ T5641] Bluetooth: hci2: command tx timeout
[  576.497121][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  576.539739][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  577.420265][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  577.442028][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  578.975451][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.999842][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.011661][ T9369] bridge_slave_0: entered allmulticast mode
[  579.057495][ T9369] bridge_slave_0: entered promiscuous mode
[  579.102420][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.111855][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.121615][ T9369] bridge_slave_1: entered allmulticast mode
[  579.155677][ T9369] bridge_slave_1: entered promiscuous mode
[  579.327073][ T9526] netlink: 'syz.8.800': attribute type 12 has an invalid length.
[  579.536948][ T9369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.550025][ T9369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.257053][ T9228] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  580.466589][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  580.497254][ T9369] team0: Port device team_slave_0 added
[  580.508934][ T5353] IPVS: starting estimator thread 0...
[  580.523912][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  580.540522][ T9228] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  580.628138][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  580.644204][ T9542] IPVS: using max 22 ests per chain, 52800 per kthread
[  580.743518][ T9369] team0: Port device team_slave_1 added
[  581.293864][ T9228] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  581.310564][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  582.040802][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  582.052978][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  582.086025][ T9369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  582.109059][ T9228] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  582.124114][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  582.337565][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.347826][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  582.379923][ T9369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.602427][ T9369] hsr_slave_0: entered promiscuous mode
[  583.611619][ T9369] hsr_slave_1: entered promiscuous mode
[  585.663065][ T5770] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  585.826235][ T5770] usb 9-1: unable to get BOS descriptor or descriptor too short
[  585.845376][ T5770] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  585.866353][ T5770] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  585.877616][ T5770] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.883259][ T9269] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  585.885912][ T5770] usb 9-1: Product: syz
[  585.897722][ T5770] usb 9-1: Manufacturer: syz
[  585.902357][ T5770] usb 9-1: SerialNumber: syz
[  585.916517][ T9269] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  585.925489][ T9269] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  585.939817][ T9269] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  585.978110][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'.
[  585.997508][ T5943] bridge_slave_1: left allmulticast mode
[  586.016144][ T5943] bridge_slave_1: left promiscuous mode
[  586.027316][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.056039][ T5943] bridge_slave_0: left allmulticast mode
[  586.070918][ T5943] bridge_slave_0: left promiscuous mode
[  586.077922][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.138725][ T5770] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  586.275768][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  586.294409][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.322534][ T5943] bond0 (unregistering): Released all slaves
[  586.328828][ T5770] usb 9-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  586.340500][ T5770] usb 9-1: found format II with max.bitrate = 4, frame size=7372
[  586.352418][ T9269] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  586.369888][ T9269] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  586.388888][ T9269] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  586.416097][ T9269] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  586.494079][ T9436] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.502138][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.516640][ T9436] bridge_slave_0: entered allmulticast mode
[  586.525772][ T9436] bridge_slave_0: entered promiscuous mode
[  586.538182][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19
[  586.572077][ T9436] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.581538][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.590454][ T9436] bridge_slave_1: entered allmulticast mode
[  586.602293][ T9436] bridge_slave_1: entered promiscuous mode
[  586.734749][ T5770] usb 9-1: invalid uac2 rates
[  586.745369][ T5770] usb 9-1: invalid uac2 rates
[  586.771626][ T5770] usb 9-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  586.807964][ T5770] usb 9-1: found format II with max.bitrate = 4, frame size=7372
[  586.936178][ T5770] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  587.016166][ T5943] hsr_slave_0: left promiscuous mode
[  587.035745][ T5943] hsr_slave_1: left promiscuous mode
[  587.056481][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  587.082572][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.152225][ T5770] usb 9-1: USB disconnect, device number 5
[  587.344386][ T9229] udevd[9229]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  587.816859][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  587.895124][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  588.148116][   T10] IPVS: starting estimator thread 0...
[  588.333093][ T9625] IPVS: using max 21 ests per chain, 50400 per kthread
[  588.936969][ T9436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.100465][ T9436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.717927][ T9636] syz.8.815 (9636): drop_caches: 2
[  589.848036][ T9436] team0: Port device team_slave_0 added
[  589.930801][ T9436] team0: Port device team_slave_1 added
[  589.984917][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.281086][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.297740][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  590.320394][ T9642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  590.325705][ T9436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.398494][ T9436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.433441][ T9436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  590.490341][ T9436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  590.618433][ T5943] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.684753][ T9228] 8021q: adding VLAN 0 to HW filter on device team0
[  590.947559][ T9436] hsr_slave_0: entered promiscuous mode
[  590.965782][ T9436] hsr_slave_1: entered promiscuous mode
[  590.973885][ T9436] debugfs: 'hsr0' already exists in 'hsr'
[  590.995569][ T9436] Cannot create hsr debugfs directory
[  591.011489][  T859] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.018718][  T859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.092995][ T9654] 0x000000000000-0x000000020000 : ""
[  591.104141][ T5943] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.166985][ T9654] ftl_cs: FTL header not found.
[  591.213152][  T859] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.220418][  T859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.636797][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'.
[  592.004109][ T5943] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.308839][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.822'.
[  593.017222][ T9677] bridge_slave_1: left allmulticast mode
[  593.023095][ T9677] bridge_slave_1: left promiscuous mode
[  593.028929][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.043677][ T9677] bridge_slave_0: left allmulticast mode
[  593.053046][ T9677] bridge_slave_0: left promiscuous mode
[  593.058855][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.146927][ T5943] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.323435][ T9369] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  593.352353][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  593.423793][ T9269] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.436486][ T9369] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  593.455314][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  593.527312][ T9369] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  593.561993][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  593.650014][ T9369] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  593.700514][ T9689] syz.8.825 (9689): drop_caches: 2
[  593.713406][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  594.701023][ T9269] 8021q: adding VLAN 0 to HW filter on device team0
[  595.452059][ T9711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.461438][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.468991][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  595.587113][ T9714] 0x000000000000-0x000000020000 : ""
[  595.661479][ T9714] ftl_cs: FTL header not found.
[  595.808502][ T5943] bridge_slave_1: left allmulticast mode
[  595.829862][ T5943] bridge_slave_1: left promiscuous mode
[  595.855844][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.897591][ T5943] bridge_slave_0: left allmulticast mode
[  595.904094][ T5943] bridge_slave_0: left promiscuous mode
[  595.910110][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.454992][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  596.486149][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  596.512356][ T5943] bond0 (unregistering): Released all slaves
[  596.581661][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.588949][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.665324][ T5943] IPVS: stopping master sync thread 8508 ...
[  596.795266][ T4937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  596.806857][ T4937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  596.823166][ T4937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  596.832895][ T4937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  596.842002][ T4937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  597.318903][ T9744] trusted_key: syz.3.834 sent an empty control message without MSG_MORE.
[  598.132409][ T9750] xt_hashlimit: size too large, truncated to 1048576
[  598.912775][ T4937] Bluetooth: hci3: command tx timeout
[  599.232101][ T9269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  599.264547][ T9269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  599.510138][ T5943] hsr_slave_0: left promiscuous mode
[  599.516729][ T5943] hsr_slave_1: left promiscuous mode
[  599.528868][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  599.552222][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.616969][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  599.628508][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.690012][ T5943] veth1_macvtap: left promiscuous mode
[  599.697954][ T5943] veth0_macvtap: left promiscuous mode
[  599.710034][ T5943] veth1_vlan: left promiscuous mode
[  599.732806][ T5943] veth0_vlan: left promiscuous mode
[  600.700866][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  600.774213][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  600.993221][ T4937] Bluetooth: hci3: command tx timeout
[  601.207481][ T9369] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.442519][ T9369] 8021q: adding VLAN 0 to HW filter on device team0
[  601.490245][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.497575][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.553109][ T9436] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  601.588435][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  601.612192][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.619569][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.656403][ T9436] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  601.677555][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  601.687948][ T9436] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  601.705406][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  601.714910][ T9436] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  601.727688][ T9436] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  603.074294][ T4937] Bluetooth: hci3: command tx timeout
[  603.677308][ T9436] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.867928][ T9832] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  604.684433][ T9436] 8021q: adding VLAN 0 to HW filter on device team0
[  604.866757][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  604.878739][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  604.888693][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  604.899106][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  604.910727][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  604.978867][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.986048][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.151771][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.158954][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.181824][ T5641] Bluetooth: hci3: command tx timeout
[  606.565479][ T9837] syz.3.854 (9837): drop_caches: 2
[  606.675557][ T9848] xfrm0: left promiscuous mode
[  606.680355][ T9848] xfrm0: left allmulticast mode
[  606.993262][ T5641] Bluetooth: hci0: command tx timeout
[  607.257904][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.294225][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.317812][ T9734] bridge_slave_0: entered allmulticast mode
[  607.341843][ T9734] bridge_slave_0: entered promiscuous mode
[  607.364680][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.374204][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.392333][ T9734] bridge_slave_1: entered allmulticast mode
[  607.425395][ T9734] bridge_slave_1: entered promiscuous mode
[  607.683919][ T9369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.699737][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  607.790648][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  607.934250][ T9734] team0: Port device team_slave_0 added
[  608.050800][ T9734] team0: Port device team_slave_1 added
[  609.074222][ T5641] Bluetooth: hci0: command tx timeout
[  610.197377][ T5943] bridge_slave_1: left allmulticast mode
[  610.205904][ T5943] bridge_slave_1: left promiscuous mode
[  610.218883][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.341200][ T5943] bridge_slave_0: left allmulticast mode
[  610.348010][ T5943] bridge_slave_0: left promiscuous mode
[  610.355595][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.584310][ T9882] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  611.153339][ T5641] Bluetooth: hci0: command tx timeout
[  611.835425][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  612.836392][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  612.849510][ T5943] bond0 (unregistering): Released all slaves
[  612.912036][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  612.938132][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  612.973098][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.234238][ T5641] Bluetooth: hci0: command tx timeout
[  613.527424][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.545352][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  613.618483][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  613.676871][ T5943] hsr_slave_0: left promiscuous mode
[  613.704213][ T5943] hsr_slave_1: left promiscuous mode
[  613.711013][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.721114][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.312237][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  614.372411][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  615.551202][ T9734] hsr_slave_0: entered promiscuous mode
[  615.560011][ T9734] hsr_slave_1: entered promiscuous mode
[  616.415698][ T9734] debugfs: 'hsr0' already exists in 'hsr'
[  616.434658][ T9734] Cannot create hsr debugfs directory
[  617.774708][ T9369] veth0_vlan: entered promiscuous mode
[  619.070337][ T9436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.180883][ T9940] Bluetooth: MGMT ver 1.23
[  620.019767][ T4937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  620.028954][ T4937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  620.040164][ T4937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  620.048977][ T4937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  620.056990][ T4937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  620.360749][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.389542][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.403255][ T9839] bridge_slave_0: entered allmulticast mode
[  620.426606][ T9839] bridge_slave_0: entered promiscuous mode
[  620.634539][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.665925][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.689885][ T9839] bridge_slave_1: entered allmulticast mode
[  620.719745][ T9839] bridge_slave_1: entered promiscuous mode
[  621.077700][ T9955] syzkaller0: entered promiscuous mode
[  621.106451][ T9955] syzkaller0: entered allmulticast mode
[  621.160378][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  621.409815][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  621.658926][ T9970] bond0: (slave bond_slave_0): Releasing backup interface
[  621.695742][ T9970] bond0: (slave bond_slave_1): Releasing backup interface
[  621.771658][ T9970] team0: Port device team_slave_0 removed
[  621.849135][ T9970] team0: Port device team_slave_1 removed
[  621.870350][ T9983] syz.3.876 (9983): drop_caches: 2
[  621.891817][ T9970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  622.068580][ T9970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  622.174174][ T9970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  622.203046][ T5641] Bluetooth: hci1: command tx timeout
[  622.268674][ T9970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  622.400470][ T9970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  622.828716][ T9839] team0: Port device team_slave_0 added
[  622.870996][ T9839] team0: Port device team_slave_1 added
[  623.228685][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.267641][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.318875][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.464493][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.483984][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.563202][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.728552][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  623.737191][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  624.290392][ T5641] Bluetooth: hci1: command tx timeout
[  626.241970][ T9839] hsr_slave_0: entered promiscuous mode
[  626.260327][ T9839] hsr_slave_1: entered promiscuous mode
[  626.288807][ T9839] debugfs: 'hsr0' already exists in 'hsr'
[  626.307990][ T9839] Cannot create hsr debugfs directory
[  626.362909][ T5641] Bluetooth: hci1: command tx timeout
[  626.373398][ T5943] bridge_slave_1: left allmulticast mode
[  626.387404][ T5943] bridge_slave_1: left promiscuous mode
[  626.401911][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.475454][ T5943] bridge_slave_0: left allmulticast mode
[  626.506669][ T5943] bridge_slave_0: left promiscuous mode
[  626.529221][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.848108][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  627.877094][T10037] syz.8.883 (10037): drop_caches: 2
[  627.880740][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  627.905144][ T5943] bond0 (unregistering): Released all slaves
[  627.948206][ T9436] veth0_vlan: entered promiscuous mode
[  627.968068][T10035] warning: `syz.3.884' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  628.172217][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  628.187409][T10044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  628.203371][T10044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  628.219273][T10044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  628.229666][T10044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  628.432716][ T5641] Bluetooth: hci1: command tx timeout
[  628.574137][ T5943] hsr_slave_0: left promiscuous mode
[  628.581216][T10050] netlink: 'syz.3.885': attribute type 10 has an invalid length.
[  628.619784][ T5943] hsr_slave_1: left promiscuous mode
[  628.648996][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  628.684745][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.224151][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  629.262031][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  629.567615][ T9734] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  629.602031][ T9734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  629.711253][T10050] bond0: (slave erspan0.1): Error -34 calling dev_set_mtu
[  629.888481][ T9734] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  629.917440][T10058] syz.8.888 (10058): drop_caches: 2
[  629.955670][ T9734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  630.039323][ T9734] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  630.072910][ T9734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  630.203717][ T9734] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  630.258830][ T9734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  630.273749][ T5641] Bluetooth: hci4: command tx timeout
[  632.353101][ T5641] Bluetooth: hci4: command tx timeout
[  632.768712][ T9947] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.787547][ T9947] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.800631][ T9947] bridge_slave_0: entered allmulticast mode
[  632.818025][ T9947] bridge_slave_0: entered promiscuous mode
[  632.956444][ T9947] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.030721][ T9947] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.085375][ T9947] bridge_slave_1: entered allmulticast mode
[  633.116463][ T9947] bridge_slave_1: entered promiscuous mode
[  633.381450][ T9947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  633.435114][ T9947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.432983][ T5641] Bluetooth: hci4: command tx timeout
[  635.027500][T10127] netlink: 'syz.3.894': attribute type 1 has an invalid length.
[  635.035496][T10127] netlink: 224 bytes leftover after parsing attributes in process `syz.3.894'.
[  635.210881][ T9947] team0: Port device team_slave_0 added
[  635.240330][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0
[  636.011400][ T9947] team0: Port device team_slave_1 added
[  636.125723][ T9947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  636.142706][ T9947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.259107][ T9947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.409715][T10143] syz.8.896 (10143): drop_caches: 2
[  636.431367][ T9947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  636.440612][ T9947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  636.467926][ T9947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.516084][ T5641] Bluetooth: hci4: command tx timeout
[  636.841613][ T9734] 8021q: adding VLAN 0 to HW filter on device team0
[  637.629603][ T9947] hsr_slave_0: entered promiscuous mode
[  637.653473][ T9947] hsr_slave_1: entered promiscuous mode
[  637.660090][ T9947] debugfs: 'hsr0' already exists in 'hsr'
[  637.682270][ T9947] Cannot create hsr debugfs directory
[  637.940310][T10041] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.949240][T10041] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.958695][T10041] bridge_slave_0: entered allmulticast mode
[  637.968947][T10041] bridge_slave_0: entered promiscuous mode
[  638.293972][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.301191][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.485368][T10041] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.493794][T10041] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.501221][T10041] bridge_slave_1: entered allmulticast mode
[  638.527311][T10041] bridge_slave_1: entered promiscuous mode
[  638.575898][ T9839] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  638.597197][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  638.646923][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.654351][ T6664] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.718971][ T9839] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  638.783592][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  638.803229][ T9839] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  638.835939][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  639.029330][T10041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.196317][ T9839] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  639.241361][ T9839] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  639.275312][T10041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  640.793517][T10041] team0: Port device team_slave_0 added
[  640.875178][T10041] team0: Port device team_slave_1 added
[  642.225610][T10041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.243713][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  642.354532][T10041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.664583][T10221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  643.028503][T10041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.053232][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.107931][T10041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.562898][T10226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  644.001057][T10041] hsr_slave_0: entered promiscuous mode
[  644.019185][T10041] hsr_slave_1: entered promiscuous mode
[  644.031350][T10041] debugfs: 'hsr0' already exists in 'hsr'
[  644.052762][T10041] Cannot create hsr debugfs directory
[  644.071083][ T5943] bridge_slave_1: left allmulticast mode
[  644.081507][ T5943] bridge_slave_1: left promiscuous mode
[  644.091944][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.125975][ T5943] bridge_slave_0: left allmulticast mode
[  644.138252][ T5943] bridge_slave_0: left promiscuous mode
[  644.147834][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.231905][ T5943] bridge_slave_1: left allmulticast mode
[  644.252506][ T5943] bridge_slave_1: left promiscuous mode
[  644.275823][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.318392][ T5943] bridge_slave_0: left allmulticast mode
[  644.328881][ T5943] bridge_slave_0: left promiscuous mode
[  644.349076][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.545943][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  645.600159][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  645.650044][ T5943] bond0 (unregistering): Released all slaves
[  646.210971][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  646.231810][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  646.247607][ T5943] bond0 (unregistering): Released all slaves
[  646.575671][ T5943] hsr_slave_0: left promiscuous mode
[  646.587610][ T5943] hsr_slave_1: left promiscuous mode
[  646.599855][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  646.614311][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  646.647169][ T5943] hsr_slave_0: left promiscuous mode
[  646.662558][ T5943] hsr_slave_1: left promiscuous mode
[  646.675849][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  646.689882][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  646.729942][ T5943] veth0_vlan: left promiscuous mode
[  646.740827][ T5943] veth0_vlan: left promiscuous mode
[  648.529917][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  648.569414][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  649.505923][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  649.561383][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  650.322505][T10291] dummy_hcd dummy_hcd.0: remove, state 1
[  650.372865][T10291] usb usb1: USB disconnect, device number 1
[  650.476888][T10291] usb 1-1: USB disconnect, device number 4
[  650.839327][T10300] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  651.723774][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.109495][ T9839] 8021q: adding VLAN 0 to HW filter on device team0
[  652.235041][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.242246][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.316197][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.323393][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.049838][ T9734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.053259][ T9734] veth0_vlan: entered promiscuous mode
[  654.166689][ T9734] veth1_vlan: entered promiscuous mode
[  654.207437][T10041] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  654.241347][T10041] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  654.262474][T10041] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  654.297526][T10041] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  654.316609][T10041] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  654.319700][T10291] dummy_hcd dummy_hcd.0: stopped
[  654.355256][T10041] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  654.387969][T10041] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  654.390973][T10291] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  654.432309][T10041] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  654.452988][ T5770] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  654.646606][ T5770] usb 4-1: unable to get BOS descriptor or descriptor too short
[  654.674433][ T5770] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  654.698802][ T5770] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  654.714311][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.733460][ T5770] usb 4-1: Product: syz
[  654.746147][ T5770] usb 4-1: Manufacturer: syz
[  654.772548][ T5770] usb 4-1: SerialNumber: syz
[  654.908734][ T9734] veth0_macvtap: entered promiscuous mode
[  654.947686][ T9947] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  654.991965][ T9947] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  655.013627][ T9947] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  655.045628][ T5770] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  655.055997][ T9947] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  655.108372][ T9947] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  655.218760][ T9947] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  655.238264][ T5770] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  655.272711][ T5770] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  655.303655][ T5770] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  655.332964][ T5770] usb 4-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  655.352505][ T9734] veth1_macvtap: entered promiscuous mode
[  655.366009][ T5770] usb 4-1: found format II with max.bitrate = 4, frame size=7372
[  655.385988][ T9947] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  655.390885][ T5770] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  655.423818][ T9947] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  655.492185][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  655.610039][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  655.700110][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  655.803873][ T1112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  655.836195][ T1112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  655.901292][ T1112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  655.924237][ T1112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.171002][T10041] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.953545][ T5770] usb 4-1: USB disconnect, device number 8
[  657.148206][T10041] 8021q: adding VLAN 0 to HW filter on device team0
[  657.223907][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.231104][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  657.513622][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.520785][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  657.633781][T10388] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  658.157947][T10396] udevd[10396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  658.270056][ T9947] 8021q: adding VLAN 0 to HW filter on device bond0
[  658.495988][T10044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  658.500553][ T9947] 8021q: adding VLAN 0 to HW filter on device team0
[  658.518580][T10044] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  658.526510][T10044] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  658.546363][T10044] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  658.557190][T10044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  658.705124][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.712329][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.905379][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.912725][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.862238][ T9839] veth0_vlan: entered promiscuous mode
[  660.594704][ T5641] Bluetooth: hci2: command tx timeout
[  660.882523][ T5943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.946208][ T9839] veth1_vlan: entered promiscuous mode
[  661.835919][ T1631] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI
[  661.848045][ T1631] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[  661.856479][ T1631] CPU: 1 UID: 0 PID: 1631 Comm: kworker/1:1H Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  661.867532][ T1631] Tainted: [L]=SOFTLOCKUP
[  661.871853][ T1631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  661.881918][ T1631] Workqueue: events_highpri f_midi_in_work
[  661.887774][ T1631] RIP: 0010:dummy_queue+0x1ba/0xb90
[  661.893024][ T1631] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a8 07 00 00 e8 4b 81 3a fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 53 07 00 00 45 8b 7f 60 31 ff
[  661.912658][ T1631] RSP: 0018:ffffc900069e7a28 EFLAGS: 00010016
[  661.918742][ T1631] RAX: dffffc0000000000 RBX: ffff8880799cf710 RCX: ffffffff87cfb9bf
[  661.926726][ T1631] RDX: 000000000000000c RSI: ffffffff87cfba35 RDI: 0000000000000060
[  661.934700][ T1631] RBP: ffff888027a640e0 R08: 0000000000000005 R09: 0000000000000005
[  661.942670][ T1631] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888027a64c00
[  661.950643][ T1631] R13: ffff8880799cf700 R14: ffff888027a640d8 R15: 0000000000000000
[  661.958614][ T1631] FS:  0000000000000000(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000
[  661.967547][ T1631] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  661.974141][ T1631] CR2: 000000110c30d46c CR3: 0000000061588000 CR4: 0000000000350ef0
[  661.982110][ T1631] Call Trace:
[  661.985386][ T1631]  <TASK>
[  661.988406][ T1631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.994056][ T1631]  ? do_raw_spin_unlock+0x145/0x1e0
[  661.999284][ T1631]  usb_ep_queue+0xfa/0x3c0
[  662.003722][ T1631]  f_midi_in_work+0x9b0/0x1580
[  662.008526][ T1631]  ? __pfx_f_midi_in_work+0x10/0x10
[  662.013772][ T1631]  ? __entry_text_end+0x1020b5/0x1020b9
[  662.019344][ T1631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  662.024991][ T1631]  ? rcu_is_watching+0x12/0xc0
[  662.029783][ T1631]  process_one_work+0xa23/0x1940
[  662.034735][ T1631]  ? __pfx_process_one_work+0x10/0x10
[  662.040141][ T1631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  662.045796][ T1631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  662.051620][ T1631]  worker_thread+0x5ef/0xe50
[  662.056221][ T1631]  ? __pfx_worker_thread+0x10/0x10
[  662.061337][ T1631]  ? kthread+0x13a/0x450
[  662.065629][ T1631]  ? __pfx_worker_thread+0x10/0x10
[  662.070916][ T1631]  kthread+0x370/0x450
[  662.075012][ T1631]  ? __pfx_kthread+0x10/0x10
[  662.079632][ T1631]  ret_from_fork+0x72b/0xd50
[  662.084240][ T1631]  ? __pfx_ret_from_fork+0x10/0x10
[  662.089372][ T1631]  ? srso_alias_return_thunk+0x5/0xfbef5
[  662.095281][ T1631]  ? __switch_to+0x800/0x10f0
[  662.099982][ T1631]  ? __switch_to_asm+0x39/0x70
[  662.104767][ T1631]  ? __pfx_kthread+0x10/0x10
[  662.109401][ T1631]  ret_from_fork_asm+0x1a/0x30
[  662.114196][ T1631]  </TASK>
[  662.117204][ T1631] Modules linked in:
[  662.121096][ T1631] ---[ end trace 0000000000000000 ]---
[  662.126538][ T1631] RIP: 0010:dummy_queue+0x1ba/0xb90
[  662.131772][ T1631] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a8 07 00 00 e8 4b 81 3a fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 53 07 00 00 45 8b 7f 60 31 ff
[  662.151390][ T1631] RSP: 0018:ffffc900069e7a28 EFLAGS: 00010016
[  662.157465][ T1631] RAX: dffffc0000000000 RBX: ffff8880799cf710 RCX: ffffffff87cfb9bf
[  662.165439][ T1631] RDX: 000000000000000c RSI: ffffffff87cfba35 RDI: 0000000000000060
[  662.173411][ T1631] RBP: ffff888027a640e0 R08: 0000000000000005 R09: 0000000000000005
[  662.181395][ T1631] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888027a64c00
[  662.189365][ T1631] R13: ffff8880799cf700 R14: ffff888027a640d8 R15: 0000000000000000
[  662.197341][ T1631] FS:  0000000000000000(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000
[  662.206276][ T1631] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  662.212861][ T1631] CR2: 000000110c30d46c CR3: 0000000061588000 CR4: 0000000000350ef0
[  662.220833][ T1631] Kernel panic - not syncing: Fatal exception
[  662.226979][ T1631] Kernel Offset: disabled
[  662.231464][ T1631] Rebooting in 86400 seconds..