last executing test programs:

26m39.959458133s ago: executing program 3 (id=124):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480))
newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0, 0x1000)
fstat(r0, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x320, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'bbc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x6e78c1, 0x0)
write$tun(r5, 0x0, 0x0)

26m38.723495457s ago: executing program 3 (id=127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, r0)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={0x0}}, 0x40000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_io_uring_setup(0x328d, &(0x7f0000001340)={0x0, 0xdece, 0x40, 0x1, 0x223}, &(0x7f0000000080), &(0x7f0000000680), &(0x7f0000000240))
syz_ublk_setup_io_uring(0x3574, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000001300))
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
sigaltstack(0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r3, r3, 0x0, 0x20000005)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000200)="00112233", 0x4, 0x0, &(0x7f0000000280)={0x2, 0x1234, @local}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x4802)

26m36.063084159s ago: executing program 3 (id=135):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r1)
tkill(r1, 0x12)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)

26m32.389357235s ago: executing program 3 (id=144):
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000a40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5518, &(0x7f000000adc0)="$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")
symlink(&(0x7f0000004ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000005ec0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file2\x00', 0x108004, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x44010, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000f40)='.\x00', 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000300)='./file3\x00', 0x0, 0x1000, 0x0)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

26m29.109937025s ago: executing program 3 (id=155):
syz_io_uring_setup(0x14ce, &(0x7f0000000040)={0x0, 0x622, 0x8000, 0x3, 0x199}, 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x474283, 0x0, 0x14}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
tkill(0x0, 0x12)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff)
mount(&(0x7f00000005c0)=@filename='./dev/mtdblock0\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/urandom\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10000)

26m27.278771625s ago: executing program 3 (id=161):
syz_io_uring_setup(0x14ce, &(0x7f0000000040)={0x0, 0x622, 0x8000, 0x3, 0x199}, 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x474283, 0x0, 0x14}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
tkill(0x0, 0x12)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff)
mount(&(0x7f00000005c0)=@filename='./dev/mtdblock0\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/test\x00', 0x42, 0x1ff)

26m26.645529234s ago: executing program 32 (id=161):
syz_io_uring_setup(0x14ce, &(0x7f0000000040)={0x0, 0x622, 0x8000, 0x3, 0x199}, 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x474283, 0x0, 0x14}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
tkill(0x0, 0x12)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff)
mount(&(0x7f00000005c0)=@filename='./dev/mtdblock0\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/test\x00', 0x42, 0x1ff)

6m2.323466703s ago: executing program 5 (id=3651):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$dvb_demux(0x0, 0x0, 0xa900)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0x1019)

5m59.133402044s ago: executing program 5 (id=3654):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x2, 0x7, 0x2)
r1 = socket(0x10, 0x2, 0x0)
timerfd_create(0x8, 0x0)
clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000})
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r1, &(0x7f0000002ec0), 0x0, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c)
listen(r2, 0xc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000240), 0x0)

5m58.066203227s ago: executing program 5 (id=3659):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@setneightbl={0x30, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_IFINDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000880}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000340)={0x4, r3, 0x80000})
r5 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000380)=0x40)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x80000004})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1000, 0x4e23, 0x0, 0xa, 0x0, 0x130, 0x16}, {0x10000000000, 0x0, 0x0, 0x1, 0x1000000000000, 0x7f, 0x0, 0x100000001}, {0xfffffffffffffffe, 0x1, 0x2000000000000003}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in6=@empty, 0x34fd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2}}, 0xe8)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r9 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r8, r10, 0x0)
connect$inet6(r7, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl(r6, 0x3b8f, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)

5m53.423877034s ago: executing program 5 (id=3666):
socket(0x1e, 0x4, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x9020080, 0x0, 0x0, 0x0, 0x0, 0x0)
fsopen(0x0, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='vegas', 0x5)
write$binfmt_script(r0, &(0x7f0000000840), 0xfffffd9d)

5m53.082483745s ago: executing program 5 (id=3668):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r0, 0xc0106440, &(0x7f0000000280)={0x1, 0x8, &(0x7f0000000240)})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x200004d, 0x6})
r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x52a1, 0x1e})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608})
close_range(r5, 0xffffffffffffffff, 0x0)

5m8.524605521s ago: executing program 5 (id=3670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='270', 0x3)
unshare(0x40000000)

4m52.988063549s ago: executing program 33 (id=3670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)='270', 0x3)
unshare(0x40000000)

10.18893639s ago: executing program 1 (id=4372):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket(0x2, 0x80805, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

8.859750605s ago: executing program 2 (id=4374):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000003540)=@newtfilter={0x14b0, 0x2c, 0x4, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1484, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x200, 0x1, [@m_mirred={0x160, 0x18, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x2, 0x5, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0x4, 0x5, 0x80000001, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x7, 0x6, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0xd, 0x4, 0xb9300, 0x7cb}, 0x4}}]}, {0xb1, 0x6, "a30db39e75d2ff141f12ee57020db7dd1a0817d4abc70943b40a43454c8a05d331d68dc8f80ed672ca180d105fce1725e785fa3249de6337aa05cbf683d5bac5bd36fd24354757d425a60f25fd18e6863bf18ce8b04b9eac443a8b9f4dbf755401449e0230333f5fc9b2b5a2bb947fa6577bb687eaaaa35663676e0f9df77e2eb4fc9f41d2b6b545fcbc2e14154beedbdd0891836002f55e3cd6676bcbd5bb32083ae0367810fbbf9f0687f05a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x9c, 0x100e, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0x401, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xc, 0x0, 0xd, 0x10000}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x25, 0x6, "8e6e4896cbb0b10f2c9fd88805c2537e0af8a5e46b7872fb431d71cf173b6e4c20"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0x5, 0x7, '\x00'}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_ACT={0x125c, 0x1, [@m_xt={0x1258, 0x20, 0x0, 0x0, {{0x7}, {0x1230, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xec, 0x6, {0x3, 'mangle\x00', 0x1, 0xe, "0fb1416c898f734af4226170301b7a1e530c713fcc684dcc5e32c6d411b9ac929366435a2bf01cc3dc332aa582a768e67253a94ce4fda77498a5a976997883be77513cc5d59fbbf2387522b10b77f8044d5989c4454747f5a11ae87fecaae8c9fdca32bcf31d020ca061fd71e42f0fb2291d42660c38e2464a9844cbf8507f7dd4136597c673b612b530d3f1e7c286c08525087b731f51f1cf54b036890e5194f6fd90baac631cfc503d6e4cd762d9d0af3545dc632e8b513afe7ea2fea5384376ef"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x102a, 0x6, {0xef66, 'filter\x00', 0x2, 0x6, "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"}}, @TCA_IPT_TARG={0xb4, 0x6, {0xfff, 'security\x00', 0x20, 0x101, "c978cda510ba842bb7810482faa877e54bd7ed4236214d7cb401908f6abd217add2638375cdcf3db68044798fee16963775bb0fdae05a44728bf6bf8a602479081cd486491e86895456335235470b93eb1f225cae896e334162a7f59dc8a7aebf15b17ead4b33e405d68cbd50bf299ffc07efe0622b0e575708ddb5192d076dcb87ac1375adc85a501d0"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x9f807591694bf847, 0x2}}}}]}]}}]}, 0x14b0}, 0x1, 0x0, 0x0, 0x20045010}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="060019adfada5bf2d49c00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

8.837923089s ago: executing program 4 (id=4376):
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x81, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x24c, 0x128, 0x11, 0x148, 0x128, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0xffffffff, 'wg1\x00', 'virt_wifi0\x00', {0x99380e6a96eb266d}, {0xff}, 0xff, 0x3}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0xc, 0x8, 0x0, 0x4, 0x3}}, @common=@ttl={{0x24}, {0xffffffffffffffff, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x5, 0x2, 0x3, 0x1], 0x1, 0x4}, {0xfffd, [0x0, 0x7, 0x0, 0x7, 0x1, 0x2], 0x4, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r3, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
inotify_init()

8.718035893s ago: executing program 1 (id=4377):
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000700), 0x2)
r1 = memfd_create(&(0x7f0000000a00)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x3)
close(0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000bc0)={r1, 0x1, 0x0, 0x2000})
r2 = syz_io_uring_setup(0x1cfd, &(0x7f0000000c40)={0x0, 0x800, 0x10000, 0x1, 0x91}, &(0x7f0000000cc0)=<r3=>0x0, &(0x7f0000000d00)=<r4=>0x0, &(0x7f0000000d40)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, 0x0)
io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))

8.323697705s ago: executing program 7 (id=4379):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
listen(0xffffffffffffffff, 0x20)
syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x40)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000040)={'full'}, 0xfffffdef)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f00000000c0)={0x0, <r3=>0xffffffffffffffff, 0x80800}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000380)={0x1, 0x3b, "057d1f627ba13da75d804aefb142fc0b0d32c009cfb8802c0fdd43a47ed2635e12f57bb7f876a79e876c623b0803248659ac91b09f39580d5bdd3a"}, &(0x7f0000000400)=0x43)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001640)=""/102392, 0x18ff8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f000001a680)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r4, &(0x7f000001a6c0), 0xffffffffffffff94, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f000001a700)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
recvfrom$inet(r4, &(0x7f000001a780)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setuid(0xee01)
msgget$private(0x0, 0x1)

8.311215975s ago: executing program 2 (id=4380):
syz_io_uring_setup(0x50d1, &(0x7f0000000140)={0x0, 0xfffff7fe, 0x10000, 0x2, 0x333}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000940)=0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0)
write(r1, &(0x7f00000003c0)='1000\n', 0x5)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x28}}, 0x20000000)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000500)={<r3=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000540)={0x0, 0x21, 0x2}, &(0x7f0000000580))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000005c0)={0x0, 0x0, 0xfd8b, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2)
syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mq_open(&(0x7f0000000600)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000680)={0x0, 0x1, 0x3})
r4 = landlock_create_ruleset(&(0x7f0000000980)={0xc0d8, 0x1, 0x3, 0x0, 0x0, 0x7}, 0x30, 0x0)
landlock_restrict_self(r4, 0x8)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000780)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r3, 0xffffffff}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000800)={0x1, 0x10, 0xfa00, {&(0x7f0000000840), r3}}, 0x18)

8.257386545s ago: executing program 1 (id=4381):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@setneightbl={0x28, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000880}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000340)={0x4, r3, 0x80000})

7.282619273s ago: executing program 0 (id=4382):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'geneve1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x20040000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@dellink={0x34, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0)

7.120301014s ago: executing program 4 (id=4383):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @dev}, &(0x7f0000000100)=0xc)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@loopback, r1}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0)
r4 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040))
write$rfkill(r3, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000000200)={0x9, 0x0, 0x1, 0x0, 0x1}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x6, 0x1c, 0x0, &(0x7f0000001900)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r5, 0x0, 0xe, 0x0, &(0x7f00000019c0)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.086398714s ago: executing program 1 (id=4384):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r1, 0x40186f40, &(0x7f0000000040))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f00000000c0)=0x20000)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r3, r0, &(0x7f00000011c0)=0x64, 0x12)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000140a03000000000000000000050000060c00064000000000000000043c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000100000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$sysctl(r3, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000001200)={0x6, 0x8, [0x2, 0x200000000a, 0x4, 0x208000005], &(0x7f0000001240)=[0x0]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
semget$private(0x0, 0x7, 0x195)
syz_clone(0x60000, 0x0, 0x0, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000440)="212fc30c79939952e48d82604723aab9dc3bc6781be9997b8ae0fb66d87fd6032a6be062b1aba3194a0cc051c8a6a1da81fe49b4189110569f1dc7bd5ff781917801307f9dacd2a4e1a43b2e03fc9c3abf303f19b627e5a7933d0313bfdc49d8d4feee1fdf6c8dac68f668d011877bd336204f1ae8a39a8a782d80dcd9a21de0af8e1fab3b49f5e73ad405398c0c49f75ce7c098cdec1e2b74ab6e238b545885a6679e6238cbf72c1a")
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0)
set_mempolicy(0x6005, &(0x7f0000001400)=0xfffffffffffffffd, 0x4)
syz_io_uring_setup(0xf00, &(0x7f0000001440)={0x0, 0x595f, 0x4, 0xfffffffc, 0x4e}, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001580)='numa_maps\x00')
read$FUSE(r5, &(0x7f0000005640)={0x2020}, 0x2020)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8996, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6(0xa, 0x6, 0x0)
openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/features/transaction_report\x00', 0x0, 0x0)
write(r6, &(0x7f00000015c0)="ceba972f2c0d3b7c87893841c7c6c7810901a1bb536d40c4db27a84c3d9672323d6c77327d2685919685a636b81ace4eaf16ac1590c23097e07e56a13cd3b4b437a1571b0bace967dad7d3e652145c50f4fcba5e4beb7502db6a259574f52f41bc4308aa5b7e4b278f6bb28b1b9eb6aee95f7791a03345995f35b2491e921535d526fcf6109c5ad949a1b2568dac17e5eb5bedfe4306e1207d9d1d0350bef7ced6def814d1753b8487962a71fd2e99e5e3e65f67697d6fcd33d8ee60316a956e90ff638ffb018fc91b00f32965f7b83d395294455e8291641a8da3e1c17ad4dacee926cb79408b0108a28ea3e90c222463b243e77d93396f29ada30da18705845fd4df6b11af541fb2f983e9ba9b0ba16b48946fc0cadea9258f395ff24bf35d436be88f101e60b777d2180f52e9ccd52c45c28ce9e5bce0a8cc32aebbd57b31184d102e9d7f99edaa7db23cdcd0545822d06246935112dabb718bbf4f3583eab42fcc6cd18ded7abbd4aa229eb1ad3bd63e17685c910a43c904d6be39a0caf9b8d103a991389464721aa381f67e4b9a1e32d6b5dccf854e0cdf9f3c6e0d044349f6a35e3df943234a56d9ca4b3e80c359175614fd6bf1c66583fd02f0d3d1bb0df7523fc91a2912e67de4aeb2f910374911fdac4313939f1fba1ebae6c5ee39cfb253c4c4fb2e6409fb31de0fc47771148e1a65e5306770a99ce092b7a9e86cfc38b132075c00c71b92a40cdeb30f805795f42e86fa53efaa2a2703c5933e29811ad6b41afc14d49160643f997f583d54a052a927dd0a7fe2ec7d8733dd3d255bd3ac60ef21b0b30cc29dcc5701722f7acc62bfa20e2b4326e64456e09f142312b9ff8e53cfce9963f4b2528616b78ceb55eb1fd91152c9a16321e8b810e4eba74e71958fe223a0c8703b8ed907ee7a0f65e6946cc2d075e3c8bbdf54aa32823c764ee262c6375f26e0c6f251ca5ef9400454ee49b2fc1f8d6fec4dc07a7f3c0662c1b19348928131180e18a1a682bb1a8489f2730fb3894899c60240c82ee65d45070e489deddc41d211ab67feaada94bcb096cba51bac0226fe829d07934d500da2ecdb20b5ee06d40ddec0508ecc525c9f1ab0772a339f09f3d57673229f7fbb24f02f15c36eef9d548cfa7dd1787b15603536ac612e61354125ba6e5927267a6bcce9b2df1322719067935502a0d79ebb29f42990da61b0d03e535c86d1045937746ff72ede3ca9cffff2eb40806ca728bf593279f3289d54a59e7973faf7d4e4fc3e3ac9c99cba7373d185e610306adb5a7a4cc2cb6cfa1ef763553807c82093841305af7af3960598afa90355529ebce23374a0f3d0b19f1528d4b512290d70267c372cb7f437918aff6db6557b1ecb1e439d8b5b8507d747b86ca03a8c1e2e1b2a087326a3ec1abd818c624d1834fae4ddcdecf9bce00f80b96b42f4d0381bed900ec86503dbf14ac01dcaec64a6219f57cce61b7204d6fdb1920c9bc3a49c6935d98a11b083b7a5cf87aa6bb07d686803c2b5e3290d583b52e9b7a12aceda243065106a29931450ea31df6db540e051fd502389af020347107bc2ffd989d1c286f4f0ac6c06bcaef262dcde67f887bd6fc2e6d80963ad95933114c19a435b42bb6d060a538ddced24f7b6c89a4a7d0cd949b9abb61941a6510eaa41e3ddcaca7c2b00cf8e0ac775f9d684b3d32ae035923f48d56037ede537c4cc160e512d10b1020d04e78303262cdf60a168142d4a38ce01ce1b1520499be3595da4ecb45b00663e54cbc195b04fa7e6af9f72b29addfa7d57ef5fcb6f67b40e9fc367165caa152d12d983d3604b176583f9252764a08c2e55d5f029b1c43f5ad14f2658b5e8e94d1734801c78a4334d26204d970f78e962d3aa7786f86dfe6e08b0b88cb106f19ff6b53bb9bf3afdc34c5ddb65a5ca4c1112912715b1587d7f2f7a572cbb71b23f2a5dbce0c4989e48155b78a38139b0278fb55fdc332114025c998ce9b6d33331d5765df0a81365a990d7fb7892ee1c9b684095b2965b7e1edd43061667bfb95cdc1c4681d4fc53af82e09e07bff40d05617f5e491ad27fa8880c0b9f4f2dc11d857f3037dfd1784438bd371187432af636a13b29a1a09fd958764d106c8401989d888f89f1cf81f389c87f472ea7c332ab4feab8f90588afaed033f6c69f8c7570eef4f87b186b09613d80494ad04a08fec37998fb34002a8e906a4ca39ccd44228d667a281f7b95d6ef1a449c537444d21f0bc8d5e4446eda454e68c217ec0f06bfc5340884d04b873caa9c6a7ff2ea5bd7c5bb722b7df2948479c9f6b492b215ee8272d5cf226ae4d69cf7838757ceb12e34b99257a43a0bbaf7e1d95bc3c1d8136d05abbbcc7fb2da01f4ed7989165be3ce984392ca06d35fb21fa9f7ff87c4fb54e59cc83bebd31d235714b7e2420cde208d9150bf52880bb1608db3e4b972673c0c3b7daf5d0f8193c80e12139926e92dc6ca10e63adf7c197acdf4493549c37e294e98576774a2f459eab53eac4eb7c935da0079c3d667924ac35aa792c0b51660b2cf8a3b83d9b0688905e762d5a8dbda2f40e48118b26b91fb4cde4eef82c7a0c4da95a293a2beb484729d9b5f38aeb0160c78d939c2a476450391c81094b4bc187dcaf40e4cf7e845bc9444fe668b349cbc936f0fee5307467fac04c4deaa25068a9000ebbaabde6983e2e88705173337152af3b90a2f52df6dd46f02324aac5ec6a5cb5a5951065ac2bd966c4f9a6672a929d4306a66b2fade1880cc969c8ed340561764afc457e9f6091118ec10063d1a476b662a4adfc8c6f70ca0c8bfe5263098d4ae01af329a3edb746fd1436f2e4f7f0bf79b6a4a9c4243e90f84d9d6d92fb97612daf4ab69ea90b175de761585ccb734aa7ab95b19a3121ac995389e322eaffba3756e513ed16009121ffe3032317713488e7800964a236de206dfbbaca8841d3f4fc4f2d4264315f02bac694064b3ed18e1b32a38850a3b23eec19f7f98ff02a1b90ad21d09353c17fa4dadc2a02c78c44143bd88d2320532f35e074d07c5f4ad90389dd89188abc83e77a55a07b51e9156064f7a36c70576ee804052b2ab00e3d44fcba553b2a78e0efa2090a3357f10a8c1131d46d2c4563284a2eb43f5b011db07d131ecc8735791510fb95033ea9bdd78bb0c7ca81eff9a5ee6d560842b420222ce672095a83ad482523cca6aa48ea5e3888d5d00b488dcd6ef2bfacf32e6f88f57c325589fccde1c1d68a4368dd5c4fa9ea2687155accac413ddc1b88a52ced1cd13fbe61ef9ea23caeff181380755d6fb05228ad2714e2b39aee18f8794dc578712aae34a5610cdaacc92e2649958c991e61e5b8dd86e55fa0297cc278f0c3b9ee0763259f2ed249c9ff95bd6693303cd2dc59cf6f12d5bff7d4cdcb05275aacdc36f3507ad0ece8e473189dda7182233eab6e0782d8fde3c80efa948c14f0a8ac118d2273d249f964ccb8be4c3874a94ce361cc23c42ca129d5a9843cc079107d0b28ad12ae166205e7eb2059f64e24d51def18d5202b7589a4a511ea447bbe13eee64302417cd96fb00533d367155013b3c9097da8581e019e296c4fee0ab3d4b4bf46c042243499955cfff9d4dab8a35dca52535696cef5dbebb9a3c9a1ce494ac798942bdd0022d242c1eb59cae9a940a0786e7b8cf49fa87c62f39b688703ae097f9a4b5be5a892eed8722ff27f3c95693f3ce30e6a7da8509f43f8e03327b77cfd16c4f83dac7b9cc76a248685442f390fcee2b8b57cb4ff5ff4bd785419f8dceae15ef5e8d31f45f243eca754017e7dc180e8dc97a36cc4fc82d6b0af6592dcbd0a3d9f91fa034dcc229757a4210cc53f515ffc41f2f4ccd2c9dcd5a689e037333bd89f08cb3cad35c8410c519da02b7bcc589e8b32724735f95d701badfd989b9cbcaa8115f4f69e374ab96361805f3db1ea4572048a7003712853dfa55ede41ea5d5a511844e61a66dbff3c9831d104a9e88c52e8c8e05e0dba41edd76fe50fdb78779264091a85778b45628603ccb7824a1a3a662b1506f21d76a16bb29b2425b690b0c14642c55d41c3e16ce3a951fd67ba4e9545960d37fb257ea1822f560d1ea4d4e4b1013dfb9392ca69aedcc7c9b3062609b7f431e4574157b4f281289e612f57b494c87fc5421d28b64295f3ffd41290d6fc17cf401955288eafb313328db38950d1830e920f6fcf114b5baa43ef9d4fbb66c5c6bce65135ab9422546e33a9c63188b223660a19b872d3afa656118886dd8907a25d22fdd89890f0a65cb94172fe5b0021a78b70bec71bf51b749aa06280109982b337f35584eea2c31ffbe3ba4ebd38bc3bf5d1a0b3171b0206170e8426c1c922daefec7c47c0def3b2b05a824ad3f93a544bdf26fbb688ca2ff6edf137091af4d9e33969417c56cef8ff2379fa6b6ef87e176d9a6524bc18dc7dc4925eeaa292a3580598a62c2a6994219c43d3e2459fd202b3c8dc7bd482bca3edaab0c07ab507ad51ec05314770e396b338f85c89ef9bbf40ea98557aff942b65bef02107cc1b3dc920d6cfb2304f4bb9bb33b5c489ef328881cde7eefff630e83121b160d707724297868e48626f3c2d39bb483e3feb436b9554d4a3e14716f9267b30e8a6e0de5e23a15fbe90f55bfa6b96238b4b8f0486ff570662719f3950e4efc35792f8582ae65193c8ff59142c9a75cddcbc2a0adc24624a1e04231c3dd6af0b8ff299019c5b90fa4a56ea952fc9c0c4079173d7418a1c634cab5c414b9d048209e297d4678d1484521586ca8803f63d97424f93569ae9a0aa08b93e7127f46a6ee010d1e712f93376a67636deece73505196ea2849dda8720d4521084751cc440434a23e08b38b17bbffb343641b3cb55f2305d0fd7efd1e8c9bb0dd119540d638c0d1260acad237990b624ec370542f6550def2f26047011bf97f98a4f00c9c2fc8514a13a13ed4dfc1e9b05ccf232ff5c6aaa4cbc4663560215756236f1bf8a12972c9b1087e5fd3252667eadbb43b0bde90e0704764753be6507ecc157ade2cb64e43d05af0a1994ff52b2a1c662d1e9a258274c31ad4e1ceee653e8013b9499a27b4077b8849e7c37dcd27f6f513ee5fca2ba1f2f30909068732bfd52c87664b461bfda1b1d1999549dc449f814b3a17e08933e99099fc6b0273d18249fc05a7a42f8db799c73ca049ce8bfd52d26aad5f282aa2a04457ccd74baf5bea067dff95b2edc5ea97ae394bc92cf49060ea49f294aec41b18b9ba6e9256d5acec03fd579b6515446a0d1c8de77db74c305d1937aacc5d1594c561e8ac73b11a7d5a9ad1387c5523ee9a5e1343d6e314659950f38dd7da5f8600a9ffc45b69d6ce7f6f9bc8641ed8dd449a8d8ae5a838baf25d1d8173375f2d5816db8256edec30fcbebb22eddc4287792fa1ec310871c37d20ded75fafd8e0a0fc5e783e4632749d96be4ffbdda7a1fbd590c101f303f7b7fdd1e00955c5c75e59321034da047f81fc45ad66b6eedd195ec62dec220ee13f5693b6106e08d9ea8d2a582a40d4fa7ac0998fee4c26208e8daecb1a2d5f15bea5556675b1597a0a6d6426397cb652fcfac724e1394745b2011ed3e8bc9b631dbb74ad53b3f9b54d724d049975152e8967906a66f6093d702663eed2baaf2111fc33c14aff1fe5f5a1039f66c35e3a316b38a9d9609480fb28ced67ae7026b1445c31a1524c73134bb665a94a32819993c8efc4063f11a85b3ec64df971f35f284409947623c6578f4779f20267f707bc383284b466ff938bb649ef2ab1c5181dbb0", 0x1000)
write$dsp(0xffffffffffffffff, &(0x7f0000000ec0)="11", 0x1)

6.976743467s ago: executing program 2 (id=4385):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000100)='-', 0x1}], 0x1, 0x0)
tee(0xffffffffffffffff, r3, 0x8f5, 0x9)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = syz_open_dev$media(&(0x7f0000000200), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc01c7c02, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r7 = socket$inet6(0x10, 0x2, 0x4)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x4010, r7, 0x42799000)
syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33)

6.920585833s ago: executing program 7 (id=4386):
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x81, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x24c, 0x128, 0x11, 0x148, 0x128, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0xffffffff, 'wg1\x00', 'virt_wifi0\x00', {0x99380e6a96eb266d}, {0xff}, 0xff, 0x3}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0xc, 0x8, 0x0, 0x4, 0x3}}, @common=@ttl={{0x24}, {0xffffffffffffffff, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x5, 0x2, 0x3, 0x1], 0x1, 0x4}, {0xfffd, [0x0, 0x7, 0x0, 0x7, 0x1, 0x2], 0x4, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r3, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
inotify_init()

6.915387678s ago: executing program 0 (id=4387):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]})
r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r6 = socket(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe4", 0xe}], 0x1)
syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600))
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

5.256184631s ago: executing program 0 (id=4388):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]})
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600))

5.037138276s ago: executing program 4 (id=4389):
openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x0)

5.005930157s ago: executing program 0 (id=4390):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r1 = add_key$user(&(0x7f0000002700), &(0x7f00000026c0)={'syz', 0x0}, &(0x7f0000000140)="5b25ad4d73d6528f703d", 0xa, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
add_key$keyring(&(0x7f0000002640), &(0x7f0000002680)={'syz', 0x1}, 0x0, 0x0, 0x0)
writev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000100)={0x14}, 0x14)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000002200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0xc886)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9ab9b00", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xa)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6)

4.965421823s ago: executing program 7 (id=4391):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0)

4.917504692s ago: executing program 6 (id=4392):
socket(0x200000000000011, 0x2, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffda3, &(0x7f0000000700)={&(0x7f0000000740)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)

4.755061265s ago: executing program 7 (id=4393):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000003540)=@newtfilter={0x14bc, 0x2c, 0x4, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1490, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x200, 0x1, [@m_mirred={0x160, 0x18, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0x2, 0x5, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0x4, 0x5, 0x80000001, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x7, 0x6, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0xd, 0x4, 0xb9300, 0x7cb}, 0x4}}]}, {0xb1, 0x6, "a30db39e75d2ff141f12ee57020db7dd1a0817d4abc70943b40a43454c8a05d331d68dc8f80ed672ca180d105fce1725e785fa3249de6337aa05cbf683d5bac5bd36fd24354757d425a60f25fd18e6863bf18ce8b04b9eac443a8b9f4dbf755401449e0230333f5fc9b2b5a2bb947fa6577bb687eaaaa35663676e0f9df77e2eb4fc9f41d2b6b545fcbc2e14154beedbdd0891836002f55e3cd6676bcbd5bb32083ae0367810fbbf9f0687f05a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x9c, 0x100e, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0x401, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xc, 0x0, 0xd, 0x10000}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x25, 0x6, "8e6e4896cbb0b10f2c9fd88805c2537e0af8a5e46b7872fb431d71cf173b6e4c20"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0x5, 0x7, '\x00'}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_ACT={0x1268, 0x1, [@m_xt={0x1264, 0x20, 0x0, 0x0, {{0x7}, {0x123c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xec, 0x6, {0x3, 'mangle\x00', 0x1, 0xe, "0fb1416c898f734af4226170301b7a1e530c713fcc684dcc5e32c6d411b9ac929366435a2bf01cc3dc332aa582a768e67253a94ce4fda77498a5a976997883be77513cc5d59fbbf2387522b10b77f8044d5989c4454747f5a11ae87fecaae8c9fdca32bcf31d020ca061fd71e42f0fb2291d42660c38e2464a9844cbf8507f7dd4136597c673b612b530d3f1e7c286c08525087b731f51f1cf54b036890e5194f6fd90baac631cfc503d6e4cd762d9d0af3545dc632e8b513afe7ea2fea5384376ef"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x102a, 0x6, {0xef66, 'filter\x00', 0x2, 0x6, "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"}}, @TCA_IPT_TARG={0xbe, 0x6, {0xfff, 'security\x00', 0x20, 0x101, "c978cda510ba842bb7810482faa877e54bd7ed4236214d7cb401908f6abd217add2638375cdcf3db68044798fee16963775bb0fdae05a44728bf6bf8a602479081cd486491e86895456335235470b93eb1f225cae896e334162a7f59dc8a7aebf15b17ead4b33e405d68cbd50bf299ffc07efe0622b0e575708ddb5192d076dcb87ac1375adc85a501d0b516b11366717595ff41"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x9f807591694bf847, 0x2}}}}]}]}}]}, 0x14bc}, 0x1, 0x0, 0x0, 0x20045010}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="060019adfada5bf2d49c00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4.731618862s ago: executing program 6 (id=4394):
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0xa94000)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0x80000001, 0xffffffff}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.641192659s ago: executing program 0 (id=4395):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@setneightbl={0x30, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_IFINDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000880}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff0800"], 0x28}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x4, r3, 0x80000})
r4 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000380)=0x40)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1000, 0x4e23, 0x0, 0xa, 0x0, 0x130, 0x16}, {0x10000000000, 0x0, 0x0, 0x1, 0x1000000000000, 0x7f, 0x0, 0x100000001}, {0xfffffffffffffffe, 0x1, 0x2000000000000003}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in6=@empty, 0x34fd, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2}}, 0xe8)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r5 = syz_usb_connect(0x3, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

4.590695143s ago: executing program 2 (id=4396):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0)

4.432395429s ago: executing program 2 (id=4397):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]})
r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r6 = socket(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe4", 0xe}], 0x1)
syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600))
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

4.37291574s ago: executing program 6 (id=4398):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]})
r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r6 = socket(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe4", 0xe}], 0x1)
syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600))
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

4.356618856s ago: executing program 7 (id=4399):
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x9)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000", @ANYBLOB], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = syz_open_dev$media(&(0x7f0000000200), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc01c7c02, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x4010, 0xffffffffffffffff, 0x42799000)
syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33)

2.99466835s ago: executing program 4 (id=4400):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ptrace(0x4206, 0x0)
tkill(0x0, 0x12)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
modify_ldt$write2(0x11, &(0x7f0000000180)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6)
listen(0xffffffffffffffff, 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea)

2.074373475s ago: executing program 2 (id=4401):
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000200)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x81, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x24c, 0x128, 0x11, 0x148, 0x128, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0xffffffff, 'wg1\x00', 'virt_wifi0\x00', {0x99380e6a96eb266d}, {0xff}, 0xff, 0x3}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0xc, 0x8, 0x0, 0x4, 0x3}}, @common=@ttl={{0x24}, {0xffffffffffffffff, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x5, 0x2, 0x3, 0x1], 0x1, 0x4}, {0xfffd, [0x0, 0x7, 0x0, 0x7, 0x1, 0x2], 0x4, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r3, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
inotify_init()

2.020329701s ago: executing program 6 (id=4402):
openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r1, &(0x7f00000000c0), 0x10)
sendto$l2tp(r1, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000080)=0xfffffffd, 0xfe58)
recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x2)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x0)

781.98745ms ago: executing program 4 (id=4403):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe0}}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x2, 0x7, 0x2)
r0 = socket(0x10, 0x2, 0x0)
timerfd_create(0x8, 0x0)
clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000})
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x0, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c)
listen(r1, 0xc)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000240), 0x0)

721.480847ms ago: executing program 1 (id=4404):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x40040)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4)

539.608393ms ago: executing program 6 (id=4405):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0)

347.2882ms ago: executing program 1 (id=4406):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000100)='-', 0x1}], 0x1, 0x0)
tee(0xffffffffffffffff, r3, 0x8f5, 0x9)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = socket$inet6(0x10, 0x2, 0x4)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x4010, r6, 0x42799000)
syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r7, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33)

150.870351ms ago: executing program 6 (id=4407):
syz_io_uring_setup(0x14ce, &(0x7f0000000040)={0x0, 0x622, 0x8000, 0x3, 0x199}, 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x474283, 0x0, 0x14}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
tkill(0x0, 0x12)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff)
mount(&(0x7f00000005c0)=@filename='./dev/mtdblock0\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='jffs2\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt/test\x00', 0x42, 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000)

47.84896ms ago: executing program 4 (id=4408):
clock_gettime(0x6, &(0x7f00000006c0))
io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0xc)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000240))
r3 = syz_open_pts(r2, 0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0xf)
ioctl$TCSBRK(r3, 0x400455c8, 0x2)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0xc0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0x2f)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000600)=0xff)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000640)=0xc0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x804, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})

14.933546ms ago: executing program 7 (id=4409):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0)

0s ago: executing program 0 (id=4410):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000100)='-', 0x1}], 0x1, 0x0)
tee(0xffffffffffffffff, r3, 0x8f5, 0x9)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = syz_open_dev$media(&(0x7f0000000200), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc01c7c02, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r7 = socket$inet6(0x10, 0x2, 0x4)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000b, 0x4010, r7, 0x42799000)
syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r8, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33)

kernel console output (not intermixed with test programs):

s family>@ip:27.0.0.1 [:0]
[ 1474.945551][T21281] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1474.950903][T21281] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1474.952257][T21281] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1474.965791][T21281] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1475.113268][T21003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1475.325037][T21003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1475.404341][T21299] comedi comedi3: board detection failed
[ 1475.629400][T12563] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1475.764581][T21302] netlink: 'syz.1.3847': attribute type 10 has an invalid length.
[ 1475.813487][T12563] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1475.908065][T12563] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1475.908456][T12563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1476.574856][T21292] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1476.606522][ T7211] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1476.608259][T21292] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1476.688645][T12563] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device
[ 1476.704557][T12563] wwan wwan0: port wwan0qmi0 attached
[ 1476.736085][T21302] bridge0: port 3(netdevsim0) entered disabled state
[ 1476.736288][T21302] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1476.736459][T21302] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1476.855220][T21003] team0: Port device team_slave_0 added
[ 1476.893415][T21003] team0: Port device team_slave_1 added
[ 1477.152237][T12563] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 96:5c:1b:d9:4c:18
[ 1477.192820][T12563] usb 5-1: USB disconnect, device number 33
[ 1477.227650][T12563] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[ 1477.390039][T12563] wwan wwan0: port wwan0qmi0 disconnected
[ 1477.669483][T21315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1477.707724][T21315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1477.736174][T21315] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1477.755635][T21315] bond0 (unregistering): Released all slaves
[ 1477.824896][T21003] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1477.824918][T21003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1477.824950][T21003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1477.835718][T21003] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1477.835737][T21003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1477.835769][T21003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1479.148619][ T7259] hsr_slave_0: left promiscuous mode
[ 1479.165423][ T7259] hsr_slave_1: left promiscuous mode
[ 1479.166372][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1479.166396][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1479.168999][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1479.169020][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1479.227942][ T7259] veth1_macvtap: left promiscuous mode
[ 1479.228251][ T7259] veth0_macvtap: left promiscuous mode
[ 1479.228371][ T7259] veth1_vlan: left promiscuous mode
[ 1479.228449][ T7259] veth0_vlan: left promiscuous mode
[ 1479.264357][T21327] comedi comedi3: board detection failed
[ 1480.973542][T21345] Bluetooth: (null): Invalid header checksum
[ 1482.315519][ T7259] team0 (unregistering): Port device team_slave_1 removed
[ 1482.349050][ T7259] team0 (unregistering): Port device team_slave_0 removed
[ 1482.454007][T12563] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1482.575814][T21350] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1482.578885][T16611] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1482.585532][T21350] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1482.628723][T12563] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1482.638183][T12563] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1482.638236][T12563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.710476][T21328] bridge0: port 3(netdevsim0) entered blocking state
[ 1482.710571][T21328] bridge0: port 3(netdevsim0) entered disabled state
[ 1482.710721][T21328] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 1482.744531][T21328] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1482.750186][T21328] bridge0: port 3(netdevsim0) entered blocking state
[ 1482.750298][T21328] bridge0: port 3(netdevsim0) entered forwarding state
[ 1482.927628][T21003] hsr_slave_0: entered promiscuous mode
[ 1482.928891][T21003] hsr_slave_1: entered promiscuous mode
[ 1482.941102][T21003] debugfs: 'hsr0' already exists in 'hsr'
[ 1482.941129][T21003] Cannot create hsr debugfs directory
[ 1482.944605][T12563] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1482.972366][T12563] wwan wwan0: port wwan0qmi0 attached
[ 1483.158585][T12563] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 36:1f:3e:92:42:11
[ 1483.900121][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1483.900270][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.041892][T12563] usb 2-1: USB disconnect, device number 28
[ 1484.421938][T12563] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1486.206014][T20867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1486.234972][T20867] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1486.251759][T20867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1486.285243][T20867] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1486.286198][T20867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1486.290272][T12563] wwan wwan0: port wwan0qmi0 disconnected
[ 1486.317842][T20867] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1486.405331][T20867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1486.434959][T20867] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1486.864798][ T5764] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1487.025102][ T5764] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1487.028416][ T5764] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1487.028469][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.325070][ T5764] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[ 1487.348367][ T5764] wwan wwan0: port wwan0qmi0 attached
[ 1487.614425][ T5764] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 46:f8:e6:2d:e4:09
[ 1487.650732][T20867] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1487.718640][T21376] Process accounting resumed
[ 1487.777142][ T5764] usb 1-1: USB disconnect, device number 24
[ 1487.815812][ T5764] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[ 1487.910914][T21003] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1487.930075][T21003] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1487.950525][T21003] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1487.962527][ T5764] wwan wwan0: port wwan0qmi0 disconnected
[ 1487.991839][T21003] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1487.992835][T21003] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1488.019046][T21003] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1488.035332][T21003] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1488.057595][T21003] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1488.068747][T20867] 8021q: adding VLAN 0 to HW filter on device team0
[ 1488.136349][ T2234] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1488.137321][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1488.137433][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1488.212615][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1488.212723][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1488.284695][ T2234] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1488.286012][ T2234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.286039][ T2234] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1488.286081][ T2234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1488.449896][T21423] jffs2: notice: (21423) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1488.660954][T21003] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1488.711826][T21003] 8021q: adding VLAN 0 to HW filter on device team0
[ 1488.743384][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1488.743469][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1488.750546][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1488.790198][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1488.790289][ T6076] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1490.501884][T21454] comedi comedi3: board detection failed
[ 1490.886224][T12563] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1491.334867][T12563] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1491.472790][T12563] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1491.472848][T12563] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.947776][T12563] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device
[ 1491.953072][T12563] wwan wwan0: port wwan0qmi0 attached
[ 1491.998068][T16859] usb 2-1: USB disconnect, device number 29
[ 1492.159399][T21462] fuse: Bad value for 'fd'
[ 1492.198779][T12563] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 22:2c:bf:d1:0d:eb
[ 1492.385123][T21465] sctp_transport_update_pmtu: 37 callbacks suppressed
[ 1492.385143][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.385598][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.386042][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.386558][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.388491][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.389002][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.389482][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.390294][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.390778][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.391250][T21465] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1492.457850][T21465] ±ÿ: renamed from lo (while UP)
[ 1492.548358][T12563] usb 7-1: USB disconnect, device number 43
[ 1492.570422][T12563] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device
[ 1492.727703][T12563] wwan wwan0: port wwan0qmi0 disconnected
[ 1492.762814][T21474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3882'.
[ 1492.951294][T18686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1492.953795][T18686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1492.955641][T18686] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1492.958103][T18686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1492.960751][T18686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1493.190639][T21487] Bluetooth: (null): Invalid header checksum
[ 1495.094343][T18686] Bluetooth: hci1: command tx timeout
[ 1495.476234][T21003] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1495.697699][T21508] jffs2: notice: (21508) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1495.837734][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1496.144364][ T2234] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1496.297915][ T2234] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1496.299456][ T2234] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1496.299506][ T2234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1496.398069][T21532] fuse: Bad value for 'fd'
[ 1496.589647][ T2234] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1496.601414][ T2234] wwan wwan0: port wwan0qmi0 attached
[ 1496.739574][T21481] rxe_eth0 speed is unknown, defaulting to 1000
[ 1496.806808][ T2234] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, de:2a:24:f1:bf:11
[ 1496.915606][T21544] comedi comedi3: board detection failed
[ 1497.073910][T21547] netlink: 'syz.6.3895': attribute type 10 has an invalid length.
[ 1497.174318][T18686] Bluetooth: hci1: command tx timeout
[ 1497.306777][ T2234] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1497.373980][T16859] usb 2-1: USB disconnect, device number 30
[ 1497.580377][ T2234] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1497.822434][T16859] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1497.854078][ T2234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1497.854141][ T2234] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1497.854199][ T2234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1497.854302][ T2234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1498.214136][ T2234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.214201][ T2234] usb 5-1: Product: syz
[ 1498.214455][ T2234] usb 5-1: Manufacturer: syz
[ 1498.214560][ T2234] usb 5-1: SerialNumber: syz
[ 1498.297847][ T2234] usb 5-1: config 0 descriptor??
[ 1498.298608][T21539] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1498.325025][T21547] bridge0: left allmulticast mode
[ 1498.328297][T21547] bridge0: port 3(netdevsim0) entered blocking state
[ 1498.328393][T21547] bridge0: port 3(netdevsim0) entered forwarding state
[ 1498.328645][T21547] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1498.328745][T21547] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1498.328953][T21547] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1498.329096][T21547] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1498.330092][ T2234] usb 5-1: ucan: probing device on interface #0
[ 1498.330112][ T2234] usb 5-1: ucan: invalid in_ep MaxPacketSize
[ 1498.330125][ T2234] usb 5-1: ucan: probe failed; try to update the device firmware
[ 1498.411890][T21547] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1498.518057][T16859] wwan wwan0: port wwan0qmi0 disconnected
[ 1498.596863][T21003] veth0_vlan: entered promiscuous mode
[ 1498.737361][ T6076] bridge_slave_1: left allmulticast mode
[ 1498.737393][ T6076] bridge_slave_1: left promiscuous mode
[ 1498.737615][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1498.788017][ T6076] bridge_slave_0: left allmulticast mode
[ 1498.788046][ T6076] bridge_slave_0: left promiscuous mode
[ 1498.788269][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1499.158341][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3897'.
[ 1499.256522][T18686] Bluetooth: hci1: command tx timeout
[ 1499.390281][ T6076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1499.419236][ T6076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1499.434166][ T6076] bond0 (unregistering): Released all slaves
[ 1499.484331][T21003] veth1_vlan: entered promiscuous mode
[ 1499.507546][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1499.784943][T21571] jffs2: notice: (21571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1500.125775][T21003] veth0_macvtap: entered promiscuous mode
[ 1501.164837][ T1788] usb 5-1: USB disconnect, device number 34
[ 1501.265797][T21003] veth1_macvtap: entered promiscuous mode
[ 1501.337443][T18686] Bluetooth: hci1: command tx timeout
[ 1501.553528][T21555] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1501.669709][T21593] jffs2: notice: (21593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1503.889682][ T6076] hsr_slave_0: left promiscuous mode
[ 1503.966270][ T6076] hsr_slave_1: left promiscuous mode
[ 1503.996909][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1504.075087][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1505.132557][T21608] Bluetooth: (null): Invalid header checksum
[ 1508.136764][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1508.138645][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1508.139716][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1508.176143][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1508.179050][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1508.431431][ T6076] team0 (unregistering): Port device team_slave_1 removed
[ 1508.452585][ T6076] team0 (unregistering): Port device team_slave_0 removed
[ 1508.704988][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1508.864051][ T2234] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1509.051799][ T2234] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1509.062011][ T2234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1509.062055][ T2234] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1509.062084][ T2234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1509.062109][ T2234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1509.067539][ T2234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.067572][ T2234] usb 5-1: Product: syz
[ 1509.067590][ T2234] usb 5-1: Manufacturer: syz
[ 1509.067608][ T2234] usb 5-1: SerialNumber: syz
[ 1509.096542][ T2234] usb 5-1: config 0 descriptor??
[ 1509.097473][T21645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1509.099230][ T2234] usb 5-1: ucan: probing device on interface #0
[ 1509.099276][ T2234] usb 5-1: ucan: invalid in_ep MaxPacketSize
[ 1509.099294][ T2234] usb 5-1: ucan: probe failed; try to update the device firmware
[ 1509.323930][ T5771] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1509.514745][ T5771] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1509.612905][T21665] jffs2: notice: (21665) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1509.627209][ T5771] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1509.627270][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1510.294034][ T5613] Bluetooth: hci4: command tx timeout
[ 1510.598942][ T5771] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1510.685694][T21481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1510.685964][T21481] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1510.686100][T21481] bridge_slave_0: entered allmulticast mode
[ 1510.687760][ T5771] wwan wwan0: port wwan0qmi0 attached
[ 1510.748941][T21481] bridge_slave_0: entered promiscuous mode
[ 1510.799562][ T5771] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 9a:19:04:4b:42:c8
[ 1510.801069][T21481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1510.801179][T21481] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1510.801316][T21481] bridge_slave_1: entered allmulticast mode
[ 1510.803452][T21481] bridge_slave_1: entered promiscuous mode
[ 1511.325680][T20883] usb 2-1: USB disconnect, device number 31
[ 1511.493058][T21685] sctp_transport_update_pmtu: 46 callbacks suppressed
[ 1511.493106][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.496710][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.506838][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.509900][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.552771][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.579974][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.583554][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.585724][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.587771][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1511.589981][T21685] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1512.019723][T20883] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1512.232608][T17297] usb 5-1: USB disconnect, device number 35
[ 1512.324396][T20883] wwan wwan0: port wwan0qmi0 disconnected
[ 1512.377383][ T5613] Bluetooth: hci4: command tx timeout
[ 1512.481541][T21481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1512.510738][T21481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1512.606966][T21701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1512.714899][T21704] jffs2: notice: (21704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1512.942767][T21701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1513.307007][T21701] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1513.410096][T21701] bridge0: port 3(netdevsim0) entered disabled state
[ 1513.410422][T21701] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1513.410620][T21701] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1513.636916][T21701] bond0 (unregistering): Released all slaves
[ 1513.873498][T21481] team0: Port device team_slave_0 added
[ 1513.877114][T21481] team0: Port device team_slave_1 added
[ 1514.279625][T21636] rxe_eth0 speed is unknown, defaulting to 1000
[ 1514.341107][T21722] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[ 1514.341140][T21722] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1514.341328][T21722] vhci_hcd vhci_hcd.0: Device attached
[ 1514.357366][T21481] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1514.357385][T21481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1514.357416][T21481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1514.368612][T21481] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1514.368629][T21481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1514.368660][T21481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1514.464435][ T5613] Bluetooth: hci4: command tx timeout
[ 1514.594771][T21728] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3925'.
[ 1514.704605][T17297] usb 46-1: SetAddress Request (30) to port 0
[ 1514.704676][T17297] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd
[ 1514.999193][T21481] hsr_slave_0: entered promiscuous mode
[ 1515.004076][T21481] hsr_slave_1: entered promiscuous mode
[ 1515.509719][T21723] vhci_hcd: connection reset by peer
[ 1515.511705][   T63] vhci_hcd vhci_hcd.6: stop threads
[ 1515.511732][   T63] vhci_hcd vhci_hcd.6: release socket
[ 1515.511792][   T63] vhci_hcd vhci_hcd.6: disconnect device
[ 1516.539192][ T5613] Bluetooth: hci4: command tx timeout
[ 1517.434572][T21743] bridge0: entered allmulticast mode
[ 1518.211878][T21727] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1518.800201][T21747] Process accounting paused
[ 1519.743763][T17297] usb 46-1: device descriptor read/8, error -110
[ 1520.365797][T17297] usb usb46-port1: attempt power cycle
[ 1521.059375][T21757] sctp_transport_update_pmtu: 37 callbacks suppressed
[ 1521.059396][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.059844][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.060176][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.060598][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.061929][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.062309][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.062760][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.063261][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.063757][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.092926][T21757] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1521.184464][T17297] usb usb46-port1: unable to enumerate USB device
[ 1521.472139][T21775] comedi comedi3: board detection failed
[ 1521.778286][  T199] bridge_slave_1: left allmulticast mode
[ 1521.778629][  T199] bridge_slave_1: left promiscuous mode
[ 1521.785666][  T199] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1521.956767][ T5771] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1522.076480][  T199] bridge_slave_0: left allmulticast mode
[ 1522.097757][  T199] bridge_slave_0: left promiscuous mode
[ 1522.134701][  T199] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1522.322551][ T5771] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1522.425264][ T5771] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1522.425354][ T5771] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1522.425403][ T5771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1522.425462][ T5771] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1522.612308][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.612334][ T5771] usb 1-1: Product: syz
[ 1522.612347][ T5771] usb 1-1: Manufacturer: syz
[ 1522.612376][ T5771] usb 1-1: SerialNumber: syz
[ 1522.631448][ T5771] usb 1-1: config 0 descriptor??
[ 1522.641560][T21771] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1522.677711][ T5771] usb 1-1: ucan: probing device on interface #0
[ 1522.677740][ T5771] usb 1-1: ucan: invalid in_ep MaxPacketSize
[ 1522.677757][ T5771] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1523.804963][  T199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1523.807415][  T199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1523.808823][  T199] bond0 (unregistering): Released all slaves
[ 1523.983967][ T5771] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1524.155723][ T5771] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1524.157651][ T5771] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1524.157703][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1524.456915][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.465354][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1524.511695][ T5771] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1524.523710][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.558570][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1524.561589][ T5771] wwan wwan0: port wwan0qmi0 attached
[ 1524.618399][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.619900][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1524.685149][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.691431][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1524.726542][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.728058][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1524.757079][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.765171][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1524.802817][ T5771] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, a6:a0:00:db:54:5e
[ 1524.810463][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.841811][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1524.866804][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.871328][T17297] usb 2-1: USB disconnect, device number 32
[ 1524.899305][T17297] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1524.903772][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1524.930477][T21795] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1524.940750][T11371] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1524.944071][T21795] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1525.008048][  T199] hsr_slave_0: left promiscuous mode
[ 1525.009130][  T199] hsr_slave_1: left promiscuous mode
[ 1525.010203][  T199] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1525.010893][  T199] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1525.042763][  T199] veth1_macvtap: left promiscuous mode
[ 1525.042804][  T199] veth0_macvtap: left promiscuous mode
[ 1525.043020][  T199] veth1_vlan: left promiscuous mode
[ 1525.043097][  T199] veth0_vlan: left promiscuous mode
[ 1525.189652][ T5779] usb 1-1: USB disconnect, device number 25
[ 1526.340855][T21820] Bluetooth: (null): Invalid header checksum
[ 1527.636414][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3943'.
[ 1527.693956][T21833] comedi comedi3: board detection failed
[ 1527.850690][T21839] netlink: 'syz.1.3944': attribute type 10 has an invalid length.
[ 1529.397517][  T199] team0 (unregistering): Port device team_slave_1 removed
[ 1529.441744][  T199] team0 (unregistering): Port device team_slave_0 removed
[ 1529.656439][T21636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1529.656563][T21636] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1529.656723][T21636] bridge_slave_0: entered allmulticast mode
[ 1529.661870][T21636] bridge_slave_0: entered promiscuous mode
[ 1529.674325][T21636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1529.674437][T21636] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1529.674575][T21636] bridge_slave_1: entered allmulticast mode
[ 1529.685918][T21636] bridge_slave_1: entered promiscuous mode
[ 1529.710699][T17297] wwan wwan0: port wwan0qmi0 disconnected
[ 1529.760987][T21839] bridge0: left allmulticast mode
[ 1529.855739][T21636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1529.859179][T21636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1530.139759][T21636] team0: Port device team_slave_0 added
[ 1530.388183][T21636] team0: Port device team_slave_1 added
[ 1531.126703][T21856] comedi comedi3: board detection failed
[ 1532.060988][T21636] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1532.061016][T21636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1532.061040][T21636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1532.062997][T21481] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1532.154432][T21481] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1532.155418][T21481] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1532.167447][T21481] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1532.186597][T21636] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1532.186617][T21636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1532.186644][T21636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1532.187220][T21850] rxe_eth0 speed is unknown, defaulting to 1000
[ 1532.285950][T21481] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1532.308885][T21481] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1532.334758][T21481] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1532.352965][T21481] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1532.833190][T16859] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 1533.310120][T16859] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1533.344925][T16859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1533.344975][T16859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.582627][T21636] hsr_slave_0: entered promiscuous mode
[ 1534.674185][T21636] hsr_slave_1: entered promiscuous mode
[ 1534.695519][T21636] debugfs: 'hsr0' already exists in 'hsr'
[ 1534.695922][T21636] Cannot create hsr debugfs directory
[ 1534.911127][T16859] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device
[ 1534.926064][T16859] wwan wwan0: port wwan0qmi0 attached
[ 1534.984000][T21892] ubi0: attaching mtd0
[ 1535.003702][T21892] ubi0: scanning is finished
[ 1535.003756][T21892] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1535.143096][T16859] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 9a:81:4a:7f:da:06
[ 1535.173294][T16859] usb 5-1: USB disconnect, device number 36
[ 1535.182844][T21896] syz.6.3953 (21896): drop_caches: 2
[ 1535.188646][T21892] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1535.217920][T16859] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[ 1535.256528][T21896] syz.6.3953 (21896): drop_caches: 2
[ 1535.337926][T21892] syz.6.3953 (21892): drop_caches: 2
[ 1535.379443][T16859] wwan wwan0: port wwan0qmi0 disconnected
[ 1535.802255][T21898] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1535.831275][T21898] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1535.849826][T21898] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1535.866704][T21898] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1535.895020][T21898] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1535.896890][T21898] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1535.955114][T21898] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1535.958005][   T59] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1535.968058][T21898] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1536.471611][T21481] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1536.604279][T21481] 8021q: adding VLAN 0 to HW filter on device team0
[ 1536.659837][T16611] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1536.659920][T16611] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1536.780375][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1536.780511][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1537.396276][T21933] jffs2: notice: (21933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1538.583143][T21636] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1538.610507][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1538.642934][T21636] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1538.695481][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1538.696221][T21636] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1538.792149][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1538.896393][T21636] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1539.162675][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1540.048453][   T30] audit: type=1326 audit(1792470279.232:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21961 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7e959e559 code=0x0
[ 1540.140103][T21636] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1540.208243][T21636] 8021q: adding VLAN 0 to HW filter on device team0
[ 1540.250134][T16611] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1540.250247][T16611] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1540.500201][T11371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1540.500324][T11371] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1540.943327][ T2234] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1541.370580][ T2234] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1541.373136][ T2234] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1541.373160][ T2234] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1541.373182][ T2234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1541.373200][ T2234] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1541.436323][ T2234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.436348][ T2234] usb 1-1: Product: syz
[ 1541.436362][ T2234] usb 1-1: Manufacturer: syz
[ 1541.436375][ T2234] usb 1-1: SerialNumber: syz
[ 1541.469769][ T2234] usb 1-1: config 0 descriptor??
[ 1541.472519][T21974] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1541.500198][ T2234] usb 1-1: ucan: probing device on interface #0
[ 1541.500226][ T2234] usb 1-1: ucan: invalid in_ep MaxPacketSize
[ 1541.500245][ T2234] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1542.221994][T21481] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1542.389687][T21481] veth0_vlan: entered promiscuous mode
[ 1542.442242][T21481] veth1_vlan: entered promiscuous mode
[ 1542.573321][T21481] veth0_macvtap: entered promiscuous mode
[ 1542.589974][T21481] veth1_macvtap: entered promiscuous mode
[ 1542.669023][T21481] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1542.697300][T21481] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1542.887647][ T6076] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.895301][ T6076] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.944267][T16611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.944347][T16611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1543.111216][ T6076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1543.111243][ T6076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1543.615670][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1543.615695][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1543.648611][T21636] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1543.787278][T17297] usb 1-1: USB disconnect, device number 26
[ 1544.039791][T22045] comedi comedi3: board detection failed
[ 1545.335803][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.335866][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.725190][T22062] sctp_transport_update_pmtu: 46 callbacks suppressed
[ 1546.725209][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.725616][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.725958][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.726387][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.727573][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.727973][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.728338][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.728700][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.729063][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1546.729428][T22062] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1547.283743][T22080] jffs2: notice: (22080) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1548.874639][T22071] Process accounting resumed
[ 1549.030267][T21636] veth0_vlan: entered promiscuous mode
[ 1549.063725][T21636] veth1_vlan: entered promiscuous mode
[ 1550.257612][T21636] veth0_macvtap: entered promiscuous mode
[ 1550.317160][T21636] veth1_macvtap: entered promiscuous mode
[ 1550.441194][T21636] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1550.487183][T21636] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1550.585139][T16611] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.586098][T16611] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.586133][T16611] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.586163][T16611] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1550.897936][T22121] ubi0: attaching mtd0
[ 1550.906423][T22121] ubi0: scanning is finished
[ 1550.906476][T22121] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1552.934801][ T7211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1552.934852][ T7211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1552.946968][T22121] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1553.080180][T22130] syz.4.3991 (22130): drop_caches: 2
[ 1553.107858][T22130] syz.4.3991 (22130): drop_caches: 2
[ 1553.180882][ T7095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1553.181011][ T7095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1553.269209][T22121] syz.4.3991 (22121): drop_caches: 2
[ 1553.360023][T20883] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1553.382028][T22142] sctp_transport_update_pmtu: 37 callbacks suppressed
[ 1553.382045][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.382482][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.383044][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.383514][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.387509][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.388029][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.388504][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.388976][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.389494][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.389988][T22142] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1553.538217][T20883] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1553.542566][T20883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1553.542612][T20883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.960697][T22150] Bluetooth: (null): Invalid header checksum
[ 1554.238100][T20883] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[ 1554.975078][T20883] wwan wwan0: port wwan0qmi0 attached
[ 1555.273262][T20883] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 9e:10:d1:c5:7f:fa
[ 1555.300266][T20883] usb 1-1: USB disconnect, device number 27
[ 1555.644672][T20883] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[ 1556.346990][T22153] comedi comedi3: board detection failed
[ 1556.588928][T22164] jffs2: notice: (22164) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1556.593893][T22160] netlink: 'syz.1.3996': attribute type 10 has an invalid length.
[ 1558.531670][T20883] wwan wwan0: port wwan0qmi0 disconnected
[ 1558.980675][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1558.995439][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1559.000860][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1559.024752][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1559.025585][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1559.216305][T16859] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1559.645395][T16859] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1559.693770][T16859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1559.693863][T16859] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1559.693910][T16859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1560.476610][T16859] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -22
[ 1561.097070][ T5613] Bluetooth: hci2: command tx timeout
[ 1561.695977][T12563] usb 5-1: USB disconnect, device number 37
[ 1563.175152][ T5613] Bluetooth: hci2: command tx timeout
[ 1563.308835][T22210] jffs2: notice: (22210) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1564.973636][T22223] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1564.974278][T22223] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1564.975253][T22223] bridge0: entered allmulticast mode
[ 1565.105267][T17297] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1565.254346][ T5613] Bluetooth: hci2: command tx timeout
[ 1565.278957][T17297] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1565.281418][T17297] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1565.281470][T17297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1565.524630][T17297] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1565.565789][T17297] wwan wwan0: port wwan0qmi0 attached
[ 1565.587118][T22176] rxe_eth0 speed is unknown, defaulting to 1000
[ 1565.746275][T22237] comedi comedi3: board detection failed
[ 1566.140637][T22240] netlink: 'syz.2.4012': attribute type 10 has an invalid length.
[ 1567.259384][T17297] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 02:34:67:d2:e9:97
[ 1567.320075][T22239] bridge0: port 3(netdevsim0) entered blocking state
[ 1567.321231][T22239] bridge0: port 3(netdevsim0) entered disabled state
[ 1567.338866][T22239] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1567.357243][ T5613] Bluetooth: hci2: command tx timeout
[ 1567.400369][T22239] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1567.415862][T22239] bridge0: port 3(netdevsim0) entered blocking state
[ 1567.416009][T22239] bridge0: port 3(netdevsim0) entered forwarding state
[ 1567.458729][T22240] bridge0: port 3(netdevsim0) entered disabled state
[ 1567.458970][T22240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1567.459577][T22240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1567.467555][T17297] usb 2-1: USB disconnect, device number 33
[ 1567.476832][T17297] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1567.565810][T22240] bridge0: port 3(netdevsim0) entered blocking state
[ 1567.565908][T22240] bridge0: port 3(netdevsim0) entered forwarding state
[ 1567.566156][T22240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1567.566256][T22240] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1567.566462][T22240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1567.566575][T22240] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1567.603887][ T5779] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1567.644166][T22240] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1567.787490][ T5779] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1567.790521][ T5779] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1567.790581][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.849256][T17297] wwan wwan0: port wwan0qmi0 disconnected
[ 1569.241976][ T5779] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[ 1569.255401][ T5779] wwan wwan0: port wwan0qmi0 attached
[ 1569.290328][ T5779] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 06:ee:71:38:7a:ee
[ 1569.909108][ T5779] usb 1-1: USB disconnect, device number 28
[ 1570.546698][ T5779] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[ 1570.795328][ T5779] wwan wwan0: port wwan0qmi0 disconnected
[ 1571.098566][T22280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'.
[ 1571.252793][T22285] sctp_transport_update_pmtu: 37 callbacks suppressed
[ 1571.252812][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.253290][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.253746][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.256827][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.258650][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.259122][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.260966][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.261474][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.261970][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.262447][T22285] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1571.695759][T22299] Bluetooth: (null): Too short H5 packet
[ 1571.753263][T22304] bridge0: port 3(netdevsim0) entered disabled state
[ 1571.753453][T22304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1571.753622][T22304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1571.756659][T22304] bridge0: entered allmulticast mode
[ 1571.994194][ T5779] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1572.156326][ T5779] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1572.170682][ T5779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1572.170739][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1572.499228][T22317] jffs2: notice: (22317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1573.404815][ T5779] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1573.431876][ T5779] wwan wwan0: port wwan0qmi0 attached
[ 1574.508256][ T5779] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 06:39:7c:89:40:65
[ 1574.573731][ T5779] usb 2-1: USB disconnect, device number 34
[ 1574.703333][ T5779] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1574.730701][T22176] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1574.730801][T22176] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1574.730919][T22176] bridge_slave_0: entered allmulticast mode
[ 1574.737504][T22176] bridge_slave_0: entered promiscuous mode
[ 1574.742631][T22176] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1574.746296][T22176] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1574.746449][T22176] bridge_slave_1: entered allmulticast mode
[ 1574.766659][T22176] bridge_slave_1: entered promiscuous mode
[ 1574.877966][ T5779] wwan wwan0: port wwan0qmi0 disconnected
[ 1574.916816][T22176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1574.921299][T22176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1575.073499][T22176] team0: Port device team_slave_0 added
[ 1575.111011][T22336] comedi comedi3: board detection failed
[ 1575.213466][T22176] team0: Port device team_slave_1 added
[ 1576.729422][T22176] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1576.729443][T22176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1576.729475][T22176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1576.733604][T22176] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1576.733621][T22176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1576.733653][T22176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1577.053091][T22356] jffs2: notice: (22356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1579.996811][T22176] hsr_slave_0: entered promiscuous mode
[ 1580.013352][T22176] hsr_slave_1: entered promiscuous mode
[ 1580.016477][T22176] debugfs: 'hsr0' already exists in 'hsr'
[ 1580.016507][T22176] Cannot create hsr debugfs directory
[ 1580.091254][   T30] audit: type=1800 audit(1792470324.270:109): pid=22359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4039" name="test" dev="jffs2" ino=2 res=0 errno=0
[ 1580.166706][T22366] sctp_transport_update_pmtu: 48 callbacks suppressed
[ 1580.166730][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.167216][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.167691][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.168156][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.169510][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.169987][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.170451][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.170981][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.171453][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.171929][T22366] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1580.501284][T22365] rxe_eth0 speed is unknown, defaulting to 1000
[ 1580.586349][T22374] Bluetooth: (null): Too short H5 packet
[ 1580.613544][T22366] Process accounting paused
[ 1580.725080][T19113] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1580.803210][T22176] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1580.915006][T19113] usb 5-1: Using ep0 maxpacket: 8
[ 1580.924161][T19113] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1580.925075][T19113] usb 5-1: config 0 has no interfaces?
[ 1580.936066][T19113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1580.936093][T19113] usb 5-1: Product: syz
[ 1580.936111][T19113] usb 5-1: Manufacturer: syz
[ 1580.936129][T19113] usb 5-1: SerialNumber: syz
[ 1581.028778][T19113] usb 5-1: config 0 descriptor??
[ 1581.103880][ T5779] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1581.237480][T22176] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.275022][ T5779] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1581.276795][ T5779] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1581.276828][ T5779] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1581.276859][ T5779] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1581.276884][ T5779] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1581.279723][ T5779] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1581.279751][ T5779] usb 8-1: Product: syz
[ 1581.279768][ T5779] usb 8-1: Manufacturer: syz
[ 1581.279786][ T5779] usb 8-1: SerialNumber: syz
[ 1581.282798][T19113] usb 5-1: USB disconnect, device number 38
[ 1581.374504][ T5779] usb 8-1: config 0 descriptor??
[ 1581.375227][T22379] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1581.377292][ T5779] usb 8-1: ucan: probing device on interface #0
[ 1581.377312][ T5779] usb 8-1: ucan: invalid in_ep MaxPacketSize
[ 1581.377325][ T5779] usb 8-1: ucan: probe failed; try to update the device firmware
[ 1581.650284][T22176] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.812741][T22176] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode
[ 1581.812771][T22176] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode
[ 1581.814530][T22176] bridge0: port 3(netdevsim0) entered disabled state
[ 1581.882200][T22176] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1583.758576][T19113] usb 8-1: USB disconnect, device number 2
[ 1583.842477][T22406] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1584.008849][T22406] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1584.398060][T22176] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1584.470475][T22176] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1584.571480][T22176] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1584.616460][T22439] Bluetooth: (null): Too short H5 packet
[ 1584.878796][T22176] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1584.879754][T22176] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1585.081269][T22440] Bluetooth: (null): Invalid header checksum
[ 1585.143161][T22176] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1585.296920][T22176] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1585.327729][ T5764] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1585.684752][ T5764] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1585.805286][ T5764] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1585.805551][ T5764] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.923518][T22176] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1586.327511][T22453] sctp_transport_update_pmtu: 37 callbacks suppressed
[ 1586.327536][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.328125][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.328584][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.329083][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.330785][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.331266][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.331896][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.332363][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.332848][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.333351][T22453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1586.365538][ T5764] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device
[ 1586.386453][ T5764] wwan wwan0: port wwan0qmi0 attached
[ 1586.582364][ T5764] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.7-1, WWAN/QMI device, 76:eb:39:de:78:86
[ 1586.621419][ T5764] usb 8-1: USB disconnect, device number 3
[ 1586.697613][ T5764] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.7-1, WWAN/QMI device
[ 1586.793385][T22462] Bluetooth: (null): Invalid header checksum
[ 1588.057047][ T5764] wwan wwan0: port wwan0qmi0 disconnected
[ 1588.400597][T22176] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1589.360933][T22176] 8021q: adding VLAN 0 to HW filter on device team0
[ 1589.411674][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1589.411789][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1589.476224][T14795] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1589.476336][T14795] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1592.035176][T22495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1592.097795][T22495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1592.115922][T22495] bond0 (unregistering): Released all slaves
[ 1592.313142][T22510] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[ 1592.313175][T22510] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1592.313339][T22510] vhci_hcd vhci_hcd.0: Device attached
[ 1592.469625][T22513] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4072'.
[ 1592.577320][ T2234] usb 38-1: SetAddress Request (22) to port 0
[ 1592.577395][ T2234] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd
[ 1593.314221][T22511] vhci_hcd: connection reset by peer
[ 1593.319166][ T7211] vhci_hcd vhci_hcd.2: stop threads
[ 1593.319194][ T7211] vhci_hcd vhci_hcd.2: release socket
[ 1593.319293][ T7211] vhci_hcd vhci_hcd.2: disconnect device
[ 1595.411938][T22176] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1595.434257][T12563] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1595.586983][T12563] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1595.588907][T12563] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1595.588942][T12563] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1595.588972][T12563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1595.588998][T12563] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1595.598559][T12563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1595.598587][T12563] usb 1-1: Product: syz
[ 1595.598605][T12563] usb 1-1: Manufacturer: syz
[ 1595.598622][T12563] usb 1-1: SerialNumber: syz
[ 1595.633639][T12563] usb 1-1: config 0 descriptor??
[ 1595.636596][T22552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1595.656591][T12563] usb 1-1: ucan: probing device on interface #0
[ 1595.656619][T12563] usb 1-1: ucan: invalid in_ep MaxPacketSize
[ 1595.656637][T12563] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1595.961853][T22566] jffs2: notice: (22566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1598.039587][ T2234] usb 38-1: device descriptor read/8, error -110
[ 1599.009216][T22573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4078'.
[ 1599.443234][T22537] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1599.598864][ T2234] usb usb38-port1: attempt power cycle
[ 1600.164712][ T5771] usb 1-1: USB disconnect, device number 29
[ 1600.694301][ T2234] usb usb38-port1: unable to enumerate USB device
[ 1600.845133][T22582] jffs2: notice: (22582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1601.545449][T22585] comedi comedi3: board detection failed
[ 1602.019524][T22176] veth0_vlan: entered promiscuous mode
[ 1602.042624][T22176] veth1_vlan: entered promiscuous mode
[ 1602.085749][T22599] comedi comedi3: board detection failed
[ 1602.250079][T22607] netlink: 'syz.2.4084': attribute type 10 has an invalid length.
[ 1602.250229][T22607] bridge0: left allmulticast mode
[ 1603.283217][T22610] Bluetooth: (null): Invalid header checksum
[ 1603.320901][T22176] veth0_macvtap: entered promiscuous mode
[ 1603.710222][T22176] veth1_macvtap: entered promiscuous mode
[ 1603.877435][T22619] jffs2: notice: (22619) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1604.474028][T22176] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1605.654001][T22176] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1605.714019][ T5827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1605.714370][ T5827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1605.714413][ T5827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1605.714453][ T5827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1606.014730][ T2234] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1606.043257][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1606.043283][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1606.125292][T22641] comedi comedi3: board detection failed
[ 1606.234153][ T2234] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1606.301036][T22644] netlink: 'syz.0.4095': attribute type 10 has an invalid length.
[ 1606.305697][ T2234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1606.305749][ T2234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1606.776617][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1606.776667][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.961437][ T2234] usb 3-1: can't set config #1, error -71
[ 1607.990358][ T2234] usb 3-1: USB disconnect, device number 28
[ 1608.004481][T16613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1608.004508][T16613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1608.306008][T22651] jffs2: notice: (22651) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1609.794232][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4097'.
[ 1613.649363][T22673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'.
[ 1614.215458][T22677] Process accounting resumed
[ 1614.535874][T22693] jffs2: notice: (22693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1616.207204][T22725] comedi comedi3: board detection failed
[ 1616.564718][T22728] netlink: 'syz.1.4111': attribute type 10 has an invalid length.
[ 1617.452237][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1617.462603][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1617.476559][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1617.478185][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1617.478846][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1617.960848][T22742] trusted_key: encrypted_key: insufficient parameters specified
[ 1618.079463][T22744] jffs2: notice: (22744) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1619.103847][T18686] Bluetooth: hci1: command 0x0406 tx timeout
[ 1619.180300][T22685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1619.574204][ T5610] Bluetooth: hci3: command tx timeout
[ 1619.847720][T22685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1619.892172][T22759] comedi comedi3: board detection failed
[ 1619.947054][T22758] comedi comedi3: board detection failed
[ 1620.073974][T22762] netlink: 'syz.1.4120': attribute type 10 has an invalid length.
[ 1621.665960][ T5613] Bluetooth: hci3: command tx timeout
[ 1622.208514][T22754] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1622.237414][T16611] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1622.240150][T22754] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1622.321659][T22773] jffs2: notice: (22773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1623.535297][T22685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1623.675090][T22778] comedi comedi3: board detection failed
[ 1623.733961][ T5613] Bluetooth: hci3: command tx timeout
[ 1623.813699][T22782] netlink: 'syz.1.4125': attribute type 10 has an invalid length.
[ 1624.870023][T22685] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[ 1624.870068][T22685] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[ 1624.871110][T22685] bridge0: port 3(netdevsim0) entered disabled state
[ 1624.933584][T22685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1625.813923][ T5613] Bluetooth: hci3: command tx timeout
[ 1626.482832][T22784] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1626.513293][T22784] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1626.576035][T22784] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1626.585774][T22784] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1626.770824][T22805] jffs2: notice: (22805) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1627.799310][T22795] rxe_eth0 speed is unknown, defaulting to 1000
[ 1627.858071][T22685] bridge_slave_1: left allmulticast mode
[ 1627.858095][T22685] bridge_slave_1: left promiscuous mode
[ 1627.858275][T22685] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1627.901748][T22685] bridge_slave_0: left allmulticast mode
[ 1627.901774][T22685] bridge_slave_0: left promiscuous mode
[ 1627.901953][T22685] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1632.542924][ T1788] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1632.704910][ T1788] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1632.706674][ T1788] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.706725][ T1788] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1632.706850][ T1788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1632.781896][ T1788] option 8-1:1.0: GSM modem (1-port) converter detected
[ 1632.865132][ T1788] usb 8-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 1633.306760][T22710] rxe_eth0 speed is unknown, defaulting to 1000
[ 1633.891864][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1634.455055][T18686] Bluetooth: hci4: command 0x0406 tx timeout
[ 1634.927779][T22857] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1634.940956][T22857] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1635.005491][T22857] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1635.019263][T22857] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1635.052883][T22857] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1635.057204][T16613] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1635.061417][T22857] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1635.074889][ T1788] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1635.225241][ T1788] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1635.233448][ T1788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1635.233501][ T1788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.299086][T21551] usb 8-1: USB disconnect, device number 4
[ 1635.435358][T21551] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 1635.436182][T21551] option 8-1:1.0: device disconnected
[ 1635.635143][ T1788] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1635.712191][ T1788] wwan wwan0: port wwan0qmi0 attached
[ 1635.742365][T22685] hsr_slave_0: left promiscuous mode
[ 1635.749029][T22685] hsr_slave_1: left promiscuous mode
[ 1635.809124][T22685] veth1_macvtap: left promiscuous mode
[ 1635.809170][T22685] veth0_macvtap: left promiscuous mode
[ 1636.323744][T22882] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1636.330598][ T7259] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1636.332720][T22882] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1636.579372][T22685] team0 (unregistering): Port device team_slave_1 removed
[ 1636.610663][T22685] team0 (unregistering): Port device team_slave_0 removed
[ 1636.731376][T22899] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1636.749993][T22899] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1636.773162][T22899] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1636.780164][T16613] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1636.780986][T22899] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1637.632140][T22920] comedi comedi3: board detection failed
[ 1639.355072][T22921] netlink: 'syz.6.4153': attribute type 10 has an invalid length.
[ 1639.935076][ T1788] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, b2:1e:8a:fb:14:95
[ 1639.943677][ T1788] usb 2-1: USB disconnect, device number 35
[ 1639.970701][ T1788] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1639.976645][T22905] warning: `syz.2.4149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1639.981296][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1640.027390][T22919] bridge0: port 3(netdevsim0) entered blocking state
[ 1640.027463][T22919] bridge0: port 3(netdevsim0) entered disabled state
[ 1640.027600][T22919] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[ 1640.037134][T22919] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1640.052272][T22919] bridge0: port 3(netdevsim0) entered blocking state
[ 1640.052371][T22919] bridge0: port 3(netdevsim0) entered forwarding state
[ 1640.089388][T22921] bridge0: port 3(netdevsim0) entered disabled state
[ 1640.089562][T22921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1640.091611][T22921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1640.148101][T22921] bridge0: port 3(netdevsim0) entered blocking state
[ 1640.148198][T22921] bridge0: port 3(netdevsim0) entered forwarding state
[ 1640.148468][T22921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1640.148600][T22921] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1640.148810][T22921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1640.148917][T22921] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1640.220500][T22921] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1640.383446][ T1788] wwan wwan0: port wwan0qmi0 disconnected
[ 1641.338346][T22710] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1641.340179][T22710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1641.340353][T22710] bridge_slave_0: entered allmulticast mode
[ 1641.368200][T22710] bridge_slave_0: entered promiscuous mode
[ 1641.389947][T22710] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1641.390292][T22710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1641.390411][T22710] bridge_slave_1: entered allmulticast mode
[ 1641.425949][T22710] bridge_slave_1: entered promiscuous mode
[ 1642.091289][T22710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1642.142412][T22710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1642.501347][T22710] team0: Port device team_slave_0 added
[ 1642.502221][T22967] rxe_eth0 speed is unknown, defaulting to 1000
[ 1642.548987][T22710] team0: Port device team_slave_1 added
[ 1643.018202][T22710] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1643.018224][T22710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1643.018255][T22710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1643.032182][T22710] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1643.032200][T22710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1643.032247][T22710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1643.437707][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1643.541549][T22710] hsr_slave_0: entered promiscuous mode
[ 1643.548912][T22710] hsr_slave_1: entered promiscuous mode
[ 1643.549701][T22710] debugfs: 'hsr0' already exists in 'hsr'
[ 1643.549722][T22710] Cannot create hsr debugfs directory
[ 1643.857047][T22963] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1644.199737][T22981] Bluetooth: (null): Too short H5 packet
[ 1645.314723][T22980] Process accounting paused
[ 1647.079416][T22968] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1648.586850][T23023] ieee802154 phy0 wpan0: encryption failed: -22
[ 1648.924682][T23028] comedi comedi3: board detection failed
[ 1649.384849][T23032] netlink: 'syz.2.4175': attribute type 10 has an invalid length.
[ 1650.194597][T23034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1650.219742][T23034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1650.248097][T23034] bond0 (unregistering): Released all slaves
[ 1650.390192][T22710] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1650.411568][T22710] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1650.422643][T22710] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1650.458547][T22710] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1650.459553][T22710] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1650.486516][T22710] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1650.498101][T22710] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1650.528251][T22710] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1652.167580][T23039] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1652.199724][T23039] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1652.243016][T22710] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1652.266381][T23039] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1652.283612][T23039] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1652.311524][T23039] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1652.313679][ T7211] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1652.325361][T23039] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1652.356223][T22710] 8021q: adding VLAN 0 to HW filter on device team0
[ 1652.378440][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1652.378553][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1652.408106][T14326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1652.408233][T14326] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1652.965351][T23086] ieee802154 phy0 wpan0: encryption failed: -22
[ 1653.030381][T23088] batman_adv: batadv0: Adding interface: veth0
[ 1653.030401][T23088] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1653.030437][T23088] batman_adv: batadv0: Interface activated: veth0
[ 1653.633848][ T5779] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1653.788204][ T5779] usb 3-1: device descriptor read/64, error -71
[ 1654.043901][ T5779] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1654.164580][ T1788] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1654.173916][ T5779] usb 3-1: device descriptor read/64, error -71
[ 1654.284479][ T5779] usb usb3-port1: attempt power cycle
[ 1654.324671][ T1788] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1654.335646][ T1788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1654.335696][ T1788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1654.628339][ T1788] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1654.643673][ T1788] wwan wwan0: port wwan0qmi0 attached
[ 1654.647201][ T5779] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1654.665630][ T5779] usb 3-1: device descriptor read/8, error -71
[ 1654.750318][T23132] jffs2: notice: (23132) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1654.767987][T22710] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1654.880535][ T1788] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, b2:05:50:3f:9a:cd
[ 1654.886168][ T1788] usb 2-1: USB disconnect, device number 36
[ 1654.893441][ T1788] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1654.904174][ T5779] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1654.929974][ T5779] usb 3-1: device descriptor read/8, error -71
[ 1655.009592][ T1788] wwan wwan0: port wwan0qmi0 disconnected
[ 1655.037141][ T5779] usb usb3-port1: unable to enumerate USB device
[ 1655.117258][T22710] veth0_vlan: entered promiscuous mode
[ 1655.154419][T22710] veth1_vlan: entered promiscuous mode
[ 1655.240351][T22710] veth0_macvtap: entered promiscuous mode
[ 1655.261366][T22710] veth1_macvtap: entered promiscuous mode
[ 1655.315801][T22710] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1655.345595][T22710] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1655.386073][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1655.387014][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1655.387059][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1655.387100][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1655.557850][T23154] ieee802154 phy0 wpan0: encryption failed: -22
[ 1655.678236][ T7211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1655.678261][ T7211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1655.823370][T10175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1655.823395][T10175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1655.941570][T23167] jffs2: notice: (23167) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1657.494226][T19113] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1657.743822][T23193] jffs2: notice: (23193) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1658.251968][T19113] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1658.366099][T19113] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1658.366155][T19113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1659.005122][T19113] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device
[ 1659.094376][T19113] wwan wwan0: port wwan0qmi0 attached
[ 1659.200348][T18686] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1659.202880][T18686] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1659.203574][T18686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1659.213340][T18686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1659.216084][T18686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1659.263327][T19113] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 02:9d:bc:fa:c0:65
[ 1659.506066][T20883] usb 7-1: USB disconnect, device number 44
[ 1659.529982][T20883] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device
[ 1659.678971][T20883] wwan wwan0: port wwan0qmi0 disconnected
[ 1659.691799][T23212] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1659.712427][T22685] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1659.729448][T23212] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1661.254589][T18686] Bluetooth: hci0: command tx timeout
[ 1662.234695][T21551] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1662.436894][T21551] usb 3-1: device descriptor read/64, error -71
[ 1662.749152][T21551] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1663.007413][T21551] usb 3-1: device descriptor read/64, error -71
[ 1663.145687][T21551] usb usb3-port1: attempt power cycle
[ 1663.334067][T18686] Bluetooth: hci0: command tx timeout
[ 1663.654870][T21551] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1663.689543][T21551] usb 3-1: device descriptor read/8, error -71
[ 1663.794033][T16613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1663.911665][T23262] jffs2: notice: (23262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1663.936253][T21551] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1663.990471][T21551] usb 3-1: device descriptor read/8, error -71
[ 1664.001459][T23203] rxe_eth0 speed is unknown, defaulting to 1000
[ 1664.094301][T21551] usb usb3-port1: unable to enumerate USB device
[ 1664.280322][T16613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1664.535848][T16613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1664.657893][T23252] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1664.659259][T23252] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1664.717736][T23252] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1664.719054][ T7259] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1664.741134][T23252] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1664.900650][T16613] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[ 1664.903160][T16613] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[ 1664.905070][T16613] bridge0: port 3(netdevsim0) entered disabled state
[ 1664.963709][T16613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1665.414031][T18686] Bluetooth: hci0: command tx timeout
[ 1665.584105][T20883] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1665.745072][T20883] usb 7-1: Using ep0 maxpacket: 8
[ 1665.755907][T20883] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1665.769940][T20883] usb 7-1: config 0 has no interfaces?
[ 1665.786622][T20883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1665.786654][T20883] usb 7-1: Product: syz
[ 1665.786672][T20883] usb 7-1: Manufacturer: syz
[ 1665.786691][T20883] usb 7-1: SerialNumber: syz
[ 1665.790756][T20883] usb 7-1: config 0 descriptor??
[ 1665.848096][T23285] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1665.850020][T23285] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1665.892145][T23285] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1665.919119][T23285] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1665.930438][T23285] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1665.948320][T23285] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1665.960623][T16613] bridge_slave_1: left allmulticast mode
[ 1665.960654][T16613] bridge_slave_1: left promiscuous mode
[ 1665.960904][T16613] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1665.966686][T23285] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1665.970283][ T7259] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1665.974471][T23285] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1666.035229][T16613] bridge_slave_0: left allmulticast mode
[ 1666.035260][T16613] bridge_slave_0: left promiscuous mode
[ 1666.035479][T16613] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1666.036949][ T5779] usb 7-1: USB disconnect, device number 45
[ 1666.080638][T23316] comedi comedi3: board detection failed
[ 1666.397932][T23321] comedi comedi3: board detection failed
[ 1666.542213][T23324] netlink: 'syz.2.4234': attribute type 10 has an invalid length.
[ 1666.603851][ T1788] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1666.817051][ T1788] usb 8-1: device descriptor read/64, error -71
[ 1667.342956][ T1788] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1667.493892][T18686] Bluetooth: hci0: command tx timeout
[ 1667.594789][ T1788] usb 8-1: device descriptor read/64, error -71
[ 1667.640364][T23328] comedi comedi3: board detection failed
[ 1667.664218][T23330] comedi comedi3: board detection failed
[ 1667.704900][ T1788] usb usb8-port1: attempt power cycle
[ 1667.940477][T23336] netlink: 'syz.4.4237': attribute type 10 has an invalid length.
[ 1668.256087][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.256198][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.586430][ T1788] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1669.680926][ T1788] usb 8-1: device descriptor read/8, error -71
[ 1669.717793][T23336] bridge0: port 3(netdevsim0) entered disabled state
[ 1669.717949][T23336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1669.718151][T23336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1669.758018][T16613] tipc: Left network mode
[ 1670.206864][T23353] comedi comedi3: board detection failed
[ 1670.418817][ T1788] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1670.693465][ T1788] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1670.708049][ T1788] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1670.708102][ T1788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1671.569382][ T1788] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device
[ 1671.609577][ T1788] wwan wwan0: port wwan0qmi0 attached
[ 1671.793830][T23356] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1671.854382][ T1788] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.7-1, WWAN/QMI device, f6:c3:80:41:79:53
[ 1671.859886][ T7211] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1671.862308][T23356] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1671.959978][ T1788] usb 8-1: USB disconnect, device number 8
[ 1672.011695][ T1788] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.7-1, WWAN/QMI device
[ 1673.256151][ T1788] wwan wwan0: port wwan0qmi0 disconnected
[ 1673.285294][T16613] hsr_slave_0: left promiscuous mode
[ 1673.308906][T16613] hsr_slave_1: left promiscuous mode
[ 1673.309970][T16613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1673.309998][T16613] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1673.363326][T16613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1673.363354][T16613] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1673.415348][T16613] veth1_macvtap: left promiscuous mode
[ 1673.415417][T16613] veth0_macvtap: left promiscuous mode
[ 1673.502441][T23391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[ 1673.502473][T23391] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1673.502590][T23391] vhci_hcd vhci_hcd.0: Device attached
[ 1673.887111][T23403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4248'.
[ 1673.994106][ T5764] usb 34-1: SetAddress Request (22) to port 0
[ 1673.994188][ T5764] usb 34-1: new SuperSpeed USB device number 22 using vhci_hcd
[ 1674.555527][T23392] vhci_hcd: connection reset by peer
[ 1674.688744][ T6076] vhci_hcd vhci_hcd.0: stop threads
[ 1674.688895][ T6076] vhci_hcd vhci_hcd.0: release socket
[ 1674.689083][ T6076] vhci_hcd vhci_hcd.0: disconnect device
[ 1675.322193][T23413] jffs2: notice: (23413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1675.353363][T16859] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1675.604081][T16859] usb 3-1: Using ep0 maxpacket: 32
[ 1675.613467][T16859] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1675.706747][T16859] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1675.842255][T16859] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1675.842406][T16859] usb 3-1: Product: syz
[ 1675.842485][T16859] usb 3-1: Manufacturer: syz
[ 1675.842558][T16859] usb 3-1: SerialNumber: syz
[ 1676.080779][T16859] usb 3-1: config 0 descriptor??
[ 1676.130962][T23410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1676.657271][T16859] usb 3-1: USB disconnect, device number 37
[ 1676.889318][T16613] team0 (unregistering): Port device team_slave_1 removed
[ 1676.908959][T16613] team0 (unregistering): Port device team_slave_0 removed
[ 1677.029956][T23425] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1677.033121][   T63] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1677.055442][T23425] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1677.176776][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1677.177426][T23203] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1677.177727][T23203] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1677.177857][T23203] bridge_slave_0: entered allmulticast mode
[ 1677.179842][T23203] bridge_slave_0: entered promiscuous mode
[ 1677.182820][T23203] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1677.224934][T23203] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1677.225097][T23203] bridge_slave_1: entered allmulticast mode
[ 1677.227166][T23203] bridge_slave_1: entered promiscuous mode
[ 1677.432783][T23203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1677.442723][T23203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1677.605361][T23433] jffs2: notice: (23433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1678.743125][T23203] team0: Port device team_slave_0 added
[ 1678.797224][T23203] team0: Port device team_slave_1 added
[ 1679.039124][T23437] rxe_eth0 speed is unknown, defaulting to 1000
[ 1679.040031][T23203] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1679.040048][T23203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1679.040088][T23203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1679.095317][T12563] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1679.104043][ T5764] usb 34-1: device descriptor read/8, error -110
[ 1679.107096][T23203] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1679.128289][T23203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1679.128325][T23203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1679.255185][T12563] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1679.258423][T12563] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1679.258456][T12563] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1679.258486][T12563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1679.258512][T12563] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 1679.262437][T12563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1679.262466][T12563] usb 1-1: Product: syz
[ 1679.262484][T12563] usb 1-1: Manufacturer: syz
[ 1679.262503][T12563] usb 1-1: SerialNumber: syz
[ 1679.350293][T12563] usb 1-1: config 0 descriptor??
[ 1679.351020][T23438] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1679.360191][T12563] usb 1-1: ucan: probing device on interface #0
[ 1679.360219][T12563] usb 1-1: ucan: invalid in_ep MaxPacketSize
[ 1679.360238][T12563] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1679.394092][T21551] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1679.520307][T23454] Bluetooth: (null): Too short H5 packet
[ 1679.523953][ T5764] usb usb34-port1: attempt power cycle
[ 1679.583944][T21551] usb 8-1: Using ep0 maxpacket: 32
[ 1679.584922][T21551] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1679.590336][T21551] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1679.670507][T21551] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1679.670542][T21551] usb 8-1: Product: syz
[ 1679.670560][T21551] usb 8-1: Manufacturer: syz
[ 1679.670583][T21551] usb 8-1: SerialNumber: syz
[ 1680.875217][T21551] usb 8-1: config 0 descriptor??
[ 1680.876801][T23447] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1680.905115][ T5764] usb usb34-port1: unable to enumerate USB device
[ 1681.109369][ T5764] usb 1-1: USB disconnect, device number 30
[ 1681.254932][T23203] hsr_slave_0: entered promiscuous mode
[ 1681.262643][T23203] hsr_slave_1: entered promiscuous mode
[ 1681.268958][T23203] debugfs: 'hsr0' already exists in 'hsr'
[ 1681.268983][T23203] Cannot create hsr debugfs directory
[ 1681.367547][T23443] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1681.401931][T23443] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1681.438212][T23443] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1681.462385][ T7095] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1681.467849][T23443] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1681.995093][T12563] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1682.092469][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1682.146587][T12563] usb 7-1: Using ep0 maxpacket: 32
[ 1682.150483][T12563] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1682.152897][T12563] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1682.181138][T12563] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1682.181171][T12563] usb 7-1: Product: syz
[ 1682.181189][T12563] usb 7-1: Manufacturer: syz
[ 1682.181206][T12563] usb 7-1: SerialNumber: syz
[ 1682.230521][T12563] usb 7-1: config 0 descriptor??
[ 1682.232905][T23473] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1682.267149][T12563] chaoskey 7-1:0.0: Unable to register with hwrng
[ 1682.427679][T12563] usb 8-1: USB disconnect, device number 9
[ 1682.517751][ T1788] usb 7-1: USB disconnect, device number 46
[ 1682.597393][T23486] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4)
[ 1682.597431][T23486] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1682.597678][T23486] vhci_hcd vhci_hcd.0: Device attached
[ 1682.740702][T23491] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4267'.
[ 1682.895849][ T5764] usb 48-1: SetAddress Request (2) to port 0
[ 1682.895920][ T5764] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1683.247417][T23492] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1683.274297][T16613] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1683.275125][T23492] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1683.423722][T23488] vhci_hcd: connection reset by peer
[ 1683.424674][T16613] vhci_hcd vhci_hcd.7: stop threads
[ 1683.424701][T16613] vhci_hcd vhci_hcd.7: release socket
[ 1683.424760][T16613] vhci_hcd vhci_hcd.7: disconnect device
[ 1683.656780][T23203] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1683.728611][T23512] Bluetooth: (null): Invalid header checksum
[ 1684.017841][T23203] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1684.147053][T23203] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1684.573126][T23203] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1684.582920][T23203] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1684.618948][T23203] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1684.637902][T23203] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1684.670641][T23203] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1685.657297][T18686] Bluetooth: hci2: command 0x0406 tx timeout
[ 1686.167242][T23529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1686.193616][T23529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1686.230165][T23529] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1686.233092][T23529] bridge0: port 3(netdevsim0) entered disabled state
[ 1686.233258][T23529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1686.233485][T23529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1686.281481][T23529] bond0 (unregistering): Released all slaves
[ 1686.400943][T23203] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1687.984113][ T5764] usb 48-1: device descriptor read/8, error -110
[ 1688.171953][T23203] 8021q: adding VLAN 0 to HW filter on device team0
[ 1688.218943][T22685] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1688.219030][T22685] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1688.265809][T22685] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1688.265895][T22685] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1688.495549][ T5764] usb usb48-port1: attempt power cycle
[ 1689.486612][ T5764] usb usb48-port1: unable to enumerate USB device
[ 1689.905388][T23568] jffs2: notice: (23568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1692.000901][T23582] Bluetooth: (null): Invalid header checksum
[ 1695.763523][T23625] Bluetooth: (null): Invalid header checksum
[ 1695.896698][T20883] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1696.090347][T20883] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1696.168573][T20883] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1696.169015][T20883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1697.073971][T23626] jffs2: notice: (23626) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1698.407452][T20883] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device
[ 1698.427468][T20883] wwan wwan0: port wwan0qmi0 attached
[ 1698.567729][T23203] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1698.627448][T20883] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 46:58:9b:dc:f6:67
[ 1698.845483][T17297] usb 3-1: USB disconnect, device number 38
[ 1698.900510][T17297] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device
[ 1699.039206][T23203] veth0_vlan: entered promiscuous mode
[ 1699.089859][T17297] wwan wwan0: port wwan0qmi0 disconnected
[ 1699.098967][T23203] veth1_vlan: entered promiscuous mode
[ 1699.226292][T23637] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1699.247716][T23637] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1699.268283][T23637] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1699.269623][T23637] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1699.302636][T23637] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1699.316279][T23203] veth0_macvtap: entered promiscuous mode
[ 1699.316648][T23637] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1699.345371][T23637] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1699.346795][T23637] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1699.373037][T23203] veth1_macvtap: entered promiscuous mode
[ 1699.389273][T23637] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1699.426672][ T7095] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1699.427118][T23637] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1699.483280][T23654] Bluetooth: (null): Invalid header checksum
[ 1699.608362][T23203] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1699.638781][T23203] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1699.784075][ T7259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1699.784604][ T7259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1699.784958][ T7259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1699.785002][ T7259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1699.903908][T17297] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1700.002425][T23672] jffs2: notice: (23672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1700.194882][T17297] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1700.324992][T17297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1700.325069][T17297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1701.275693][T17297] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device
[ 1701.284112][T17297] wwan wwan0: port wwan0qmi0 attached
[ 1701.409366][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1701.409388][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1701.582083][T17297] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 8e:b5:7e:9e:13:66
[ 1701.693470][T20883] usb 3-1: USB disconnect, device number 39
[ 1701.721678][T20883] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device
[ 1701.737298][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1701.737318][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1701.865550][T20883] wwan wwan0: port wwan0qmi0 disconnected
[ 1702.817402][T23692] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1702.835762][   T63] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1702.841735][T23692] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1703.010156][T16859] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1703.173954][T16859] usb 8-1: Using ep0 maxpacket: 8
[ 1703.175143][T16859] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1703.175863][T16859] usb 8-1: config 0 has no interfaces?
[ 1703.179960][T16859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1703.179990][T16859] usb 8-1: Product: syz
[ 1703.180008][T16859] usb 8-1: Manufacturer: syz
[ 1703.180025][T16859] usb 8-1: SerialNumber: syz
[ 1703.231978][T16859] usb 8-1: config 0 descriptor??
[ 1703.452170][T21551] usb 8-1: USB disconnect, device number 10
[ 1703.566849][T23718] trusted_key: encrypted_key: insufficient parameters specified
[ 1703.606626][T16859] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1703.766814][T16859] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1703.773158][T16859] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1703.773222][T16859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1703.953107][T23725] Bluetooth: (null): Invalid header checksum
[ 1704.103448][T16859] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[ 1704.142269][T16859] wwan wwan0: port wwan0qmi0 attached
[ 1704.382461][T16859] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 9e:6d:5e:50:46:55
[ 1704.409443][T16859] usb 2-1: USB disconnect, device number 37
[ 1704.456011][T16859] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[ 1704.596821][T16859] wwan wwan0: port wwan0qmi0 disconnected
[ 1707.234283][   T30] audit: type=1326 audit(1792470453.424:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23769 comm="syz.0.4322" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dcab9e559 code=0x0
[ 1707.595163][T23776] comedi comedi3: board detection failed
[ 1707.670664][T23780] Bluetooth: (null): Too short H5 packet
[ 1707.672928][T23781] bridge0: port 3(netdevsim0) entered blocking state
[ 1707.674134][T23781] bridge0: port 3(netdevsim0) entered disabled state
[ 1707.685402][T23781] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[ 1708.092162][T23781] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[ 1708.176084][T23781] netlink: 'syz.7.4323': attribute type 10 has an invalid length.
[ 1708.176650][T23781] bridge0: left allmulticast mode
[ 1718.958956][T23846] ±ÿ: renamed from lo (while UP)
[ 1719.438388][T23847] overlayfs: failed to resolve './file0': -2
[ 1720.451457][T23868] comedi comedi3: board detection failed
[ 1720.494921][T17297] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1720.656559][T17297] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1720.733683][T17297] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1720.733791][T17297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1720.839654][T23869] netlink: 'syz.2.4348': attribute type 10 has an invalid length.
[ 1722.485099][T17297] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[ 1722.601403][T23873] fuse: Bad value for 'fd'
[ 1722.654734][T17297] wwan wwan0: port wwan0qmi0 attached
[ 1722.696734][T17297] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, e6:3b:89:46:ea:02
[ 1722.895968][T16859] usb 1-1: USB disconnect, device number 32
[ 1722.934758][T16859] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[ 1724.290642][T16859] wwan wwan0: port wwan0qmi0 disconnected
[ 1724.438071][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4356'.
[ 1724.847006][T21551] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1725.043869][T21551] usb 7-1: Using ep0 maxpacket: 8
[ 1725.047692][T21551] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1725.049034][T21551] usb 7-1: config 0 has no interfaces?
[ 1725.079321][T21551] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1725.079345][T21551] usb 7-1: Product: syz
[ 1725.079359][T21551] usb 7-1: Manufacturer: syz
[ 1725.079388][T21551] usb 7-1: SerialNumber: syz
[ 1725.112007][T21551] usb 7-1: config 0 descriptor??
[ 1725.339925][T21551] usb 7-1: USB disconnect, device number 47
[ 1725.550295][T23929] jffs2: notice: (23929) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1726.834655][T23906] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1726.839584][ T5827] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1726.849268][T23906] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1727.254453][T12563] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1727.425954][T12563] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1727.429274][T12563] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1727.429313][T12563] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1727.429349][T12563] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1727.498906][T12563] qmi_wwan 8-1:1.0: skipping garbage
[ 1727.701854][T12563] qmi_wwan 8-1:1.0: probe with driver qmi_wwan failed with error -22
[ 1727.730915][T12563] usb 8-1: USB disconnect, device number 11
[ 1728.433888][T23954] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1728.435775][T23954] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1728.468477][T23954] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1728.486722][ T6076] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1728.488725][T23954] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1729.669538][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.669658][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.148688][T23989] ubi0: attaching mtd0
[ 1730.159404][T23989] ubi0: scanning is finished
[ 1730.159448][T23989] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1730.212523][T23969] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1730.227725][T22687] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1730.239409][T23969] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1730.421076][T23989] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1730.450547][T23994] syz.6.4375 (23994): drop_caches: 2
[ 1730.470849][T23989] syz.6.4375 (23989): drop_caches: 2
[ 1730.519992][T23994] syz.6.4375 (23994): drop_caches: 2
[ 1730.839534][T24002] Bluetooth: (null): Invalid header checksum
[ 1731.952212][T24013] ubi0: attaching mtd0
[ 1731.959720][T24013] ubi0: scanning is finished
[ 1731.959778][T24013] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1732.077689][T24018] comedi comedi3: board detection failed
[ 1732.104535][T24022] syz.1.4384 (24022): drop_caches: 2
[ 1732.520338][T24027] netlink: 'syz.0.4387': attribute type 10 has an invalid length.
[ 1732.598293][T24013] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1732.665979][T24022] syz.1.4384 (24022): drop_caches: 2
[ 1733.174622][T24026] bridge0: port 3(netdevsim0) entered blocking state
[ 1733.175817][T24026] bridge0: port 3(netdevsim0) entered disabled state
[ 1733.177757][T24026] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1733.229130][T24026] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1733.233322][T24026] bridge0: port 3(netdevsim0) entered blocking state
[ 1733.233420][T24026] bridge0: port 3(netdevsim0) entered forwarding state
[ 1733.239311][T24027] bridge0: port 3(netdevsim0) entered disabled state
[ 1733.239505][T24027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1733.240130][T24027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1733.317735][T24027] bridge0: port 3(netdevsim0) entered blocking state
[ 1733.317884][T24027] bridge0: port 3(netdevsim0) entered forwarding state
[ 1733.318284][T24027] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1733.318428][T24027] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1733.318778][T24027] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1733.318929][T24027] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1733.405839][T24027] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1733.506780][T24013] syz.1.4384 (24013): drop_caches: 2
[ 1733.787366][T24036] comedi comedi3: board detection failed
[ 1734.020496][T24025] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1734.033908][T22687] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1734.034410][T24025] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1734.576240][T24062] comedi comedi3: board detection failed
[ 1734.724002][T24065] netlink: 'syz.2.4397': attribute type 10 has an invalid length.
[ 1734.727481][T12563] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1735.046264][T12563] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1735.103356][T12563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1735.103414][T12563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1735.886059][T24067] comedi comedi3: board detection failed
[ 1736.022366][T24070] netlink: 'syz.6.4398': attribute type 10 has an invalid length.
[ 1736.819016][T12563] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[ 1736.859514][T12563] wwan wwan0: port wwan0qmi0 attached
[ 1736.939365][T12563] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 76:fb:87:99:b7:fd
[ 1737.685276][T12563] usb 1-1: USB disconnect, device number 33
[ 1738.099270][T12563] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[ 1738.236326][T12563] wwan wwan0: port wwan0qmi0 disconnected
[ 1738.558575][T24069] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1738.583319][T24069] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1738.604135][T24069] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1738.605733][T24069] rtrs_client L2646: <s+>: init_conns() failed: err=-ERESTARTSYS path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1738.642244][T24069] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[ 1738.645449][T22687] rtrs_client L2026: <s+>: CM error (CM event: address error, err: -ENODEV)
[ 1738.665280][T24069] rtrs_client L2646: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[ 1739.173853][    C1] ==================================================================
[ 1739.173875][    C1] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1739.173922][    C1] Read of size 1 at addr ffff8880242fe010 by task kworker/1:0H/14375
[ 1739.173944][    C1] 
[ 1739.173957][    C1] CPU: 1 UID: 0 PID: 14375 Comm: kworker/1:0H Not tainted syzkaller #0 PREEMPT(full) 
[ 1739.173986][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1739.174004][    C1] Workqueue: events_highpri snd_vmidi_output_work
[ 1739.174041][    C1] Call Trace:
[ 1739.174052][    C1]  <IRQ>
[ 1739.174064][    C1]  dump_stack_lvl+0xe8/0x150
[ 1739.174103][    C1]  print_address_description+0x55/0x1e0
[ 1739.174140][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1739.174175][    C1]  print_report+0x58/0x70
[ 1739.174209][    C1]  kasan_report+0x117/0x150
[ 1739.174248][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1739.174291][    C1]  llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1739.174331][    C1]  llc_conn_state_process+0x4fb/0x1380
[ 1739.174379][    C1]  llc_conn_tmr_common_cb+0x34a/0x780
[ 1739.174422][    C1]  call_timer_fn+0x18d/0x5f0
[ 1739.174458][    C1]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[ 1739.174496][    C1]  ? call_timer_fn+0xd5/0x5f0
[ 1739.174531][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1739.174564][    C1]  ? pv_queued_spin_unlock_traced+0x5a/0x1b0
[ 1739.174612][    C1]  ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40
[ 1739.174659][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1739.174687][    C1]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[ 1739.174728][    C1]  __run_timer_base+0x652/0x8b0
[ 1739.174759][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.174800][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1739.174835][    C1]  ? ktime_get+0x1f5/0x220
[ 1739.174864][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.174894][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.174930][    C1]  run_timer_softirq+0xb7/0x170
[ 1739.174963][    C1]  handle_softirqs+0x226/0x860
[ 1739.175001][    C1]  ? __irq_exit_rcu+0xcb/0x220
[ 1739.175041][    C1]  __irq_exit_rcu+0xcb/0x220
[ 1739.175077][    C1]  irq_exit_rcu+0x9/0x30
[ 1739.175109][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1739.175139][    C1]  </IRQ>
[ 1739.175149][    C1]  <TASK>
[ 1739.175160][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1739.175189][    C1] RIP: 0010:finish_task_switch+0x413/0xc60
[ 1739.175225][    C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 47 3f 55 0a e8 72 2f 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 1739.175248][    C1] RSP: 0018:ffffc9000d9a76e0 EFLAGS: 00000206
[ 1739.175271][    C1] RAX: 0000000001ca4b59 RBX: ffff8880b853c8e0 RCX: 8000000000000001
[ 1739.175292][    C1] RDX: 0000000000000006 RSI: ffffffff8e469c7a RDI: ffffffff8c6ddc80
[ 1739.175311][    C1] RBP: ffffc9000d9a7730 R08: ffffffff917a757f R09: 1ffffffff22f4eaf
[ 1739.175332][    C1] R10: dffffc0000000000 R11: fffffbfff22f4eb0 R12: ffff888050491f40
[ 1739.175353][    C1] R13: ffff8880b853c8a8 R14: dffffc0000000000 R15: 1ffff110170a791c
[ 1739.175392][    C1]  __schedule+0x17e3/0x58f0
[ 1739.175436][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.175467][    C1]  ? pv_queued_spin_unlock_traced+0x5a/0x1b0
[ 1739.175509][    C1]  ? __pfx___schedule+0x10/0x10
[ 1739.175535][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.175572][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.175603][    C1]  ? pv_queued_spin_unlock_traced+0x5a/0x1b0
[ 1739.175648][    C1]  ? preempt_schedule_thunk+0x16/0x40
[ 1739.175680][    C1]  preempt_schedule_common+0x7f/0xd0
[ 1739.175710][    C1]  preempt_schedule_thunk+0x16/0x40
[ 1739.175745][    C1]  _raw_spin_unlock_irqrestore+0x76/0x80
[ 1739.175773][    C1]  snd_rawmidi_transmit+0x9c/0xd0
[ 1739.175812][    C1]  snd_vmidi_output_work+0x1a5/0x3e0
[ 1739.175847][    C1]  ? __pfx_snd_vmidi_output_work+0x10/0x10
[ 1739.175880][    C1]  ? rcu_is_watching+0x16/0xb0
[ 1739.175913][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.175945][    C1]  ? process_scheduled_works+0x97a/0x1630
[ 1739.175982][    C1]  process_scheduled_works+0xc3d/0x1630
[ 1739.176017][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.176068][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1739.176108][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.176139][    C1]  ? assign_work+0x3cf/0x5d0
[ 1739.176176][    C1]  worker_thread+0xa47/0xfb0
[ 1739.176215][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.176252][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.176283][    C1]  ? __kthread_parkme+0x71/0x1f0
[ 1739.176328][    C1]  kthread+0x38b/0x480
[ 1739.176355][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1739.176390][    C1]  ? __pfx_kthread+0x10/0x10
[ 1739.176417][    C1]  ret_from_fork+0x514/0xb70
[ 1739.176445][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1739.176470][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1739.176500][    C1]  ? __switch_to+0xc89/0x1420
[ 1739.176539][    C1]  ? __pfx_kthread+0x10/0x10
[ 1739.176566][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1739.176602][    C1]  </TASK>
[ 1739.176618][    C1] 
[ 1739.176625][    C1] Allocated by task 24082:
[ 1739.176639][    C1]  kasan_save_track+0x3e/0x80
[ 1739.176669][    C1]  __kasan_kmalloc+0x93/0xb0
[ 1739.176700][    C1]  __kmalloc_cache_noprof+0x321/0x600
[ 1739.176729][    C1]  llc_sap_open+0xe1/0x3b0
[ 1739.176760][    C1]  llc_ui_autobind+0x1f1/0x560
[ 1739.176791][    C1]  llc_ui_connect+0x1d7/0xd50
[ 1739.176819][    C1]  __sys_connect+0x316/0x450
[ 1739.176841][    C1]  __x64_sys_connect+0x7a/0x90
[ 1739.176869][    C1]  do_syscall_64+0x166/0x520
[ 1739.176899][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1739.176924][    C1] 
[ 1739.176930][    C1] Freed by task 5879:
[ 1739.176943][    C1]  kasan_save_track+0x3e/0x80
[ 1739.176972][    C1]  kasan_save_free_info+0x40/0x50
[ 1739.176996][    C1]  __kasan_slab_free+0x5c/0x80
[ 1739.177026][    C1]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[ 1739.177061][    C1]  rcu_free_sheaf+0x31/0x200
[ 1739.177088][    C1]  rcu_core+0x926/0x1260
[ 1739.177115][    C1]  handle_softirqs+0x226/0x860
[ 1739.177148][    C1]  __irq_exit_rcu+0xcb/0x220
[ 1739.177180][    C1]  irq_exit_rcu+0x9/0x30
[ 1739.177211][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1739.177238][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1739.177265][    C1] 
[ 1739.177272][    C1] The buggy address belongs to the object at ffff8880242fe000
[ 1739.177272][    C1]  which belongs to the cache kmalloc-2k of size 2048
[ 1739.177293][    C1] The buggy address is located 16 bytes inside of
[ 1739.177293][    C1]  freed 2048-byte region [ffff8880242fe000, ffff8880242fe800)
[ 1739.177320][    C1] 
[ 1739.177327][    C1] The buggy address belongs to the physical page:
[ 1739.177341][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242f8
[ 1739.177364][    C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1739.177385][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1739.177408][    C1] page_type: f5(slab)
[ 1739.177431][    C1] raw: 00fff00000000040 ffff88801c042000 dead000000000100 dead000000000122
[ 1739.177454][    C1] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 1739.177479][    C1] head: 00fff00000000040 ffff88801c042000 dead000000000100 dead000000000122
[ 1739.177502][    C1] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 1739.177526][    C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1739.177549][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1739.177563][    C1] page dumped because: kasan: bad access detected
[ 1739.177576][    C1] page_owner tracks the page as allocated
[ 1739.177586][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3057582894
[ 1739.177631][    C1]  post_alloc_hook+0x1f9/0x250
[ 1739.177655][    C1]  get_page_from_freelist+0x2209/0x2280
[ 1739.177686][    C1]  __alloc_frozen_pages_noprof+0x217/0x5a0
[ 1739.177716][    C1]  allocate_slab+0x7d/0x620
[ 1739.177752][    C1]  refill_objects+0x2d5/0x350
[ 1739.177788][    C1]  __pcs_replace_empty_main+0x2c8/0x6c0
[ 1739.177823][    C1]  __kmalloc_cache_noprof+0x39b/0x600
[ 1739.177851][    C1]  acpi_ds_create_walk_state+0x96/0x270
[ 1739.177887][    C1]  acpi_ps_execute_method+0x341/0xa70
[ 1739.177924][    C1]  acpi_ns_evaluate+0xd05/0x1320
[ 1739.177946][    C1]  acpi_evaluate_object+0x657/0xd70
[ 1739.177976][    C1]  acpi_evaluate_integer+0x112/0x320
[ 1739.178002][    C1]  acpi_bus_get_status+0x150/0x3c0
[ 1739.178028][    C1]  acpi_add_single_object+0x3d3/0x1b60
[ 1739.178068][    C1]  acpi_bus_check_add+0x2b7/0x8a0
[ 1739.178104][    C1]  acpi_ns_walk_namespace+0x273/0x700
[ 1739.178134][    C1] page_owner free stack trace missing
[ 1739.178144][    C1] 
[ 1739.178151][    C1] Memory state around the buggy address:
[ 1739.178164][    C1]  ffff8880242fdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1739.178182][    C1]  ffff8880242fdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1739.178200][    C1] >ffff8880242fe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1739.178214][    C1]                          ^
[ 1739.178228][    C1]  ffff8880242fe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1739.178246][    C1]  ffff8880242fe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1739.178260][    C1] ==================================================================
[ 1739.178335][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1740.079714][    C1] CPU: 1 UID: 0 PID: 14375 Comm: kworker/1:0H Not tainted syzkaller #0 PREEMPT(full) 
[ 1740.089276][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1740.099327][    C1] Workqueue: events_highpri snd_vmidi_output_work
[ 1740.105742][    C1] Call Trace:
[ 1740.109003][    C1]  <IRQ>
[ 1740.111839][    C1]  vpanic+0x56d/0xa60
[ 1740.115818][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.121442][    C1]  ? __pfx_vpanic+0x10/0x10
[ 1740.125953][    C1]  panic+0xc5/0xd0
[ 1740.129681][    C1]  ? __pfx_panic+0x10/0x10
[ 1740.134090][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1740.140694][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1740.147299][    C1]  check_panic_on_warn+0x89/0xb0
[ 1740.152236][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1740.158815][    C1]  end_report+0x73/0x170
[ 1740.163049][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1740.169721][    C1]  kasan_report+0x128/0x150
[ 1740.174221][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1740.180799][    C1]  llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[ 1740.187206][    C1]  llc_conn_state_process+0x4fb/0x1380
[ 1740.192665][    C1]  llc_conn_tmr_common_cb+0x34a/0x780
[ 1740.198034][    C1]  call_timer_fn+0x18d/0x5f0
[ 1740.202628][    C1]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[ 1740.208255][    C1]  ? call_timer_fn+0xd5/0x5f0
[ 1740.212934][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1740.218033][    C1]  ? pv_queued_spin_unlock_traced+0x5a/0x1b0
[ 1740.224008][    C1]  ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40
[ 1740.231462][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1740.236648][    C1]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[ 1740.242296][    C1]  __run_timer_base+0x652/0x8b0
[ 1740.247138][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.252763][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1740.258124][    C1]  ? ktime_get+0x1f5/0x220
[ 1740.262523][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.268141][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.273772][    C1]  run_timer_softirq+0xb7/0x170
[ 1740.278621][    C1]  handle_softirqs+0x226/0x860
[ 1740.283375][    C1]  ? __irq_exit_rcu+0xcb/0x220
[ 1740.288134][    C1]  __irq_exit_rcu+0xcb/0x220
[ 1740.292742][    C1]  irq_exit_rcu+0x9/0x30
[ 1740.296971][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1740.302605][    C1]  </IRQ>
[ 1740.305515][    C1]  <TASK>
[ 1740.308426][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1740.314390][    C1] RIP: 0010:finish_task_switch+0x413/0xc60
[ 1740.320189][    C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 47 3f 55 0a e8 72 2f 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 1740.339785][    C1] RSP: 0018:ffffc9000d9a76e0 EFLAGS: 00000206
[ 1740.345844][    C1] RAX: 0000000001ca4b59 RBX: ffff8880b853c8e0 RCX: 8000000000000001
[ 1740.353798][    C1] RDX: 0000000000000006 RSI: ffffffff8e469c7a RDI: ffffffff8c6ddc80
[ 1740.361748][    C1] RBP: ffffc9000d9a7730 R08: ffffffff917a757f R09: 1ffffffff22f4eaf
[ 1740.369704][    C1] R10: dffffc0000000000 R11: fffffbfff22f4eb0 R12: ffff888050491f40
[ 1740.377688][    C1] R13: ffff8880b853c8a8 R14: dffffc0000000000 R15: 1ffff110170a791c
[ 1740.385659][    C1]  __schedule+0x17e3/0x58f0
[ 1740.390167][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.395787][    C1]  ? pv_queued_spin_unlock_traced+0x5a/0x1b0
[ 1740.401764][    C1]  ? __pfx___schedule+0x10/0x10
[ 1740.406635][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.412270][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.417888][    C1]  ? pv_queued_spin_unlock_traced+0x5a/0x1b0
[ 1740.423865][    C1]  ? preempt_schedule_thunk+0x16/0x40
[ 1740.429243][    C1]  preempt_schedule_common+0x7f/0xd0
[ 1740.434517][    C1]  preempt_schedule_thunk+0x16/0x40
[ 1740.439719][    C1]  _raw_spin_unlock_irqrestore+0x76/0x80
[ 1740.445385][    C1]  snd_rawmidi_transmit+0x9c/0xd0
[ 1740.450434][    C1]  snd_vmidi_output_work+0x1a5/0x3e0
[ 1740.455732][    C1]  ? __pfx_snd_vmidi_output_work+0x10/0x10
[ 1740.461554][    C1]  ? rcu_is_watching+0x16/0xb0
[ 1740.466341][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.471976][    C1]  ? process_scheduled_works+0x97a/0x1630
[ 1740.477715][    C1]  process_scheduled_works+0xc3d/0x1630
[ 1740.483258][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.488896][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1740.494872][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.500495][    C1]  ? assign_work+0x3cf/0x5d0
[ 1740.505080][    C1]  worker_thread+0xa47/0xfb0
[ 1740.509688][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.515317][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.520952][    C1]  ? __kthread_parkme+0x71/0x1f0
[ 1740.525896][    C1]  kthread+0x38b/0x480
[ 1740.529955][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1740.535057][    C1]  ? __pfx_kthread+0x10/0x10
[ 1740.539648][    C1]  ret_from_fork+0x514/0xb70
[ 1740.544226][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1740.549339][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1740.554958][    C1]  ? __switch_to+0xc89/0x1420
[ 1740.559649][    C1]  ? __pfx_kthread+0x10/0x10
[ 1740.564229][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1740.568984][    C1]  </TASK>
[ 1740.572224][    C1] Kernel Offset: disabled
[ 1740.576530][    C1] Rebooting in 86400 seconds..