last executing test programs:

2m46.460325796s ago: executing program 4 (id=688):
syz_open_dev$tty1(0xc, 0x4, 0x1)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe8000000000000000000000000000bbfe80000000"], 0x0)
r3 = io_uring_setup(0x6816, &(0x7f0000000500)={0x0, 0xd530, 0x8000, 0x3, 0x356})
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x385a, 0x0, 0x2, 0x115a, 0x0, r3}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
ioctl$I2C_RETRIES(r9, 0x701, 0x4)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xf000, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x3881, 0x10005009, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x13, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})

2m42.821123224s ago: executing program 4 (id=699):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=<r1=>0x0, 0x0)
syz_io_uring_submit(0x0, r1, 0x0, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'})
syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f00000000c0)={0x2e, 0x9, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0xe8d, 0x0, 0x0, 0x1000, 0x1}}}, &(0x7f0000000180))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
socket$tipc(0x1e, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local})
personality(0x4100001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
dup2(r7, r6)
ppoll(&(0x7f0000000140)=[{r5, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0)
preadv2(r2, &(0x7f0000003a80)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/84, 0x54}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/70, 0x46}, {&(0x7f00000037c0)=""/3, 0x3}, {&(0x7f0000003800)=""/214, 0xd6}, {&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/152, 0x98}], 0x9, 0x3, 0x6, 0x8)
dup2(r4, r5)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x98, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0xb624, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000080)={0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f00000002c0)={@my=0x1, 0x3})
accept4(r2, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x62201)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}})
close_range(r2, 0xffffffffffffffff, 0x0)

2m40.643456437s ago: executing program 4 (id=708):
io_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x2000008)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xdfffffce, 0xdff, 0x3, 0x6, 0x3, "04000000000000000400", 0x28, 0x7f})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8a)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
geteuid()
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800f100", @ANYRES16=r1, @ANYBLOB="57010000000000000000000000000c0003000100000000000000080002000000000008000100", @ANYRES32, @ANYBLOB="0600060003000000"], 0x38}}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
ioprio_set$pid(0x1, 0x0, 0x6000)
r3 = openat$cgroup_type(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x9)

2m40.457596515s ago: executing program 4 (id=711):
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000e0a01020000000000000000010000000000000000000100000a7fc2e4bb7a3f8d67bf5609d58197f9eba851a450478a728e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
userfaultfd(0x80001)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xc)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

2m36.332336394s ago: executing program 4 (id=723):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

2m35.81447302s ago: executing program 4 (id=727):
syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, &(0x7f0000000180))
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4})

2m18.997874843s ago: executing program 32 (id=727):
syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, &(0x7f0000000180))
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4})

18.400309277s ago: executing program 0 (id=1243):
r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
getsockopt$sock_timeval(r7, 0x1, 0x43, 0x0, &(0x7f0000000180))
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
r8 = socket$netlink(0x10, 0x3, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808)

15.775315151s ago: executing program 0 (id=1246):
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
prlimit64(r1, 0x6, &(0x7f0000000080)={0x3, 0x209}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000e0a01020000000000000000010000000000000000000100000a7fc2e4bb7a3f8d67bf5609d58197f9eba851a450478a728e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
userfaultfd(0x80001)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xc)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

12.55439325s ago: executing program 2 (id=1254):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000)

12.082484637s ago: executing program 0 (id=1257):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0xfffffffb, 0x7, {0x3, 0x2, 0xfffffff9, 0x3, 0xffff}, 0x5})
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000000140)=0xcf2)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async)
mkdir(&(0x7f00000003c0)='./mysys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x187)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./mysys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

11.001686781s ago: executing program 2 (id=1259):
r0 = syz_usb_connect(0x5, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x6, 0x5, "d15b89f2"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x44, &(0x7f0000001e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
landlock_restrict_self(0xffffffffffffffff, 0xc)
ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040))

10.623364931s ago: executing program 1 (id=1261):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xf8efc6028ed0514d})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000000d80)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10.069705833s ago: executing program 0 (id=1263):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000180)='10', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)='0', 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
mkdir(0x0, 0x1ff)
ioctl$NBD_DO_IT(r0, 0xab03)

9.594098182s ago: executing program 1 (id=1266):
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x21, 0x4, 0x52, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = gettid()
prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x4011)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

8.129563137s ago: executing program 1 (id=1269):
syz_open_dev$video4linux(&(0x7f0000000180), 0x3, 0x101100)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x40800)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401})
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000002c0)={0x9, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x8da, 0x0, 0x4}, {0x40000080, 0x0, 0x57a}, {0x987, 0x0, 0x6}, {0xaad, 0x0, 0x8}]})
r4 = socket(0x11, 0x3, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
poll(0x0, 0x0, 0x7)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth1_virt_wifi\x00', {0x2}, 0x6})
bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080)
socket$inet6(0xa, 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7, 0x68, 0xfd, 0x40, 0x781, 0x55e8, 0x712b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x3, 0x0, 0x25, "", [{{0x9, 0x4, 0xc9, 0x3, 0x0, 0x4d, 0x99, 0x6d, 0x1}}]}}]}}, 0x0)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6e)
r7 = dup2(r6, r6)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0)
read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020)
shutdown(r5, 0x2)
close(r5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(r4, &(0x7f0000000180)={0x11, 0xf8}, 0x14)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x2000000001, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x100000000, 0x7, 0x198, 0x80, 0x4048, 0x6, 0x2, 0x7fff, 0x10000, 0x32]})
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xffff)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

7.642408898s ago: executing program 2 (id=1276):
syz_open_dev$tty1(0xc, 0x4, 0x1)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe8000000000000000000000000000bbfe80000000"], 0x0)
r3 = io_uring_setup(0x6816, &(0x7f0000000500)={0x0, 0xd530, 0x8000, 0x3, 0x356})
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x385a, 0x0, 0x2, 0x115a, 0x0, r3}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
ioctl$I2C_RETRIES(r10, 0x701, 0x4)
syz_ublk_setup_queues(0xffffffffffffffff, r9, &(0x7f0000000180)={0x0, 0xf000, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x3881, 0x10005009, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x13, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)

6.394324572s ago: executing program 0 (id=1279):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814)
mount(0x0, 0x0, 0x0, 0x8, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x4, 0x840120, 0x7, 0x909b, 0x40057, 0x1, 0x0, 0x0, 0x2, 0x8}}, 0x50)
file_getattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x18, 0x100)
read$FUSE(r5, &(0x7f0000004540)={0x2020}, 0x2020)

6.116203824s ago: executing program 2 (id=1282):
setns(0xc9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x21, 0x4, 0x52, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r0 = socket(0x1a, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r2, 0xfb122dd281cb5d59, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20020810}, 0x74248b129e2a72de)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = gettid()
prlimit64(r3, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x200)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24045091}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

4.010227567s ago: executing program 1 (id=1287):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000e403000000040000000100000084000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r1, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000710300000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x5)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]})
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28)
keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)

4.001717658s ago: executing program 2 (id=1289):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x4, 0x0, 0xdad1124f55525050}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)

3.793810287s ago: executing program 3 (id=1291):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xf8efc6028ed0514d})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000000d80)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.670891732s ago: executing program 3 (id=1292):
syz_open_dev$tty1(0xc, 0x4, 0x1)
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200303a00fe8000000000000000000000000000bbfe800000"], 0x0)
r3 = io_uring_setup(0x6816, &(0x7f0000000500)={0x0, 0xd530, 0x8000, 0x3, 0x356})
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x385a, 0x0, 0x2, 0x115a, 0x0, r3}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
ioctl$I2C_RETRIES(r10, 0x701, 0x4)
r11 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xf000, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x3881, 0x10005009, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x13, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})

1.580152307s ago: executing program 3 (id=1293):
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="3f5d0f01000000000000000061870000000000"], 0x14}}, 0x4000000)
r4 = syz_io_uring_setup(0x4179, &(0x7f0000000180)={0x0, 0xfe74, 0x10000, 0x3, 0x2cc}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000))
io_uring_enter(r4, 0x7b20, 0x2bab, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f00000003c0)={0x0}, 0x1)
syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x81}, {0x0, "427e994ea23d086a837bffe4d51ea12feb8d4dbafa2b79f5a8944abf437f43a1f246bca3fee06b8d759fe0ce3ba3bef22e07f384840b8b15baf4af434e121b8d"}}}}, 0x47)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202})
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa91ffffffffffff86dd64fde9e200180000fc0100"/39], 0x0)
openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d"])
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave=selative:,0,\x00'])
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000df0100000000000100000a38000000190a01080000000000000000020000000900020073797a32000000000900010073797ab6000000000c0003400000000000000002140000001100010000000000000000000500000a"], 0x60}, 0x1, 0x0, 0x0, 0x20000850}, 0x800)

1.46721736s ago: executing program 1 (id=1294):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305005b68fdce0afc5924000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
modify_ldt$write2(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

1.385279113s ago: executing program 3 (id=1295):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xc8)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x20004450)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b405f592196cd61a20fe534b0c02000034000000010000000000000600000000000000950000000000000000bf3fb6589c90737a597486"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0)
r4 = syz_open_dev$dri(0x0, 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r5=>0x0], &(0x7f0000000180)=[<r6=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2, 0x0, 0x0, <r10=>0xffffffffffffffff})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xb, 0x4)
ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.230056844s ago: executing program 3 (id=1296):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='2', 0x1)
symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00')
mount(&(0x7f0000000300)=@nullb, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', &(0x7f00000001c0)='xfs\x00', 0x4, 0x0)

1.019252428s ago: executing program 2 (id=1297):
syz_open_dev$video4linux(&(0x7f0000000180), 0x3, 0x101100)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x40800)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401})
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000002c0)={0x9, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x8da, 0x0, 0x4}, {0x40000080, 0x0, 0x57a}, {0x987, 0x0, 0x6}, {0xaad, 0x0, 0x8}]})
r4 = socket(0x11, 0x3, 0x0)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
poll(0x0, 0x0, 0x7)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth1_virt_wifi\x00', {0x2}, 0x6})
bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080)
socket$inet6(0xa, 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7, 0x68, 0xfd, 0x40, 0x781, 0x55e8, 0x712b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x3, 0x0, 0x25, "", [{{0x9, 0x4, 0xc9, 0x3, 0x0, 0x4d, 0x99, 0x6d, 0x1}}]}}]}}, 0x0)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6e)
r7 = dup2(r6, r6)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0)
read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020)
shutdown(r5, 0x2)
close(r5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(r4, &(0x7f0000000180)={0x11, 0xf8}, 0x14)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x2000000001, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x100000000, 0x7, 0x198, 0x80, 0x4048, 0x6, 0x2, 0x7fff, 0x10000, 0x32]})
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0xffff)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

905.14753ms ago: executing program 0 (id=1298):
r0 = syz_usb_connect(0x5, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x6, 0x5, "d15b89f2"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x44, &(0x7f0000001e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
landlock_restrict_self(0xffffffffffffffff, 0xc)
ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040))

160.463µs ago: executing program 1 (id=1299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814)
mount(0x0, 0x0, 0x0, 0x8, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x4, 0x840120, 0x7, 0x909b, 0x40057, 0x1, 0x0, 0x0, 0x2, 0x8}}, 0x50)
file_getattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x18, 0x100)
read$FUSE(r5, &(0x7f0000004540)={0x2020}, 0x2020)

0s ago: executing program 3 (id=1300):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts.
[   91.785361][ T5573] cgroup: Unknown subsys name 'net'
[   91.848845][   T10] cfg80211: failed to load regulatory.db
[   92.028758][ T5573] cgroup: Unknown subsys name 'cpuset'
[   92.081333][ T5573] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   94.026565][ T5573] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   96.829685][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.846092][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.847376][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.876388][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.878789][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.883155][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.923119][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.941687][ T4903] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.943486][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.968529][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.980012][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.998318][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   97.011957][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   97.012424][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   97.019131][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   97.022501][ T4903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   97.054560][ T4903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   97.059433][ T4903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   97.093670][ T4903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   97.102572][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   97.156664][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   97.184295][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   97.186562][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   97.195549][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   97.203270][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   98.963175][   T60] Bluetooth: hci2: command tx timeout
[   99.120882][   T60] Bluetooth: hci3: command tx timeout
[   99.121090][   T60] Bluetooth: hci1: command tx timeout
[   99.206222][   T60] Bluetooth: hci0: command tx timeout
[   99.280702][   T60] Bluetooth: hci4: command tx timeout
[   99.786171][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.787504][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.787649][ T5589] bridge_slave_0: entered allmulticast mode
[   99.789869][ T5589] bridge_slave_0: entered promiscuous mode
[   99.860651][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.860777][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.860937][ T5590] bridge_slave_0: entered allmulticast mode
[   99.863523][ T5590] bridge_slave_0: entered promiscuous mode
[   99.866626][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.866748][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.866910][ T5589] bridge_slave_1: entered allmulticast mode
[   99.868881][ T5589] bridge_slave_1: entered promiscuous mode
[   99.927198][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.927291][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.927617][ T5591] bridge_slave_0: entered allmulticast mode
[   99.929321][ T5591] bridge_slave_0: entered promiscuous mode
[   99.936304][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.936628][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.937137][ T5592] bridge_slave_0: entered allmulticast mode
[   99.960028][ T5592] bridge_slave_0: entered promiscuous mode
[   99.987559][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.987719][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.987889][ T5590] bridge_slave_1: entered allmulticast mode
[   99.990200][ T5590] bridge_slave_1: entered promiscuous mode
[  100.042378][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.042505][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.042974][ T5591] bridge_slave_1: entered allmulticast mode
[  100.044799][ T5591] bridge_slave_1: entered promiscuous mode
[  100.045820][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.045932][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.046041][ T5592] bridge_slave_1: entered allmulticast mode
[  100.047803][ T5592] bridge_slave_1: entered promiscuous mode
[  100.186899][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.187193][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.187353][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.188183][ T5593] bridge_slave_0: entered allmulticast mode
[  100.190045][ T5593] bridge_slave_0: entered promiscuous mode
[  100.264772][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.267891][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.268148][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.268280][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.268395][ T5593] bridge_slave_1: entered allmulticast mode
[  100.270296][ T5593] bridge_slave_1: entered promiscuous mode
[  100.310545][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.330158][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.341329][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.379892][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.388117][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.493588][ T5589] team0: Port device team_slave_0 added
[  100.498360][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.543049][ T5590] team0: Port device team_slave_0 added
[  100.545330][ T5589] team0: Port device team_slave_1 added
[  100.547824][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.549907][ T5591] team0: Port device team_slave_0 added
[  100.556736][ T5592] team0: Port device team_slave_0 added
[  100.566196][ T5590] team0: Port device team_slave_1 added
[  100.627455][ T5592] team0: Port device team_slave_1 added
[  100.648894][ T5591] team0: Port device team_slave_1 added
[  100.727506][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.727518][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.727536][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.738528][ T5593] team0: Port device team_slave_0 added
[  100.787255][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.787271][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.787296][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.839732][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.839748][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.839772][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.848817][ T5593] team0: Port device team_slave_1 added
[  100.853219][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.853289][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.853353][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.872407][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.872450][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.872569][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.886075][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.886111][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.886177][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.034330][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.034342][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.034376][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.044848][   T60] Bluetooth: hci2: command tx timeout
[  101.070531][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.070611][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.070685][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.200980][   T60] Bluetooth: hci1: command tx timeout
[  101.201014][   T60] Bluetooth: hci3: command tx timeout
[  101.280805][ T4903] Bluetooth: hci0: command tx timeout
[  101.360920][ T4903] Bluetooth: hci4: command tx timeout
[  101.603269][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.603282][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.603300][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.658437][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.658451][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.658470][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.802294][ T5589] hsr_slave_0: entered promiscuous mode
[  101.803519][ T5589] hsr_slave_1: entered promiscuous mode
[  101.838274][ T5590] hsr_slave_0: entered promiscuous mode
[  101.839326][ T5590] hsr_slave_1: entered promiscuous mode
[  101.840107][ T5590] debugfs: 'hsr0' already exists in 'hsr'
[  101.840198][ T5590] Cannot create hsr debugfs directory
[  101.885448][ T5592] hsr_slave_0: entered promiscuous mode
[  101.886448][ T5592] hsr_slave_1: entered promiscuous mode
[  101.887147][ T5592] debugfs: 'hsr0' already exists in 'hsr'
[  101.887164][ T5592] Cannot create hsr debugfs directory
[  101.914736][ T5591] hsr_slave_0: entered promiscuous mode
[  101.916280][ T5591] hsr_slave_1: entered promiscuous mode
[  101.916963][ T5591] debugfs: 'hsr0' already exists in 'hsr'
[  101.916981][ T5591] Cannot create hsr debugfs directory
[  102.030344][ T5593] hsr_slave_0: entered promiscuous mode
[  102.034513][ T5593] hsr_slave_1: entered promiscuous mode
[  102.037008][ T5593] debugfs: 'hsr0' already exists in 'hsr'
[  102.037072][ T5593] Cannot create hsr debugfs directory
[  103.019490][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.091538][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.109601][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.121063][ T4903] Bluetooth: hci2: command tx timeout
[  103.147754][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.159249][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.196048][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.223022][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.259684][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.284834][   T60] Bluetooth: hci1: command tx timeout
[  103.284925][ T4903] Bluetooth: hci3: command tx timeout
[  103.363072][ T4903] Bluetooth: hci0: command tx timeout
[  103.429282][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.440746][ T4903] Bluetooth: hci4: command tx timeout
[  103.467364][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.483964][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.505810][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.509973][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.544832][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.571606][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.607669][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.719973][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  103.767045][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.786974][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  103.818655][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.829601][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  103.857719][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.907054][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  103.937933][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  104.126869][ T5591] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  104.156112][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  104.173107][ T5591] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  104.204561][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  104.209634][ T5591] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  104.256882][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  104.294995][ T5591] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  104.334783][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  104.386833][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.525795][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  104.554982][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  104.568467][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  104.593610][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  104.600437][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  104.634605][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  104.636977][ T5589] 8021q: adding VLAN 0 to HW filter on device team0
[  104.652262][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  104.674897][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  104.724781][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.725045][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.771429][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.789801][ T3399] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.789888][ T3399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.906469][ T5590] 8021q: adding VLAN 0 to HW filter on device team0
[  104.945621][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.986017][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.986138][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.048456][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.048578][ T1515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.126336][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[  105.173396][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.173882][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.201773][ T4903] Bluetooth: hci2: command tx timeout
[  105.235284][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.249379][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.249510][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.361455][   T60] Bluetooth: hci1: command tx timeout
[  105.361504][ T4903] Bluetooth: hci3: command tx timeout
[  105.440885][ T4903] Bluetooth: hci0: command tx timeout
[  105.445008][ T5591] 8021q: adding VLAN 0 to HW filter on device team0
[  105.495709][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.521786][ T4903] Bluetooth: hci4: command tx timeout
[  105.556268][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.556400][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.620105][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.620216][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.698599][ T5593] 8021q: adding VLAN 0 to HW filter on device team0
[  105.790779][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.790945][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.893202][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.893405][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.647393][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.911267][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.984138][ T5589] veth0_vlan: entered promiscuous mode
[  107.087929][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.127426][ T5589] veth1_vlan: entered promiscuous mode
[  107.312254][ T5590] veth0_vlan: entered promiscuous mode
[  107.403954][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.417807][ T5590] veth1_vlan: entered promiscuous mode
[  107.462481][ T5589] veth0_macvtap: entered promiscuous mode
[  107.495094][ T5589] veth1_macvtap: entered promiscuous mode
[  107.565611][ T5592] veth0_vlan: entered promiscuous mode
[  107.594038][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.634358][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.638236][ T5592] veth1_vlan: entered promiscuous mode
[  107.688327][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.724194][ T5590] veth0_macvtap: entered promiscuous mode
[  107.776597][ T5590] veth1_macvtap: entered promiscuous mode
[  107.960051][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.975456][ T5592] veth0_macvtap: entered promiscuous mode
[  108.083620][ T5593] veth0_vlan: entered promiscuous mode
[  108.101327][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.177126][ T5592] veth1_macvtap: entered promiscuous mode
[  108.292077][ T5593] veth1_vlan: entered promiscuous mode
[  108.374001][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.496873][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.565352][ T5591] veth0_vlan: entered promiscuous mode
[  108.580091][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.580112][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.741872][ T5591] veth1_vlan: entered promiscuous mode
[  108.852580][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.852600][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.994247][ T5593] veth0_macvtap: entered promiscuous mode
[  109.161519][ T5593] veth1_macvtap: entered promiscuous mode
[  109.183700][ T1515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.183720][ T1515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.434591][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.515211][ T1515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.515230][ T1515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.547105][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.567832][ T5591] veth0_macvtap: entered promiscuous mode
[  109.642117][ T5591] veth1_macvtap: entered promiscuous mode
[  109.650270][ T3399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.650290][ T3399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.846428][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.846449][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.064225][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.287690][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.623988][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.624008][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.002377][ T5782] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  111.126937][ T5783] sctp: [Deprecated]: syz.0.1 (pid 5783) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.126937][ T5783] Use struct sctp_sack_info instead
[  111.298028][ T1515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.298067][ T1515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.584452][ T5785] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.587554][ T5785] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  114.302074][ T5790] tmpfs: Group quota inode hardlimit too large.
[  114.304812][ T5790] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  115.308830][ T5802] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[  117.584419][   T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.954879][ T3399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.954898][ T3399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.190484][ T5820] overlayfs: failed to resolve './file1': -2
[  120.698118][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.698138][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.768386][   T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.792238][   T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.901374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  120.960614][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  120.963914][  T155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.020618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  121.022987][  T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.467341][ T3372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.635898][ T3372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.641129][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.641390][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.641581][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.330893][ T1543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.418817][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.583901][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.804992][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.692592][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.693077][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.693513][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.694585][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.695042][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.695490][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.436984][ T5861] Zero length message leads to an empty skb
[  129.686199][   T10] IPVS: starting estimator thread 0...
[  129.928487][ T5866] IPVS: using max 12 ests per chain, 28800 per kthread
[  132.319946][ T5885] sctp: [Deprecated]: syz.3.19 (pid 5885) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.319946][ T5885] Use struct sctp_sack_info instead
[  133.802999][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  133.803103][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  136.104669][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'.
[  136.358624][ T5916] netlink: 'syz.0.26': attribute type 10 has an invalid length.
[  137.498216][ T5916] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  137.567113][ T5916] team0: Port device netdevsim1 added
[  138.099646][ T5939] qrtr: Invalid version 0
[  139.073189][ T5931] can: request_module (can-proto-3) failed.
[  140.250331][ T5925] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  150.369103][ T5993] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  151.250753][ T5978] infiniband syz0: set active
[  151.250768][ T5978] infiniband syz0: added bond_slave_1
[  151.256977][ T5978] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  151.262393][ T5978] infiniband syz0: Couldn't open port 1
[  151.263030][ T5978] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  151.263057][ T5978] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  151.263088][ T5978] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  151.297336][ T5978] RDS/IB: syz0: added
[  151.297861][ T5978] smc: adding ib device syz0 with port count 1
[  151.298004][ T5978] smc:    ib device syz0 port 1 has no pnetid
[  153.459687][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.42'.
[  154.797436][ T6009] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  157.320633][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  157.340618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  157.350630][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  157.410619][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  157.420598][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  157.430615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  157.440595][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  157.674935][ T6034] tmpfs: Group quota inode hardlimit too large.
[  162.926384][ T6060] kAFS: bad VL server IP address
[  163.270133][ T6059] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  164.561664][ T6050] syz.3.50 (6050) used greatest stack depth: 19000 bytes left
[  165.393259][ T6078] sctp: [Deprecated]: syz.3.58 (pid 6078) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.393259][ T6078] Use struct sctp_sack_info instead
[  168.082830][ T6111] netlink: 'syz.0.63': attribute type 1 has an invalid length.
[  169.874590][   T48] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  170.427740][   T48] usb 4-1: Using ep0 maxpacket: 8
[  170.684184][   T48] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  172.091157][   T48] usb 4-1: unable to read config index 0 descriptor/start: -71
[  172.091187][   T48] usb 4-1: can't read configurations, error -71
[  172.892023][ T6127] sctp: [Deprecated]: syz.4.67 (pid 6127) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.892023][ T6127] Use struct sctp_sack_info instead
[  175.780796][ T6131] Can't find ip_set type hash:m
[  176.575634][ T6151] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  179.649865][ T4903] block nbd0: Receive control failed (result -32)
[  179.716315][ T6152] block nbd0: shutting down sockets
[  179.826765][ T6165] qrtr: Invalid version 0
[  180.000127][ T6170] netlink: 'syz.3.75': attribute type 1 has an invalid length.
[  180.471214][ T6170] bond1: entered promiscuous mode
[  180.472149][ T6170] 8021q: adding VLAN 0 to HW filter on device bond1
[  181.697479][ T6175] bond1: (slave bridge1): making interface the new active one
[  181.697507][ T6175] bridge1: entered promiscuous mode
[  181.755073][ T6175] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  182.360334][ T6195] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[  183.842680][ T6195] bond1: entered promiscuous mode
[  183.843129][ T6195] 8021q: adding VLAN 0 to HW filter on device bond1
[  184.070695][ T1235] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  185.378530][ T6200] bond1: (slave bridge1): making interface the new active one
[  185.378554][ T6200] bridge1: entered promiscuous mode
[  185.457355][ T1235] usb 5-1: device descriptor read/all, error -71
[  185.546748][ T6200] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  186.666702][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'.
[  186.798521][ T6234] kAFS: bad VL server IP address
[  187.210365][ T6229] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  188.359905][ T6223] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  188.359933][ T6223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  188.737250][ T6223] vhci_hcd vhci_hcd.0: Device attached
[  189.740834][ T6254] netlink: 'syz.3.93': attribute type 1 has an invalid length.
[  190.415998][ T1235] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  190.751912][ T6254] bond2: entered promiscuous mode
[  190.760408][ T6254] 8021q: adding VLAN 0 to HW filter on device bond2
[  191.093059][   T31] usb 38-1: SetAddress Request (2) to port 0
[  191.134991][   T31] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  191.341003][ T1235] usb 5-1: Using ep0 maxpacket: 8
[  191.345722][ T1235] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  191.364078][ T1235] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  191.364241][ T1235] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.364295][ T1235] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  191.364359][ T1235] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  191.364441][ T1235] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.364534][ T1235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.476766][ T6262] bond2: (slave bridge2): making interface the new active one
[  191.476794][ T6262] bridge2: entered promiscuous mode
[  191.503124][ T6262] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  193.631240][ T1235] usb 5-1: usb_control_msg returned -71
[  193.631275][ T1235] usbtmc 5-1:16.0: can't read capabilities
[  194.384401][ T6293] tmpfs: Group quota inode hardlimit too large.
[  194.402534][ T6293] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  195.109000][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  195.109073][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  195.848186][ T6242] vhci_hcd: connection reset by peer
[  195.928832][ T1515] vhci_hcd vhci_hcd.2: stop threads
[  195.940262][ T1515] vhci_hcd vhci_hcd.2: release socket
[  195.993016][ T6296] netlink: 'syz.1.101': attribute type 1 has an invalid length.
[  195.993655][ T1235] usb 5-1: USB disconnect, device number 4
[  196.040675][ T1515] vhci_hcd vhci_hcd.2: disconnect device
[  197.365475][   T31] usb 38-1: device descriptor read/8, error -110
[  197.455846][ T6304] tmpfs: Group quota inode hardlimit too large.
[  197.456931][ T6304] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  198.380373][ T6313] sctp: [Deprecated]: syz.2.103 (pid 6313) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.380373][ T6313] Use struct sctp_sack_info instead
[  198.655997][   T31] usb usb38-port1: attempt power cycle
[  199.043996][ T6296] bond2: entered promiscuous mode
[  199.044303][ T6296] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.060324][ T6321] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  200.461271][ T6300] bond2: (slave bridge2): making interface the new active one
[  200.461297][ T6300] bridge2: entered promiscuous mode
[  200.569167][ T6300] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  200.887602][   T31] usb usb38-port1: unable to enumerate USB device
ELF

>´@•8
V`úÿÿÿÿÿÿÿÿ
g‹Ë
€#QÜþç©52;^b'Σ6MHŒ´î<�ä[ªÉ ®<	./dev/ttyS0[  202.510324][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.117'.
[  203.692331][   T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  204.020662][   T31] usb 5-1: Using ep0 maxpacket: 8
[  204.021496][   T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  204.027192][   T31] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  204.027250][   T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  204.027273][   T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  204.027295][   T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  204.027321][   T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  204.027369][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.247748][ T6377] program syz.0.126 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.251194][ T6377] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  206.781605][ T6377] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  207.261738][ T6387] kAFS: bad VL server IP address
[  207.815168][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  207.971936][   T31] usb 5-1: can't set config #16, error -32
[  208.217106][ T6395] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[  208.331061][   T31] usb 5-1: USB disconnect, device number 5
[  209.562454][ T6405] jffs2: notice: (6405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  211.292491][ T6421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.133'.
[  211.451793][ T6395] bond1: entered promiscuous mode
[  211.453884][ T6395] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.382475][ T6398] bond1: (slave bridge1): making interface the new active one
[  212.382503][ T6398] bridge1: entered promiscuous mode
[  212.389920][ T6398] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  217.067206][ T6473] program syz.1.149 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  217.069938][ T6473] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  222.750013][ T6473] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  223.440727][ T6476] Bluetooth: hci1: command 0x0406 tx timeout
[  223.442865][ T6475] Bluetooth: hci0: command 0x0406 tx timeout
[  223.608475][ T6476] Bluetooth: hci3: command 0x0406 tx timeout
[  223.613345][ T6476] Bluetooth: hci2: command 0x0406 tx timeout
[  223.733532][ T6475] Bluetooth: hci4: command 0x0406 tx timeout
[  227.177179][ T6502] program syz.1.155 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.178076][ T6502] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  227.245600][ T6502] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  234.819000][ T6545] Config c/1 of g1 needs at least one function.
[  234.820309][ T6545] udc dummy_udc.0: failed to start g1: -22
[  234.820329][ T6545] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  235.074112][ T6545] UDC core: g1: couldn't find an available UDC or it's busy
[  235.260921][ T5594] block nbd0: Receive control failed (result -32)
[  235.269109][ T6547] block nbd0: shutting down sockets
[  235.304904][ T6548] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR
[  235.661347][ T6572] netlink: 'syz.0.179': attribute type 1 has an invalid length.
[  236.757860][ T6572] bond2: entered promiscuous mode
[  236.758351][ T6572] 8021q: adding VLAN 0 to HW filter on device bond2
[  236.790442][ T6582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  236.790463][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  236.800290][ T6582] vhci_hcd vhci_hcd.0: Device attached
[  237.232944][ T6577] bond2: (slave bridge2): making interface the new active one
[  237.232970][ T6577] bridge2: entered promiscuous mode
[  237.239164][ T6577] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  237.330745][ T5702] usb 38-1: SetAddress Request (6) to port 0
[  237.330828][ T5702] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd
[  237.960148][ T6594] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  239.965080][ T6600] Config c/1 of g1 needs at least one function.
[  240.014228][ T6600] udc dummy_udc.0: failed to start g1: -22
[  240.014254][ T6600] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  240.090754][ T6600] UDC core: g1: couldn't find an available UDC or it's busy
[  242.099273][ T6607] syz.0.187 (6607) used greatest stack depth: 18272 bytes left
[  242.365912][ T6583] vhci_hcd: connection reset by peer
[  242.367196][ T1310] vhci_hcd vhci_hcd.2: stop threads
[  242.367218][ T1310] vhci_hcd vhci_hcd.2: release socket
[  242.367986][ T1310] vhci_hcd vhci_hcd.2: disconnect device
[  242.402578][ T5702] usb 38-1: device descriptor read/8, error -110
[  242.795547][ T5702] usb usb38-port1: attempt power cycle
[  243.467079][ T6653] kAFS: bad VL server IP address
[  244.713712][ T6651] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  244.935827][ T6662] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  244.935857][ T6662] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  244.967328][ T6662] vhci_hcd vhci_hcd.0: Device attached
[  245.030762][ T5702] usb 38-1: SetAddress Request (9) to port 0
[  245.030824][ T5702] usb 38-1: new SuperSpeed USB device number 9 using vhci_hcd
[  245.269268][ T6668] vhci_hcd: connection reset by peer
[  245.269485][ T1066] vhci_hcd vhci_hcd.2: stop threads
[  245.269501][ T1066] vhci_hcd vhci_hcd.2: release socket
[  245.269553][ T1066] vhci_hcd vhci_hcd.2: disconnect device
[  246.467113][ T6694] zero sized request
[  247.485186][ T6707] syzkaller1: entered promiscuous mode
[  247.485206][ T6707] syzkaller1: entered allmulticast mode
[  247.941820][ T6720] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  247.948716][ T6720] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  248.125435][ T6720] vhci_hcd vhci_hcd.0: Device attached
[  249.230840][ T5918] usb 36-1: SetAddress Request (2) to port 0
[  249.230925][ T5918] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  249.482353][ T6738] netlink: 'syz.4.225': attribute type 1 has an invalid length.
[  249.973427][ T6738] bond1: entered promiscuous mode
[  250.031469][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1
[  250.080830][ T5702] usb 38-1: device descriptor read/8, error -110
[  250.197836][ T5702] usb usb38-port1: unable to enumerate USB device
[  250.292067][ T6740] bond1: (slave bridge1): making interface the new active one
[  250.292092][ T6740] bridge1: entered promiscuous mode
[  250.408178][ T6740] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  251.818102][ T6722] vhci_hcd: connection reset by peer
[  251.818728][   T56] vhci_hcd vhci_hcd.1: stop threads
[  251.818753][   T56] vhci_hcd vhci_hcd.1: release socket
[  251.818845][   T56] vhci_hcd vhci_hcd.1: disconnect device
[  251.929642][ T5594] Bluetooth: hci2: unexpected event for opcode 0x1002
[  252.319752][ T6765] 9p: Bad value for 'version'
[  252.660376][ T6775] Config c/1 of g1 needs at least one function.
[  252.728221][ T6775] udc dummy_udc.0: failed to start g1: -22
[  252.728252][ T6775] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  252.729417][ T6775] UDC core: g1: couldn't find an available UDC or it's busy
[  253.064244][ T6778] XFS (nullb0): Invalid superblock magic number
[  254.320777][ T5918] usb 36-1: device descriptor read/8, error -110
[  254.870076][ T5918] usb usb36-port1: attempt power cycle
[  255.696273][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  255.696342][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  256.514289][ T5918] usb usb36-port1: unable to enumerate USB device
[  259.400966][ T5702] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  259.674679][ T5702] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  260.199413][ T5702] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  260.199459][ T5702] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  260.199524][ T5702] usb 2-1: config 0 interface 0 has no altsetting 0
[  260.447366][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  260.447431][ T5702] usb 2-1: Product: syz
[  260.447488][ T5702] usb 2-1: Manufacturer: syz
[  260.447516][ T5702] usb 2-1: SerialNumber: syz
[  260.657324][ T5702] usb 2-1: config 0 descriptor??
[  260.659046][ T6842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  261.492731][ T6859] tmpfs: Group quota inode hardlimit too large.
[  261.509767][ T6859] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  263.617687][ T5702] usb 2-1: selecting invalid altsetting 0
[  266.197476][ T6881] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  266.197509][ T6881] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  266.230051][ T6881] vhci_hcd vhci_hcd.0: Device attached
[  266.427547][ T6882] vhci_hcd: connection closed
[  266.428826][ T1515] vhci_hcd vhci_hcd.4: stop threads
[  266.428852][ T1515] vhci_hcd vhci_hcd.4: release socket
[  266.510351][ T1515] vhci_hcd vhci_hcd.4: disconnect device
[  266.658584][ T5702] usb 2-1: USB disconnect, device number 2
[  267.261120][ T6896] netlink: 'syz.4.275': attribute type 1 has an invalid length.
[  267.657287][ T6896] bond2: entered promiscuous mode
[  267.701606][ T6896] 8021q: adding VLAN 0 to HW filter on device bond2
[  268.092637][ T6905] program syz.1.276 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  268.093471][ T6905] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  268.183442][ T6904] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  268.941096][ T6898] bond2: (slave bridge2): making interface the new active one
[  268.941122][ T6898] bridge2: entered promiscuous mode
[  268.942571][ T6898] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  270.702244][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'.
[  271.057705][ T5594] Bluetooth: hci1: unexpected event for opcode 0x1002
[  277.562452][ T6955] program syz.2.289 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  277.562940][ T6955] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  278.407829][ T6955] rdma_rxe: rxe_newlink: failed to add bond_slave_1
ELF

>´@•8
V`úÿÿÿÿÿÿÿÿ
g‹Ë
€#QÜþç©52;^b'Σ6MHŒ´î<�ä[ªÉ ®<	./dev/ttyS0[  280.974304][ T6997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.302'.
[  286.968127][ T7031] kAFS: bad VL server IP address
[  293.970110][ T7080] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR
[  294.789284][ T7095] tmpfs: Group quota inode hardlimit too large.
[  294.806160][ T7095] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  295.613305][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'.
[  296.668449][ T7116] kAFS: bad VL server IP address
[  296.800737][ T5918] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  297.469657][ T5918] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  297.742104][ T5918] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  297.742137][ T5918] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  297.742162][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0
[  301.062758][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  301.062787][ T5918] usb 1-1: Product: syz
[  301.062801][ T5918] usb 1-1: Manufacturer: syz
[  301.151351][ T5918] usb 1-1: config 0 descriptor??
[  301.156549][ T5918] usb 1-1: can't set config #0, error -71
[  301.211272][ T5918] usb 1-1: USB disconnect, device number 2
[  301.888979][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  302.069664][ T7137] tmpfs: Group quota inode hardlimit too large.
[  302.088270][ T7137] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  303.072535][ T5918] usb 1-1: Using ep0 maxpacket: 8
[  303.073506][ T5918] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  303.075214][ T5918] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  303.075283][ T5918] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  303.075306][ T5918] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  303.075331][ T5918] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  303.075356][ T5918] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  303.075398][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.565640][ T5918] usb 1-1: usb_control_msg returned -32
[  303.565674][ T5918] usbtmc 1-1:16.0: can't read capabilities
[  307.501371][ T5702] usb 1-1: USB disconnect, device number 3
[  307.756282][ T5594] Bluetooth: hci1: unexpected event for opcode 0x2005
[  307.882026][ T7166] batadv_slave_1: entered promiscuous mode
[  307.899423][ T7166] batadv_slave_1: left promiscuous mode
[  309.536103][ T7171] can: request_module (can-proto-3) failed.
[  311.037087][ T7164] bond3: option ad_actor_sys_prio: invalid value (0)
[  311.037114][ T7164] bond3: option ad_actor_sys_prio: allowed values 1 - 65535
[  311.146032][ T7164] bond3 (unregistering): Released all slaves
[  312.673621][ T7198] fuse: Bad value for 'fd'
[  313.796564][ T7191] nfs: Bad value for 'port'
[  315.871019][ T5703] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  316.096996][ T5703] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  316.128047][ T5703] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  316.128708][ T5703] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  316.129162][ T5703] usb 5-1: config 0 interface 0 has no altsetting 0
[  316.296749][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  316.297184][ T5703] usb 5-1: Product: syz
[  316.298014][ T5703] usb 5-1: Manufacturer: syz
[  316.298877][ T5703] usb 5-1: SerialNumber: syz
[  316.924743][ T5703] usb 5-1: config 0 descriptor??
[  316.925455][ T7220] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  316.997672][ T5703] usb 5-1: selecting invalid altsetting 0
[  317.129409][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  317.140715][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  317.319353][ T5703] usb 5-1: USB disconnect, device number 6
[  317.627583][ T7184] udevd[7184]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  325.119364][ T7316] netlink: 'syz.0.390': attribute type 1 has an invalid length.
[  325.185047][ T7318] Config c/1 of g1 needs at least one function.
[  325.185150][ T7318] udc dummy_udc.0: failed to start g1: -22
[  325.185166][ T7318] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  325.254195][ T7318] UDC core: g1: couldn't find an available UDC or it's busy
[  325.308785][ T7318] XFS (nullb0): Invalid superblock magic number
[  326.090281][ T7316] bond3: entered promiscuous mode
[  326.291848][ T7316] 8021q: adding VLAN 0 to HW filter on device bond3
[  327.465548][ T7319] bond3: (slave bridge3): making interface the new active one
[  327.465575][ T7319] bridge3: entered promiscuous mode
[  327.473621][ T7319] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  329.882854][ T5594] block nbd4: Receive control failed (result -32)
[  330.148032][ T7352] block nbd4: shutting down sockets
[  330.465745][ T7372] XFS (nullb0): Invalid superblock magic number
[  330.743442][ T7385] XFS (nullb0): Invalid superblock magic number
[  330.760703][ T5596] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  331.019481][ T5596] usb 2-1: Using ep0 maxpacket: 32
[  331.038744][ T5596] usb 2-1: unable to get BOS descriptor or descriptor too short
[  331.038893][ T5596] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  331.053173][ T5596] usb 2-1: config 14 has an invalid interface number: 57 but max is 0
[  331.053249][ T5596] usb 2-1: config 14 has no interface number 0
[  331.053343][ T5596] usb 2-1: config 14 interface 57 has no altsetting 0
[  331.187505][ T5596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.187534][ T5596] usb 2-1: Product: syz
[  331.187606][ T5596] usb 2-1: Manufacturer: syz
[  331.187679][ T5596] usb 2-1: SerialNumber: syz
[  332.359794][ T5596] legousbtower 2-1:14.57: interrupt endpoints not found
[  333.018829][ T7418] tmpfs: Group quota inode hardlimit too large.
[  333.041011][ T7418] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  334.089816][ T5703] usb 2-1: USB disconnect, device number 3
[  336.576903][ T5703] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  337.074733][ T5703] usb 5-1: Using ep0 maxpacket: 32
[  337.077371][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short
[  337.077424][ T5703] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  337.080024][ T5703] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  337.080051][ T5703] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  337.080071][ T5703] usb 5-1: config 14 has no interface number 0
[  337.080087][ T5703] usb 5-1: config 14 has no interface number 1
[  337.080171][ T5703] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  337.080194][ T5703] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  337.080232][ T5703] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  337.080256][ T5703] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  337.080280][ T5703] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  337.080304][ T5703] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  337.080327][ T5703] usb 5-1: config 14 interface 57 has no altsetting 0
[  337.080344][ T5703] usb 5-1: config 14 interface 228 has no altsetting 0
[  337.179417][ T7457] program syz.0.420 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  337.179847][ T7457] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  337.195244][ T7457] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  337.253336][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.253364][ T5703] usb 5-1: Product: syz
[  337.253380][ T5703] usb 5-1: Manufacturer: syz
[  337.253394][ T5703] usb 5-1: SerialNumber: syz
[  337.972757][ T5703] legousbtower 5-1:14.57: interrupt endpoints not found
[  338.274924][ T7466] socket: no more sockets
[  338.412187][ T5703] legousbtower 5-1:14.228: get version request failed: -121
[  338.412388][ T5703] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121
[  338.477453][ T7468] block nbd0: Failed to create debugfs dir for 'nbd0'
[  338.957453][ T5594] block nbd0: Receive control failed (result -32)
[  339.092354][ T7468] block nbd0: shutting down sockets
[  339.941038][   T48] usb 5-1: USB disconnect, device number 7
[  340.387345][ T7492] input: syz1 as /devices/virtual/input/input9
[  340.387479][ T7492] input: failed to attach handler leds to device input9, error: -6
[  341.107869][ T7503] syzkaller1: entered promiscuous mode
[  341.107895][ T7503] syzkaller1: entered allmulticast mode
[  341.625890][ T7510] kAFS: bad VL server IP address
[  344.110746][ T5944] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  344.263042][ T5944] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  344.266173][ T5944] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  344.266204][ T5944] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  344.266229][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0
[  344.269173][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  344.269196][ T5944] usb 2-1: Product: syz
[  344.269210][ T5944] usb 2-1: Manufacturer: syz
[  344.269223][ T5944] usb 2-1: SerialNumber: syz
[  344.386433][ T5944] usb 2-1: config 0 descriptor??
[  344.387650][ T7534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  344.388094][ T7547] Config c/1 of g1 needs at least one function.
[  344.418230][ T7547] udc dummy_udc.0: failed to start g1: -22
[  344.418257][ T7547] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  344.442680][ T7547] UDC core: g1: couldn't find an available UDC or it's busy
[  344.597676][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.4.458'.
[  344.864503][ T5944] usb 2-1: selecting invalid altsetting 0
[  344.870922][ T7551] XFS (nullb0): Invalid superblock magic number
[  345.776914][ T7572] kAFS: bad VL server IP address
[  347.451364][ T5944] usb 2-1: USB disconnect, device number 4
[  348.062312][ T7578] bond3: option ad_actor_sys_prio: invalid value (0)
[  348.062389][ T7578] bond3: option ad_actor_sys_prio: allowed values 1 - 65535
[  348.146873][ T7593] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  348.861674][ T7580] can: request_module (can-proto-3) failed.
[  348.861867][ T7578] bond3 (unregistering): Released all slaves
[  350.564489][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  351.152663][ T7623] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  352.106215][ T7619] syzkaller1: entered promiscuous mode
[  352.106243][ T7619] syzkaller1: entered allmulticast mode
[  352.250755][   T48] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  352.460293][   T48] usb 1-1: Using ep0 maxpacket: 8
[  352.527635][   T48] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  352.717937][   T48] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  352.718074][   T48] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  352.718140][   T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  352.718200][   T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  352.718257][   T48] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  352.718391][   T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.826589][ T7636] netlink: 36 bytes leftover after parsing attributes in process `syz.4.478'.
[  353.452961][   T48] usb 1-1: usb_control_msg returned -32
[  353.453007][   T48] usbtmc 1-1:16.0: can't read capabilities
[  353.990745][ T7659] usbtmc 1-1:16.0: usb_bulk_msg returned -71
[  354.376681][ T7649] block nbd2: shutting down sockets
[  354.660822][ T7680] program syz.1.489 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  354.664308][ T7680] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  354.754264][ T7680] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  356.623627][ T5596] usb 1-1: USB disconnect, device number 4
[  359.903587][ T7723] overlayfs: missing 'lowerdir'
[  360.458427][ T7736] kAFS: bad VL server IP address
[  362.416860][ T7740] tmpfs: Group quota inode hardlimit too large.
[  362.437511][ T7740] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  364.225757][ T7748] lo: entered allmulticast mode
[  364.231748][ T7748] tunl0: entered allmulticast mode
[  364.234084][ T7748] gre0: entered allmulticast mode
[  364.246452][ T7748] gretap0: entered allmulticast mode
[  364.247241][ T7748] erspan0: entered allmulticast mode
[  364.287400][ T7748] ip_vti0: entered allmulticast mode
[  364.288083][ T7748] ip6_vti0: entered allmulticast mode
[  364.341398][ T7748] sit0: entered allmulticast mode
[  364.452763][ T7748] ip6tnl0: entered allmulticast mode
[  364.453684][ T7748] ip6gre0: entered allmulticast mode
[  364.454687][ T7748] syz_tun: entered allmulticast mode
[  364.460428][ T7748] ip6gretap0: entered allmulticast mode
[  364.460875][   T48] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  364.509427][ T7748] bridge0: entered allmulticast mode
[  364.510102][ T7748] vcan0: entered allmulticast mode
[  364.528549][ T7748] bond0: entered allmulticast mode
[  364.528571][ T7748] bond_slave_0: entered allmulticast mode
[  364.528589][ T7748] bond_slave_1: entered allmulticast mode
[  364.529703][ T7748] team0: entered allmulticast mode
[  364.529716][ T7748] team_slave_0: entered allmulticast mode
[  364.529733][ T7748] team_slave_1: entered allmulticast mode
[  364.563922][ T7748] dummy0: entered allmulticast mode
[  364.647090][   T48] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  364.659006][   T48] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  364.659043][   T48] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  364.659071][   T48] usb 5-1: config 0 interface 0 has no altsetting 0
[  364.673857][   T48] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  364.673885][   T48] usb 5-1: Product: syz
[  364.673900][   T48] usb 5-1: Manufacturer: syz
[  364.673914][   T48] usb 5-1: SerialNumber: syz
[  364.705839][ T7748] nlmon0: entered allmulticast mode
[  364.734712][   T48] usb 5-1: config 0 descriptor??
[  364.735910][ T7746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  364.777782][   T48] usb 5-1: selecting invalid altsetting 0
[  364.805881][ T7748] batadv0: entered allmulticast mode
[  364.810055][ T7748] vxcan0: entered allmulticast mode
[  364.821701][ T7748] vxcan1: entered allmulticast mode
[  364.825931][ T7748] veth0: entered allmulticast mode
[  364.826637][ T7748] veth1: entered allmulticast mode
[  364.847990][ T7748] wg0: entered allmulticast mode
[  364.848773][ T7748] wg1: entered allmulticast mode
[  364.862784][ T7748] wg2: entered allmulticast mode
[  364.878316][ T7748] veth0_to_bridge: entered allmulticast mode
[  364.889092][ T7748] bridge_slave_0: left promiscuous mode
[  364.975005][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.008744][ T7743] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow!
[  365.035060][ T1235] usb 5-1: USB disconnect, device number 8
[  365.240834][ T5944] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  365.364175][ T7748] veth1_to_bridge: entered allmulticast mode
[  365.385451][ T7748] bridge_slave_1: left promiscuous mode
[  365.385720][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.414053][ T5944] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  365.422325][ T5944] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  365.422419][ T5944] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  365.422493][ T5944] usb 1-1: config 0 interface 0 has no altsetting 0
[  365.467366][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  365.467388][ T5944] usb 1-1: Product: syz
[  365.467399][ T5944] usb 1-1: Manufacturer: syz
[  365.467409][ T5944] usb 1-1: SerialNumber: syz
[  365.510302][ T5944] usb 1-1: config 0 descriptor??
[  365.518242][ T7756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  365.546634][ T5944] usb 1-1: selecting invalid altsetting 0
[  365.662955][ T7748] veth0_to_bond: entered allmulticast mode
[  365.740101][ T7748] bond0: (slave bond_slave_0): Releasing backup interface
[  365.798014][ T7748] veth1_to_bond: entered allmulticast mode
[  365.876564][ T7748] bond0: (slave bond_slave_1): Releasing backup interface
[  365.913272][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'.
[  365.956190][ T7748] veth0_to_team: entered allmulticast mode
[  366.021231][ T5944] usb 1-1: USB disconnect, device number 5
[  366.097013][ T7748] team0: Port device team_slave_0 removed
[  366.097650][ T7748] veth1_to_team: entered allmulticast mode
[  366.131610][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  366.191302][   T48] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  366.234504][ T7748] team0: Port device team_slave_1 removed
[  366.238091][ T7748] veth0_to_batadv: entered allmulticast mode
[  366.238999][ T7748] batadv_slave_0: entered allmulticast mode
[  366.239401][ T7748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.239425][ T7748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.306162][ T7748] veth1_to_batadv: entered allmulticast mode
[  366.307538][ T7748] batadv_slave_1: entered allmulticast mode
[  366.329001][ T7748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.329022][ T7748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.380977][   T48] usb 5-1: Using ep0 maxpacket: 8
[  366.381883][   T48] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  366.383549][   T48] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  366.383604][   T48] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  366.383628][   T48] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  366.383653][   T48] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  366.383677][   T48] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  366.383719][   T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.481667][ T7748] xfrm0: entered allmulticast mode
[  366.525827][ T7748] veth0_to_hsr: entered allmulticast mode
[  366.526421][ T7748] hsr_slave_0: entered allmulticast mode
[  366.545147][ T7748] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  366.763429][   T48] usb 5-1: usb_control_msg returned -32
[  366.763477][   T48] usbtmc 5-1:16.0: can't read capabilities
[  369.432464][ T5596] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  369.600386][ T5596] usb 3-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  369.606650][ T5596] usb 3-1: config 4 has an invalid interface number: 201 but max is 0
[  369.606671][ T5596] usb 3-1: config 4 has no interface number 0
[  369.606693][ T5596] usb 3-1: config 4 interface 201 has no altsetting 0
[  369.608990][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.609008][ T5596] usb 3-1: Product: syz
[  369.609018][ T5596] usb 3-1: Manufacturer: syz
[  369.609029][ T5596] usb 3-1: SerialNumber: syz
[  369.657202][ T5918] usb 5-1: USB disconnect, device number 9
[  370.262208][ T7818] kAFS: bad VL server IP address
[  372.894124][ T5596] usb-storage 3-1:4.201: USB Mass Storage device detected
[  372.974482][ T5596] usb-storage 3-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  373.405260][ T7840] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  374.553683][ T5596] usb 3-1: USB disconnect, device number 2
[  378.581416][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  378.581490][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  378.656445][ T7866] XFS (nullb0): Invalid superblock magic number
[  379.159973][   T31] IPVS: starting estimator thread 0...
[  379.227657][ T7895] lo: entered allmulticast mode
[  379.228676][ T7895] tunl0: entered allmulticast mode
[  379.229961][ T7895] gre0: entered allmulticast mode
[  379.247230][ T7895] gretap0: entered allmulticast mode
[  379.248040][ T7895] erspan0: entered allmulticast mode
[  379.249019][ T7895] ip_vti0: entered allmulticast mode
[  379.250053][ T7895] ip6_vti0: entered allmulticast mode
[  379.285979][ T7890] IPVS: using max 8 ests per chain, 19200 per kthread
[  379.315642][ T7895] sit0: entered allmulticast mode
[  379.317101][ T7895] ip6tnl0: entered allmulticast mode
[  379.318070][ T7895] ip6gre0: entered allmulticast mode
[  379.319002][ T7895] syz_tun: entered allmulticast mode
[  379.319754][ T7895] ip6gretap0: entered allmulticast mode
[  379.426532][ T7895] bridge0: entered allmulticast mode
[  379.483531][ T7895] vcan0: entered allmulticast mode
[  379.484529][ T7895] bond0: entered allmulticast mode
[  379.484547][ T7895] bond_slave_0: entered allmulticast mode
[  379.504369][ T7895] bond_slave_1: entered allmulticast mode
[  379.548725][ T7895] team0: entered allmulticast mode
[  379.548749][ T7895] team_slave_0: entered allmulticast mode
[  379.548768][ T7895] team_slave_1: entered allmulticast mode
[  379.565833][ T7895] dummy0: entered allmulticast mode
[  379.681694][ T7895] nlmon0: entered allmulticast mode
[  379.684742][ T7895] batadv0: entered allmulticast mode
[  379.687444][ T7895] vxcan0: entered allmulticast mode
[  379.687992][ T7895] vxcan1: entered allmulticast mode
[  379.689173][ T7895] veth0: entered allmulticast mode
[  379.718388][ T7895] veth1: entered allmulticast mode
[  379.748707][ T7895] wg0: entered allmulticast mode
[  379.757599][ T7895] wg1: entered allmulticast mode
[  379.758233][ T7895] wg2: entered allmulticast mode
[  379.758793][ T7895] veth0_to_bridge: entered allmulticast mode
[  379.759952][ T7895] bridge_slave_0: left promiscuous mode
[  379.810665][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.339006][ T7895] veth1_to_bridge: entered allmulticast mode
[  381.353587][ T7895] bridge_slave_1: left promiscuous mode
[  381.353791][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.594407][ T7895] veth0_to_bond: entered allmulticast mode
[  381.629847][ T7914] can: request_module (can-proto-3) failed.
[  381.646026][ T7895] bond0: (slave bond_slave_0): Releasing backup interface
[  381.720069][ T5594] Bluetooth: hci4: unexpected event for opcode 0x1002
[  381.766111][ T7895] veth1_to_bond: entered allmulticast mode
[  381.825545][ T7895] bond0: (slave bond_slave_1): Releasing backup interface
[  381.870223][ T7922] 9p: Bad value for 'version'
[  381.887636][ T7895] veth0_to_team: entered allmulticast mode
[  381.984927][ T7895] team0: Port device team_slave_0 removed
[  381.987504][ T7895] veth1_to_team: entered allmulticast mode
[  382.129819][ T7895] team0: Port device team_slave_1 removed
[  382.137393][ T7895] veth0_to_batadv: entered allmulticast mode
[  382.143872][ T7895] batadv_slave_0: entered allmulticast mode
[  382.144199][ T7895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  382.144215][ T7895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  382.189377][ T7895] veth1_to_batadv: entered allmulticast mode
[  382.190384][ T7895] batadv_slave_1: entered allmulticast mode
[  382.204393][ T7895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.204413][ T7895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.248495][ T7895] xfrm0: entered allmulticast mode
[  382.262545][ T7895] veth0_to_hsr: entered allmulticast mode
[  382.263470][ T7895] hsr_slave_0: entered allmulticast mode
[  382.313356][ T7895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  382.599021][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'.
[  385.494056][ T7970] jffs2: notice: (7970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  387.865125][ T7996] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  388.983964][ T8000] kAFS: bad VL server IP address
[  392.975907][ T8024] netlink: 'syz.1.594': attribute type 1 has an invalid length.
[  394.119245][ T8024] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  394.915341][ T8036] MTD: Couldn't look up './dev/mtdblock0': -2
[  395.100749][ T5596] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  395.297655][ T5596] usb 3-1: Using ep0 maxpacket: 32
[  395.309042][ T5596] usb 3-1: unable to get BOS descriptor or descriptor too short
[  395.309246][ T5596] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  395.327234][ T5596] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  395.327312][ T5596] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  395.327377][ T5596] usb 3-1: config 14 has no interface number 0
[  395.327434][ T5596] usb 3-1: config 14 has no interface number 1
[  395.327723][ T5596] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  395.327793][ T5596] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  395.327818][ T5596] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  395.327858][ T5596] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  395.327936][ T5596] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  395.328001][ T5596] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  395.328079][ T5596] usb 3-1: config 14 interface 57 has no altsetting 0
[  395.328133][ T5596] usb 3-1: config 14 interface 228 has no altsetting 0
[  395.443546][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.443610][ T5596] usb 3-1: Product: syz
[  395.443626][ T5596] usb 3-1: Manufacturer: syz
[  395.443641][ T5596] usb 3-1: SerialNumber: syz
[  396.125310][ T5594] Bluetooth: hci1: unexpected event for opcode 0x2005
[  396.433099][ T8049] batadv_slave_1: entered promiscuous mode
[  396.433449][ T8049] batadv_slave_1: left promiscuous mode
[  396.474581][ T8048] program syz.4.603 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  396.474913][ T8048] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  396.511757][ T5596] legousbtower 3-1:14.57: interrupt endpoints not found
[  396.985893][ T5596] legousbtower 3-1:14.228: get version request failed: -121
[  396.986182][ T5596] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -121
[  397.301368][ T8048] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  397.462520][ T5596] usb 3-1: USB disconnect, device number 3
[  397.609210][ T8053] overlayfs: failed to resolve './file1': -2
[  398.037820][ T8067] input: syz1 as /devices/virtual/input/input10
[  398.037855][ T8067] input: failed to attach handler leds to device input10, error: -6
[  398.353919][ T8080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.614'.
[  402.112337][ T8112] overlayfs: failed to resolve './file1': -2
[  402.391821][ T8119] tmpfs: Group quota inode hardlimit too large.
[  402.415432][ T8119] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  403.554046][ T5594] block nbd1: Receive control failed (result -32)
[  403.665755][ T7240] block nbd1: shutting down sockets
[  404.259207][ T5594] Bluetooth: hci3: unexpected event for opcode 0x1002
[  404.644809][ T8136] 9p: Bad value for 'version'
[  404.666694][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[  406.538170][ T8163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  406.591000][ T8161] overlayfs: failed to resolve './file1': -2
[  407.132849][ T8175] can: request_module (can-proto-3) failed.
[  407.503913][ T8190] Config c/1 of g1 needs at least one function.
[  407.504045][ T8190] udc dummy_udc.0: failed to start g1: -22
[  407.504068][ T8190] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  407.551588][ T8190] UDC core: g1: couldn't find an available UDC or it's busy
[  407.746635][ T8192] XFS (nullb0): Invalid superblock magic number
[  408.233496][ T5596] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  408.263191][ T8208] netlink: 'syz.4.660': attribute type 10 has an invalid length.
[  408.381030][ T5596] usb 1-1: Using ep0 maxpacket: 32
[  408.384198][ T5596] usb 1-1: unable to get BOS descriptor or descriptor too short
[  408.384252][ T5596] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  408.385952][ T5596] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  408.385977][ T5596] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  408.385997][ T5596] usb 1-1: config 14 has no interface number 0
[  408.386014][ T5596] usb 1-1: config 14 has no interface number 1
[  408.386083][ T5596] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  408.386106][ T5596] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  408.386152][ T5596] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  408.386179][ T5596] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  408.386206][ T5596] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  408.386232][ T5596] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  408.386258][ T5596] usb 1-1: config 14 interface 57 has no altsetting 0
[  408.386276][ T5596] usb 1-1: config 14 interface 228 has no altsetting 0
[  408.450782][ T5596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.450854][ T5596] usb 1-1: Product: syz
[  408.450894][ T5596] usb 1-1: Manufacturer: syz
[  408.450928][ T5596] usb 1-1: SerialNumber: syz
[  408.884118][ T8208] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  408.913969][ T8208] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  409.002426][ T5596] legousbtower 1-1:14.57: interrupt endpoints not found
[  409.167212][ T8208] team0: Port device netdevsim1 added
[  409.398575][ T5596] legousbtower 1-1:14.228: get version request failed: -121
[  409.398840][ T5596] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121
[  409.652024][ T8239] tmpfs: Group quota inode hardlimit too large.
[  409.663548][ T8239] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  410.458239][ T5944] usb 1-1: USB disconnect, device number 6
[  410.500005][ T5594] Bluetooth: hci1: unexpected event for opcode 0x1002
[  410.572834][ T8241] 9p: Bad value for 'version'
[  412.166104][ T8269] jffs2: notice: (8269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  419.210670][  T199] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  419.360662][  T199] usb 1-1: Using ep0 maxpacket: 32
[  419.363537][  T199] usb 1-1: unable to get BOS descriptor or descriptor too short
[  419.363611][  T199] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  419.368390][  T199] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  419.368415][  T199] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  419.368437][  T199] usb 1-1: config 14 has no interface number 0
[  419.368454][  T199] usb 1-1: config 14 has no interface number 1
[  419.368527][  T199] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  419.368553][  T199] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  419.368579][  T199] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  419.368604][  T199] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  419.368632][  T199] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  419.368657][  T199] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  419.368682][  T199] usb 1-1: config 14 interface 57 has no altsetting 0
[  419.368700][  T199] usb 1-1: config 14 interface 228 has no altsetting 0
[  419.475009][ T1235] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  419.532102][  T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.532129][  T199] usb 1-1: Product: syz
[  419.532142][  T199] usb 1-1: Manufacturer: syz
[  419.532154][  T199] usb 1-1: SerialNumber: syz
[  419.745020][ T1235] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  419.754366][ T1235] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  419.754400][ T1235] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  419.754492][ T1235] usb 5-1: config 0 interface 0 has no altsetting 0
[  419.775963][ T1235] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  419.775991][ T1235] usb 5-1: Product: syz
[  419.776070][ T1235] usb 5-1: Manufacturer: syz
[  419.776086][ T1235] usb 5-1: SerialNumber: syz
[  420.002979][ T1235] usb 5-1: config 0 descriptor??
[  420.171643][ T8318] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  420.458811][ T1235] usb 5-1: selecting invalid altsetting 0
[  420.497986][  T199] legousbtower 1-1:14.57: interrupt endpoints not found
[  420.781369][ T1235] usb 5-1: USB disconnect, device number 10
[  420.851157][  T199] legousbtower 1-1:14.228: get version request failed: -71
[  420.851345][  T199] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71
[  420.932048][  T199] usb 1-1: USB disconnect, device number 7
[  421.107499][ T7141] udevd[7141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  422.506443][ T8363] kAFS: bad VL server IP address
[  426.771682][ T8406] binder: 8405:8406 ioctl c0306201 0 returned -14
[  435.186366][ T8484] kAFS: bad VL server IP address
[  437.987618][ T8519] jffs2: notice: (8519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  438.160799][  T199] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  438.312670][  T199] usb 1-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  438.314171][  T199] usb 1-1: config 4 has an invalid interface number: 201 but max is 0
[  438.314194][  T199] usb 1-1: config 4 has no interface number 0
[  438.314224][  T199] usb 1-1: config 4 interface 201 has no altsetting 0
[  438.318063][  T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.318087][  T199] usb 1-1: Product: syz
[  438.318102][  T199] usb 1-1: Manufacturer: syz
[  438.318116][  T199] usb 1-1: SerialNumber: syz
[  438.589824][ T8539] kAFS: bad VL server IP address
[  439.461526][  T199] usb-storage 1-1:4.201: USB Mass Storage device detected
[  439.509571][  T199] usb-storage 1-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  440.064022][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  440.064090][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  440.705488][  T199] usb 1-1: USB disconnect, device number 8
[  444.414668][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  444.417798][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  444.430039][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  444.462382][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  444.467854][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  444.637960][ T8595] overlayfs: failed to resolve './file1': -2
[  446.635938][ T5599] Bluetooth: hci5: command tx timeout
[  448.640599][ T5599] Bluetooth: hci5: command tx timeout
[  450.024666][ T8644] kAFS: bad VL server IP address
[  450.783694][ T5599] Bluetooth: hci5: command tx timeout
[  451.457150][   T31] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  451.638554][   T31] usb 1-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  451.644570][   T31] usb 1-1: config 4 has an invalid interface number: 201 but max is 0
[  451.644598][   T31] usb 1-1: config 4 has no interface number 0
[  451.644630][   T31] usb 1-1: config 4 interface 201 has no altsetting 0
[  451.651317][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.651341][   T31] usb 1-1: Product: syz
[  451.651355][   T31] usb 1-1: Manufacturer: syz
[  451.651369][   T31] usb 1-1: SerialNumber: syz
[  452.136816][   T31] usb-storage 1-1:4.201: USB Mass Storage device detected
[  452.176389][   T31] usb-storage 1-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  452.186664][ T8663] netlink: 'syz.2.815': attribute type 10 has an invalid length.
[  452.473699][ T1235] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  452.481453][   T31] usb 1-1: USB disconnect, device number 9
[  452.557979][ T8663] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  452.616136][ T8663] team0: Port device netdevsim1 added
[  452.634878][ T1235] usb 2-1: Using ep0 maxpacket: 32
[  452.644405][ T1235] usb 2-1: unable to get BOS descriptor or descriptor too short
[  452.644559][ T1235] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  452.664101][ T1235] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[  452.664128][ T1235] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[  452.664150][ T1235] usb 2-1: config 14 has no interface number 0
[  452.664166][ T1235] usb 2-1: config 14 has no interface number 1
[  452.664238][ T1235] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  452.664262][ T1235] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  452.664287][ T1235] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  452.664313][ T1235] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  452.664341][ T1235] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  452.664367][ T1235] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  452.664393][ T1235] usb 2-1: config 14 interface 57 has no altsetting 0
[  452.664412][ T1235] usb 2-1: config 14 interface 228 has no altsetting 0
[  452.667314][ T1235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.667339][ T1235] usb 2-1: Product: syz
[  452.667354][ T1235] usb 2-1: Manufacturer: syz
[  452.667368][ T1235] usb 2-1: SerialNumber: syz
[  452.888426][ T5599] Bluetooth: hci5: command tx timeout
[  453.202434][ T1235] legousbtower 2-1:14.57: interrupt endpoints not found
[  453.417483][ T1235] legousbtower 2-1:14.228: get version request failed: -71
[  453.417639][ T1235] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71
[  453.526946][ T2308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.588080][ T1235] usb 2-1: USB disconnect, device number 5
[  453.806669][ T8690] lo: entered allmulticast mode
[  453.808732][ T8690] tunl0: entered allmulticast mode
[  453.821228][ T8690] gre0: entered allmulticast mode
[  453.859201][ T8690] gretap0: entered allmulticast mode
[  453.879318][ T8690] erspan0: entered allmulticast mode
[  453.880236][ T8690] ip_vti0: entered allmulticast mode
[  453.905212][ T8690] ip6_vti0: entered allmulticast mode
[  453.920973][ T8690] sit0: entered allmulticast mode
[  453.959002][ T8690] ip6tnl0: entered allmulticast mode
[  453.990400][ T8690] ip6gre0: entered allmulticast mode
[  454.055706][ T8690] syz_tun: entered allmulticast mode
[  454.056391][ T8690] ip6gretap0: entered allmulticast mode
[  454.078415][ T8690] bridge0: entered allmulticast mode
[  454.079024][ T8690] vcan0: entered allmulticast mode
[  454.088600][ T8690] bond0: entered allmulticast mode
[  454.088652][ T8690] bond_slave_0: entered allmulticast mode
[  454.088715][ T8690] bond_slave_1: entered allmulticast mode
[  454.116000][ T8690] team0: entered allmulticast mode
[  454.116075][ T8690] team_slave_0: entered allmulticast mode
[  454.116102][ T8690] team_slave_1: entered allmulticast mode
[  454.116131][ T8690] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  454.149801][ T8690] dummy0: entered allmulticast mode
[  454.159746][ T8690] nlmon0: entered allmulticast mode
[  454.167061][ T8690] batadv0: entered allmulticast mode
[  454.178251][ T8690] vxcan0: entered allmulticast mode
[  454.178864][ T8690] vxcan1: entered allmulticast mode
[  454.188419][ T8690] veth0: entered allmulticast mode
[  454.196901][ T8690] veth1: entered allmulticast mode
[  454.198726][ T8690] wg0: entered allmulticast mode
[  454.199436][ T8690] wg1: entered allmulticast mode
[  454.227736][ T8690] wg2: entered allmulticast mode
[  454.237235][ T8690] veth0_to_bridge: entered allmulticast mode
[  454.245689][ T8690] bridge_slave_0: left promiscuous mode
[  454.245973][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.792621][ T8713] tmpfs: Group quota inode hardlimit too large.
[  454.809847][ T8713] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  455.934182][ T8690] veth1_to_bridge: entered allmulticast mode
[  455.935975][ T8690] bridge_slave_1: left promiscuous mode
[  455.936287][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.026450][ T8690] veth0_to_bond: entered allmulticast mode
[  456.061427][ T8690] bond0: (slave bond_slave_0): Releasing backup interface
[  456.104724][ T8690] veth1_to_bond: entered allmulticast mode
[  456.143735][ T8690] bond0: (slave bond_slave_1): Releasing backup interface
[  456.187811][ T8690] veth0_to_team: entered allmulticast mode
[  456.266939][ T8690] team0: Port device team_slave_0 removed
[  456.267609][ T8690] veth1_to_team: entered allmulticast mode
[  456.296372][ T8690] team0: Port device team_slave_1 removed
[  456.297006][ T8690] veth0_to_batadv: entered allmulticast mode
[  456.297878][ T8690] batadv_slave_0: entered allmulticast mode
[  456.298296][ T8690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.298318][ T8690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.347095][ T8728] tmpfs: Group quota inode hardlimit too large.
[  456.348229][ T8728] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  456.369227][ T8690] veth1_to_batadv: entered allmulticast mode
[  456.370033][ T8690] batadv_slave_1: entered allmulticast mode
[  456.370469][ T8690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.370490][ T8690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.412800][ T8690] xfrm0: entered allmulticast mode
[  456.413474][ T8690] veth0_to_hsr: entered allmulticast mode
[  456.414015][ T8690] hsr_slave_0: entered allmulticast mode
[  456.414634][ T8690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  457.188800][ T8736] kAFS: bad VL server IP address
[  458.290580][ T5703] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  458.462460][ T8754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.847'.
[  458.809183][ T5703] usb 2-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  459.093043][ T5703] usb 2-1: config 4 has an invalid interface number: 201 but max is 0
[  459.093072][ T5703] usb 2-1: config 4 has no interface number 0
[  459.093104][ T5703] usb 2-1: config 4 interface 201 has no altsetting 0
[  459.190942][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.190971][ T5703] usb 2-1: Product: syz
[  459.190986][ T5703] usb 2-1: Manufacturer: syz
[  459.191000][ T5703] usb 2-1: SerialNumber: syz
[  459.288959][ T2308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.557541][ T5703] usb-storage 2-1:4.201: USB Mass Storage device detected
[  459.659887][ T5703] usb-storage 2-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  459.826605][ T5703] usb 2-1: USB disconnect, device number 6
[  460.028610][ T2308] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode
[  460.118932][ T2308] team0: Port device netdevsim1 removed
[  460.198755][ T2308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.377175][ T5599] Bluetooth: hci3: unexpected event for opcode 0x1002
[  460.496109][ T8778] 9p: Bad value for 'version'
[  460.541929][ T5982] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  460.732544][ T5982] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  460.785471][ T5982] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  460.785504][ T5982] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  460.785531][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0
[  461.140735][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  461.140763][ T5982] usb 3-1: Product: syz
[  461.140778][ T5982] usb 3-1: Manufacturer: syz
[  461.140792][ T5982] usb 3-1: SerialNumber: syz
[  463.949502][ T5982] usb 3-1: config 0 descriptor??
[  463.950057][ T5982] usb 3-1: can't set config #0, error -71
[  463.952596][ T5982] usb 3-1: USB disconnect, device number 4
[  464.288841][ T5599] Bluetooth: hci4: unexpected event for opcode 0x203d
[  464.322328][ T8799] overlayfs: missing 'workdir'
[  464.399647][ T8799] CacheFiles: Empty directory specified
[  464.412919][ T8799] CacheFiles: No cache directory specified
[  464.765393][ T2308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.204365][ T5599] Bluetooth: hci1: unexpected event for opcode 0x2005
[  467.792261][ T8854] kAFS: bad VL server IP address
[  467.960758][ T5703] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  468.465597][ T5703] usb 3-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  468.477296][ T5703] usb 3-1: config 4 has an invalid interface number: 201 but max is 0
[  468.477368][ T5703] usb 3-1: config 4 has no interface number 0
[  468.477480][ T5703] usb 3-1: config 4 interface 201 has no altsetting 0
[  468.514273][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.514340][ T5703] usb 3-1: Product: syz
[  468.514390][ T5703] usb 3-1: Manufacturer: syz
[  468.514406][ T5703] usb 3-1: SerialNumber: syz
[  468.975677][ T5703] usb-storage 3-1:4.201: USB Mass Storage device detected
[  469.032456][ T5703] usb-storage 3-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  469.116691][ T8841] batadv_slave_1: entered promiscuous mode
[  469.117055][ T8847] batadv_slave_1: left promiscuous mode
[  469.202701][ T5703] usb 3-1: USB disconnect, device number 5
[  472.803537][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.803757][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.803985][ T8594] bridge_slave_0: entered allmulticast mode
[  472.888200][ T8594] bridge_slave_0: entered promiscuous mode
[  472.930312][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.931354][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.947138][ T8594] bridge_slave_1: entered allmulticast mode
[  473.021325][ T8594] bridge_slave_1: entered promiscuous mode
[  474.216879][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.235093][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.655654][ T8928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.895'.
[  478.309664][ T8989] can: request_module (can-proto-3) failed.
[  478.713259][ T2308] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  478.713513][ T2308] bridge1 (unregistering): left promiscuous mode
[  479.041333][ T2308] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  479.041363][ T2308] bridge2 (unregistering): left promiscuous mode
[  479.621621][ T2308] bond0 (unregistering): Released all slaves
[  479.648386][ T2308] bond1 (unregistering): Released all slaves
[  479.752162][ T2308] bond2 (unregistering): Released all slaves
[  480.016263][ T9043] kAFS: bad VL server IP address
[  480.888587][ T8594] team0: Port device team_slave_0 added
[  481.052151][ T8943] syzkaller1: entered promiscuous mode
[  481.052185][ T8943] syzkaller1: entered allmulticast mode
[  481.058599][ T5249] 8021q: adding VLAN 0 to HW filter on device eth1
[  481.144789][ T8594] team0: Port device team_slave_1 added
[  481.797156][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.797171][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.797190][ T8594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.860999][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.861015][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.861041][ T8594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.393127][ T8594] hsr_slave_0: entered promiscuous mode
[  482.394754][ T8594] hsr_slave_1: entered promiscuous mode
[  482.417904][ T8594] debugfs: 'hsr0' already exists in 'hsr'
[  482.455652][ T8594] Cannot create hsr debugfs directory
[  483.032157][ T9081] netlink: 36 bytes leftover after parsing attributes in process `syz.2.959'.
[  484.294899][ T9092] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  485.493350][ T9096] jffs2: notice: (9096) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  486.098607][ T9128] kAFS: bad VL server IP address
[  487.280643][ T1235] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  487.464102][ T1235] usb 1-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  487.474417][ T1235] usb 1-1: config 4 has an invalid interface number: 201 but max is 0
[  487.474492][ T1235] usb 1-1: config 4 has no interface number 0
[  487.474581][ T1235] usb 1-1: config 4 interface 201 has no altsetting 0
[  487.483188][ T1235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.483251][ T1235] usb 1-1: Product: syz
[  487.483291][ T1235] usb 1-1: Manufacturer: syz
[  487.483324][ T1235] usb 1-1: SerialNumber: syz
[  487.667261][ T9156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.976'.
[  488.247075][ T5249] 8021q: adding VLAN 0 to HW filter on device eth2
[  488.544453][ T1235] usb-storage 1-1:4.201: USB Mass Storage device detected
[  488.793981][ T1235] usb-storage 1-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  489.342978][ T1235] usb 1-1: USB disconnect, device number 10
[  490.351821][ T9186] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  490.358947][ T9186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  490.413753][ T9186] vhci_hcd vhci_hcd.0: Device attached
[  490.549195][ T9184] can: request_module (can-proto-3) failed.
[  490.708368][ T9188] vhci_hcd: connection closed
[  490.709988][   T67] vhci_hcd vhci_hcd.0: stop threads
[  490.710014][   T67] vhci_hcd vhci_hcd.0: release socket
[  490.710086][   T67] vhci_hcd vhci_hcd.0: disconnect device
[  490.780722][ T5596] usb 34-1: enqueue for inactive port 0
[  491.302025][ T5596] usb usb34-port1: attempt power cycle
[  492.229877][ T9211] jffs2: notice: (9211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  492.526094][ T5596] usb usb34-port1: unable to enumerate USB device
[  495.243195][ T5249] 8021q: adding VLAN 0 to HW filter on device eth3
[  495.896293][ T9258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1007'.
[  497.673608][ T9266] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  497.673646][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  497.673720][ T9266] vhci_hcd vhci_hcd.0: Device attached
[  499.598508][ T9268] vhci_hcd: connection closed
[  499.599069][ T3372] vhci_hcd vhci_hcd.0: stop threads
[  499.599093][ T3372] vhci_hcd vhci_hcd.0: release socket
[  499.599170][ T3372] vhci_hcd vhci_hcd.0: disconnect device
[  501.666005][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  501.666056][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  502.503534][ T9290] nfs: Bad value for 'port'
[  506.043004][ T2308] hsr_slave_0: left promiscuous mode
[  506.128068][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  506.189539][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  506.216229][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  506.232874][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  506.283765][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  506.339102][ T9340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1025'.
[  506.392980][ T2308] hsr_slave_1: left promiscuous mode
[  506.420628][   T31] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  507.361489][   T31] usb 1-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  507.365789][   T31] usb 1-1: config 4 has an invalid interface number: 201 but max is 0
[  507.365812][   T31] usb 1-1: config 4 has no interface number 0
[  507.365839][   T31] usb 1-1: config 4 interface 201 has no altsetting 0
[  507.374181][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.374205][   T31] usb 1-1: Product: syz
[  507.374219][   T31] usb 1-1: Manufacturer: syz
[  507.374232][   T31] usb 1-1: SerialNumber: syz
[  507.797180][ T2308] veth1_macvtap: left promiscuous mode
[  507.865952][   T31] usb-storage 1-1:4.201: USB Mass Storage device detected
[  507.907671][ T2308] veth0_macvtap: left promiscuous mode
[  507.908346][ T2308] veth1_vlan: left promiscuous mode
[  507.926757][   T31] usb-storage 1-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  507.970739][ T2308] veth0_vlan: left promiscuous mode
[  508.087510][   T31] usb 1-1: USB disconnect, device number 11
[  508.480581][ T5599] Bluetooth: hci2: command tx timeout
[  509.620160][ T5249] 8021q: adding VLAN 0 to HW filter on device eth4
[  509.878459][ T9360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  510.303373][ T9404] syzkaller0: entered promiscuous mode
[  510.303400][ T9404] syzkaller0: entered allmulticast mode
[  510.429287][ T9409] kAFS: bad VL server IP address
[  510.560680][ T5599] Bluetooth: hci2: command tx timeout
[  511.903468][ T9427] nfs: Bad value for 'port'
[  512.580727][  T199] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  512.693460][ T5599] Bluetooth: hci2: command tx timeout
[  512.721678][ T9448] jffs2: notice: (9448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  512.732729][  T199] usb 1-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  512.774268][  T199] usb 1-1: config 4 has an invalid interface number: 201 but max is 0
[  512.774297][  T199] usb 1-1: config 4 has no interface number 0
[  512.774330][  T199] usb 1-1: config 4 interface 201 has no altsetting 0
[  513.390032][  T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.390061][  T199] usb 1-1: Product: syz
[  513.390075][  T199] usb 1-1: Manufacturer: syz
[  513.390090][  T199] usb 1-1: SerialNumber: syz
[  513.812438][  T199] usb-storage 1-1:4.201: USB Mass Storage device detected
[  513.919837][  T199] usb-storage 1-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  514.056910][  T199] usb 1-1: USB disconnect, device number 12
[  514.608739][ T9476] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  514.857032][ T5599] Bluetooth: hci2: command tx timeout
[  515.520564][ T2308] IPVS: stop unused estimator thread 0...
[  515.894689][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'.
[  515.932469][ T9490] kAFS: bad VL server IP address
[  520.897519][ T9535] jffs2: notice: (9535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  522.473045][ T9566] kAFS: bad VL server IP address
[  524.344396][ T9573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  524.344415][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  524.344531][ T9573] vhci_hcd vhci_hcd.0: Device attached
[  524.569633][ T9577] vhci_hcd: connection closed
[  524.570186][ T1403] vhci_hcd vhci_hcd.0: stop threads
[  524.570209][ T1403] vhci_hcd vhci_hcd.0: release socket
[  524.570278][ T1403] vhci_hcd vhci_hcd.0: disconnect device
[  525.897301][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.897439][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.897654][ T9329] bridge_slave_0: entered allmulticast mode
[  525.921549][ T9329] bridge_slave_0: entered promiscuous mode
[  525.928907][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.929099][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.929283][ T9329] bridge_slave_1: entered allmulticast mode
[  525.962089][ T9329] bridge_slave_1: entered promiscuous mode
[  526.092276][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.099969][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.283618][ T9597] MTD: Couldn't look up './dev/mtdblock0': -2
[  526.329955][ T9329] team0: Port device team_slave_0 added
[  526.340026][ T9329] team0: Port device team_slave_1 added
[  526.941421][ T9610] kAFS: bad VL server IP address
[  527.825065][ T5599] Bluetooth: hci1: unexpected event for opcode 0x2005
[  528.181527][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.181540][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.181557][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.266117][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.266136][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.266164][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.557266][ T9637] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  528.557303][ T9637] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  528.589714][ T9637] vhci_hcd vhci_hcd.0: Device attached
[  528.830679][ T5724] usb 34-1: SetAddress Request (8) to port 0
[  528.830762][ T5724] usb 34-1: new SuperSpeed USB device number 8 using vhci_hcd
[  528.946099][ T9329] hsr_slave_0: entered promiscuous mode
[  528.973694][ T9329] hsr_slave_1: entered promiscuous mode
[  528.974670][ T9329] debugfs: 'hsr0' already exists in 'hsr'
[  528.993701][ T9329] Cannot create hsr debugfs directory
[  529.310865][ T9639] vhci_hcd: connection reset by peer
[  529.317019][  T155] vhci_hcd vhci_hcd.0: stop threads
[  529.317046][  T155] vhci_hcd vhci_hcd.0: release socket
[  529.317113][  T155] vhci_hcd vhci_hcd.0: disconnect device
[  529.347827][ T9649] MTD: Couldn't look up './dev/mtdblock0': -2
[  530.177272][ T9674] netlink: 'syz.2.1130': attribute type 1 has an invalid length.
[  532.569565][ T9674] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  532.896830][ T9696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1133'.
[  533.925619][ T5724] usb 34-1: device descriptor read/8, error -110
[  534.357353][ T5724] usb usb34-port1: attempt power cycle
[  534.425760][ T9716] MTD: Couldn't look up './dev/mtdblock0': -2
[  534.970924][ T5724] usb usb34-port1: unable to enumerate USB device
[  535.360208][ T9746] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  536.287871][ T9747] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  536.287902][ T9747] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  536.317066][ T9747] vhci_hcd vhci_hcd.0: Device attached
[  536.477264][ T2308] bridge_slave_1: left allmulticast mode
[  536.477299][ T2308] bridge_slave_1: left promiscuous mode
[  536.529745][ T9751] vhci_hcd: connection closed
[  536.533656][   T56] vhci_hcd vhci_hcd.2: stop threads
[  536.533688][   T56] vhci_hcd vhci_hcd.2: release socket
[  536.558275][ T2308] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.558416][   T56] vhci_hcd vhci_hcd.2: disconnect device
[  536.590622][   T31] usb 38-1: enqueue for inactive port 0
[  536.730879][ T9760] kAFS: bad VL server IP address
[  536.848354][ T2308] bridge_slave_0: left allmulticast mode
[  536.848383][ T2308] bridge_slave_0: left promiscuous mode
[  536.885282][ T2308] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.091940][   T31] usb usb38-port1: attempt power cycle
[  537.727371][   T31] usb usb38-port1: unable to enumerate USB device
[  538.498367][ T9778] MTD: Couldn't look up './dev/mtdblock0': -2
[  540.904971][ T5599] Bluetooth: hci4: unexpected event for opcode 0x1002
[  541.223403][ T2308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.353695][ T2308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.449337][ T2308] bond0 (unregistering): Released all slaves
[  542.382306][ T9822] kAFS: bad VL server IP address
[  543.595218][ T9849] MTD: Couldn't look up './dev/mtdblock0': -2
[  547.539336][ T9893] can: request_module (can-proto-3) failed.
[  548.031352][ T9909] tmpfs: Group quota inode hardlimit too large.
[  548.049763][ T9909] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  549.140498][ T5596] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  549.314427][ T5596] usb 3-1: Using ep0 maxpacket: 32
[  549.331091][ T5596] usb 3-1: unable to get BOS descriptor or descriptor too short
[  549.331146][ T5596] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  549.332926][ T5596] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  549.332950][ T5596] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  549.332971][ T5596] usb 3-1: config 14 has no interface number 0
[  549.332988][ T5596] usb 3-1: config 14 has no interface number 1
[  549.333060][ T5596] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  549.333093][ T5596] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping
[  549.333117][ T5596] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  549.333144][ T5596] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  549.333172][ T5596] usb 3-1: config 14 interface 57 has no altsetting 0
[  549.333190][ T5596] usb 3-1: config 14 interface 228 has no altsetting 0
[  549.339662][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.339684][ T5596] usb 3-1: Product: syz
[  549.339697][ T5596] usb 3-1: Manufacturer: syz
[  549.339710][ T5596] usb 3-1: SerialNumber: syz
[  550.774099][ T5596] legousbtower 3-1:14.57: interrupt endpoints not found
[  550.793727][ T5596] legousbtower 3-1:14.228: interrupt endpoints not found
[  551.072477][ T5599] Bluetooth: hci1: unexpected event for opcode 0x1002
[  551.075626][ T2308] hsr_slave_0: left promiscuous mode
[  551.111596][ T2308] hsr_slave_1: left promiscuous mode
[  551.112757][ T2308] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.166619][ T2308] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.366999][ T5918] usb 3-1: USB disconnect, device number 6
[  551.404087][ T9949] kAFS: bad VL server IP address
[  552.153537][ T9959] nfs: Bad value for 'port'
[  552.656749][ T9966] tmpfs: Group quota inode hardlimit too large.
[  552.669419][ T9966] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  553.638592][ T2308] team0 (unregistering): Port device team_slave_1 removed
[  554.318236][ T2308] team0 (unregistering): Port device team_slave_0 removed
[  554.765077][ T5249] 8021q: adding VLAN 0 to HW filter on device eth5
[  555.341610][ T9989] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  562.889232][ T1328] ieee802154 phy0 wpan0: encryption failed: -22
[  562.889294][ T1328] ieee802154 phy1 wpan1: encryption failed: -22
[  563.308930][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'.
[  563.943088][T10065] program syz.0.1243 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  563.943852][T10065] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  563.948884][T10065] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  566.034707][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  566.072818][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  566.075140][ T5594] Bluetooth: hci1: unexpected event for opcode 0x203d
[  566.085123][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  566.151138][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  566.155843][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  568.247750][ T5599] Bluetooth: hci5: command tx timeout
[  570.320761][ T5599] Bluetooth: hci5: command tx timeout
[  571.080608][   T48] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  571.231987][   T48] usb 3-1: Using ep0 maxpacket: 32
[  571.239103][   T48] usb 3-1: unable to get BOS descriptor or descriptor too short
[  571.239159][   T48] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  571.267987][   T48] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  571.268016][   T48] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  571.268037][   T48] usb 3-1: config 14 has no interface number 0
[  571.268054][   T48] usb 3-1: config 14 has no interface number 1
[  571.268130][   T48] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  571.268155][   T48] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping
[  571.268179][   T48] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  571.268205][   T48] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  571.268231][   T48] usb 3-1: config 14 interface 57 has no altsetting 0
[  571.268249][   T48] usb 3-1: config 14 interface 228 has no altsetting 0
[  571.382599][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.382626][   T48] usb 3-1: Product: syz
[  571.382641][   T48] usb 3-1: Manufacturer: syz
[  571.382655][   T48] usb 3-1: SerialNumber: syz
[  571.897539][   T48] legousbtower 3-1:14.57: interrupt endpoints not found
[  572.114059][   T48] legousbtower 3-1:14.228: interrupt endpoints not found
[  572.154905][T10149] socket: no more sockets
[  572.169597][T10152] block nbd0: Failed to create debugfs dir for 'nbd0'
[  572.400819][ T5594] Bluetooth: hci5: command tx timeout
[  573.190852][ T5596] usb 3-1: USB disconnect, device number 7
[  573.793369][ T1403] bridge_slave_1: left allmulticast mode
[  573.793405][ T1403] bridge_slave_1: left promiscuous mode
[  573.793728][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.963256][ T1403] bridge_slave_0: left allmulticast mode
[  573.963289][ T1403] bridge_slave_0: left promiscuous mode
[  573.967087][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.160577][ T5702] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  574.442513][ T5702] usb 2-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b
[  574.480561][ T5594] Bluetooth: hci5: command tx timeout
[  574.632332][ T5702] usb 2-1: config 4 has an invalid interface number: 201 but max is 0
[  574.632357][ T5702] usb 2-1: config 4 has no interface number 0
[  574.632385][ T5702] usb 2-1: config 4 interface 201 has no altsetting 0
[  574.809855][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.809884][ T5702] usb 2-1: Product: syz
[  574.809900][ T5702] usb 2-1: Manufacturer: syz
[  574.809915][ T5702] usb 2-1: SerialNumber: syz
[  575.059251][T10152] block nbd0: shutting down sockets
[  575.540655][ T5702] usb-storage 2-1:4.201: USB Mass Storage device detected
[  575.584481][ T5702] usb-storage 2-1:4.201: Quirks match for vid 0781 pid 55e8: 800000
[  577.533001][ T5702] usb 2-1: USB disconnect, device number 7
[  578.286633][ T1403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  578.388770][T10236] tmpfs: Group quota inode hardlimit too large.
[  578.409355][T10236] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  580.065346][ T1403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.102101][ T1403] bond0 (unregistering): Released all slaves
[  581.810707][  T199] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  581.870781][   T48] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  581.989313][  T155] ------------[ cut here ]------------
[  581.989329][  T155] in_task() && kcov_mode_enabled(mode)
[  581.989347][  T155] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5bb/0x6f0, CPU#1: kworker/u8:5/155
[  581.989412][  T155] Modules linked in:
[  581.989458][  T155] CPU: 1 UID: 0 PID: 155 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  581.989488][  T155] Tainted: [L]=SOFTLOCKUP
[  581.989496][  T155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  581.989511][  T155] Workqueue: events_unbound cfg80211_wiphy_work
[  581.989554][  T155] RIP: 0010:kcov_remote_start+0x5bb/0x6f0
[  581.989597][  T155] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2c b7 fc 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 97 69 7f 09 89 c0 48 c7 c7 c0 f2 9e
[  581.989615][  T155] RSP: 0018:ffffc90003adf9f8 EFLAGS: 00010202
[  581.989633][  T155] RAX: 0000000000000000 RBX: ffff888020f69f00 RCX: 0000000080000001
[  581.989649][  T155] RDX: 0000000000000000 RSI: ffffffff8bca5960 RDI: ffffffff8bca5920
[  581.989664][  T155] RBP: ffff88805aff8500 R08: ffffffff8b477b80 R09: 0000000000000000
[  581.989680][  T155] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000
[  581.989695][  T155] R13: ffff8880629adef8 R14: 0000000000000000 R15: ffff888062941180
[  581.989711][  T155] FS:  0000000000000000(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000
[  581.989728][  T155] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  581.989743][  T155] CR2: 00007f1f334b3ff8 CR3: 000000005dccc000 CR4: 00000000003526f0
[  581.989767][  T155] Call Trace:
[  581.989775][  T155]  <TASK>
[  581.989790][  T155]  ieee80211_iface_work+0x20c/0x1010
[  581.989835][  T155]  cfg80211_wiphy_work+0x29e/0x420
[  581.989902][  T155]  ? process_scheduled_works+0xa20/0x14e0
[  581.989927][  T155]  process_scheduled_works+0xa8e/0x14e0
[  581.989981][  T155]  ? __pfx_process_scheduled_works+0x10/0x10
[  581.990012][  T155]  ? assign_work+0x3cf/0x5d0
[  581.990061][  T155]  worker_thread+0xa47/0xfb0
[  581.990116][  T155]  kthread+0x388/0x470
[  581.990146][  T155]  ? __pfx_worker_thread+0x10/0x10
[  581.990169][  T155]  ? __pfx_kthread+0x10/0x10
[  581.990200][  T155]  ret_from_fork+0x514/0xb70
[  581.990235][  T155]  ? __pfx_ret_from_fork+0x10/0x10
[  581.990265][  T155]  ? __switch_to+0xc89/0x1420
[  581.990295][  T155]  ? __pfx_kthread+0x10/0x10
[  581.990325][  T155]  ret_from_fork_asm+0x1a/0x30
[  581.990428][  T155]  </TASK>
[  581.990447][  T155] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  581.990466][  T155] CPU: 1 UID: 0 PID: 155 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  581.990493][  T155] Tainted: [L]=SOFTLOCKUP
[  581.990500][  T155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  581.990512][  T155] Workqueue: events_unbound cfg80211_wiphy_work
[  581.990547][  T155] Call Trace:
[  581.990554][  T155]  <TASK>
[  581.990563][  T155]  vpanic+0x56c/0xa60
[  581.990604][  T155]  ? __pfx__printk+0x10/0x10
[  581.990627][  T155]  ? __pfx_vpanic+0x10/0x10
[  581.990657][  T155]  ? is_bpf_text_address+0x292/0x2b0
[  581.990679][  T155]  ? is_bpf_text_address+0x26/0x2b0
[  581.990710][  T155]  panic+0xc5/0xd0
[  581.990740][  T155]  ? __pfx_panic+0x10/0x10
[  581.990782][  T155]  ? ret_from_fork_asm+0x1a/0x30
[  581.990820][  T155]  __warn+0x315/0x4c0
[  581.990850][  T155]  ? kcov_remote_start+0x5bb/0x6f0
[  581.990882][  T155]  ? kcov_remote_start+0x5bb/0x6f0
[  581.990913][  T155]  __report_bug+0x276/0x570
[  581.990943][  T155]  ? kcov_remote_start+0x5bb/0x6f0
[  581.990975][  T155]  ? __pfx___report_bug+0x10/0x10
[  581.991002][  T155]  ? irqentry_exit+0x218/0x8f0
[  581.991051][  T155]  ? rt_spin_lock+0x1e0/0x400
[  581.991086][  T155]  ? rt_spin_lock+0x1e0/0x400
[  581.991123][  T155]  ? kcov_remote_start+0x5bb/0x6f0
[  581.991155][  T155]  report_bug+0x16a/0x220
[  581.991184][  T155]  ? kcov_remote_start+0x5bb/0x6f0
[  581.991213][  T155]  ? kcov_remote_start+0x5bd/0x6f0
[  581.991243][  T155]  handle_bug+0x9c/0x200
[  581.991275][  T155]  exc_invalid_op+0x1a/0x50
[  581.991306][  T155]  asm_exc_invalid_op+0x1a/0x20
[  581.991328][  T155] RIP: 0010:kcov_remote_start+0x5bb/0x6f0
[  581.991360][  T155] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2c b7 fc 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 97 69 7f 09 89 c0 48 c7 c7 c0 f2 9e
[  581.991377][  T155] RSP: 0018:ffffc90003adf9f8 EFLAGS: 00010202
[  581.991395][  T155] RAX: 0000000000000000 RBX: ffff888020f69f00 RCX: 0000000080000001
[  581.991410][  T155] RDX: 0000000000000000 RSI: ffffffff8bca5960 RDI: ffffffff8bca5920
[  581.991425][  T155] RBP: ffff88805aff8500 R08: ffffffff8b477b80 R09: 0000000000000000
[  581.991439][  T155] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000
[  581.991454][  T155] R13: ffff8880629adef8 R14: 0000000000000000 R15: ffff888062941180
[  581.991477][  T155]  ? rt_spin_lock+0x1e0/0x400
[  581.991519][  T155]  ? kcov_remote_start+0xda/0x6f0
[  581.991556][  T155]  ieee80211_iface_work+0x20c/0x1010
[  581.991633][  T155]  cfg80211_wiphy_work+0x29e/0x420
[  581.991682][  T155]  ? process_scheduled_works+0xa20/0x14e0
[  581.991706][  T155]  process_scheduled_works+0xa8e/0x14e0
[  581.991780][  T155]  ? __pfx_process_scheduled_works+0x10/0x10
[  581.991817][  T155]  ? assign_work+0x3cf/0x5d0
[  581.991848][  T155]  worker_thread+0xa47/0xfb0
[  581.991905][  T155]  kthread+0x388/0x470
[  581.991939][  T155]  ? __pfx_worker_thread+0x10/0x10
[  581.991963][  T155]  ? __pfx_kthread+0x10/0x10
[  581.991997][  T155]  ret_from_fork+0x514/0xb70
[  581.992034][  T155]  ? __pfx_ret_from_fork+0x10/0x10
[  581.992066][  T155]  ? __switch_to+0xc89/0x1420
[  581.992108][  T155]  ? __pfx_kthread+0x10/0x10
[  581.992140][  T155]  ret_from_fork_asm+0x1a/0x30
[  581.992190][  T155]  </TASK>
[  581.992831][  T155] Kernel Offset: disabled