last executing test programs:

7m9.160283065s ago: executing program 1 (id=2):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ftruncate(r1, 0x7)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000180)={[{@redirect_dir_off}, {@userxattr}]})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x8302)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x1000000000000244)
socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./gadget\x00', &(0x7f0000000800)='gadgetfs\x00', 0x0, 0x0)
listxattr(&(0x7f0000000840)='./sys\x00', &(0x7f0000000880)=""/106, 0x6a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r3, &(0x7f0000000940)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)

7m4.062153609s ago: executing program 1 (id=18):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0800, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000700)={'syzkaller0\x00'})

7m0.677315923s ago: executing program 1 (id=22):
r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r0, 0xc)

6m58.808046124s ago: executing program 1 (id=27):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000000140)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000019140)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r4, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000191c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x2, 0x3, 0x1b1c, 0xc10, 0x0, 0x0, "0501"}}, 0x11a)
nanosleep(&(0x7f0000019300)={0x0, 0x2faf080}, 0x0)
write$UHID_INPUT2(r5, &(0x7f0000019340), 0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = syz_open_dev$video(&(0x7f0000019380), 0x8, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, 0x0)

6m56.767439057s ago: executing program 1 (id=28):
socket$kcm(0x29, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4)

6m39.123829808s ago: executing program 32 (id=28):
socket$kcm(0x29, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4)

6m10.468743396s ago: executing program 0 (id=75):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)=@secondary)
add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000001700)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a8503070101030203410002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x110, r1)
openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
fsync(r2)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x17b})

6m3.340143457s ago: executing program 0 (id=85):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140))
r4 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r4, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa101, 0x0)
close_range(r5, 0xffffffffffffffff, 0x400000000000000)

6m0.990873402s ago: executing program 0 (id=88):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x2000090, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="68c84b15ca661163ccf7c9e790fd9e516961bfd7721342acec5e6bea6260e4a2c332225602c7dd66a6bc4aa5a2803edc6dce5db5d6bcbc4ec74ca9f398e7f6456dad1cab4477d6bd701bad7c31dbbd11d1008118b8f4d3e51e5ac39d3fcae55aeef0a6175f55af94aeaa49329569e57b0a67ebec06388544d9e4ff74a04b2d9d7c4ac088cf262d3979ad94393d94b968f8762738b0ca497b39109b49e18a01df36cdc25c22099d948b730b0bfd463b9531ec20989491dec8eb20f65fe8ea76556e6e98266733090e60269018801559f3aaf1898bfdfc8122", 0xd8, 0xfffffffffffffffe)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x12, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x143102)
writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$radio(&(0x7f0000000540), 0xffffffffffffffff, 0x2)
mlockall(0x2)
r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r4, 0xb)
shmctl$SHM_UNLOCK(r4, 0xc)

5m57.127895043s ago: executing program 0 (id=90):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
setgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x43, &(0x7f0000001000), 0x4)
setns(0xc9, 0x0)
socket$inet(0x2, 0x2, 0x1)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000380)}, {0x0}, {&(0x7f00000003c0)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1", 0x53}, {&(0x7f0000000440)="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", 0xb09}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000f80)="190004000800aaaaaa0103000000", 0xe)

5m55.649421209s ago: executing program 0 (id=93):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000180), 0x1003)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80890, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x152)
mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x89901)
r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='mountinfo\x00')
sendfile(r4, r4, &(0x7f0000000700)=0x2eb4, 0x2000007ff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))

5m53.679856091s ago: executing program 0 (id=94):
socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev_mnt\x00', 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2b, 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x802, 0xbd14a99f158fb628)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x100}, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0x6, 0x20000)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000640)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000006c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000700), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6)
syz_open_dev$usbfs(&(0x7f0000000780), 0x75, 0x109301)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x0, 0x10, &(0x7f00000013c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)
syz_emit_vhci(0x0, 0x9)

5m38.150157706s ago: executing program 33 (id=94):
socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev_mnt\x00', 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2b, 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x802, 0xbd14a99f158fb628)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x100}, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0x6, 0x20000)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000640)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000006c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000700), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6)
syz_open_dev$usbfs(&(0x7f0000000780), 0x75, 0x109301)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x0, 0x10, &(0x7f00000013c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48)
syz_emit_vhci(0x0, 0x9)

2m2.607603711s ago: executing program 3 (id=352):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0xfffffe14)
write$FUSE_INIT(r0, &(0x7f00000029c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000002a40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004b40)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c00)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000006c80)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006cc0)="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", 0x2000, 0x0)
writev(r3, &(0x7f0000008dc0)=[{&(0x7f0000008e00)='n', 0xfdef}], 0x1)
dup3(r0, r3, 0x6700000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)

2m2.066199473s ago: executing program 3 (id=355):
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300))
r4 = landlock_create_ruleset(&(0x7f0000000400)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0)
landlock_restrict_self(r4, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0)
landlock_restrict_self(r5, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)

1m5.236961713s ago: executing program 3 (id=359):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ftruncate(r1, 0x7)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000100), 0x40, &(0x7f0000000180)={[{@redirect_dir_off}, {@userxattr}]})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x8302)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x1000000000000244)
socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./gadget\x00', &(0x7f0000000800)='gadgetfs\x00', 0x0, 0x0)
listxattr(&(0x7f0000000840)='./sys\x00', &(0x7f0000000880)=""/106, 0x6a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r3, &(0x7f0000000940)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)

1m5.219946155s ago: executing program 3 (id=366):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000200), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$media(&(0x7f0000000240), 0x3, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r3 = syz_open_dev$sndctrl(0x0, 0x5b, 0x2c00)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0)
write$FUSE_CREATE_OPEN(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000800)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0)
close_range(r0, r1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='personality\x00')
preadv(r7, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/127, 0x7f}], 0x1, 0x6, 0x0)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r8, &(0x7f0000000c00)=ANY=[@ANYBLOB='LIN'], 0x8c)
close(r8)
sendmmsg(r6, &(0x7f0000000c40), 0x4000000000001f2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

1m5.218387406s ago: executing program 5 (id=368):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000001000), 0x4)
setns(0xc9, 0x0)
socket$inet(0x2, 0x2, 0x1)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000380)}, {0x0}, {&(0x7f00000003c0)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1", 0x53}, {&(0x7f0000000440)="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", 0xb09}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000f80)="190004000800aaaaaa0103000000", 0xe)

1m5.206386868s ago: executing program 7 (id=111):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0800, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000700)={'syzkaller0\x00'})

1m5.202608421s ago: executing program 7 (id=369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000200)=[{0x0, 0x7, 0x6, 0x80}, {0x4, 0x8, 0xf7, 0x4}, {0x1, 0x2, 0x7f, 0xc}]})
read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019640)=0x7)
clock_gettime(0x8, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000019680))
ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000019700)={r3})
syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x8000)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000019780)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000197c0)='./trace\x00', &(0x7f0000019800)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000019840)='./trace/current_tracer\x00', 0x1, 0x0)
write(r6, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'})

1m5.202005394s ago: executing program 3 (id=372):
r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000100)=0xfdfdfffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./tracefs_dir\x00', 0xbf)
mount(0x0, &(0x7f0000019300)='./tracefs_dir\x00', &(0x7f0000019340)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000019380)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
readv(r4, &(0x7f00000194c0)=[{&(0x7f0000019500)=""/4096, 0x1000}], 0x1)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f000001a500)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f000001a540)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]})
ppoll(&(0x7f000001a600)=[{r6, 0x80}], 0x1, &(0x7f000001a640), 0x0, 0x0)
listen(0xffffffffffffffff, 0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f000001a680)={0x2, 0xb0})

1m5.181979387s ago: executing program 5 (id=374):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
close_range(r2, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1m1.77241383s ago: executing program 7 (id=375):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff)
getpid()
ftruncate(0xffffffffffffffff, 0x7)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000180)={[{@redirect_dir_off}, {@userxattr}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000440)='./sys/class/net/lo/dev_id\x00', r0, 0x4000, r0}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x8302)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x1000000000000244)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a000200"], 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./gadget\x00', &(0x7f0000000800)='gadgetfs\x00', 0x0, 0x0)
listxattr(&(0x7f0000000840)='./sys\x00', &(0x7f0000000880)=""/106, 0x6a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r3, &(0x7f0000000940)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/ep1in-bulk\x00', 0x2, 0x0)

1m1.768878753s ago: executing program 3 (id=376):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200))
mknod$loop(&(0x7f0000000740)='./file0\x00', 0xfff, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./file0\x00', &(0x7f0000000880), 0x0, 0x0, 0x0)
removexattr(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)=@known='user.incfs.metadata\x00')
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file1\x00', 0x0, 0x10, r0}, 0x18)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x7c}}, 0x800)
sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, 0x0, 0x24040808)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0)

1m1.59170882s ago: executing program 5 (id=377):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x2000090, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="68c84b15ca661163ccf7c9e790fd9e516961bfd7721342acec5e6bea6260e4a2c332225602c7dd66a6bc4aa5a2803edc6dce5db5d6bcbc4ec74ca9f398e7f6456dad1cab4477d6bd701bad7c31dbbd11d1008118b8f4d3e51e5ac39d3fcae55aeef0a6175f55af94aeaa49329569e57b0a67ebec06388544d9e4ff74a04b2d9d7c4ac088cf262d3979ad94393d94b968f8762738b0ca497b39109b49e18a01df36cdc25c22099d948b730b0bfd463b9531ec20989491dec8eb20f65fe8ea76556e6e98266733090e60269018801559f3aaf1898bfdfc8122", 0xd8, 0xfffffffffffffffe)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x143102)
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$radio(&(0x7f0000000540), 0xffffffffffffffff, 0x2)
mlockall(0x2)
r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r3, 0xc)

57.579542595s ago: executing program 5 (id=386):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000200)={0x2001, 0x200, '\x00', 0xff, 0xb})

55.925038633s ago: executing program 5 (id=387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000200)=[{0x0, 0x7, 0x6, 0x80}, {0x4, 0x8, 0xf7, 0x4}, {0x4, 0x14, 0x2, 0xffff0000}]})
read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019640)=0x7)
clock_gettime(0x8, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000019680))
ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000019700)={r3})
syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x8000)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000019780)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000197c0)='./trace\x00', &(0x7f0000019800)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000019840)='./trace/current_tracer\x00', 0x1, 0x0)
write(r6, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'})

51.763060155s ago: executing program 5 (id=390):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
close_range(r2, 0xffffffffffffffff, 0x0)

46.211289759s ago: executing program 34 (id=375):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff)
getpid()
ftruncate(0xffffffffffffffff, 0x7)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000180)={[{@redirect_dir_off}, {@userxattr}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000440)='./sys/class/net/lo/dev_id\x00', r0, 0x4000, r0}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x8302)
writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x1000000000000244)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a000200"], 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='./gadget\x00', &(0x7f0000000800)='gadgetfs\x00', 0x0, 0x0)
listxattr(&(0x7f0000000840)='./sys\x00', &(0x7f0000000880)=""/106, 0x6a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r3, &(0x7f0000000940)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./gadget/ep1in-bulk\x00', 0x2, 0x0)

46.09603787s ago: executing program 35 (id=376):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200))
mknod$loop(&(0x7f0000000740)='./file0\x00', 0xfff, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./file0\x00', &(0x7f0000000880), 0x0, 0x0, 0x0)
removexattr(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)=@known='user.incfs.metadata\x00')
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file1\x00', 0x0, 0x10, r0}, 0x18)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x7c}}, 0x800)
sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, 0x0, 0x24040808)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0)

35.234635826s ago: executing program 36 (id=390):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]})
close_range(r2, 0xffffffffffffffff, 0x0)

18.358685277s ago: executing program 4 (id=421):
r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2)
pread64(r0, &(0x7f00000003c0)=""/72, 0x48, 0x0)

14.697060241s ago: executing program 6 (id=423):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000200000080001400000000008001240000000940900010073797a30000000000900020073797a32"], 0x84}}, 0x0)

14.329883602s ago: executing program 6 (id=424):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10)
fallocate(r4, 0x0, 0x0, 0x1000f4)
sendfile(r4, r4, 0x0, 0x40000000800)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)

13.038238371s ago: executing program 6 (id=425):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_enable(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2028000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x80200, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x2, 0x141102)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x6ad01, 0x0)
writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000000540), 0x88302, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000640)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff)
close(r3)
syz_emit_vhci(0x0, 0x17)
getpid()

11.09620802s ago: executing program 6 (id=426):
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="916d07a691e2d95ead5cc5f0aecc30114cfc5cddca6084999812370859b4912c85edf9db8154f323799a639dbc5d3c05c971ed06e68f8425e19a9438a6098478f51b3dc8dcad075fba02f1447b08818c31c3b15a26987f6c0bad6925462b967e24f3acbed912e8e3a0ef26117a7823f7a0f00392026d9fa589d4c75b4b147978e5e7f2f2538ccb971ab9b6fac95d70377347b6"], 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000040)={0x0, 0x100000c1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4455, 0x2, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ce}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

10.957699088s ago: executing program 4 (id=427):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000200)={0x62c, "75b5fc8e16bef0c8be0939ac88a68a63c3e8caca8252c4bd3265367d1c68220b", 0x2, 0x3ff, 0x65, 0x40004, 0x8})

9.869050401s ago: executing program 4 (id=428):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x43, &(0x7f0000001000), 0x4)
setns(0xc9, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000380)}, {0x0}, {&(0x7f00000003c0)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1", 0x53}, {&(0x7f0000000440)="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", 0xb09}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000f80)="190004000800aaaaaa0103000000", 0xe)

9.732180942s ago: executing program 6 (id=429):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
ptrace(0x10, r1)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000019680)={0x10, 0x4, &(0x7f0000019740)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000019800)='GPL\x00', 0x2, 0xfd90, &(0x7f0000019840)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000192c0))
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000019340)=0x1000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, <r6=>0x0}, 0x8)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r6, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019480)=@bpf_lsm={0x1d, 0x3, &(0x7f0000019540)=ANY=[], &(0x7f0000019580)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000195c0)=[{0x0, 0x27, 0x15, 0x2}], 0x10, 0xffffffff}, 0x94)

9.497123173s ago: executing program 2 (id=430):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)

7.759943827s ago: executing program 6 (id=431):
r0 = socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
connect$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

7.708279085s ago: executing program 2 (id=432):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r4, &(0x7f0000000540)=""/102392, 0x18ff8)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000195c0)={0x7, {0xfffffff7, 0x7, 0x8, 0xd21b}, {0xfe5, 0x4, 0x101, 0x1ff}, {0x9, 0x9a9f}})
mount(&(0x7f000001a6c0)=@nullb, &(0x7f000001a700)='./cgroup\x00', &(0x7f000001a740)='btrfs\x00', 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)

5.724429545s ago: executing program 2 (id=433):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x21c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa00}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x90)

4.921198648s ago: executing program 2 (id=434):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10)
fallocate(r4, 0x0, 0x0, 0x1000f4)
sendfile(r4, r4, 0x0, 0x40000000800)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)

4.885779304s ago: executing program 4 (id=435):
r0 = socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mkdir(&(0x7f0000000400)='./file2\x00', 0x1ff)
mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000480)='./file2\x00', &(0x7f00000004c0)='nfs\x00', 0x0, &(0x7f0000000500)='addr=127.0.0.1,vers=3,proto=udp\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r0, @ANYBLOB='\x00'/18, @ANYBLOB="d0f1a38eda88e82b9b6d86643bb600378a298575c964da8c845fcfccdc767a7b2b7b5783a1c331d5cf27aeda1bc6a18ec25e487a9f8b8ebc6be9a93ca339ef7d2730bb25a3f2366d178ac4631659ce394c913c92a3ec7356328f143606634d4d1396b8f49f7a0aaee65852aaa23d25f9ac9b93b98b7f6a99ce8cc7d3beb74362c5b5f5cf1b1600000000000000000000db6994ef7ce1d1459579b3eb5636a041175beb53fd9c6f2305000000000000000d7540de149255d4e38956494b142221003747de43f50f313925b6536f7700e532d5adaf5c92b6231cdcfb06dde67f9989978119ebb9e6506f", @ANYRESOCT, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRESOCT, @ANYRES16=r2], 0x50)
semget(0x3, 0x4, 0x69c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={0x0, 0x20}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780))
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="e40000000201010800000020000000000a000000d0000180"], 0xe4}, 0x1, 0x0, 0x0, 0x8040}, 0x44080)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000940)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, {0xa, 0x4e24, 0x7, @remote, 0x1}, 0xffffffffffffffff, 0x7}}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000fffffff3000000007f000000e50001009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4)

3.87982407s ago: executing program 2 (id=436):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x400008bf)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000007c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000900), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000940), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)

2.90834509s ago: executing program 4 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, 0x0, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = msgget$private(0x0, 0x722)
msgsnd(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"], 0xbf, 0x800)
msgrcv(r5, 0x0, 0x0, 0xffffff7f00000000, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x40003)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
listns(&(0x7f0000000080)={0x20, 0x0, 0x2}, &(0x7f0000000100)=[0x0], 0xf4240, 0x0)

112.068929ms ago: executing program 2 (id=438):
mq_notify(0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0xd, 0x0, 0x6, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x2, 0x1, 0x3, 0x4, 0x4})

0s ago: executing program 4 (id=439):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='27', 0x2)
bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000300)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50)

kernel console output (not intermixed with test programs):

o handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.442265][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.478987][ T5650] Bluetooth: hci5: command tx timeout
[   98.479090][   T53] Bluetooth: hci3: command tx timeout
[   98.486707][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.486730][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.486775][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.524578][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.524604][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.524650][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.533776][   T53] Bluetooth: hci0: command tx timeout
[   98.536475][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   98.541115][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.541136][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.541182][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.546092][   T53] Bluetooth: hci4: command tx timeout
[   98.546131][   T53] Bluetooth: hci1: command tx timeout
[   98.546165][   T53] Bluetooth: hci2: command tx timeout
[   98.578115][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.578140][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.578185][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.695755][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.695782][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.695828][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.798627][ T5639] hsr_slave_0: entered promiscuous mode
[   98.799980][ T5639] hsr_slave_1: entered promiscuous mode
[   98.903012][ T5641] hsr_slave_0: entered promiscuous mode
[   98.904550][ T5641] hsr_slave_1: entered promiscuous mode
[   98.905531][ T5641] debugfs: 'hsr0' already exists in 'hsr'
[   98.905646][ T5641] Cannot create hsr debugfs directory
[   98.945645][ T5636] hsr_slave_0: entered promiscuous mode
[   98.946577][ T5636] hsr_slave_1: entered promiscuous mode
[   98.947190][ T5636] debugfs: 'hsr0' already exists in 'hsr'
[   98.947212][ T5636] Cannot create hsr debugfs directory
[   99.022394][ T5638] hsr_slave_0: entered promiscuous mode
[   99.024170][ T5638] hsr_slave_1: entered promiscuous mode
[   99.025091][ T5638] debugfs: 'hsr0' already exists in 'hsr'
[   99.025149][ T5638] Cannot create hsr debugfs directory
[   99.211941][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.212116][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.212279][ T5640] bridge_slave_0: entered allmulticast mode
[   99.214500][ T5640] bridge_slave_0: entered promiscuous mode
[   99.271344][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.271538][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.272215][ T5640] bridge_slave_1: entered allmulticast mode
[   99.274812][ T5640] bridge_slave_1: entered promiscuous mode
[   99.390715][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.450443][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.536449][ T5640] team0: Port device team_slave_0 added
[   99.586891][ T5640] team0: Port device team_slave_1 added
[   99.737403][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.737428][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.737470][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.768924][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.768951][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.768997][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.920613][ T5640] hsr_slave_0: entered promiscuous mode
[   99.921856][ T5640] hsr_slave_1: entered promiscuous mode
[   99.935022][ T5640] debugfs: 'hsr0' already exists in 'hsr'
[   99.935056][ T5640] Cannot create hsr debugfs directory
[   99.936218][ T5639] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.945988][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   99.947356][ T5639] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.957650][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   99.968483][ T5639] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.985539][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.032421][ T5639] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  100.038151][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.271146][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.271330][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.271470][ T5637] bridge_slave_0: entered allmulticast mode
[  100.276358][ T5637] bridge_slave_0: entered promiscuous mode
[  100.281700][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  100.310873][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.336284][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.336442][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.336565][ T5637] bridge_slave_1: entered allmulticast mode
[  100.338120][ T5637] bridge_slave_1: entered promiscuous mode
[  100.339650][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  100.350146][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.351310][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  100.360810][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.405538][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  100.410649][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.433014][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.458848][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.515978][ T5637] team0: Port device team_slave_0 added
[  100.519339][ T5637] team0: Port device team_slave_1 added
[  100.533577][ T5650] Bluetooth: hci3: command tx timeout
[  100.533620][ T5650] Bluetooth: hci5: command tx timeout
[  100.588975][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.589000][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.589042][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.623809][   T53] Bluetooth: hci0: command tx timeout
[  100.627574][ T5650] Bluetooth: hci1: command tx timeout
[  100.627613][ T5650] Bluetooth: hci4: command tx timeout
[  100.627765][   T53] Bluetooth: hci2: command tx timeout
[  100.639211][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.639233][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.639278][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.667590][ T5638] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  100.701997][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.730024][ T5638] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  100.735433][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.738075][ T5638] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  100.747246][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.794735][ T5638] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  100.798920][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  100.827485][ T5637] hsr_slave_0: entered promiscuous mode
[  100.828411][ T5637] hsr_slave_1: entered promiscuous mode
[  100.829034][ T5637] debugfs: 'hsr0' already exists in 'hsr'
[  100.829063][ T5637] Cannot create hsr debugfs directory
[  100.938240][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.943150][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.945694][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.956210][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.959156][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  100.970445][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.999320][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  101.007460][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.187857][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.199232][ T5640] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  101.211882][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.246307][ T5640] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  101.251295][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.252599][ T5640] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  101.258877][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.270626][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.282430][ T5640] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  101.292517][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.344600][ T5639] 8021q: adding VLAN 0 to HW filter on device team0
[  101.420266][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.420369][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.448703][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.451585][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.458743][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[  101.484499][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.488591][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.489749][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.499160][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.502094][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.502224][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.506523][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.506657][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.509251][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.509375][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.585118][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  101.590156][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.708886][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.838798][ T5638] 8021q: adding VLAN 0 to HW filter on device team0
[  101.885412][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.899327][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.899460][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.980249][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.980377][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.031397][ T5636] 8021q: adding VLAN 0 to HW filter on device team0
[  102.037335][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.091880][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.092010][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.121093][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.121219][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.178580][ T5640] 8021q: adding VLAN 0 to HW filter on device team0
[  102.235304][  T174] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.235431][  T174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.303000][  T174] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.303127][  T174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.395631][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.514421][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[  102.610851][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.611008][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.613781][ T5648] Bluetooth: hci3: command tx timeout
[  102.613838][   T53] Bluetooth: hci5: command tx timeout
[  102.682245][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.682372][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.694773][ T5648] Bluetooth: hci4: command tx timeout
[  102.694814][ T5648] Bluetooth: hci1: command tx timeout
[  102.694848][ T5648] Bluetooth: hci0: command tx timeout
[  102.694931][   T53] Bluetooth: hci2: command tx timeout
[  103.280584][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.397636][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.639475][ T5641] veth0_vlan: entered promiscuous mode
[  103.718793][ T5641] veth1_vlan: entered promiscuous mode
[  103.777552][ T5639] veth0_vlan: entered promiscuous mode
[  103.851839][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.872664][ T5639] veth1_vlan: entered promiscuous mode
[  103.999457][ T5641] veth0_macvtap: entered promiscuous mode
[  104.045553][ T5641] veth1_macvtap: entered promiscuous mode
[  104.147279][ T5639] veth0_macvtap: entered promiscuous mode
[  104.179300][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.215245][ T5639] veth1_macvtap: entered promiscuous mode
[  104.247971][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.376750][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.442833][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.443620][ T3015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.443771][ T3015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.443833][ T3015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.443900][ T3015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.524365][ T3384] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.525280][ T3384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.525725][ T3384] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.661224][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.847919][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.847948][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.881564][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.881595][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.912932][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.930653][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.948179][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.948210][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.984740][ T3006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.099914][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.099947][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.156151][ T5638] veth0_vlan: entered promiscuous mode
[  105.249075][ T5638] veth1_vlan: entered promiscuous mode
[  105.260320][ T5636] veth0_vlan: entered promiscuous mode
[  105.333821][ T5641] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  105.366911][ T5636] veth1_vlan: entered promiscuous mode
[  105.479702][ T5640] veth0_vlan: entered promiscuous mode
[  105.567518][ T5638] veth0_macvtap: entered promiscuous mode
[  105.589271][ T5640] veth1_vlan: entered promiscuous mode
[  105.816949][ T5638] veth1_macvtap: entered promiscuous mode
[  105.823287][ T5636] veth0_macvtap: entered promiscuous mode
[  106.906375][ T5881] IPv6: NLM_F_CREATE should be specified when creating new route
[  106.906612][ T5881] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[  107.963593][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  108.373680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  108.752658][ T5636] veth1_macvtap: entered promiscuous mode
[  109.206977][   T10] rxe_eth0 speed is unknown, defaulting to 1000
[  109.285416][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.358614][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.366825][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.441624][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.469501][ T5640] veth0_macvtap: entered promiscuous mode
[  109.503711][ T1013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.503784][ T1013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.503853][ T1013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.503915][ T1013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.580064][ T5640] veth1_macvtap: entered promiscuous mode
[  109.604178][ T1013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.604248][ T1013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.604311][ T1013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.670535][ T5637] veth0_vlan: entered promiscuous mode
[  109.824127][  T174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.846105][ T5637] veth1_vlan: entered promiscuous mode
[  109.858362][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.003829][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.135352][ T1013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.137407][ T3352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.143454][  T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.143483][  T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.184648][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.185800][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.292103][  T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.292128][  T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.396673][   T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.396707][   T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.463749][ T5637] veth0_macvtap: entered promiscuous mode
[  110.526362][ T5637] veth1_macvtap: entered promiscuous mode
[  110.527028][  T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.527056][  T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.723541][ T3352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.723574][ T3352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.732965][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.801012][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.938582][ T3006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.939218][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.939247][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.939525][ T3006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.035750][ T3006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.039466][ T1013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.310239][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.310272][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.439640][   T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.439673][   T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.888259][ T5917] IPv6: NLM_F_CREATE should be specified when creating new route
[  111.888503][ T5917] netlink: 'syz.3.4': attribute type 1 has an invalid length.
[  113.535507][ T5931] Bluetooth: MGMT ver 1.23
[  113.798224][ T5925] =======================================================
[  113.798224][ T5925] WARNING: The mand mount option has been deprecated and
[  113.798224][ T5925]          and is ignored by this kernel. Remove the mand
[  113.798224][ T5925]          option from the mount to silence this warning.
[  113.798224][ T5925] =======================================================
[  113.848504][ T5925] overlayfs: conflicting options: userxattr,redirect_dir=on
[  114.592113][ T5933] gadgetfs: bound to dummy_udc driver
[  114.885461][ T1573] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  114.886189][    C1] gadgetfs: connected
[  114.890985][ T1573] gadgetfs: disconnected
[  115.065872][    C1] gadgetfs: connected
[  115.109027][ T1573] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  115.124537][ T5935] FAULT_INJECTION: forcing a failure.
[  115.124537][ T5935] name failslab, interval 1, probability 0, space 0, times 1
[  115.124587][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) 
[  115.124634][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  115.124658][ T5935] Call Trace:
[  115.124670][ T5935]  <TASK>
[  115.124685][ T5935]  dump_stack_lvl+0x100/0x190
[  115.124754][ T5935]  should_fail_ex.cold+0x5/0xa
[  115.124833][ T5935]  should_failslab+0xc2/0x120
[  115.124893][ T5935]  __kmalloc_cache_noprof+0x91/0x6d0
[  115.124933][ T5935]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.124983][ T5935]  ? lockdep_init_map_type+0x5c/0x250
[  115.125039][ T5935]  ? rand_initialize_disk+0x4a/0xb2
[  115.125090][ T5935]  rand_initialize_disk+0x4a/0xb2
[  115.125133][ T5935]  __alloc_disk_node+0x31d/0x730
[  115.125184][ T5935]  __blk_mq_alloc_disk+0x89/0x120
[  115.125251][ T5935]  null_add_dev+0xdf8/0x1df0
[  115.125312][ T5935]  ? __pfx_null_add_dev+0x10/0x10
[  115.125362][ T5935]  ? __lock_acquire+0xe8b/0x1f40
[  115.125449][ T5935]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.125502][ T5935]  ? __pfx___might_resched+0x10/0x10
[  115.125548][ T5935]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.125609][ T5935]  nullb_device_power_store+0x29d/0x350
[  115.125674][ T5935]  ? __pfx_nullb_device_power_store+0x10/0x10
[  115.125737][ T5935]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  115.125779][ T5935]  ? configfs_write_iter+0x388/0x4e0
[  115.125845][ T5935]  configfs_write_iter+0x302/0x4e0
[  115.125909][ T5935]  vfs_write+0x6af/0x1050
[  115.125965][ T5935]  ? __pfx_configfs_write_iter+0x10/0x10
[  115.126027][ T5935]  ? __pfx_vfs_write+0x10/0x10
[  115.126076][ T5935]  ? find_held_lock+0x2b/0x80
[  115.126148][ T5935]  ksys_write+0x12a/0x250
[  115.126200][ T5935]  ? __pfx_ksys_write+0x10/0x10
[  115.126259][ T5935]  ? srso_alias_return_thunk+0x5/0xfbef5
[  115.126317][ T5935]  do_syscall_64+0x123/0x790
[  115.126379][ T5935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.126421][ T5935] RIP: 0033:0x7f7aed19f559
[  115.126453][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.126492][ T5935] RSP: 002b:00007f7aee0e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  115.126530][ T5935] RAX: ffffffffffffffda RBX: 00007f7aed425fa0 RCX: 00007f7aed19f559
[  115.126557][ T5935] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000008
[  115.126582][ T5935] RBP: 00007f7aed236b20 R08: 0000000000000000 R09: 0000000000000000
[  115.126607][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.126631][ T5935] R13: 00007f7aed426038 R14: 00007f7aed425fa0 R15: 00007ffc84e6a638
[  115.126685][ T5935]  </TASK>
[  115.296520][ T1573] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  115.296584][ T1573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.567785][ T5924] gadgetfs: suspended from state 3
[  115.568378][ T5924] gadgetfs: disconnected
[  115.606774][ T1573] usb 1-1: can't set config #1, error -71
[  115.651175][ T1573] usb 1-1: USB disconnect, device number 2
[  115.653339][ T5650] Bluetooth: hci4: command 0x0405 tx timeout
[  115.845259][ T5935] null_blk: disk nullb1 created
[  118.613567][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  118.803711][ T5962] netlink: 'syz.3.16': attribute type 1 has an invalid length.
[  119.023860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  120.764021][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  122.158814][ T5792] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  122.308851][ T5978] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.309126][ T5978] netlink: 'syz.0.21': attribute type 1 has an invalid length.
[  125.784393][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  125.884114][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  126.309601][ T5999] overlayfs: conflicting options: userxattr,redirect_dir=on
[  126.487348][ T6001] gadgetfs: bound to dummy_udc driver
[  126.797888][ T5801] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  126.799028][    C0] gadgetfs: connected
[  126.802120][ T5801] gadgetfs: disconnected
[  127.016397][    C0] gadgetfs: connected
[  127.047538][ T5801] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  127.064508][ T5801] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  127.071921][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.610488][    C0] gadgetfs: configuration #1
[  129.414465][ T5998] gadgetfs: suspended from state 3
[  129.440930][ T5998] gadgetfs: disconnected
[  129.473577][ T5765] usb 1-1: USB disconnect, device number 3
[  129.843503][ T6013] Zero length message leads to an empty skb
[  130.594353][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  130.763709][ T6015] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[  132.233525][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  132.623326][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  132.623447][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  132.741180][ T6024] IPv6: NLM_F_CREATE should be specified when creating new route
[  132.741351][ T6024] netlink: 'syz.5.36': attribute type 1 has an invalid length.
[  136.123900][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  141.037607][ T6065] blktrace: Concurrent blktraces are not allowed on loop4
[  142.763329][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  142.935086][   T24] usb 6-1: New USB device found: idVendor=0710, idProduct=8001, bcdDevice=1.00
[  142.938158][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.938221][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[  142.943918][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.943959][   T24] usb 6-1: Product: syz
[  142.943986][   T24] usb 6-1: Manufacturer: syz
[  142.944014][   T24] usb 6-1: SerialNumber: syz
[  143.028990][   T24] whiteheat 6-1:1.0: required endpoints missing
[  143.244011][ T5792] usb 6-1: USB disconnect, device number 2
[  143.395738][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  143.401409][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  143.403928][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  143.418674][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  143.426179][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  145.036134][ T6083] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[  145.765558][   T53] Bluetooth: hci6: command tx timeout
[  149.341020][   T53] Bluetooth: hci6: command tx timeout
[  149.526932][  T116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.697189][  T116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.433463][ T6112] gfs2: error -5 reading superblock
[  150.851936][ T6074] rxe_eth0 speed is unknown, defaulting to 1000
[  151.411718][  T116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.425139][   T53] Bluetooth: hci6: command tx timeout
[  153.441525][  T116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.493788][   T53] Bluetooth: hci6: command tx timeout
[  153.994172][  T116] bridge_slave_1: left allmulticast mode
[  153.994224][  T116] bridge_slave_1: left promiscuous mode
[  153.995104][  T116] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.049722][  T116] bridge_slave_0: left allmulticast mode
[  154.049760][  T116] bridge_slave_0: left promiscuous mode
[  154.056183][  T116] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.349130][ T6123] blktrace: Concurrent blktraces are not allowed on loop4
[  155.685900][ T5647] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  155.845126][ T5647] usb 5-1: New USB device found: idVendor=0710, idProduct=8001, bcdDevice=1.00
[  155.847375][ T5647] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.847450][ T5647] usb 5-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[  155.851237][ T5647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.851276][ T5647] usb 5-1: Product: syz
[  155.851303][ T5647] usb 5-1: Manufacturer: syz
[  155.851329][ T5647] usb 5-1: SerialNumber: syz
[  155.940225][ T5647] whiteheat 5-1:1.0: required endpoints missing
[  156.315571][   T24] usb 5-1: USB disconnect, device number 3
[  156.432165][  T116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.445960][  T116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.448329][  T116] bond0 (unregistering): Released all slaves
[  157.326027][ T6140] 9p: Bad value for 'wfdno'
[  158.102733][ T6142] netlink: 'syz.2.61': attribute type 2 has an invalid length.
[  158.102764][ T6142] netlink: 'syz.2.61': attribute type 2 has an invalid length.
[  159.126509][ T6147] netlink: 'syz.5.63': attribute type 1 has an invalid length.
[  167.891401][  T116] hsr_slave_0: left promiscuous mode
[  167.899089][  T116] hsr_slave_1: left promiscuous mode
[  167.900152][  T116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.900189][  T116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.924608][  T116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.924637][  T116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.900006][  T116] veth1_macvtap: left promiscuous mode
[  168.900081][  T116] veth0_macvtap: left promiscuous mode
[  168.900231][  T116] veth1_vlan: left promiscuous mode
[  168.902012][  T116] veth0_vlan: left promiscuous mode
[  171.749074][  T116] team0 (unregistering): Port device team_slave_1 removed
[  173.087263][  T116] team0 (unregistering): Port device team_slave_0 removed
[  173.168973][ T6222] blktrace: Concurrent blktraces are not allowed on loop4
[  173.433675][ T1573] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  174.496665][ T6228] netlink: 'syz.5.76': attribute type 1 has an invalid length.
[  175.519416][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1
[  175.844093][ T1573] usb 4-1: device descriptor read/all, error -71
[  175.892096][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.892482][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.892668][ T6074] bridge_slave_0: entered allmulticast mode
[  175.900210][ T6074] bridge_slave_0: entered promiscuous mode
[  175.912334][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.915297][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.915457][ T6074] bridge_slave_1: entered allmulticast mode
[  175.927779][ T6074] bridge_slave_1: entered promiscuous mode
[  176.196586][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.221364][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.414270][ T6074] team0: Port device team_slave_0 added
[  176.425670][ T6074] team0: Port device team_slave_1 added
[  176.665413][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.665440][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.665490][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.681635][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.681658][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.681704][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.059315][ T6074] hsr_slave_0: entered promiscuous mode
[  177.062049][ T6074] hsr_slave_1: entered promiscuous mode
[  177.077953][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'.
[  177.095413][ T6074] debugfs: 'hsr0' already exists in 'hsr'
[  177.095446][ T6074] Cannot create hsr debugfs directory
[  177.270224][ T6254] overlayfs: conflicting options: userxattr,redirect_dir=on
[  177.443920][ T6257] gadgetfs: bound to dummy_udc driver
[  177.792690][ T5647] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  177.793247][    C0] gadgetfs: connected
[  177.808225][ T5647] gadgetfs: disconnected
[  178.037025][    C0] gadgetfs: connected
[  178.063787][ T6251] gadgetfs: suspended from state 3
[  178.063903][ T6251] gadgetfs: disconnected
[  178.088212][ T5647] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  178.163881][ T5647] usb 1-1: unable to read config index 0 descriptor/start: -71
[  178.163937][ T5647] usb 1-1: can't read configurations, error -71
[  178.771105][   T29] audit: type=1800 audit(1793271440.668:2): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.84" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  183.860623][ T6074] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  184.191780][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  184.272069][ T6074] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  184.735346][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  184.739240][ T6074] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  184.769266][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  184.770525][ T6074] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  184.810668][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  184.983027][ T6288] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  185.698719][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2
[  186.332955][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.430345][ T6074] 8021q: adding VLAN 0 to HW filter on device team0
[  188.610707][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.610806][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.787845][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.787987][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.167586][ T6320] blktrace: Concurrent blktraces are not allowed on loop4
[  189.573717][ T5647] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  190.786725][ T5647] usb 6-1: New USB device found: idVendor=0710, idProduct=8001, bcdDevice=1.00
[  190.788225][ T5647] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.788299][ T5647] usb 6-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[  191.334939][ T5647] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.365837][ T5647] usb 6-1: can't set config #1, error -71
[  191.383679][ T5647] usb 6-1: USB disconnect, device number 3
[  192.534929][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'.
[  192.916370][ T6358] IPv6: NLM_F_CREATE should be specified when creating new route
[  192.916649][ T6358] netlink: 'syz.4.89': attribute type 1 has an invalid length.
[  195.054114][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  195.054198][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  197.070180][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.385911][ T6393] gfs2: error -5 reading superblock
[  201.550867][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4
[  203.622777][ T6074] veth0_vlan: entered promiscuous mode
[  203.679987][ T6074] veth1_vlan: entered promiscuous mode
[  205.602198][   T53] Bluetooth: hci2: link tx timeout
[  205.602228][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  206.043957][ T6435] blktrace: Concurrent blktraces are not allowed on loop4
[  206.754437][  T989] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  206.796259][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.913044][  T989] usb 6-1: New USB device found: idVendor=0710, idProduct=8001, bcdDevice=1.00
[  206.923077][  T989] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.923147][  T989] usb 6-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[  206.960727][  T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.960770][  T989] usb 6-1: Product: syz
[  206.960798][  T989] usb 6-1: Manufacturer: syz
[  206.960826][  T989] usb 6-1: SerialNumber: syz
[  207.012605][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  207.013619][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  207.024584][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.026472][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  207.040743][  T989] whiteheat 6-1:1.0: required endpoints missing
[  207.045437][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.059003][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  207.090507][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  207.093730][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  207.109646][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  207.110476][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  207.349244][ T5647] usb 6-1: USB disconnect, device number 4
[  207.386550][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.653595][ T5652] Bluetooth: hci2: command 0x0406 tx timeout
[  208.235808][ T6458] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  209.466674][ T5652] Bluetooth: hci5: command tx timeout
[  209.468131][ T5652] Bluetooth: hci4: command tx timeout
[  209.721673][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.251028][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.478840][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3
[  211.084933][   T12] bridge_slave_1: left allmulticast mode
[  211.084997][   T12] bridge_slave_1: left promiscuous mode
[  211.085260][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.147808][   T12] bridge_slave_0: left allmulticast mode
[  211.147846][   T12] bridge_slave_0: left promiscuous mode
[  211.157648][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.493313][   T53] Bluetooth: hci4: command tx timeout
[  211.493357][   T53] Bluetooth: hci5: command tx timeout
[  213.558530][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.584208][ T5650] Bluetooth: hci5: command tx timeout
[  213.584252][ T5650] Bluetooth: hci4: command tx timeout
[  213.605464][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.636674][   T12] bond0 (unregistering): Released all slaves
[  213.924262][ T6443] rxe_eth0 speed is unknown, defaulting to 1000
[  214.249827][ T6498] netlink: 'syz.2.112': attribute type 1 has an invalid length.
[  215.678036][   T53] Bluetooth: hci4: command tx timeout
[  215.679316][   T53] Bluetooth: hci5: command tx timeout
[  219.911879][ T6441] rxe_eth0 speed is unknown, defaulting to 1000
[  220.760572][ T6529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  221.974790][ T5648] Bluetooth: hci3: command 0x0406 tx timeout
[  221.974856][ T5648] Bluetooth: hci0: command 0x0406 tx timeout
[  221.974906][ T5648] Bluetooth: hci1: command 0x0406 tx timeout
[  222.199791][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5
[  222.976632][ T6534] blktrace: Concurrent blktraces are not allowed on loop4
[  224.116585][ T5647] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  224.284144][ T5647] usb 3-1: New USB device found: idVendor=0710, idProduct=8001, bcdDevice=1.00
[  224.285902][ T5647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.286477][ T5647] usb 3-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[  224.293663][ T5647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.293702][ T5647] usb 3-1: Product: syz
[  224.293728][ T5647] usb 3-1: Manufacturer: syz
[  224.293754][ T5647] usb 3-1: SerialNumber: syz
[  224.415697][ T5647] whiteheat 3-1:1.0: required endpoints missing
[  224.572080][   T10] usb 3-1: USB disconnect, device number 2
[  226.060062][   T12] hsr_slave_0: left promiscuous mode
[  227.030659][   T12] hsr_slave_1: left promiscuous mode
[  227.031700][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.031729][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.179405][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.179438][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.276429][   T12] veth1_macvtap: left promiscuous mode
[  227.276482][   T12] veth0_macvtap: left promiscuous mode
[  227.276614][   T12] veth1_vlan: left promiscuous mode
[  227.276720][   T12] veth0_vlan: left promiscuous mode
[  228.784445][ T1013] rpcbind: server 127.0.0.1 not responding, timed out
[  231.066861][ T6577] netlink: 'syz.4.129': attribute type 1 has an invalid length.
[  231.806345][   T12] team0 (unregistering): Port device team_slave_1 removed
[  231.856828][   T12] team0 (unregistering): Port device team_slave_0 removed
[  233.322039][ T5298] 8021q: adding VLAN 0 to HW filter on device eth6
[  233.432768][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.432862][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.432977][ T6443] bridge_slave_0: entered allmulticast mode
[  233.462498][ T6443] bridge_slave_0: entered promiscuous mode
[  233.495139][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.495260][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.495426][ T6443] bridge_slave_1: entered allmulticast mode
[  233.651648][ T6443] bridge_slave_1: entered promiscuous mode
[  233.981134][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.021691][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.244731][ T6443] team0: Port device team_slave_0 added
[  234.267190][ T6443] team0: Port device team_slave_1 added
[  234.631505][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.631525][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  234.631561][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.736989][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.737009][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  234.737044][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.134055][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.145154][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.145281][ T6441] bridge_slave_0: entered allmulticast mode
[  236.166053][ T6441] bridge_slave_0: entered promiscuous mode
[  237.019064][ T6614] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.316167][ T6443] hsr_slave_0: entered promiscuous mode
[  238.328901][ T6443] hsr_slave_1: entered promiscuous mode
[  238.340015][ T6443] debugfs: 'hsr0' already exists in 'hsr'
[  238.340044][ T6443] Cannot create hsr debugfs directory
[  238.355222][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.355343][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.355500][ T6441] bridge_slave_1: entered allmulticast mode
[  238.367981][ T6441] bridge_slave_1: entered promiscuous mode
[  239.187895][ T6621] blktrace: Concurrent blktraces are not allowed on loop4
[  240.348464][  T989] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  240.422707][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.438979][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.494896][  T989] usb 3-1: New USB device found: idVendor=0710, idProduct=8001, bcdDevice=1.00
[  240.499684][  T989] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.499752][  T989] usb 3-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10
[  240.512795][  T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.512834][  T989] usb 3-1: Product: syz
[  240.512861][  T989] usb 3-1: Manufacturer: syz
[  240.512888][  T989] usb 3-1: SerialNumber: syz
[  240.579139][  T989] whiteheat 3-1:1.0: required endpoints missing
[  240.774884][  T989] usb 3-1: USB disconnect, device number 3
[  240.947726][ T6441] team0: Port device team_slave_0 added
[  240.985158][ T6441] team0: Port device team_slave_1 added
[  242.678436][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.678463][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.678511][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.873852][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.873878][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.873926][ T6441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.914612][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7
[  243.168265][ T6441] hsr_slave_0: entered promiscuous mode
[  243.169562][ T6441] hsr_slave_1: entered promiscuous mode
[  243.170470][ T6441] debugfs: 'hsr0' already exists in 'hsr'
[  243.170504][ T6441] Cannot create hsr debugfs directory
[  243.293607][ T5801] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  243.298833][   T12] bridge_slave_1: left allmulticast mode
[  243.298866][   T12] bridge_slave_1: left promiscuous mode
[  243.299112][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.344340][   T12] bridge_slave_0: left allmulticast mode
[  243.344369][   T12] bridge_slave_0: left promiscuous mode
[  243.344614][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.453574][ T5801] usb 5-1: Using ep0 maxpacket: 16
[  243.454355][ T5801] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  243.456629][ T5801] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  243.456679][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  243.461238][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.461278][ T5801] usb 5-1: Product: syz
[  243.461304][ T5801] usb 5-1: Manufacturer: syz
[  243.461330][ T5801] usb 5-1: SerialNumber: syz
[  243.536757][ T5801] usb 5-1: config 0 descriptor??
[  243.555397][ T5801] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  243.555453][ T5801] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  244.136437][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.160624][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.175927][ T5801] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  244.178331][   T12] bond0 (unregistering): Released all slaves
[  244.182003][ T5801] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  244.354172][ T5801] em28xx 5-1:0.0: AC97 command still being executed: not handled properly!
[  244.354208][ T5801] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  244.354234][ T5801] em28xx 5-1:0.0: No AC97 audio processor
[  244.406288][ T6643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  244.550691][ T1573] usb 5-1: USB disconnect, device number 4
[  244.561091][ T1573] em28xx 5-1:0.0: Disconnecting em28xx
[  244.608372][ T1573] em28xx: Freeing device
[  245.379629][   T12] hsr_slave_0: left promiscuous mode
[  245.380553][   T12] hsr_slave_1: left promiscuous mode
[  245.381590][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.382500][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.420543][   T12] veth1_vlan: left promiscuous mode
[  246.391685][   T12] veth0_vlan: left promiscuous mode
[  248.591201][ T6673] Bluetooth: MGMT ver 1.23
[  249.165861][   T12] team0 (unregistering): Port device team_slave_1 removed
[  249.206246][   T12] team0 (unregistering): Port device team_slave_0 removed
[  249.273567][ T5792] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  249.301136][ T6679] overlayfs: conflicting options: userxattr,redirect_dir=on
[  249.469607][ T6680] gadgetfs: bound to dummy_udc driver
[  249.543299][ T5792] usb 3-1: Using ep0 maxpacket: 16
[  249.580871][ T5792] usb 3-1: New USB device found: idVendor=05ac, idProduct=0269, bcdDevice=0.00
[  249.686039][ T5792] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  249.686105][ T5792] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.686152][ T5792] usb 3-1: config 0 interface 0 has no altsetting 0
[  249.747478][ T1573] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  249.747964][    C1] gadgetfs: connected
[  249.748422][ T1573] gadgetfs: disconnected
[  249.780617][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.893730][    C1] gadgetfs: connected
[  249.902191][ T1573] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  249.903100][ T1573] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  249.924305][ T1573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.132889][    C1] gadgetfs: configuration #1
[  250.256302][ T5792] usb 3-1: config 0 descriptor??
[  250.694123][   T53] Bluetooth: hci4: command 0x0405 tx timeout
[  252.421345][ T5792] usbhid 3-1:0.0: can't add hid device: -71
[  252.421477][ T5792] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  252.465501][ T5792] usb 3-1: USB disconnect, device number 4
[  252.537862][ T6680] gadgetfs: suspended from state 3
[  252.538485][  T989] usb 1-1: USB disconnect, device number 6
[  252.555398][ T6680] gadgetfs: disconnected
[  252.844790][ T6441] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  252.877150][ T6441] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  252.881281][ T6441] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  252.940753][ T6441] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  252.942578][ T6441] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  252.996993][ T6441] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  253.016890][ T6441] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  253.066816][ T6441] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  255.386490][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  255.386571][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  258.043782][ T6720] netlink: 'syz.2.155': attribute type 1 has an invalid length.
[  258.608739][ T6443] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  258.669908][ T6443] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  258.670944][ T6443] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  258.708064][ T6443] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  258.732934][ T6443] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  258.771465][ T6443] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  258.783795][ T6443] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  258.807960][ T6443] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  259.246348][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.369729][ T6441] 8021q: adding VLAN 0 to HW filter on device team0
[  259.394340][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.456286][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.456414][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.505221][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.505386][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.600300][ T6443] 8021q: adding VLAN 0 to HW filter on device team0
[  259.669222][ T3384] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.669356][ T3384] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.740166][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.740295][ T3384] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.848383][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8
[  260.551757][ T6752] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  263.803695][ T6762] netlink: 'syz.4.162': attribute type 1 has an invalid length.
[  264.092382][ T6762] 8021q: adding VLAN 0 to HW filter on device bond1
[  264.359150][ T6768] bond1: (slave veth3): Enslaving as an active interface with a down link
[  264.364562][ T6769] veth0_virt_wifi: entered promiscuous mode
[  264.413197][ T6776] overlayfs: conflicting options: userxattr,redirect_dir=on
[  264.447026][ T6769] bond1: (slave veth0_virt_wifi): making interface the new active one
[  264.575005][ T6780] gadgetfs: bound to dummy_udc driver
[  264.710348][ T6769] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link
[  264.823488][ T1573] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  264.823936][    C1] gadgetfs: connected
[  264.824425][ T1573] gadgetfs: disconnected
[  264.995496][    C1] gadgetfs: connected
[  265.025628][ T1573] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  265.051091][ T1573] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  265.051331][ T1573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.398932][    C1] gadgetfs: configuration #1
[  265.421837][ T6773] bond1: (slave veth0_virt_wifi): Releasing active interface
[  265.574825][ T5652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  265.583093][ T5652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  265.606897][ T5652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  265.634593][ T5652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  265.675930][ T5652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  267.711368][ T6775] gadgetfs: suspended from state 3
[  267.712343][   T44] usb 1-1: USB disconnect, device number 7
[  267.733071][ T6775] gadgetfs: disconnected
[  269.589875][   T53] Bluetooth: hci6: command tx timeout
[  271.336484][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  271.350667][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  271.360254][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  271.371619][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  271.372318][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  272.428269][ T5652] Bluetooth: hci6: command tx timeout
[  273.423381][ T5652] Bluetooth: hci4: command tx timeout
[  274.456685][ T5652] Bluetooth: hci6: command tx timeout
[  275.159608][ T6777] rxe_eth0 speed is unknown, defaulting to 1000
[  275.263544][ T3339] bridge_slave_1: left allmulticast mode
[  275.263582][ T3339] bridge_slave_1: left promiscuous mode
[  275.263839][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.298453][ T3339] bridge_slave_0: left allmulticast mode
[  275.298503][ T3339] bridge_slave_0: left promiscuous mode
[  275.314571][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.417329][ T6841] gfs2: error -5 reading superblock
[  275.493530][ T5652] Bluetooth: hci4: command tx timeout
[  277.632621][ T5652] Bluetooth: hci6: command tx timeout
[  277.632695][ T5652] Bluetooth: hci4: command tx timeout
[  279.673915][   T53] Bluetooth: hci4: command tx timeout
[  279.775591][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.815579][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.843118][ T3339] bond0 (unregistering): Released all slaves
[  281.085203][ T6802] rxe_eth0 speed is unknown, defaulting to 1000
[  284.539700][ T6887] random: crng reseeded on system resumption
[  284.732054][   T62] rpcbind: server 127.0.0.1 not responding, timed out
[  285.158452][ T3339] hsr_slave_0: left promiscuous mode
[  285.168716][ T3339] hsr_slave_1: left promiscuous mode
[  285.169714][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.185434][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.754606][ T6906] gfs2: error -5 reading superblock
[  286.916464][ T3339] team0 (unregistering): Port device team_slave_1 removed
[  286.978208][ T3339] team0 (unregistering): Port device team_slave_0 removed
[  287.099615][   T29] audit: type=1800 audit(1793271549.168:3): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.176" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  287.197195][ T5801] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  287.359357][ T5801] usb 5-1: Using ep0 maxpacket: 16
[  287.379554][ T5801] usb 5-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00
[  287.418752][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.418810][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  287.418859][ T5801] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  287.418927][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.534207][ T5801] usb 5-1: config 0 descriptor??
[  290.417457][ T5801] nintendo 0003:057E:2019.0001: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0
[  290.452378][ T5298] 8021q: adding VLAN 0 to HW filter on device eth11
[  290.619538][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.187'.
[  290.780227][ T6926] faux_driver vgem: [drm] Unknown color mode 58888; guessing buffer size.
[  290.899596][ T5801] nintendo 0003:057E:2019.0001: Failed to get joycon info; ret=-71
[  290.930248][ T5801] nintendo 0003:057E:2019.0001: Failed to retrieve controller info; ret=-71
[  290.931426][ T5801] nintendo 0003:057E:2019.0001: Failed to initialize controller; ret=-71
[  292.458203][ T5801] nintendo 0003:057E:2019.0001: probe - fail = -71
[  292.460197][ T5801] nintendo 0003:057E:2019.0001: probe with driver nintendo failed with error -71
[  292.971664][ T5801] usb 5-1: USB disconnect, device number 5
[  293.522618][ T6924] fido_id[6924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  295.801053][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.801188][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.801364][ T6777] bridge_slave_0: entered allmulticast mode
[  295.808152][ T6777] bridge_slave_0: entered promiscuous mode
[  295.834745][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.834852][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.834991][ T6777] bridge_slave_1: entered allmulticast mode
[  295.844193][ T6777] bridge_slave_1: entered promiscuous mode
[  295.880089][   T29] audit: type=1326 audit(1793271557.958:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  295.880417][   T29] audit: type=1326 audit(1793271557.958:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  295.882571][   T29] audit: type=1326 audit(1793271557.958:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  295.882882][   T29] audit: type=1326 audit(1793271557.958:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  295.883180][   T29] audit: type=1326 audit(1793271557.958:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  296.011614][   T29] audit: type=1326 audit(1793271558.098:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  296.064482][   T29] audit: type=1326 audit(1793271558.148:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  296.064987][   T29] audit: type=1326 audit(1793271558.148:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  296.130132][   T29] audit: type=1326 audit(1793271558.208:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  296.130215][   T29] audit: type=1326 audit(1793271558.208:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.4.189" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aed19f559 code=0x7ffc0000
[  297.265162][ T6777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.286206][ T6777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.515720][ T6962] netlink: 'syz.4.194': attribute type 1 has an invalid length.
[  298.083893][ T1573] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  298.246729][ T1573] usb 3-1: Using ep0 maxpacket: 32
[  298.301084][ T1573] usb 3-1: unable to get BOS descriptor or descriptor too short
[  298.301347][ T1573] usb 3-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=13.36
[  298.358562][ T1573] usb 3-1: config 6 interface 0 altsetting 6 endpoint 0x5 has an invalid bInterval 241, changing to 11
[  298.385150][ T1573] usb 3-1: config 6 interface 0 has no altsetting 0
[  298.466801][ T1573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.466904][ T1573] usb 3-1: Product: syz
[  298.466973][ T1573] usb 3-1: Manufacturer: syz
[  298.467021][ T1573] usb 3-1: SerialNumber: syz
[  299.180434][ T6777] team0: Port device team_slave_0 added
[  299.193579][ T6981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.195'.
[  300.971893][ T6777] team0: Port device team_slave_1 added
[  301.492329][ T1573] usb 3-1: USB disconnect, device number 5
[  301.661580][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.661606][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.661653][ T6777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.791793][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.791819][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.791869][ T6777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.867221][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.867426][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.867587][ T6802] bridge_slave_0: entered allmulticast mode
[  301.869522][ T6802] bridge_slave_0: entered promiscuous mode
[  301.958930][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.959053][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.959247][ T6802] bridge_slave_1: entered allmulticast mode
[  301.962007][ T6802] bridge_slave_1: entered promiscuous mode
[  304.067210][   T12] rpcbind: server 127.0.0.1 not responding, timed out
[  304.104713][ T6802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.134309][ T6777] hsr_slave_0: entered promiscuous mode
[  304.135515][ T6777] hsr_slave_1: entered promiscuous mode
[  304.136305][ T6777] debugfs: 'hsr0' already exists in 'hsr'
[  304.136332][ T6777] Cannot create hsr debugfs directory
[  304.172112][ T5298] 8021q: adding VLAN 0 to HW filter on device eth12
[  304.182471][ T6802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.299365][ T6802] team0: Port device team_slave_0 added
[  306.184691][ T6802] team0: Port device team_slave_1 added
[  306.556406][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.556433][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.556475][ T6802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.672308][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.672334][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.672381][ T6802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.914637][ T3339] bridge_slave_1: left allmulticast mode
[  306.914676][ T3339] bridge_slave_1: left promiscuous mode
[  306.914921][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.948777][ T3339] bridge_slave_0: left allmulticast mode
[  306.948818][ T3339] bridge_slave_0: left promiscuous mode
[  306.949073][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.902112][ T7038] overlayfs: conflicting options: userxattr,redirect_dir=on
[  309.048581][ T7043] gadgetfs: bound to dummy_udc driver
[  309.355375][ T5783] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  309.355837][    C1] gadgetfs: connected
[  309.356334][ T5783] gadgetfs: disconnected
[  310.169715][    C1] gadgetfs: connected
[  310.226659][ T5783] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  310.356929][ T5783] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  310.357100][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.472869][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.560645][    C1] gadgetfs: configuration #1
[  310.897083][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.997093][ T3339] bond0 (unregistering): Released all slaves
[  311.445909][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  311.445937][   T29] audit: type=1800 audit(1793271573.508:33): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.198" name=08 dev="sda1" ino=2052 res=0 errno=-4
[  311.583545][   T29] audit: type=1800 audit(1793271573.608:34): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.198" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  312.026798][ T7037] gadgetfs: suspended from state 3
[  312.034744][ T7037] gadgetfs: disconnected
[  312.038372][   T10] usb 1-1: USB disconnect, device number 8
[  312.833625][ T6802] hsr_slave_0: entered promiscuous mode
[  312.868931][ T6802] hsr_slave_1: entered promiscuous mode
[  312.884693][ T6802] debugfs: 'hsr0' already exists in 'hsr'
[  312.884722][ T6802] Cannot create hsr debugfs directory
[  314.984754][ T7067] gfs2: error -5 reading superblock
[  315.107545][ T7070] netlink: 'syz.2.216': attribute type 1 has an invalid length.
[  315.107577][ T7070] netlink: 96 bytes leftover after parsing attributes in process `syz.2.216'.
[  315.374632][ T5792] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  315.402971][ T3339] hsr_slave_0: left promiscuous mode
[  315.408664][ T3339] hsr_slave_1: left promiscuous mode
[  315.409685][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.418462][ T3339] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.531188][ T5792] usb 3-1: unable to get BOS descriptor or descriptor too short
[  315.531251][ T5792] usb 3-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40
[  315.532924][ T5792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.564857][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.564901][ T5792] usb 3-1: Product: syz
[  315.564929][ T5792] usb 3-1: Manufacturer: syz
[  315.564956][ T5792] usb 3-1: SerialNumber: syz
[  315.814907][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.823002][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.765916][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  316.766085][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  317.664260][ T7086] netlink: 'syz.3.211': attribute type 1 has an invalid length.
[  318.338840][ T5792] usb 3-1: unknown interface protocol 0x1, assuming v1
[  318.338878][ T5792] usb 3-1: cannot find UAC_HEADER
[  318.406095][ T3339] team0 (unregistering): Port device team_slave_1 removed
[  318.485593][ T3339] team0 (unregistering): Port device team_slave_0 removed
[  320.175294][ T5792] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  320.307124][ T5792] usb 3-1: USB disconnect, device number 6
[  320.456533][ T7057] udevd[7057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  320.743700][   T29] audit: type=1800 audit(1793271582.808:35): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.223" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  321.369967][ T7124] Bluetooth: MGMT ver 1.23
[  321.989906][ T7126] overlayfs: conflicting options: userxattr,redirect_dir=on
[  322.110050][ T7127] gadgetfs: bound to dummy_udc driver
[  322.363755][   T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  322.364375][    C0] gadgetfs: connected
[  322.364920][   T10] gadgetfs: disconnected
[  322.514331][    C0] gadgetfs: connected
[  322.520772][   T10] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  322.542369][   T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  322.542489][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.729691][    C0] gadgetfs: configuration #1
[  323.426003][ T7130] netlink: 'syz.2.226': attribute type 1 has an invalid length.
[  324.385377][ T5652] Bluetooth: hci4: command 0x0405 tx timeout
[  327.023111][ T7127] gadgetfs: suspended from state 3
[  327.026196][ T5783] usb 1-1: USB disconnect, device number 9
[  327.034822][ T7127] gadgetfs: disconnected
[  329.293679][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  329.296487][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  329.298403][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  329.299905][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  329.301703][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  331.413670][   T53] Bluetooth: hci5: command tx timeout
[  331.529953][ T7162] netlink: 'syz.4.233': attribute type 1 has an invalid length.
[  332.758633][ T5652] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  332.771625][ T5652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  332.780706][ T5652] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  332.795840][ T5652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  332.800958][ T5652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  333.503353][   T53] Bluetooth: hci5: command tx timeout
[  334.853788][   T53] Bluetooth: hci7: command tx timeout
[  334.943547][ T3015] bridge_slave_1: left allmulticast mode
[  334.943586][ T3015] bridge_slave_1: left promiscuous mode
[  334.944910][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.490682][ T3015] bridge_slave_0: left allmulticast mode
[  335.490800][ T3015] bridge_slave_0: left promiscuous mode
[  335.492521][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.576113][   T53] Bluetooth: hci5: command tx timeout
[  336.759648][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.780995][   T29] audit: type=1800 audit(1793271598.858:36): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.237" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  336.818204][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.850473][ T3015] bond0 (unregistering): Released all slaves
[  336.885760][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.228'.
[  336.934040][   T53] Bluetooth: hci7: command tx timeout
[  337.288818][ T7213] netlink: 'syz.5.239': attribute type 1 has an invalid length.
[  338.338084][   T53] Bluetooth: hci5: command tx timeout
[  339.013572][   T53] Bluetooth: hci7: command tx timeout
[  339.024961][ T7148] rxe_eth0 speed is unknown, defaulting to 1000
[  339.089993][ T7228] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  341.093305][   T53] Bluetooth: hci7: command tx timeout
[  342.114095][ T7243] netlink: 'syz.3.245': attribute type 1 has an invalid length.
[  342.575219][ T3015] hsr_slave_0: left promiscuous mode
[  342.590163][ T3015] hsr_slave_1: left promiscuous mode
[  342.591126][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.616548][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.953883][ T7256] capability: warning: `syz.2.247' uses deprecated v2 capabilities in a way that may be insecure
[  343.525872][ T7260] ALSA: seq fatal error: cannot create timer (-22)
[  343.990679][ T3015] team0 (unregistering): Port device team_slave_1 removed
[  344.085972][ T3015] team0 (unregistering): Port device team_slave_0 removed
[  344.921960][ T7275] process 'syz.3.251' launched './file0' with NULL argv: empty string added
[  349.139122][ T7286] nvmet: adding nsid 1 to subsystem testsubsys
[  349.162874][ T7177] rxe_eth0 speed is unknown, defaulting to 1000
[  349.611715][ T7290] overlayfs: conflicting options: userxattr,redirect_dir=on
[  349.792678][ T7291] gadgetfs: bound to dummy_udc driver
[  350.123988][ T5647] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  350.124443][    C0] gadgetfs: connected
[  350.135144][ T5647] gadgetfs: disconnected
[  350.285184][    C0] gadgetfs: connected
[  350.332639][ T5647] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  350.338720][ T5647] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  350.338777][ T5647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.579239][    C0] gadgetfs: configuration #1
[  351.556699][ T3384] bridge_slave_1: left allmulticast mode
[  351.558797][ T3384] bridge_slave_1: left promiscuous mode
[  351.580964][ T3384] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.701075][ T3384] bridge_slave_0: left allmulticast mode
[  351.701418][ T3384] bridge_slave_0: left promiscuous mode
[  351.706977][ T3384] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.891375][ T7288] gadgetfs: suspended from state 3
[  352.891433][ T7288] gadgetfs: disconnected
[  352.931870][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'.
[  352.941745][   T10] usb 1-1: USB disconnect, device number 10
[  355.178204][ T3384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.413512][ T3384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.444161][ T3384] bond0 (unregistering): Released all slaves
[  356.271409][ T7318] FAULT_INJECTION: forcing a failure.
[  356.271409][ T7318] name failslab, interval 1, probability 0, space 0, times 0
[  356.271461][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) 
[  356.271507][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  356.271534][ T7318] Call Trace:
[  356.271547][ T7318]  <TASK>
[  356.271561][ T7318]  dump_stack_lvl+0x100/0x190
[  356.271635][ T7318]  should_fail_ex.cold+0x5/0xa
[  356.271692][ T7318]  should_failslab+0xc2/0x120
[  356.271750][ T7318]  __kmalloc_noprof+0xfc/0x840
[  356.271798][ T7318]  ? x509_fabricate_name.isra.0+0x5ea/0xa10
[  356.271856][ T7318]  x509_fabricate_name.isra.0+0x5ea/0xa10
[  356.271906][ T7318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.271960][ T7318]  asn1_ber_decoder+0xd0c/0x2170
[  356.272033][ T7318]  ? __pfx_asn1_ber_decoder+0x10/0x10
[  356.272092][ T7318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.272148][ T7318]  ? kasan_save_track+0x14/0x30
[  356.272202][ T7318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.272251][ T7318]  ? __kasan_kmalloc+0xaa/0xb0
[  356.272311][ T7318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.272358][ T7318]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  356.272399][ T7318]  ? x509_cert_parse+0x162/0x910
[  356.272452][ T7318]  x509_cert_parse+0x1c9/0x910
[  356.272503][ T7318]  x509_key_preparse+0x65/0x9c0
[  356.272561][ T7318]  asymmetric_key_preparse+0xce/0x1d0
[  356.272598][ T7318]  ? __pfx_asymmetric_key_preparse+0x10/0x10
[  356.272639][ T7318]  __key_create_or_update+0x3f6/0xe10
[  356.272705][ T7318]  ? __pfx___key_create_or_update+0x10/0x10
[  356.272761][ T7318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.272809][ T7318]  ? lookup_user_key+0x58c/0x14f0
[  356.272863][ T7318]  ? __pfx_lookup_user_key+0x10/0x10
[  356.272955][ T7318]  key_create_or_update+0x42/0x60
[  356.273029][ T7318]  __do_sys_add_key+0x2e8/0x460
[  356.273072][ T7318]  ? __pfx___do_sys_add_key+0x10/0x10
[  356.273120][ T7318]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.273182][ T7318]  do_syscall_64+0x123/0x790
[  356.273242][ T7318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.273339][ T7318] RIP: 0033:0x7fc62c99f559
[  356.273368][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.273405][ T7318] RSP: 002b:00007fc62d7f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  356.273446][ T7318] RAX: ffffffffffffffda RBX: 00007fc62cc25fa0 RCX: 00007fc62c99f559
[  356.273475][ T7318] RDX: 0000200000000900 RSI: 0000000000000000 RDI: 00002000000008c0
[  356.273499][ T7318] RBP: 00007fc62ca36b20 R08: fffffffffffffffd R09: 0000000000000000
[  356.273527][ T7318] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  356.273552][ T7318] R13: 00007fc62cc26038 R14: 00007fc62cc25fa0 R15: 00007ffd6b95cc98
[  356.273604][ T7318]  </TASK>
[  359.493833][ T7334] netlink: 'syz.2.260': attribute type 1 has an invalid length.
[  360.058923][ T3384] hsr_slave_0: left promiscuous mode
[  360.082880][ T3384] hsr_slave_1: left promiscuous mode
[  360.092377][ T3384] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.104228][ T3384] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.566475][ T7349] Bluetooth: (null): Invalid header checksum
[  360.644697][ T7347] gfs2: error -5 reading superblock
[  363.922191][ T7357] gadgetfs: bound to dummy_udc driver
[  364.313381][ T5783] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  364.313794][    C1] gadgetfs: connected
[  364.314162][ T5783] gadgetfs: disconnected
[  364.463885][    C1] gadgetfs: connected
[  364.465814][ T5783] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  364.466783][ T5783] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  364.466927][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.543190][    C1] gadgetfs: configuration #1
[  365.579492][ T3384] team0 (unregistering): Port device team_slave_1 removed
[  366.160774][ T3384] team0 (unregistering): Port device team_slave_0 removed
[  366.639465][ T7358] gadgetfs: suspended from state 3
[  366.642493][ T5783] usb 1-1: USB disconnect, device number 11
[  366.646179][ T7358] gadgetfs: disconnected
[  367.062973][ T7370] xt_hashlimit: size too large, truncated to 1048576
[  368.475494][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.477234][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.477414][ T7148] bridge_slave_0: entered allmulticast mode
[  368.481931][ T7148] bridge_slave_0: entered promiscuous mode
[  368.662502][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.662626][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.662807][ T7148] bridge_slave_1: entered allmulticast mode
[  368.671094][ T7148] bridge_slave_1: entered promiscuous mode
[  368.979409][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.983094][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.999911][ T7177] bridge_slave_0: entered allmulticast mode
[  369.018793][ T7177] bridge_slave_0: entered promiscuous mode
[  369.049910][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.050124][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.052796][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.080807][ T7177] bridge_slave_1: entered allmulticast mode
[  369.102307][ T7177] bridge_slave_1: entered promiscuous mode
[  369.144612][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.365492][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.399171][ T7148] team0: Port device team_slave_0 added
[  369.411467][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.444116][ T7148] team0: Port device team_slave_1 added
[  370.730639][ T7177] team0: Port device team_slave_0 added
[  370.759658][ T7177] team0: Port device team_slave_1 added
[  370.760459][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.760480][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.760526][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.850459][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.850484][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.850550][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.787882][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.787909][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.787960][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.941621][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.941647][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.941694][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.137465][ T7148] hsr_slave_0: entered promiscuous mode
[  372.146607][ T7148] hsr_slave_1: entered promiscuous mode
[  372.156374][ T7148] debugfs: 'hsr0' already exists in 'hsr'
[  372.156405][ T7148] Cannot create hsr debugfs directory
[  376.093842][ T7177] hsr_slave_0: entered promiscuous mode
[  376.094891][ T7177] hsr_slave_1: entered promiscuous mode
[  376.097710][ T7177] debugfs: 'hsr0' already exists in 'hsr'
[  376.097740][ T7177] Cannot create hsr debugfs directory
[  377.343849][ T7447] 9p: Bad value for 'rfdno'
[  378.018036][   T50] rpcbind: server 127.0.0.1 not responding, timed out
[  378.140310][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  378.140398][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  378.679631][ T7460] gfs2: error -5 reading superblock
[  380.393033][ T7148] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  380.451379][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  380.459138][ T7148] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  380.483614][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  380.489461][ T7148] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  380.518893][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  380.526487][ T7148] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  380.559726][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  380.967595][ T7177] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  380.999641][ T7177] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  381.012889][ T7177] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  381.041665][ T7177] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  381.059141][ T7177] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  381.094921][ T7177] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  381.108287][ T7177] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  381.132234][ T7177] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  381.467753][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'.
[  381.695199][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.804400][ T7148] 8021q: adding VLAN 0 to HW filter on device team0
[  381.865340][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.896763][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.896888][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.962968][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.963104][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.244496][ T7177] 8021q: adding VLAN 0 to HW filter on device team0
[  383.201540][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.201636][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.284725][  T981] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.284852][  T981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.606935][ T7480] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  385.027597][   T29] audit: type=1800 audit(1793271647.098:37): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.291" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  390.556434][ T5652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  390.567546][ T5652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  390.573566][ T5652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  390.583054][ T5652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  390.586380][ T5652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  391.993014][ T5652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  392.005168][ T5652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  392.022417][ T5652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  392.045901][ T5652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  392.051378][ T5652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  392.693880][ T5652] Bluetooth: hci4: command tx timeout
[  393.010073][ T7566] netlink: 'syz.3.300': attribute type 2 has an invalid length.
[  393.718236][   T29] audit: type=1800 audit(1793271655.788:38): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.302" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  394.144029][   T53] Bluetooth: hci6: command tx timeout
[  394.784850][   T53] Bluetooth: hci4: command tx timeout
[  394.818029][ T7535] rxe_eth0 speed is unknown, defaulting to 1000
[  397.059051][   T53] Bluetooth: hci6: command tx timeout
[  397.059100][   T53] Bluetooth: hci4: command tx timeout
[  397.167186][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.303'.
[  397.433398][   T62] bridge_slave_1: left allmulticast mode
[  397.433428][   T62] bridge_slave_1: left promiscuous mode
[  397.433661][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.481691][   T62] bridge_slave_0: left allmulticast mode
[  397.481720][   T62] bridge_slave_0: left promiscuous mode
[  397.481951][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.392931][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  398.505253][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  398.570134][   T62] bond0 (unregistering): Released all slaves
[  399.036626][ T7547] rxe_eth0 speed is unknown, defaulting to 1000
[  399.103525][ T5652] Bluetooth: hci4: command tx timeout
[  399.103571][ T5652] Bluetooth: hci6: command tx timeout
[  399.294584][ T7621] gfs2: error -5 reading superblock
[  399.568832][ T7627] netlink: 'syz.5.312': attribute type 2 has an invalid length.
[  401.174306][   T53] Bluetooth: hci6: command tx timeout
[  401.287428][   T29] audit: type=1800 audit(1793271663.358:39): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.315" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  402.233345][ T7653] device-mapper: raid: Choosing default region size of 4MiB
[  402.235038][ T7653] device-mapper: raid: Device 0 specified for rebuild; clearing superblock
[  402.346429][ T7653] mdX: WARNING: ram9 appears to be on the same physical disk as ram9.
[  402.346464][ T7653] True protection against single-disk failure might be compromised.
[  402.346482][ T7653] md/raid:mdX: not enough configured devices (3, minimum 4)
[  402.346503][ T7653] md: pers->run() failed ...
[  403.104271][ T7674] Bluetooth: MGMT ver 1.23
[  403.615260][ T7653] device-mapper: table: 248:1: raid: Failed to run raid array (-EINVAL)
[  403.615298][ T7653] device-mapper: ioctl: error adding target to table
[  403.828712][   T62] hsr_slave_0: left promiscuous mode
[  403.855350][   T62] hsr_slave_1: left promiscuous mode
[  403.860635][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.869049][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.183342][ T5652] Bluetooth: hci4: command 0x0405 tx timeout
[  405.718242][ T7696] gfs2: error -5 reading superblock
[  405.842946][ T7702] netlink: 'syz.2.327': attribute type 2 has an invalid length.
[  405.928444][   T62] team0 (unregistering): Port device team_slave_1 removed
[  405.956534][   T62] team0 (unregistering): Port device team_slave_0 removed
[  406.167057][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.167184][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.167330][ T7535] bridge_slave_0: entered allmulticast mode
[  406.170994][ T7535] bridge_slave_0: entered promiscuous mode
[  406.203064][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.203187][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.208088][ T7535] bridge_slave_1: entered allmulticast mode
[  406.217548][ T7535] bridge_slave_1: entered promiscuous mode
[  406.621441][ T7716] netlink: 'syz.5.330': attribute type 1 has an invalid length.
[  407.997451][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.029361][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.181151][ T7535] team0: Port device team_slave_0 added
[  408.201812][ T7535] team0: Port device team_slave_1 added
[  409.300932][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.300959][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.301007][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.544333][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.544360][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.544407][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.688334][ T7535] hsr_slave_0: entered promiscuous mode
[  410.691562][ T7535] hsr_slave_1: entered promiscuous mode
[  410.699855][ T7535] debugfs: 'hsr0' already exists in 'hsr'
[  410.699889][ T7535] Cannot create hsr debugfs directory
[  412.421098][ T7771] netlink: 'syz.3.343': attribute type 2 has an invalid length.
[  412.698986][ T7776] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[  416.333847][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.337927][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.338110][ T7547] bridge_slave_0: entered allmulticast mode
[  416.365945][ T7547] bridge_slave_0: entered promiscuous mode
[  416.533839][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.533961][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.534146][ T7547] bridge_slave_1: entered allmulticast mode
[  416.545233][ T7547] bridge_slave_1: entered promiscuous mode
[  418.738943][ T7547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.838004][ T7547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.918759][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9
[  418.975022][ T7547] team0: Port device team_slave_0 added
[  419.051553][ T7547] team0: Port device team_slave_1 added
[  419.445945][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.445972][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.446020][ T7547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.455554][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.455577][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.455622][ T7547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.548925][   T62] bridge_slave_1: left allmulticast mode
[  419.548965][   T62] bridge_slave_1: left promiscuous mode
[  419.549236][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.578733][   T62] bridge_slave_0: left allmulticast mode
[  419.578769][   T62] bridge_slave_0: left promiscuous mode
[  419.579028][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.655175][ T1013] rpcbind: server 127.0.0.1 not responding, timed out
[  422.119998][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  422.145721][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.163658][   T62] bond0 (unregistering): Released all slaves
[  422.360052][ T7836] jffs2: notice: (7836) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  424.247357][ T7547] hsr_slave_0: entered promiscuous mode
[  424.251152][ T7547] hsr_slave_1: entered promiscuous mode
[  424.253694][ T7547] debugfs: 'hsr0' already exists in 'hsr'
[  424.253722][ T7547] Cannot create hsr debugfs directory
[  424.329864][ T7842] netlink: 'syz.2.357': attribute type 2 has an invalid length.
[  424.743067][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.360'.
[  425.230013][   T62] hsr_slave_0: left promiscuous mode
[  425.240101][   T62] hsr_slave_1: left promiscuous mode
[  425.241160][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.259630][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.630749][ T7869] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  427.792400][   T62] team0 (unregistering): Port device team_slave_1 removed
[  427.862140][   T62] team0 (unregistering): Port device team_slave_0 removed
[  428.372395][ T7878] gadgetfs: bound to dummy_udc driver
[  428.714937][ T5801] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  428.715509][    C0] gadgetfs: connected
[  428.716185][ T5801] gadgetfs: disconnected
[  428.869539][    C0] gadgetfs: connected
[  428.886914][ T5801] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  428.888552][ T5801] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  428.890114][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.066982][    C0] gadgetfs: configuration #1
[  431.359185][ T7876] gadgetfs: suspended from state 3
[  431.363435][ T7876] gadgetfs: disconnected
[  431.389723][ T5801] usb 1-1: USB disconnect, device number 12
[  432.015025][ T7889] ALSA: mixer_oss: invalid OSS volume 'LIN'
[  432.409091][ T7535] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  432.863174][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  432.924550][ T7535] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  433.170251][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  433.227773][ T7535] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  433.484710][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  433.541579][ T7535] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  433.752052][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  435.803287][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.954958][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[  436.006899][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.007018][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.087465][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.087597][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.173090][ T7547] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  436.204492][ T7547] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  436.208708][ T7547] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  436.238650][ T7547] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  436.264564][ T7547] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  436.277104][ T7547] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.320807][ T7547] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  436.338605][ T7547] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  436.828108][ T7547] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.912806][ T7547] 8021q: adding VLAN 0 to HW filter on device team0
[  436.952959][  T116] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.953058][  T116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.987874][  T116] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.987979][  T116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.599411][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.085472][ T7547] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.577778][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  439.577857][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  439.582871][ T7535] veth0_vlan: entered promiscuous mode
[  439.620172][ T7535] veth1_vlan: entered promiscuous mode
[  439.745855][ T7535] veth0_macvtap: entered promiscuous mode
[  439.768387][ T7535] veth1_macvtap: entered promiscuous mode
[  439.831533][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.868816][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.965855][ T6039] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.966061][ T6039] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.966448][ T6039] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.993438][ T3015] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.146847][ T7547] veth0_vlan: entered promiscuous mode
[  440.184801][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.184832][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.201204][ T7547] veth1_vlan: entered promiscuous mode
[  440.275929][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.275960][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.326468][ T7547] veth0_macvtap: entered promiscuous mode
[  440.332425][ T7547] veth1_macvtap: entered promiscuous mode
[  440.360724][ T7547] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.384239][ T7547] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.435817][ T6039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.436239][ T6039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.467420][ T3006] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.469907][ T6039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.535279][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.535312][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.582728][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.582759][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.945292][ T8005] netlink: 'syz.3.372': attribute type 1 has an invalid length.
[  490.840230][ T8074] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  492.006738][   T12] rpcbind: server 127.0.0.1 not responding, timed out
[  492.313887][ T8080] overlayfs: conflicting options: userxattr,redirect_dir=on
[  492.445103][ T8083] gadgetfs: bound to dummy_udc driver
[  493.045045][ T8084] gfs2: error -5 reading superblock
[  493.164288][ T5647] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  493.164535][    C0] gadgetfs: connected
[  493.268672][ T5647] gadgetfs: disconnected
[  493.573916][    C0] gadgetfs: connected
[  493.962422][ T5647] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  493.987121][ T5647] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  493.988509][ T5647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.189325][    C0] gadgetfs: configuration #1
[  495.391029][ T3339] IPVS: starting estimator thread 0...
[  495.473387][ T8087] IPVS: using max 24 ests per chain, 57600 per kthread
[  495.502280][ T8079] gadgetfs: suspended from state 3
[  495.502929][  T989] usb 1-1: USB disconnect, device number 13
[  495.517265][ T8079] gadgetfs: disconnected
[  495.975841][   T53] Bluetooth: hci3: unexpected event for opcode 0x041c
[  496.838168][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  496.841161][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  496.849563][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  496.865097][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  496.866379][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  496.997275][ T5652] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  496.999162][ T5652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  496.999835][ T5652] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  497.001178][ T5652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  497.001942][ T5652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  497.487273][   T29] audit: type=1800 audit(1793272021.562:40): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.389" name=08 dev="sda1" ino=2052 res=0 errno=-22
[  498.933461][   T53] Bluetooth: hci5: command tx timeout
[  499.106627][   T53] Bluetooth: hci7: command tx timeout
[  499.194249][  T116] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.685776][  T116] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.779691][ T8097] rxe_eth0 speed is unknown, defaulting to 1000
[  499.922235][  T116] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.832495][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  501.832593][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  501.835199][ T5652] Bluetooth: hci7: command tx timeout
[  501.835298][   T53] Bluetooth: hci5: command tx timeout
[  502.126781][ T5801] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  502.152382][  T116] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.274129][ T5801] usb 7-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00
[  502.275482][ T5801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  502.275549][ T5801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.321233][ T5801] usb 7-1: config 0 descriptor??
[  502.329467][ T8139] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  502.578031][ T5801] usbhid 7-1:0.0: can't add hid device: -71
[  502.578172][ T5801] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  502.622706][ T5801] usb 7-1: USB disconnect, device number 2
[  502.685071][  T116] bridge_slave_1: left allmulticast mode
[  502.685099][  T116] bridge_slave_1: left promiscuous mode
[  502.685289][  T116] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.729030][  T116] bridge_slave_0: left allmulticast mode
[  502.729067][  T116] bridge_slave_0: left promiscuous mode
[  502.729355][  T116] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.775330][ T8149] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  504.124325][ T5652] Bluetooth: hci5: command tx timeout
[  504.124371][ T5652] Bluetooth: hci7: command tx timeout
[  506.408055][ T5650] Bluetooth: hci5: command tx timeout
[  506.408123][   T53] Bluetooth: hci7: command tx timeout
[  506.950171][  T116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.992817][  T116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.019672][  T116] bond0 (unregistering): Released all slaves
[  507.077954][ T8094] rxe_eth0 speed is unknown, defaulting to 1000
[  507.332568][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  507.345671][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  507.353436][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  507.364750][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  507.373494][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  507.712755][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9
[  509.691895][ T5650] Bluetooth: hci0: command tx timeout
[  510.741781][  T116] hsr_slave_0: left promiscuous mode
[  510.759153][  T116] hsr_slave_1: left promiscuous mode
[  510.760297][  T116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.760336][  T116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.797165][  T116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.797196][  T116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.851050][  T116] veth1_macvtap: left promiscuous mode
[  510.851099][  T116] veth0_macvtap: left promiscuous mode
[  510.851319][  T116] veth1_vlan: left promiscuous mode
[  510.851408][  T116] veth0_vlan: left promiscuous mode
[  512.919386][ T5650] Bluetooth: hci0: command tx timeout
[  513.972971][ T8226] syz.6.408 uses obsolete (PF_INET,SOCK_PACKET)
[  514.467834][  T116] team0 (unregistering): Port device team_slave_1 removed
[  514.517085][  T116] team0 (unregistering): Port device team_slave_0 removed
[  514.933304][   T53] Bluetooth: hci0: command tx timeout
[  517.013563][   T53] Bluetooth: hci0: command tx timeout
[  517.308804][ T8223] lo: entered promiscuous mode
[  518.555251][ T8240] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  518.855304][   T53] Bluetooth: hci6: command 0x0406 tx timeout
[  518.980224][ T8223] tunl0: entered promiscuous mode
[  518.982630][ T8223] gre0: entered promiscuous mode
[  519.009811][ T8223] gretap0: entered promiscuous mode
[  519.028960][ T8223] erspan0: entered promiscuous mode
[  519.032641][ T8223] ip_vti0: entered promiscuous mode
[  519.046929][ T8223] ip6_vti0: entered promiscuous mode
[  519.050263][ T8223] sit0: entered promiscuous mode
[  519.069078][ T8223] ip6tnl0: entered promiscuous mode
[  519.072107][ T8223] ip6gre0: entered promiscuous mode
[  519.089236][ T8223] syz_tun: entered promiscuous mode
[  519.102340][ T8223] ip6gretap0: entered promiscuous mode
[  519.112097][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.113638][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.130258][ T8223] bridge0: entered promiscuous mode
[  519.140054][ T8223] vcan0: entered promiscuous mode
[  519.141664][ T8223] bond0: entered promiscuous mode
[  519.141690][ T8223] bond_slave_0: entered promiscuous mode
[  519.142014][ T8223] bond_slave_1: entered promiscuous mode
[  519.174051][ T8223] team0: entered promiscuous mode
[  519.174086][ T8223] team_slave_0: entered promiscuous mode
[  519.174338][ T8223] team_slave_1: entered promiscuous mode
[  519.187269][ T8223] dummy0: entered promiscuous mode
[  519.204502][ T8223] nlmon0: entered promiscuous mode
[  519.211604][ T8223] batadv0: entered promiscuous mode
[  519.221048][ T8223] vxcan0: entered promiscuous mode
[  519.225251][ T8223] vxcan1: entered promiscuous mode
[  519.229811][ T8223] veth0: entered promiscuous mode
[  519.241390][ T8223] veth1: entered promiscuous mode
[  519.261189][ T8223] wg0: entered promiscuous mode
[  519.271579][ T8223] wg1: entered promiscuous mode
[  519.280766][ T8223] wg2: entered promiscuous mode
[  519.286313][ T8223] veth0_to_bridge: entered promiscuous mode
[  519.301756][ T8223] veth1_to_bridge: entered promiscuous mode
[  519.322867][ T8223] veth0_to_bond: entered promiscuous mode
[  519.332882][ T8223] veth1_to_bond: entered promiscuous mode
[  519.348795][ T8223] veth0_to_team: entered promiscuous mode
[  519.364688][ T8223] veth1_to_team: entered promiscuous mode
[  519.380223][ T8223] veth0_to_batadv: entered promiscuous mode
[  519.389347][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  519.389416][ T8223] batadv_slave_0: entered promiscuous mode
[  519.397685][ T8223] veth1_to_batadv: entered promiscuous mode
[  519.405776][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  519.405842][ T8223] batadv_slave_1: entered promiscuous mode
[  519.419266][ T8223] xfrm0: entered promiscuous mode
[  519.427874][ T8223] veth0_to_hsr: entered promiscuous mode
[  519.449070][ T8223] veth1_to_hsr: entered promiscuous mode
[  519.464953][ T8223] hsr0: entered promiscuous mode
[  519.474557][ T8223] veth1_virt_wifi: entered promiscuous mode
[  519.479969][ T8223] veth0_virt_wifi: entered promiscuous mode
[  519.490281][ T8223] virt_wifi0: entered promiscuous mode
[  519.507247][ T8223] vlan0: entered promiscuous mode
[  519.518569][ T8223] vlan1: entered promiscuous mode
[  519.531977][ T8223] macvlan0: entered promiscuous mode
[  519.545521][ T8223] macvlan1: entered promiscuous mode
[  519.549483][ T8223] ipvlan0: entered promiscuous mode
[  519.549766][ T8223] ipvlan1: entered promiscuous mode
[  519.580217][ T8223] macvtap0: entered promiscuous mode
[  519.584126][ T8223] macsec0: entered promiscuous mode
[  519.598791][ T8223] geneve0: entered promiscuous mode
[  519.606086][ T8223] geneve1: entered promiscuous mode
[  519.625444][ T8223] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  519.640623][ T8223] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[  519.656016][ T8223] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[  519.659600][ T8223] netdevsim netdevsim6 netdevsim3: entered promiscuous mode
[  519.719804][ T8223] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  519.751991][ T8223] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  519.774164][ T5298] 8021q: adding VLAN 0 to HW filter on device eth10
[  519.866485][ T8170] rxe_eth0 speed is unknown, defaulting to 1000
[  519.894986][  T981] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.922763][  T981] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.938476][  T981] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.938551][  T981] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  522.252154][ T8253] netlink: 'syz.4.418': attribute type 1 has an invalid length.
[  524.324914][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.326688][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.326873][ T8097] bridge_slave_0: entered allmulticast mode
[  524.341656][ T8097] bridge_slave_0: entered promiscuous mode
[  524.602303][  T116] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.688286][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.688416][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.688621][ T8097] bridge_slave_1: entered allmulticast mode
[  524.697739][ T8097] bridge_slave_1: entered promiscuous mode
[  526.694904][ T5298] 8021q: adding VLAN 0 to HW filter on device eth11
[  526.708326][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.788816][  T116] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.810065][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.939492][ T8097] team0: Port device team_slave_0 added
[  526.990721][  T116] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.012245][ T8097] team0: Port device team_slave_1 added
[  527.166167][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.166290][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.166451][ T8094] bridge_slave_0: entered allmulticast mode
[  527.174669][ T8094] bridge_slave_0: entered promiscuous mode
[  527.248372][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.248399][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.248448][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.251266][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.251385][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.251834][ T8094] bridge_slave_1: entered allmulticast mode
[  527.266019][ T8094] bridge_slave_1: entered promiscuous mode
[  527.414541][  T116] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.459671][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.459697][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.459747][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.709561][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.791731][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.860025][ T8097] hsr_slave_0: entered promiscuous mode
[  528.864782][ T8097] hsr_slave_1: entered promiscuous mode
[  528.865661][ T8097] debugfs: 'hsr0' already exists in 'hsr'
[  528.865690][ T8097] Cannot create hsr debugfs directory
[  528.960834][ T8094] team0: Port device team_slave_0 added
[  529.321623][ T8094] team0: Port device team_slave_1 added
[  530.767481][ T5298] 8021q: adding VLAN 0 to HW filter on device eth12
[  530.846646][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.846676][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.848278][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.856812][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.856839][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.856890][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.148198][ T8327] tmpfs: Using encoding : utf8-12.1.0
[  532.148232][ T8327] tmpfs: Unknown parameter 'stribt_encoding'
[  534.230591][  T116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.815396][ T8094] hsr_slave_0: entered promiscuous mode
[  536.817208][ T8094] hsr_slave_1: entered promiscuous mode
[  536.820394][ T8094] debugfs: 'hsr0' already exists in 'hsr'
[  536.820425][ T8094] Cannot create hsr debugfs directory
[  538.959336][  T116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.927777][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.927904][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.928074][ T8170] bridge_slave_0: entered allmulticast mode
[  539.938008][ T8170] bridge_slave_0: entered promiscuous mode
[  539.960810][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.962655][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.962863][ T8170] bridge_slave_1: entered allmulticast mode
[  539.978861][ T8170] bridge_slave_1: entered promiscuous mode
[  542.010158][  T116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.226100][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.284988][ T5647] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  542.357563][  T116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.433470][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.444119][ T5647] usb 3-1: Using ep0 maxpacket: 32
[  542.447988][ T5647] usb 3-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  542.451926][ T5647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.464742][ T5647] usb 3-1: config 0 descriptor??
[  542.581429][ T5647] as10x_usb: device has been detected
[  542.590373][ T5647] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  542.699463][ T5647] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  542.732930][ T8374] ------------[ cut here ]------------
[  542.732950][ T8374] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  542.732964][ T8374] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x93f/0x1c10, CPU#0: syz.2.438/8374
[  542.755668][ T8374] Modules linked in:
[  542.760214][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.2.438 Not tainted syzkaller #0 PREEMPT(full) 
[  542.770036][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  542.780204][ T8374] RIP: 0010:__mutex_lock+0x946/0x1c10
[  542.785875][ T8374] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 75 12 00 00 44 8b 05 4d 82 7d 06 45 85 c0 75 13 48 8d 3d c1 90 80 06 48 c7 c6 60 fd 0f 8c <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8
[  542.805579][ T8374] RSP: 0018:ffffc90003107a40 EFLAGS: 00010246
[  542.811702][ T8374] RAX: 0000000000000003 RBX: ffff888023ffcb30 RCX: 1ffffffff24d4cc8
[  542.819758][ T8374] RDX: 0000000000000000 RSI: ffffffff8c0ffd60 RDI: ffffffff926d74c0
[  542.827802][ T8374] RBP: ffffc90003107bb0 R08: 0000000000000000 R09: 0000000000000000
[  542.835844][ T8374] R10: ffffffff926a6647 R11: 0000000000000000 R12: 0000000000000000
[  542.841909][ T8097] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  542.850555][ T8374] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000200000000
[  542.859069][ T8374] FS:  00007fc62d7f16c0(0000) GS:ffff88812248b000(0000) knlGS:0000000000000000
[  542.868492][ T8374] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  542.875140][ T8374] CR2: 0000555b408d5480 CR3: 0000000034f1f000 CR4: 0000000000350ef0
[  542.883141][ T8374] Call Trace:
[  542.886463][ T8374]  <TASK>
[  542.889407][ T8374]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[  542.895167][ T8374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  542.900840][ T8374]  ? __mutex_lock+0x267/0x1c10
[  542.905835][ T8374]  ? dmx_ts_feed_start_filtering+0x50/0x220
[  542.911796][ T8374]  ? __pfx___mutex_lock+0x10/0x10
[  542.916901][ T8374]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  542.922920][ T8374]  ? _raw_spin_lock_irq+0x45/0x50
[  542.928044][ T8374]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[  542.934049][ T8374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  542.939732][ T8374]  as102_dvb_dmx_start_feed+0x7d/0x2e0
[  542.945279][ T8374]  ? __pfx_as102_dvb_dmx_start_feed+0x10/0x10
[  542.951387][ T8374]  dmx_ts_feed_start_filtering+0xf6/0x220
[  542.957205][ T8374]  dvb_dmxdev_start_feed+0x273/0x3f0
[  542.963018][ T8374]  dvb_dmxdev_filter_start+0x1b6/0xdd0
[  542.968944][ T8374]  ? dvb_dmxdev_add_pid+0x2a4/0x4f0
[  542.974240][ T8374]  dvb_demux_do_ioctl+0xe64/0x1200
[  542.979405][ T8374]  dvb_usercopy+0x167/0x340
[  542.984008][ T8374]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  542.989610][ T8374]  ? __pfx_dvb_usercopy+0x10/0x10
[  542.994777][ T8374]  ? __fget_files+0x34/0x3d0
[  542.999430][ T8374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.005162][ T8374]  ? __fget_files+0x21f/0x3d0
[  543.009901][ T8374]  dvb_demux_ioctl+0x29/0x40
[  543.014882][ T8374]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  543.020207][ T8374]  __x64_sys_ioctl+0x18e/0x210
[  543.025095][ T8374]  do_syscall_64+0x123/0x790
[  543.029736][ T8374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.035711][ T8374] RIP: 0033:0x7fc62c99f559
[  543.040147][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.059855][ T8374] RSP: 002b:00007fc62d7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  543.068883][ T8374] RAX: ffffffffffffffda RBX: 00007fc62cc25fa0 RCX: 00007fc62c99f559
[  543.077371][ T8374] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004
[  543.085426][ T8374] RBP: 00007fc62ca36b20 R08: 0000000000000000 R09: 0000000000000000
[  543.093445][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  543.101464][ T8374] R13: 00007fc62cc26038 R14: 00007fc62cc25fa0 R15: 00007ffd6b95cc98
[  543.109531][ T8374]  </TASK>
[  543.112581][ T8374] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  543.119873][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.2.438 Not tainted syzkaller #0 PREEMPT(full) 
[  543.129095][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  543.139159][ T8374] Call Trace:
[  543.142438][ T8374]  <TASK>
[  543.145367][ T8374]  dump_stack_lvl+0x100/0x190
[  543.150083][ T8374]  vpanic+0x2dc/0x6f8
[  543.154083][ T8374]  panic+0xd1/0xe0
[  543.157818][ T8374]  ? __pfx_panic+0x10/0x10
[  543.162258][ T8374]  check_panic_on_warn.cold+0x19/0x34
[  543.167650][ T8374]  ? __mutex_lock+0x93f/0x1c10
[  543.172439][ T8374]  __warn.cold+0x191/0x321
[  543.176876][ T8374]  __report_bug+0x30f/0x440
[  543.181405][ T8374]  ? __mutex_lock+0x93f/0x1c10
[  543.186218][ T8374]  ? __pfx___report_bug+0x10/0x10
[  543.191270][ T8374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.196939][ T8374]  report_bug_entry+0xe2/0x290
[  543.201766][ T8374]  ? __mutex_lock+0x946/0x1c10
[  543.206558][ T8374]  handle_bug+0x1cd/0x2a0
[  543.210926][ T8374]  exc_invalid_op+0x17/0x50
[  543.215459][ T8374]  asm_exc_invalid_op+0x1a/0x20
[  543.220588][ T8374] RIP: 0010:__mutex_lock+0x946/0x1c10
[  543.225985][ T8374] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 75 12 00 00 44 8b 05 4d 82 7d 06 45 85 c0 75 13 48 8d 3d c1 90 80 06 48 c7 c6 60 fd 0f 8c <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8
[  543.245618][ T8374] RSP: 0018:ffffc90003107a40 EFLAGS: 00010246
[  543.251711][ T8374] RAX: 0000000000000003 RBX: ffff888023ffcb30 RCX: 1ffffffff24d4cc8
[  543.259693][ T8374] RDX: 0000000000000000 RSI: ffffffff8c0ffd60 RDI: ffffffff926d74c0
[  543.267679][ T8374] RBP: ffffc90003107bb0 R08: 0000000000000000 R09: 0000000000000000
[  543.275674][ T8374] R10: ffffffff926a6647 R11: 0000000000000000 R12: 0000000000000000
[  543.283668][ T8374] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000200000000
[  543.291674][ T8374]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[  543.297343][ T8374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.303011][ T8374]  ? __mutex_lock+0x267/0x1c10
[  543.307810][ T8374]  ? dmx_ts_feed_start_filtering+0x50/0x220
[  543.313762][ T8374]  ? __pfx___mutex_lock+0x10/0x10
[  543.318933][ T8374]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  543.324951][ T8374]  ? _raw_spin_lock_irq+0x45/0x50
[  543.330050][ T8374]  ? as102_dvb_dmx_start_feed+0x7d/0x2e0
[  543.335713][ T8374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.341374][ T8374]  as102_dvb_dmx_start_feed+0x7d/0x2e0
[  543.346863][ T8374]  ? __pfx_as102_dvb_dmx_start_feed+0x10/0x10
[  543.352962][ T8374]  dmx_ts_feed_start_filtering+0xf6/0x220
[  543.358726][ T8374]  dvb_dmxdev_start_feed+0x273/0x3f0
[  543.364045][ T8374]  dvb_dmxdev_filter_start+0x1b6/0xdd0
[  543.369569][ T8374]  ? dvb_dmxdev_add_pid+0x2a4/0x4f0
[  543.374799][ T8374]  dvb_demux_do_ioctl+0xe64/0x1200
[  543.379944][ T8374]  dvb_usercopy+0x167/0x340
[  543.384463][ T8374]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  543.390033][ T8374]  ? __pfx_dvb_usercopy+0x10/0x10
[  543.395074][ T8374]  ? __fget_files+0x34/0x3d0
[  543.399719][ T8374]  ? srso_alias_return_thunk+0x5/0xfbef5
[  543.405376][ T8374]  ? __fget_files+0x21f/0x3d0
[  543.410099][ T8374]  dvb_demux_ioctl+0x29/0x40
[  543.414709][ T8374]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  543.420045][ T8374]  __x64_sys_ioctl+0x18e/0x210
[  543.424837][ T8374]  do_syscall_64+0x123/0x790
[  543.429458][ T8374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.435369][ T8374] RIP: 0033:0x7fc62c99f559
[  543.439788][ T8374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.459428][ T8374] RSP: 002b:00007fc62d7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  543.467857][ T8374] RAX: ffffffffffffffda RBX: 00007fc62cc25fa0 RCX: 00007fc62c99f559
[  543.475836][ T8374] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004
[  543.483814][ T8374] RBP: 00007fc62ca36b20 R08: 0000000000000000 R09: 0000000000000000
[  543.491791][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  543.499786][ T8374] R13: 00007fc62cc26038 R14: 00007fc62cc25fa0 R15: 00007ffd6b95cc98
[  543.507949][ T8374]  </TASK>
[  543.511185][ T8374] Kernel Offset: disabled
[  543.515501][ T8374] Rebooting in 86400 seconds..