last executing test programs:

4m50.271641962s ago: executing program 2 (id=186):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7800, 0x8, 0x9, 0x1}})
unshare(0x26020480)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_int(r2, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85)

4m46.944115998s ago: executing program 2 (id=190):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060009"], 0x38}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x3, 0x5)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
r5 = dup2(r3, r4)
mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0)
read(r6, &(0x7f0000000500)=""/1024, 0x400)
read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020)
write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48)
mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x2, 0x11b, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2b)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000053d2)

4m44.757732171s ago: executing program 2 (id=196):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x400, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd)
write(r1, &(0x7f0000000200)='1', 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m43.343200164s ago: executing program 2 (id=200):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
fanotify_init(0x20, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000800)='file *evio.c +', 0xe)

4m41.870095625s ago: executing program 2 (id=202):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4b)
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r7, &(0x7f0000000280)="719089bbe10c5c9b9ca4d2b606003d6831896da05fa6b6c8448123714abb4f5fc4ed5e185551a678577a51ad1e43d315aef4a2ca5003ab862f744407693658fa6a23bf9f2973f646c6bd398a169521cc6ec59c4931617765f9674d0454e39b28aee5e71cf139fd152eac64ef74020b8bf100640a32eb739b93947b83", 0x7c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0xfffffffffffffdaf)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0x7fffffff}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r9 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r9, 0x10003)
fcntl$addseals(r9, 0x409, 0x7)
r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0xfffffffc, 0x1000, 0x8000})
bind$bt_rfcomm(r10, &(0x7f0000000180)={0x1f, @any, 0xd}, 0xa)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m37.499711545s ago: executing program 2 (id=205):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4m21.292409411s ago: executing program 32 (id=205):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

19.927850509s ago: executing program 0 (id=703):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x20004450)
listen(0xffffffffffffffff, 0x0)
r1 = syz_usbip_server_init(0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
close(0xffffffffffffffff)
write$usbip_server(r1, 0x0, 0x35)

17.27003139s ago: executing program 4 (id=708):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0)

17.121042749s ago: executing program 1 (id=710):
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"})
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20)

15.731480321s ago: executing program 0 (id=713):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x20, &(0x7f0000005140)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {}, {@default_permissions}], [{@measure}, {@fowner_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '+\'!^+-('}}]}}, 0x0, 0x0, &(0x7f00000052c0)="c90c4d96b974e11d7eb8d75413daf4e0dab504d2091456583160361f7e2129ee0946d8aab75f25838b46a81bd23c7995cd711852bd8d926e35709795a6ac3461cec70dcbd2663517068b7fd128441243e0b972baeb5392d4065dea5a1a0a616ce2784604")
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x402000, 0x2)
r5 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000008000000020000ddfeff000005"], 0x48)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010101}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd27, 0xfffffffe, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)

15.578281121s ago: executing program 5 (id=714):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000801800071117d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3c44aadc539c6433, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=<r11=>0x0)
syz_ublk_setup_queues(r6, r11, &(0x7f0000000180)={0x0, 0x847b, 0x800, 0x0, 0x2e8, 0x0, r6}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf99, 0x1, 0x40, 0x10a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb399, 0x1, 0x3, 0x99, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7118, 0x4, 0x3, 0x394, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe14, 0x1000, 0x0, 0x3c1, 0x0, r6}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, r10, '\x00', {0x3, 0xb8, 0x0, 0x0}}, &(0x7f0000001e40))
close(r1)
r12 = syz_open_dev$mtd(&(0x7f0000000000), 0x5, 0x260100)
read$mtd(r12, &(0x7f0000000180)=""/174, 0xae)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
read(r0, &(0x7f0000000100)=""/91, 0x5b)

14.346537652s ago: executing program 1 (id=715):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
lsm_set_self_attr(0x69, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x20, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000080000000000000000000000085000000"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8801)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x0)

13.438541493s ago: executing program 4 (id=716):
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="5736835aa621fd8ffdc454d411cb70b3e82dd0e803777a7412ac6aa030769af4f33195ee343a5b306b69b388846b9a4e02eba8be3e7715a755d3e4fe4b9d130e3a32bd9671689e7e786687562222e027fe70e1bd0df283cf5affc8a971f3e745b0b595a024cf5c901ef9b7112ddbe9a115353a5eeea264e4016b3c1f87cfe8fca3bde426868858be007859280becacf5c136ce56a6", 0x95}], 0x1)
r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000180)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b00200007039a0705d15b89f26d0905090340007a0a844c7d250429870ca7a3e6cd8b4e17dc33da8a0fd7b8916ecebd060007b3a0c8d48f7b1f23242727e4d0e81d0beb103b539e936ec494b5f27d9f331743ba70a5"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000002140)={0x0, 0x0, 0x7})
syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3d8, 0x0, 0x0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xff03}}, {{@arp={@multicast2, @rand_addr=0x64010100, 0xff, 0xff000000, 0x10, 0xf, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x6, 0x6, 0x40d, 0xf01, 0x5592, 'bridge0\x00', 'team_slave_0\x00', {}, {0xff}, 0x0, 0x302}, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @loopback, @empty, 0x7}}}, {{@arp={@rand_addr=0x64010100, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {}, 0xe, 0x1, 0xfff8, 0x0, 0x0, 0x9, 'ip6_vti0\x00', 'netpci0\x00', {}, {}, 0x0, 0x84}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @empty, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
socket$nl_generic(0x10, 0x3, 0x10)

13.306804404s ago: executing program 5 (id=717):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

13.20458914s ago: executing program 3 (id=718):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80540, 0x1d4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r1 = syz_io_uring_setup(0xeff, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, 0x0)
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

13.112830721s ago: executing program 1 (id=719):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='i8042', 0x5)

12.888597525s ago: executing program 3 (id=721):
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
r1 = gettid()
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d})

10.661137734s ago: executing program 6 (id=722):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0)

10.648153812s ago: executing program 0 (id=723):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x48)
open_by_handle_at(r3, &(0x7f0000000180)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x401, 0x9, 0x8, 0x1}}, 0x755c00)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67})
r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x6000)

10.429842489s ago: executing program 3 (id=724):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'})
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e)
bind$inet6(r1, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]})
writev(r4, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7)

9.006461492s ago: executing program 0 (id=725):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getrlimit(0xb, &(0x7f0000000040))
r0 = getpid()
setrlimit(0x1, &(0x7f0000000080)={0x2, 0x6})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getrlimit(0xb, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(0xffffffffffffffff, r3, 0x0, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
read$usbmon(r4, 0x0, 0x0)

7.973046642s ago: executing program 4 (id=726):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e6cd6702fbbcb50cb8f82e6686d0d55f3c52c409800169fb978203a9f4729581fbbfd10bd472aba817ec6e13ef6059223b9340050", 0x34}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1)

7.939299881s ago: executing program 5 (id=727):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26})
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67720175705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0xf61, 0x7ff, 0x0, '\x00', {0x7ff, 0x10001, 0xadf, 0x10, r4, 0x0, 0x6000, '\x00', 0x8000000009, 0x3, 0x1, 0x9, {0x6, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x574, 0x9db, 0xbb4}}}})
r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0)

7.695224934s ago: executing program 3 (id=728):
openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000b8000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
chdir(&(0x7f0000000280)='./file0/file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0)

7.669021671s ago: executing program 6 (id=729):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getrlimit(0xb, &(0x7f0000000040))
r0 = getpid()
setrlimit(0x1, &(0x7f0000000080)={0x2, 0x6})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getrlimit(0xb, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(0xffffffffffffffff, r3, 0x0, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
read$usbmon(r4, 0x0, 0x0)

6.46029493s ago: executing program 5 (id=730):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000900)="91f8b984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922d7a597332207a21108fa20bf1f802970700f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb5221c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de9851ff5c85244beacba25d854577d68ca555e88fc249340ab9be88680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1ffffffffacaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314020000000000000026283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b726706317b0d87a001ce1972a24ba7a5e294243829ead8f34d4d74010168", 0x1ba}, {&(0x7f0000000640)="44900001000056ee66c372f3105eb186dd8062fad2d5b59fb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8bba4154f0013000000000000000000001c8a9f7956583e", 0xd5}], 0x2}}], 0x1, 0x420d1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
write(r0, &(0x7f0000001e00)="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", 0x314)

5.356196327s ago: executing program 0 (id=731):
modify_ldt$write2(0x11, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.355294623s ago: executing program 6 (id=732):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000801800071117d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3c44aadc539c6433, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=<r10=>0x0)
syz_ublk_setup_queues(r5, r10, &(0x7f0000000180)={0x0, 0x847b, 0x800, 0x0, 0x2e8, 0x0, r5}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf99, 0x1, 0x40, 0x10a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb399, 0x1, 0x3, 0x99, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7118, 0x4, 0x3, 0x394, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe14, 0x1000, 0x0, 0x3c1, 0x0, r5}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, r9, '\x00', {0x3, 0xb8, 0x0, 0x0}}, &(0x7f0000001e40))

5.319946658s ago: executing program 4 (id=733):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

5.263372864s ago: executing program 1 (id=734):
modify_ldt$write2(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
acct(&(0x7f0000000040)='./file0\x00')
open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850)
syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8bc5b24d97134ef00", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.967942311s ago: executing program 5 (id=735):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4.201031875s ago: executing program 6 (id=736):
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
r1 = gettid()
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d})

2.759248678s ago: executing program 5 (id=737):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000a80)='./bus\x00', 0x1008040, &(0x7f0000000b80)={[{@resuid}, {@nojournal_checksum}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@nogrpid}]}, 0x1, 0x5d2, &(0x7f0000000300)="$eJzs3U1oG1ceAPD/jKw4H846C7uwu+QQdheyECLb+dimPSXX0kAgh0IvrVEUEyxHwZLb2Bjq3ENpDqUtuaS39tBjSw89lF567LWXfpwLoTEtxIG0KrJGjuNIjuzEVmL9fiDrvZnn+f+fRu9JM8ygAPrWocafNOKfEXEuiRhetW4gspWHmu2WFueL9xbni0nU6+d/SSKJiLuL88VW+yR73hcRCxHxj4j4Oh9xJI2I+0ONVbtabauzc5Pj5XJpOquP1KaujFRn545emhqfKE2ULh9/4cWTp06cHDs2tjrde/XVtfzG+nr9hxvvXP/25Vs3Pvn04ELxvfEkTsdQtm51P56m5muSj9Nrlp/YimA9lPQ6ATYll43zxlD6ewxHLhv17dRXTw6D25IesIXqgxH1FauKQB9IDHroU63vAY3j37uL8/XcFh0Hd3L7TPMApBF/aXG++Ha04g80z03E7uVjk72/Jg8dmTSONw9sZ6LsSAvXImJ0YCB7/xcfnAdKsvff5o22X7z/CTfLU/TVmeaOenT/pyvzT7SZf4Za506fUGv+W8rmv6U28XMd5r9zXcb4/bWfPuwY/9pg/Ktt/GQlftImfhoRb3QZ/+arX5zqtK7+UcThaB+/JVn//PDIxUvl0mjzb9sYXx4++FLn/kfs7RC/ec5293Iiq/u/K8sp7bL/n3/z2b8X1on/v/+sv//bvf57IuLdR7Z2v22Mv979+JVOud2+ltxpfAvY6P5PIh+3HtfxzP9PH/o+KzprCAAAAAAAAAAAT1G6fC1bkhZWymlaKDTv4f1b7E3LlWrtyMXKTC675u1A5NPWlVbDzXrSqI9l1+O26sfW1I/nsoC5Pcv1QrFSvtDjvgMAAAAAAAAAAAAAAAAAAMCzYt+a+/9/yy3f/7/256qBnarzT34DO53xD/3r4fGf9CwPYPv5/Ie+VV9//Ps+ADuZz3/oX8Y/9C/jH/rXw+N/sPm0pze5ANvL5z/0L+MfAAAAAAAAAAAAAAAAAAAAAAAAAAC2xLmzZxuP+r3F+WKjfmFgdmay8ubRC6XqZGFqplgoVqavFCYqlYlyqVCsTD1ue0mlcmU0Ls9cHamVqrWR6uzc61OVmcut3xAr5be8RwAAAAAAAAAAAAAAAAAAAPD8GVp+JGkhIt+sp2mhELE/Ig4kkVy8VC6NRsRfIuK7XH6wUR/rddIAAAAAAAAAAAAAAAAAAACww1Rn5ybHy+XS9KYLrS11bDOQNehugz/WnjCf9QsDG2kcEQvrtsk/ru9rC40tbjjnVpQtfFk2U0gWut2nz1Ih9xzm3JPC9s9FAAAAAAAAAAAAAAAAAADQ7x7c9Nvtf/yxtQkBAAAAAAAAAAAAAAAAAABAX0p/TiKi8Tg8/N+htWt3JUu55eeIeOvm+fevjtdq02ON5XdWltc+yJYf60X+QLda4zSNiMY4BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6ozs5NjpfLpelNFga7aNPrPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsxp8BAAD//xDex8Y=")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f006, 0x1})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r5, 0x1)
ptrace$setregset(0x4205, r1, 0x6, &(0x7f00000003c0)={&(0x7f0000000300)="a696b1add0a9dbde6617553b21c3bcb4bb87b6739a22391e6e4cb35acee65dbfaac8004e9ea0fa9ff0cdd7573199eb01edad085aa72edf28619edb2e5f0b62b3c7e3aadb90c694b6c74149a4ea0acfa25bc6b0dc28", 0x55})
statx(r2, 0x0, 0x1000, 0x3ff7a9721f23b969, &(0x7f00000004c0))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
fallocate(r6, 0x0, 0xfff, 0x9)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'})

2.684140716s ago: executing program 6 (id=738):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r2, 0x5607, 0x11)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x3, 0x9})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='high-speed\n\x00', 0xb)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x3, 0x2, 0xc})
truncate(&(0x7f0000000000)='./file1\x00', 0x40)
truncate(&(0x7f0000000080)='./file1\x00', 0xffffffffffffff01)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000008000000000000000400000073110f000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70)
set_mempolicy(0x8006, 0x0, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_smc(0x2b, 0x1, 0x0)

2.656212738s ago: executing program 4 (id=739):
syz_open_dev$dri(0x0, 0x2e9, 0x4002)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32], 0x50)
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)

2.538877295s ago: executing program 1 (id=740):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r1, 0x1b00}}, 0x18)
mkdir(0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
sendmsg$inet(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000002a80)="8fbd", 0x2}], 0x1}, 0x880)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010027bd70010000000000000000c15ebf8f49a299b86ee2e1be01000000000000001117179bb1daf977f23e4c89914b561ea37a8e0feb73abeec44652d4250625bf95ff0561eea12a4adeb7a5fd88918d3374f6b17e830675ea78e3", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000024001a8020000a8005000800020000001400070000000000000000000000ffffffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
r6 = openat$cgroup_type(r3, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x300}}, './cgroup/../file0\x00'})
socket$rds(0x15, 0x5, 0x0)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r7, &(0x7f0000000440)={0xa, 0x4e21, 0x7, @loopback, 0x1}, 0x1c)
listen(r7, 0x50)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r10, 0xe)
ioctl$SNAPSHOT_CREATE_IMAGE(r9, 0x40043311, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20)
listen(r8, 0x7)

2.401035927s ago: executing program 6 (id=741):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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")
tgkill(0x0, 0x0, 0x11)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x4080, 0x0, 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = getpid()
syz_pidfd_open(r2, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

2.287489467s ago: executing program 3 (id=742):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x7, &(0x7f00000000c0)={0x1a, "e922604a455494c905fd824393fe53e14fcab3d1eb0000000000000000000800"}})

2.274312597s ago: executing program 4 (id=743):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b00), 0x0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000002100)='usbip-vudc.0', 0xc)

2.062246795s ago: executing program 0 (id=744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020}, 0x2020)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x402000, 0x2)
ptrace(0x10, 0x1)
r4 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000008000000020000ddfeff000005"], 0x48)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010101}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd27, 0xfffffffe, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)

1.17323332s ago: executing program 1 (id=745):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e6cd6702fbbcb50cb8f82e6686d0d55f3c52c409800169fb978203a9f4729581fbbfd10bd472aba817ec6e13ef6059223b9340050", 0x34}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1)

0s ago: executing program 3 (id=746):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts.
[   80.588555][ T5591] cgroup: Unknown subsys name 'net'
[   80.700489][ T5591] cgroup: Unknown subsys name 'cpuset'
[   80.710002][ T5591] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.247081][ T5591] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.703028][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.713527][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.729875][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.740186][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.750358][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.757518][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.765614][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.773163][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.781358][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.784140][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.798106][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.804976][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.807501][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   86.819195][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.821339][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.829526][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.843723][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.844851][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.852391][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   86.860147][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.866654][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.874059][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.880234][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.887744][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.892836][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   86.908637][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.911419][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.925587][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   86.932469][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.940294][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.877473][ T5614] Bluetooth: hci1: command tx timeout
[   88.956235][ T5614] Bluetooth: hci0: command tx timeout
[   88.956251][   T50] Bluetooth: hci4: command tx timeout
[   88.956385][   T50] Bluetooth: hci3: command tx timeout
[   89.045912][ T5614] Bluetooth: hci2: command tx timeout
[   89.051684][   T50] Bluetooth: hci5: command tx timeout
[   89.317582][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.325323][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.332984][ T5610] bridge_slave_0: entered allmulticast mode
[   89.341439][ T5610] bridge_slave_0: entered promiscuous mode
[   89.404026][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.411276][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.418673][ T5610] bridge_slave_1: entered allmulticast mode
[   89.426697][ T5610] bridge_slave_1: entered promiscuous mode
[   89.527528][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.534810][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.542328][ T5608] bridge_slave_0: entered allmulticast mode
[   89.550093][ T5608] bridge_slave_0: entered promiscuous mode
[   89.629999][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.637463][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.644675][ T5608] bridge_slave_1: entered allmulticast mode
[   89.652620][ T5608] bridge_slave_1: entered promiscuous mode
[   89.672376][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.679762][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.687092][ T5604] bridge_slave_0: entered allmulticast mode
[   89.694682][ T5604] bridge_slave_0: entered promiscuous mode
[   89.703238][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.710517][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.717791][ T5604] bridge_slave_1: entered allmulticast mode
[   89.725238][ T5604] bridge_slave_1: entered promiscuous mode
[   89.735679][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.753675][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.760907][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.768910][ T5605] bridge_slave_0: entered allmulticast mode
[   89.776937][ T5605] bridge_slave_0: entered promiscuous mode
[   89.786131][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.793263][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.800928][ T5605] bridge_slave_1: entered allmulticast mode
[   89.809017][ T5605] bridge_slave_1: entered promiscuous mode
[   89.831371][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.838694][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.846014][ T5603] bridge_slave_0: entered allmulticast mode
[   89.853755][ T5603] bridge_slave_0: entered promiscuous mode
[   89.879107][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.921156][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.928513][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.936409][ T5603] bridge_slave_1: entered allmulticast mode
[   89.944169][ T5603] bridge_slave_1: entered promiscuous mode
[   90.005001][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.029595][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.067142][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.079449][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.116001][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.127563][ T5610] team0: Port device team_slave_0 added
[   90.133402][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.141003][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.148448][ T5611] bridge_slave_0: entered allmulticast mode
[   90.156490][ T5611] bridge_slave_0: entered promiscuous mode
[   90.168459][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.193464][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.217730][ T5610] team0: Port device team_slave_1 added
[   90.223615][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.230940][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.239755][ T5611] bridge_slave_1: entered allmulticast mode
[   90.248066][ T5611] bridge_slave_1: entered promiscuous mode
[   90.286092][ T5608] team0: Port device team_slave_0 added
[   90.294657][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.360336][ T5608] team0: Port device team_slave_1 added
[   90.381806][ T5604] team0: Port device team_slave_0 added
[   90.404004][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.416182][ T5605] team0: Port device team_slave_0 added
[   90.448643][ T5604] team0: Port device team_slave_1 added
[   90.455274][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.462589][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.488862][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.503120][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.514354][ T5605] team0: Port device team_slave_1 added
[   90.546527][ T5603] team0: Port device team_slave_0 added
[   90.567147][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.574242][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.601646][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.651437][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.658881][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.684896][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.698789][ T5603] team0: Port device team_slave_1 added
[   90.730178][ T5611] team0: Port device team_slave_0 added
[   90.736951][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.743962][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.770537][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.782782][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.790327][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.816297][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.852606][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.859615][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.887933][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.901127][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.908124][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.934175][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.947980][ T5611] team0: Port device team_slave_1 added
[   90.954355][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.961421][   T50] Bluetooth: hci1: command tx timeout
[   90.967223][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.993770][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.027452][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.034479][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.060516][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.060874][   T50] Bluetooth: hci0: command tx timeout
[   91.071300][ T5614] Bluetooth: hci4: command tx timeout
[   91.072291][ T5614] Bluetooth: hci3: command tx timeout
[   91.115898][   T50] Bluetooth: hci5: command tx timeout
[   91.115957][ T5614] Bluetooth: hci2: command tx timeout
[   91.131144][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.138407][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.164904][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.229160][   T24] cfg80211: failed to load regulatory.db
[   91.236810][ T5610] hsr_slave_0: entered promiscuous mode
[   91.250419][ T5610] hsr_slave_1: entered promiscuous mode
[   91.260908][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.268948][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.296726][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.314263][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.321454][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.347920][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.431042][ T5608] hsr_slave_0: entered promiscuous mode
[   91.437930][ T5608] hsr_slave_1: entered promiscuous mode
[   91.444157][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[   91.450293][ T5608] Cannot create hsr debugfs directory
[   91.509473][ T5605] hsr_slave_0: entered promiscuous mode
[   91.516485][ T5605] hsr_slave_1: entered promiscuous mode
[   91.522760][ T5605] debugfs: 'hsr0' already exists in 'hsr'
[   91.528831][ T5605] Cannot create hsr debugfs directory
[   91.578085][ T5604] hsr_slave_0: entered promiscuous mode
[   91.584794][ T5604] hsr_slave_1: entered promiscuous mode
[   91.591208][ T5604] debugfs: 'hsr0' already exists in 'hsr'
[   91.597278][ T5604] Cannot create hsr debugfs directory
[   91.729115][ T5611] hsr_slave_0: entered promiscuous mode
[   91.736206][ T5611] hsr_slave_1: entered promiscuous mode
[   91.742568][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   91.748441][ T5611] Cannot create hsr debugfs directory
[   91.774713][ T5603] hsr_slave_0: entered promiscuous mode
[   91.781367][ T5603] hsr_slave_1: entered promiscuous mode
[   91.787828][ T5603] debugfs: 'hsr0' already exists in 'hsr'
[   91.793649][ T5603] Cannot create hsr debugfs directory
[   92.455989][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.470032][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.478742][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.489300][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.498510][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.509676][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.529452][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.539780][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.610927][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.627638][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.638937][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.651565][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.661269][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.672112][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.681260][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.692256][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.804726][ T5608] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   92.817623][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.827089][ T5608] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   92.838429][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.846388][ T5608] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   92.856658][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.864602][ T5608] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   92.874247][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.000260][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.011958][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.028743][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.039034][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.046379][ T5614] Bluetooth: hci1: command tx timeout
[   93.058198][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.070236][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.079181][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.090372][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.115696][ T5614] Bluetooth: hci3: command tx timeout
[   93.115845][   T50] Bluetooth: hci4: command tx timeout
[   93.126899][ T5614] Bluetooth: hci0: command tx timeout
[   93.156920][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.196112][   T50] Bluetooth: hci2: command tx timeout
[   93.206315][   T50] Bluetooth: hci5: command tx timeout
[   93.229850][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.256865][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   93.273693][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.284355][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.292836][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.303843][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.313438][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.324395][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.332833][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.344109][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.372762][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.380400][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.411877][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.419041][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.457475][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   93.510195][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.517373][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.610893][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.618213][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.630342][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.640446][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.661948][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.672694][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.683255][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.693547][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.706778][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.723469][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.734329][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.826768][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   93.878710][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.885920][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.923783][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.942397][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.949513][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.054808][ T5604] 8021q: adding VLAN 0 to HW filter on device team0
[   94.110239][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.117445][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.169116][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.176347][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.259145][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.342705][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[   94.413563][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.420859][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.485329][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.515579][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.522766][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.592675][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   94.641160][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.648362][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.701004][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.708188][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.902011][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.117952][   T50] Bluetooth: hci1: command tx timeout
[   95.203764][   T50] Bluetooth: hci4: command tx timeout
[   95.204658][ T5612] Bluetooth: hci3: command tx timeout
[   95.219366][ T5614] Bluetooth: hci0: command tx timeout
[   95.233166][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.253512][ T5610] veth0_vlan: entered promiscuous mode
[   95.277033][ T5614] Bluetooth: hci5: command tx timeout
[   95.282478][ T5612] Bluetooth: hci2: command tx timeout
[   95.313550][ T5610] veth1_vlan: entered promiscuous mode
[   95.563111][ T5605] veth0_vlan: entered promiscuous mode
[   95.585482][ T5610] veth0_macvtap: entered promiscuous mode
[   95.623513][ T5610] veth1_macvtap: entered promiscuous mode
[   95.669896][ T5605] veth1_vlan: entered promiscuous mode
[   95.726386][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.776677][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.790593][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.990787][ T5605] veth0_macvtap: entered promiscuous mode
[   96.034965][ T5605] veth1_macvtap: entered promiscuous mode
[   96.076290][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.130982][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.168397][   T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.318410][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.352972][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.382238][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.404505][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.413079][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.423892][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.454956][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.495831][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.516056][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.528942][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.587573][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.597759][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.659869][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.732243][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.806878][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.828454][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.849113][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.887242][ T5608] veth0_vlan: entered promiscuous mode
[   96.981594][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.000338][ T5611] veth0_vlan: entered promiscuous mode
[   97.009179][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.044670][ T5603] veth0_vlan: entered promiscuous mode
[   97.120700][ T5608] veth1_vlan: entered promiscuous mode
[   97.564034][ T5611] veth1_vlan: entered promiscuous mode
[   97.897994][ T5603] veth1_vlan: entered promiscuous mode
[   98.078803][ T5604] veth0_vlan: entered promiscuous mode
[   98.099449][ T5604] veth1_vlan: entered promiscuous mode
[   98.169711][ T5608] veth0_macvtap: entered promiscuous mode
[   98.212029][ T5608] veth1_macvtap: entered promiscuous mode
[   98.344277][ T5611] veth0_macvtap: entered promiscuous mode
[   98.356044][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.367537][ T5603] veth0_macvtap: entered promiscuous mode
[   98.381885][ T5849] syzkaller0: entered promiscuous mode
[   98.387551][ T5849] syzkaller0: entered allmulticast mode
[   98.401483][ T5851] syzkaller0: entered promiscuous mode
[   98.407354][ T5851] syzkaller0: entered allmulticast mode
[   98.418244][ T5611] veth1_macvtap: entered promiscuous mode
[   98.430406][ T5604] veth0_macvtap: entered promiscuous mode
[   98.438722][ T5603] veth1_macvtap: entered promiscuous mode
[   98.483584][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.502546][ T5604] veth1_macvtap: entered promiscuous mode
[   98.593166][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.648022][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.667131][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.678011][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.692114][ T5855] capability: warning: `syz.3.10' uses 32-bit capabilities (legacy support in use)
[   98.707213][   T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.730004][ T5856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'.
[   98.746836][ T1144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.556331][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.652667][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.746617][ T1144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.810235][ T1144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.018840][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.070514][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.128788][  T196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.221584][  T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.233385][  T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.374261][ T5867] Zero length message leads to an empty skb
[  101.151660][   T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.307771][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.344738][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.407060][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.536291][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.554945][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.650649][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.677704][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.119415][   T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.533163][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.611101][ T5907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.638261][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.702800][ T5907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.927019][ T5915] =======================================================
[  103.927019][ T5915] WARNING: The mand mount option has been deprecated and
[  103.927019][ T5915]          and is ignored by this kernel. Remove the mand
[  103.927019][ T5915]          option from the mount to silence this warning.
[  103.927019][ T5915] =======================================================
[  104.366455][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.733565][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.741606][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.800921][ T5901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.854811][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.915020][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.984748][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.034532][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.071228][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.162568][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.171838][ T5926] mmap: syz.3.16 (5926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  106.511990][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[  106.534669][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[  106.545116][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[  106.556096][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[  106.587099][ T5930] 9pnet_virtio: no channels available for device syz
[  107.402259][ T5936] overlayfs: failed to resolve './file1': -2
[  107.816341][ T5948] 9pnet_virtio: no channels available for device syz
[  109.181487][ T5952] overlayfs: missing 'workdir'
[  109.398515][ T5900] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[  110.712432][ T5969] syz.1.27 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  112.500260][ T5979] syzkaller0: entered promiscuous mode
[  112.506139][ T5979] syzkaller0: entered allmulticast mode
[  114.009073][ T5997] tmpfs: Bad value for 'nr_inodes'
[  114.082406][ T5612] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  114.105288][ T5998] gre1: entered promiscuous mode
[  116.722608][ T6028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'.
[  118.500969][ T6041] No source specified
[  120.241784][ T5614] Bluetooth: hci0: command 0x0406 tx timeout
[  123.961026][ T6096] No source specified
[  125.106086][ T5776] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  125.662290][ T5776] usb 4-1: not running at top speed; connect to a high speed hub
[  125.689038][ T5776] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  126.893167][ T5776] usb 4-1: unable to read config index 0 descriptor/start: -71
[  126.920370][ T5776] usb 4-1: can't read configurations, error -71
[  128.208760][ T6151] overlayfs: missing 'lowerdir'
[  128.985002][ T6158] tmpfs: Bad value for 'nr_inodes'
[  129.847700][ T6162] overlayfs: missing 'lowerdir'
[  131.328491][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[  131.347862][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[  131.359413][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[  131.371289][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[  131.413810][ T6174] 9pnet_virtio: no channels available for device syz
[  131.737835][ T5612] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  131.782792][ T5612] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23
[  132.265374][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.293480][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.326465][ T6182] CacheFiles: Failed to register: -2
[  133.293066][ T6195] syzkaller0: entered promiscuous mode
[  133.400980][ T6195] syzkaller0: entered allmulticast mode
[  133.537234][ T6189] syzkaller0: entered promiscuous mode
[  133.609703][ T6189] syzkaller0: entered allmulticast mode
[  136.380573][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.438524][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.785832][ T5776] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  136.846605][ T6226] syzkaller0: entered promiscuous mode
[  136.977423][ T5776] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  137.027910][ T6226] syzkaller0: entered allmulticast mode
[  137.563398][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.917416][ T5614] Bluetooth: hci4: command 0x0406 tx timeout
[  137.923288][ T5776] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  138.805652][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.116241][ T5733] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  140.378982][ T5733] usb 5-1: not running at top speed; connect to a high speed hub
[  140.403617][ T5776] usb 3-1: Product: syz
[  140.451260][ T5733] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  140.781439][ T5733] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  140.795017][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.970314][ T5776] usb 3-1: Manufacturer: syz
[  140.979835][ T5776] usb 3-1: SerialNumber: syz
[  141.016393][ T5776] usb 3-1: config 0 descriptor??
[  141.032385][ T5776] usb 3-1: can't set config #0, error -71
[  141.157168][ T5776] usb 3-1: USB disconnect, device number 2
[  141.160558][ T5733] usb 5-1: can't set config #1, error -71
[  141.274556][ T5733] usb 5-1: USB disconnect, device number 2
[  141.799948][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'.
[  142.695515][ T5776] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  142.941641][ T5776] usb 3-1: not running at top speed; connect to a high speed hub
[  142.984619][ T5776] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  143.223248][ T5776] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  143.404165][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.600152][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.741056][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.565766][ T5614] Bluetooth: hci5: command 0x0405 tx timeout
[  147.265603][ T5776] usb 3-1: can't set config #1, error -71
[  147.281314][ T5776] usb 3-1: USB disconnect, device number 3
[  151.120613][ T5733] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  152.637717][ T5733] usb 4-1: Using ep0 maxpacket: 16
[  153.068075][ T5733] usb 4-1: device descriptor read/all, error -71
[  154.050840][ T6385] No source specified
[  157.943689][ T6430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.105'.
[  158.460082][ T6434] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  158.466733][ T6434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  158.474863][ T6434] vhci_hcd vhci_hcd.0: Device attached
[  159.173381][ T6435] vhci_hcd: connection closed
[  159.261785][ T1144] vhci_hcd vhci_hcd.4: stop threads
[  159.587421][ T1144] vhci_hcd vhci_hcd.4: release socket
[  159.778605][ T1144] vhci_hcd vhci_hcd.4: disconnect device
[  161.473767][ T6452] syzkaller0: entered promiscuous mode
[  161.479901][ T6452] syzkaller0: entered allmulticast mode
[  163.771978][ T6466] netlink: 44 bytes leftover after parsing attributes in process `syz.5.116'.
[  165.874920][ T6466] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  165.916932][ T6466] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  166.214190][ T6466] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  166.324800][ T6496] capability: warning: `syz.4.118' uses deprecated v2 capabilities in a way that may be insecure
[  166.336623][ T6466] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  166.381276][ T6466] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  166.429569][ T6466] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  166.451759][ T6466] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  166.470377][ T6496] fuse: Bad value for 'fd'
[  167.584734][ T6466] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  167.627848][ T6466] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  167.685707][ T6466] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  167.725545][ T6466] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  167.751390][ T6466] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  167.781800][ T6466] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  167.802947][ T6466] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  167.810134][ T6466] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  167.915585][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout
[  167.929176][ T6466] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  168.346566][ T6502] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  168.407499][ T5614] Bluetooth: hci0: command 0x0406 tx timeout
[  168.477305][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout
[  169.366897][ T6538] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  169.367332][ T6537] IPVS: stopping master sync thread 6538 ...
[  169.688055][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout
[  169.778527][ T6540] No source specified
[  169.797295][ T5614] Bluetooth: hci4: command 0x0406 tx timeout
[  169.845513][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  169.995540][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout
[  170.378880][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.128'.
[  170.477116][ T5614] Bluetooth: hci0: command 0x0406 tx timeout
[  170.558661][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout
[  170.629881][ T6547] syzkaller0: entered promiscuous mode
[  170.638693][ T6547] syzkaller0: entered allmulticast mode
[  170.785773][ T5625] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  171.084339][ T5625] usb 2-1: not running at top speed; connect to a high speed hub
[  171.233276][ T5625] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  171.443583][ T5625] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  171.632871][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.755500][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout
[  171.915637][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  171.921797][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  171.961623][ T5625] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected
[  172.104609][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout
[  172.669972][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  173.027439][ T5625] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  173.865617][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout
[  173.996560][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  174.677564][ T6575] netlink: 44 bytes leftover after parsing attributes in process `syz.3.137'.
[  175.270506][ T5734] usb 2-1: USB disconnect, device number 2
[  175.929605][ T5734] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  176.009038][ T6575] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  176.040594][ T5734] garmin_gps 2-1:1.0: device disconnected
[  176.048929][ T6575] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  176.073938][ T6575] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  176.079936][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  176.115798][ T6575] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  176.138505][ T6575] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  176.165934][    T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!!
[  176.193807][ T6575] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  177.095936][ T5734] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  177.415609][ T5734] usb 2-1: Using ep0 maxpacket: 16
[  177.422733][ T5734] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  177.509476][ T6606] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  177.522706][ T6605] IPVS: stopping master sync thread 6606 ...
[  177.763999][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.929787][ T5734] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  178.082141][ T5614] Bluetooth: hci0: command 0x0406 tx timeout
[  178.088503][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  178.094845][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  178.155665][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout
[  178.161979][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  178.289763][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  178.324983][ T6609] IPVS: stopping master sync thread 6610 ...
[  178.438398][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.522974][ T5734] usb 2-1: config 0 descriptor??
[  180.008511][ T5734] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  180.366471][ T5734] usb 6-1: Using ep0 maxpacket: 32
[  180.398157][ T5918] usb 2-1: USB disconnect, device number 3
[  180.409401][ T5734] usb 6-1: unable to get BOS descriptor or descriptor too short
[  180.418085][ T5734] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  180.430589][ T5734] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  180.442652][ T5734] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  180.451163][ T5734] usb 6-1: config 14 has no interface number 0
[  180.457613][ T5734] usb 6-1: config 14 has no interface number 1
[  180.463889][ T5734] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  180.495710][ T5733] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  180.516180][ T5734] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  180.533867][ T5734] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  180.559760][ T5734] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  180.907091][ T5734] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  180.919967][ T5734] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  180.945592][ T5734] usb 6-1: config 14 interface 57 has no altsetting 0
[  180.952415][ T5734] usb 6-1: config 14 interface 228 has no altsetting 0
[  181.053286][ T5733] usb 4-1: not running at top speed; connect to a high speed hub
[  181.067891][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.081340][ T5734] usb 6-1: Product: syz
[  181.086122][ T5733] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  181.105756][ T5734] usb 6-1: Manufacturer: syz
[  181.110918][ T5734] usb 6-1: SerialNumber: syz
[  181.145976][ T5733] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  181.178666][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.834163][ T5733] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected
[  182.986698][ T5733] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  184.730945][ T6642] usb 4-1: USB disconnect, device number 6
[  185.188571][ T5734] legousbtower 6-1:14.57: interrupt endpoints not found
[  185.201985][ T6642] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  185.225495][ T6642] garmin_gps 4-1:1.0: device disconnected
[  185.234310][ T5734] legousbtower 6-1:14.228: get version request failed: -71
[  185.242356][ T5734] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71
[  186.080694][ T5734] usb 6-1: USB disconnect, device number 2
[  186.805548][   T50] Bluetooth: hci5: command 0x0405 tx timeout
[  193.600171][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  193.622519][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  193.775852][ T6642] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  194.041729][ T6727] IPVS: stopping master sync thread 6726 ...
[  196.209224][ T6642] usb 6-1: Using ep0 maxpacket: 16
[  199.445664][ T6642] usb 6-1: device descriptor read/all, error -71
[  200.653878][ T6746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.165'.
[  203.788862][ T6746] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  203.848829][ T6746] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  203.936453][ T6746] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  203.999443][ T6746] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  204.081933][ T6753] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  204.123785][ T6746] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  204.211940][ T6746] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  204.565563][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  204.722908][ T6753] batman_adv: batadv0: Adding interface: gretap1
[  204.825364][ T6753] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  204.897038][ T6753] batman_adv: batadv0: Interface activated: gretap1
[  205.976367][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  205.996092][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  206.002211][ T6772] syz.5.172 uses obsolete (PF_INET,SOCK_PACKET)
[  206.107141][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  206.156594][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  206.245784][   T50] Bluetooth: hci5: command 0x0405 tx timeout
[  208.222558][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'.
[  210.334997][ T6807] overlayfs: missing 'lowerdir'
[  214.132940][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.188'.
[  214.192987][   T50] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23
[  215.242484][ T6825] gre1: entered promiscuous mode
[  218.113940][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.194'.
[  218.128286][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.194'.
[  218.139213][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.194'.
[  218.153158][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.194'.
[  218.691356][ T6867] input: syz1 as /devices/virtual/input/input5
[  219.139499][ T6875] fuse: Bad value for 'fd'
[  219.293796][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.5.197'.
[  219.475338][ T6876] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  219.481897][ T6876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  219.490648][ T6876] vhci_hcd vhci_hcd.0: Device attached
[  220.386184][ T6560] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  220.718391][ T6879] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1
[  220.879564][ T6253] vhci_hcd vhci_hcd.5: stop threads
[  220.932991][ T6253] vhci_hcd vhci_hcd.5: release socket
[  220.993743][ T6253] vhci_hcd vhci_hcd.5: disconnect device
[  221.419391][ T6893] No source specified
[  225.833193][ T6560] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  226.986260][ T6912] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  227.700092][ T6921] loop1: detected capacity change from 0 to 1024
[  227.743947][ T6921] hfsplus: Unknown parameter ''
[  231.565661][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  233.757763][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  234.006997][ T6971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.215'.
[  236.375613][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  241.905555][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  245.800654][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.812668][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.815728][ T7050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.229'.
[  245.830887][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.865642][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.878839][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.048528][ T7054] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  246.087716][ T7054] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  246.093921][ T7054] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  246.106932][ T7054] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  246.174208][ T7054] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  246.197269][ T7054] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  246.260107][ T7054] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  246.312043][ T7054] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  246.892946][ T7054] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  248.076419][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  248.155522][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  248.156446][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  248.161661][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  248.236561][   T50] Bluetooth: hci5: command 0x0405 tx timeout
[  248.236584][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  248.315711][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  250.423622][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  250.854757][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.932953][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.475844][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  252.915363][ T7118] netlink: 44 bytes leftover after parsing attributes in process `syz.5.246'.
[  253.089765][ T7118] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  253.201921][ T7118] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  253.336325][ T7118] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  253.468398][ T7118] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  253.616350][ T7118] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  253.765084][ T7118] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  254.154985][ T6253] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.040177][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.083919][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  255.271160][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout
[  255.278827][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  255.382952][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  255.559108][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  255.759413][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  255.880973][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  256.936442][ T6253] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.005818][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  259.285609][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  260.230264][ T7177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.262'.
[  260.244037][ T6253] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.495696][ T7177] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  260.516875][ T7177] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  260.547491][ T7177] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  260.574302][ T6253] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.576174][ T7177] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  260.635803][ T7177] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  260.667077][ T7177] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  262.385630][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  262.558838][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  262.560709][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  262.565556][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  262.635901][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  262.715824][   T50] Bluetooth: hci6: command 0x041b tx timeout
[  262.715842][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  262.759784][ T5612] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23
[  262.990350][ T7199] gre1: entered promiscuous mode
[  264.535773][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  265.688457][ T6253] bridge_slave_1: left allmulticast mode
[  265.777259][ T6253] bridge_slave_1: left promiscuous mode
[  265.848861][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.103487][ T6253] bridge_slave_0: left allmulticast mode
[  266.139659][ T6253] bridge_slave_0: left promiscuous mode
[  266.161875][ T7242] overlayfs: missing 'lowerdir'
[  266.182142][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.868548][ T7251] netlink: 40 bytes leftover after parsing attributes in process `syz.4.268'.
[  268.092126][ T7250] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  268.098775][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  268.107177][ T7250] vhci_hcd vhci_hcd.0: Device attached
[  268.413217][ T7261] vhci_hcd: connection closed
[  268.618355][ T5910] vhci_hcd vhci_hcd.4: stop threads
[  268.703839][ T5910] vhci_hcd vhci_hcd.4: release socket
[  268.741391][ T5910] vhci_hcd vhci_hcd.4: disconnect device
[  269.282280][ T6560] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  269.315060][ T5741] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  269.328715][ T5741] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  269.998040][ T7265] fido_id[7265]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  270.122153][ T7275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.276'.
[  270.733419][ T6253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.833212][ T6253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.915638][ T6253] bond0 (unregistering): Released all slaves
[  272.213013][ T5612] Bluetooth: hci3: connection err: -111
[  273.612948][ T5734] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  273.696307][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.721929][ T7319] No source specified
[  273.732745][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.757314][ T7047] bridge_slave_0: entered allmulticast mode
[  273.778720][ T7047] bridge_slave_0: entered promiscuous mode
[  273.799076][ T5734] usb 5-1: Using ep0 maxpacket: 16
[  273.821720][ T5734] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  273.841544][ T7324] tmpfs: Bad value for 'nr_inodes'
[  273.929431][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.969130][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.023405][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.064802][ T5734] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  274.097391][ T7047] bridge_slave_1: entered allmulticast mode
[  274.135914][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.213000][ T7047] bridge_slave_1: entered promiscuous mode
[  274.402322][ T5734] usb 5-1: config 0 descriptor??
[  274.664362][ T7047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.785895][ T7047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.623279][ T7047] team0: Port device team_slave_0 added
[  276.702167][ T7047] team0: Port device team_slave_1 added
[  277.335962][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  279.453348][ T5625] usb 5-1: USB disconnect, device number 3
[  279.698948][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.848051][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.196528][ T7047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.344197][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.377462][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.473998][ T7047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.512880][ T7405] UDC core: g1: couldn't find an available UDC or it's busy
[  280.600491][ T6253] hsr_slave_0: left promiscuous mode
[  280.609779][ T7403] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  280.619551][ T7403] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  280.627380][ T6253] hsr_slave_1: left promiscuous mode
[  280.633637][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.644369][ T7403] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  280.650994][ T7403] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  280.657703][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.665640][ T7403] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  280.672011][ T7403] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  280.684351][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.700986][ T6253] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.788544][ T6253] veth1_macvtap: left promiscuous mode
[  280.823114][ T6253] veth0_macvtap: left promiscuous mode
[  280.854677][ T6253] veth1_vlan: left promiscuous mode
[  280.884983][ T6253] veth0_vlan: left promiscuous mode
[  282.637213][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  282.637239][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout
[  282.715596][ T5614] Bluetooth: hci6: command 0x041b tx timeout
[  282.716611][   T50] Bluetooth: hci5: command 0x0405 tx timeout
[  282.722274][ T5614] Bluetooth: hci4: command 0x0406 tx timeout
[  282.727820][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout
[  284.827781][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  285.959702][ T6253] team0 (unregistering): Port device team_slave_1 removed
[  285.989298][ T6253] team0 (unregistering): Port device team_slave_0 removed
[  286.220562][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1
[  286.604768][ T7047] hsr_slave_0: entered promiscuous mode
[  286.611812][ T7047] hsr_slave_1: entered promiscuous mode
[  286.629131][ T7047] debugfs: 'hsr0' already exists in 'hsr'
[  286.644170][ T7047] Cannot create hsr debugfs directory
[  286.657999][ T7472] netlink: 44 bytes leftover after parsing attributes in process `syz.1.310'.
[  286.868669][ T7470] syzkaller0: entered promiscuous mode
[  286.883842][ T7470] syzkaller0: entered allmulticast mode
[  289.726497][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  292.285570][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  296.703559][ T7047] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  296.809533][ T7047] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  296.849725][ T7047] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  296.979369][ T7047] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  297.040470][ T7047] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  297.096373][ T7047] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  297.145207][ T7047] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  297.213393][ T7047] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.879307][ T7047] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.948300][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2
[  298.028212][ T7047] 8021q: adding VLAN 0 to HW filter on device team0
[  298.102500][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.109700][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.244322][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.251552][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.399564][ T7568] netlink: 40 bytes leftover after parsing attributes in process `syz.5.317'.
[  298.462787][ T7568] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  298.469343][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  298.639774][ T7568] vhci_hcd vhci_hcd.0: Device attached
[  298.795431][ T7570] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1
[  299.037021][ T5733] usb 43-1: new low-speed USB device number 3 using vhci_hcd
[  299.529067][ T6253] vhci_hcd vhci_hcd.5: stop threads
[  299.671422][ T6253] vhci_hcd vhci_hcd.5: release socket
[  299.862213][ T6253] vhci_hcd vhci_hcd.5: disconnect device
[  301.248728][ T7599] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  301.279409][ T7595] netlink: 44 bytes leftover after parsing attributes in process `syz.3.332'.
[  301.538348][ T7595] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  301.598755][ T7595] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  301.655061][ T7595] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  301.733414][ T7595] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  301.802827][ T7595] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  301.847336][ T7595] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  302.360700][ T7618] netlink: 44 bytes leftover after parsing attributes in process `syz.4.336'.
[  303.595511][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout
[  303.675541][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout
[  303.681626][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  303.755613][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  303.837113][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  303.963892][   T50] Bluetooth: hci6: command 0x041b tx timeout
[  304.000725][ T7618] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  304.008778][ T7618] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  304.033527][ T7618] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  304.053206][ T7618] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  304.060138][ T7618] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  304.068457][ T7618] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  304.179774][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.190387][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.200338][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.221702][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.229884][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.316233][ T5733] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  306.439480][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  306.445821][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  306.451864][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  306.485033][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  306.491244][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  306.832542][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout
[  306.838714][ T5607] Bluetooth: hci0: command tx timeout
[  307.266901][ T7677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.343'.
[  307.390894][ T7680] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  307.397468][ T7680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  307.405876][ T7680] vhci_hcd vhci_hcd.0: Device attached
[  307.430440][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3
[  307.458602][ T7682] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 0
[  308.013497][ T6253] vhci_hcd vhci_hcd.0: stop threads
[  308.219095][ T6253] vhci_hcd vhci_hcd.0: release socket
[  308.305101][ T5776] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  308.433941][ T6253] vhci_hcd vhci_hcd.0: disconnect device
[  308.955155][ T5612] Bluetooth: hci0: command tx timeout
[  309.947989][ T7717] netlink: 44 bytes leftover after parsing attributes in process `syz.4.349'.
[  310.525568][ T7723] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  310.550409][ T7723] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  310.621827][ T7723] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  310.740844][ T7723] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  310.839265][ T7723] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  310.969503][ T7723] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  311.064918][ T7723] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  311.273109][ T7723] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  312.556018][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  312.556239][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout
[  312.636744][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout
[  312.735434][ T5733] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  312.750075][ T7758] loop4: detected capacity change from 0 to 1024
[  312.795647][ T5614] Bluetooth: hci4: command 0x0406 tx timeout
[  312.801108][ T7758] hfsplus: Unknown parameter ''
[  312.875564][ T5614] Bluetooth: hci5: command 0x0405 tx timeout
[  313.035586][ T5614] Bluetooth: hci0: command 0x0419 tx timeout
[  313.286304][ T5733] usb 4-1: Using ep0 maxpacket: 16
[  313.665788][ T5776] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  315.135726][ T5614] Bluetooth: hci0: command 0x0419 tx timeout
[  315.821442][ T5733] usb 4-1: device descriptor read/all, error -71
[  316.481602][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  316.488151][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  316.796117][  T185] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  317.125621][  T185] usb 6-1: Using ep0 maxpacket: 32
[  317.142791][  T185] usb 6-1: unable to get BOS descriptor or descriptor too short
[  317.161214][  T185] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  317.188463][  T185] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  317.197049][ T5614] Bluetooth: hci0: command 0x0419 tx timeout
[  317.238411][  T185] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  317.267062][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'.
[  317.309346][  T185] usb 6-1: config 14 has no interface number 0
[  317.391978][  T185] usb 6-1: config 14 has no interface number 1
[  317.404577][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'.
[  317.440807][  T185] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  318.130476][  T185] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  318.143985][  T185] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  318.280482][  T185] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  318.449991][  T185] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  318.613424][  T185] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  318.761814][  T185] usb 6-1: config 14 interface 57 has no altsetting 0
[  318.784236][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[  318.831120][  T185] usb 6-1: config 14 interface 228 has no altsetting 0
[  318.900811][ T5901] bridge_slave_1: left allmulticast mode
[  318.990595][ T5901] bridge_slave_1: left promiscuous mode
[  319.096822][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.283033][ T5612] Bluetooth: hci0: command 0x0419 tx timeout
[  319.430184][ T5901] bridge_slave_0: left allmulticast mode
[  319.765918][ T5901] bridge_slave_0: left promiscuous mode
[  319.781170][  T185] usb 6-1: string descriptor 0 read error: -71
[  319.787679][  T185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.809360][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.924178][  T185] usb 6-1: can't set config #14, error -71
[  320.021690][  T185] usb 6-1: USB disconnect, device number 5
[  323.020833][ T5614] Bluetooth: hci0: command 0x0419 tx timeout
[  323.330554][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  323.374053][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  323.386811][ T5901] bond0 (unregistering): Released all slaves
[  323.448947][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4
[  323.681044][ T5901] hsr_slave_0: left promiscuous mode
[  323.723694][ T5901] hsr_slave_1: left promiscuous mode
[  323.738294][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.781764][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.055882][ T5612] Bluetooth: hci0: command 0x0419 tx timeout
[  326.161655][ T7864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.380'.
[  327.559218][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'.
[  327.576739][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  327.586911][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'.
[  327.708191][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  328.366731][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'.
[  335.242304][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.273395][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.405736][ T7635] bridge_slave_0: entered allmulticast mode
[  335.521435][ T7635] bridge_slave_0: entered promiscuous mode
[  335.621126][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.678697][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.905800][ T7635] bridge_slave_1: entered allmulticast mode
[  335.931100][ T7635] bridge_slave_1: entered promiscuous mode
[  335.982288][ T7635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.995198][ T7635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.057534][ T7928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.399'.
[  336.435580][ T7635] team0: Port device team_slave_0 added
[  336.487050][ T7635] team0: Port device team_slave_1 added
[  336.551605][ T7932] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  336.568775][ T7932] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  336.590239][ T7932] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  336.615822][ T7932] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  336.660738][ T7932] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  336.666040][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.701920][ T7932] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  336.706644][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.855320][ T7635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.935988][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.983686][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  337.074326][ T7635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.894704][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout
[  338.901324][ T5614] Bluetooth: hci4: command 0x0406 tx timeout
[  338.901352][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  338.908506][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout
[  338.914180][ T5607] Bluetooth: hci0: command 0x0419 tx timeout
[  338.920431][ T5615] Bluetooth: hci5: command 0x0405 tx timeout
[  339.148562][ T7635] hsr_slave_0: entered promiscuous mode
[  339.179190][ T7635] hsr_slave_1: entered promiscuous mode
[  339.233082][ T7635] debugfs: 'hsr0' already exists in 'hsr'
[  339.270932][ T7635] Cannot create hsr debugfs directory
[  339.520472][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5
[  340.848029][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.397'.
[  350.791846][ T7635] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  350.998107][ T7635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  351.041358][ T7635] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  351.090984][ T7635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  351.147170][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'.
[  351.328392][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.421'.
[  352.396357][ T7635] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  353.950712][ T7635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  354.473578][ T7635] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  355.032646][ T7635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  358.996391][ T7635] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.076976][ T7635] 8021q: adding VLAN 0 to HW filter on device team0
[  359.126676][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.133946][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  359.213028][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.220288][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.200255][ T8123] loop5: detected capacity change from 0 to 1024
[  360.247922][ T8123] hfsplus: Unknown parameter ''
[  361.074255][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'.
[  361.848052][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'.
[  363.457511][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.468948][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.476739][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.486033][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.495673][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.031449][ T8177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.436'.
[  364.078600][ T8178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.430'.
[  364.401424][ T8177] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  364.479405][ T8177] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  364.594897][ T8177] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  364.620472][ T8177] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  364.651869][ T8177] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  364.893217][ T8177] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  364.917847][ T8177] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  364.988097][ T8177] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  366.282602][ T8210] loop0: detected capacity change from 0 to 1024
[  366.389568][ T8210] hfsplus: Unknown parameter ''
[  366.476132][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout
[  366.567148][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout
[  366.592391][ T5627] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23
[  366.645591][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout
[  366.659722][ T5627] Bluetooth: hci4: command 0x0406 tx timeout
[  366.715752][ T5627] Bluetooth: hci5: command 0x0405 tx timeout
[  366.877801][ T5627] Bluetooth: hci6: command 0x041b tx timeout
[  367.226829][ T5627] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23
[  368.771685][ T5884] bridge_slave_1: left allmulticast mode
[  368.972683][ T5627] Bluetooth: hci6: command 0x041b tx timeout
[  369.055265][ T5884] bridge_slave_1: left promiscuous mode
[  369.082399][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.582629][ T8277] No source specified
[  370.139520][ T5884] bridge_slave_0: left allmulticast mode
[  370.178311][ T5884] bridge_slave_0: left promiscuous mode
[  370.210132][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.035743][ T5627] Bluetooth: hci6: command 0x041b tx timeout
[  373.115847][ T5627] Bluetooth: hci6: command 0x041b tx timeout
[  373.497232][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.550475][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.583467][ T5884] bond0 (unregistering): Released all slaves
[  373.690431][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5
[  375.195828][ T5627] Bluetooth: hci6: command 0x041b tx timeout
[  375.555272][ T5884] hsr_slave_0: left promiscuous mode
[  375.562556][ T5884] hsr_slave_1: left promiscuous mode
[  375.569954][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.302482][ T5627] Bluetooth: hci6: command 0x041b tx timeout
[  377.384678][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.919671][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  377.926233][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  381.590201][ T6560] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  381.874753][ T6560] usb 4-1: Using ep0 maxpacket: 16
[  381.919224][ T6560] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  381.970816][ T6560] usb 4-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config
[  382.006088][ T6560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  382.058645][ T6560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  382.073924][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  382.144932][ T6560] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  382.156583][ T5884] team0 (unregistering): Port device team_slave_0 removed
[  382.200482][ T6560] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  382.259185][ T6560] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  382.280791][ T6560] usb 4-1: Manufacturer: syz
[  382.311575][ T6560] usb 4-1: config 0 descriptor??
[  382.503065][ T8385] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  382.509657][ T8385] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  382.538583][ T8385] vhci_hcd vhci_hcd.0: Device attached
[  382.546839][ T8391] IPVS: stopping master sync thread 7599 ...
[  382.608836][ T8385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'.
[  382.735826][ T6560] rc_core: IR keymap rc-hauppauge not found
[  382.752326][ T6560] Registered IR keymap rc-empty
[  382.774691][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  382.817508][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  382.825632][ T8388] vhci_hcd: connection closed
[  382.839285][  T185] usb 34-1: SetAddress Request (2) to port 0
[  382.853315][  T185] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  382.858875][ T6101] vhci_hcd vhci_hcd.0: stop threads
[  382.870043][ T6560] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  382.889195][ T8393] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  382.902852][ T6101] vhci_hcd vhci_hcd.0: release socket
[  382.918584][ T6101] vhci_hcd vhci_hcd.0: disconnect device
[  382.944832][ T6560] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12
[  383.047865][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.107184][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.163521][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.195077][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.202731][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.208528][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.232217][ T8167] bridge_slave_0: entered allmulticast mode
[  383.252204][ T8167] bridge_slave_0: entered promiscuous mode
[  383.258498][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.268886][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.298477][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.312638][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.338529][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.348340][ T8399] UDC core: g1: couldn't find an available UDC or it's busy
[  383.356971][ T8167] bridge_slave_1: entered allmulticast mode
[  383.382353][ T8167] bridge_slave_1: entered promiscuous mode
[  383.428016][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.476023][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.555918][ T6560] mceusb 4-1:0.0: Error: mce write urb status = -71
[  383.634427][ T6560] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  383.657580][ T8167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.665538][ T6560] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  383.732517][ T8167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.758707][ T6560] usb 4-1: USB disconnect, device number 9
[  384.059235][ T8167] team0: Port device team_slave_0 added
[  384.104536][ T8167] team0: Port device team_slave_1 added
[  384.283656][ T8423] No source specified
[  385.504991][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.523737][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.619417][ T8167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.644167][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.670779][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.729184][ T8167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.103430][ T8167] hsr_slave_0: entered promiscuous mode
[  386.117116][ T8167] hsr_slave_1: entered promiscuous mode
[  386.157896][ T8167] debugfs: 'hsr0' already exists in 'hsr'
[  386.170245][ T8167] Cannot create hsr debugfs directory
[  386.207611][ T8460] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  386.270939][ T5615] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23
[  387.771806][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6
[  387.848211][ T5602] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  387.915971][  T185] usb 34-1: device descriptor read/8, error -110
[  388.095752][ T5602] usb 5-1: Using ep0 maxpacket: 16
[  388.253569][ T5602] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  388.288488][ T5602] usb 5-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config
[  388.304633][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  388.362535][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  388.431556][ T5602] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  388.470561][ T5602] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  388.532642][ T5602] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  388.554480][  T185] usb usb34-port1: attempt power cycle
[  388.588768][ T5602] usb 5-1: Manufacturer: syz
[  388.650736][ T5602] usb 5-1: config 0 descriptor??
[  388.998279][ T8512] loop3: detected capacity change from 0 to 1024
[  389.208562][ T5602] rc_core: IR keymap rc-hauppauge not found
[  389.239375][ T5602] Registered IR keymap rc-empty
[  389.252482][ T8512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  389.277557][  T185] usb usb34-port1: unable to enumerate USB device
[  389.291639][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  389.341204][ T8512] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  389.364612][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  389.400066][ T5602] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  389.479935][ T5602] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13
[  389.495072][ T8512] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.502: corrupted xattr block 84: invalid header
[  389.523095][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  389.547929][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  389.576629][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  389.618788][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  389.649036][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  389.705831][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  390.295716][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  390.338851][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  390.387012][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  390.447379][ T5602] mceusb 5-1:0.0: Error: mce write urb status = -71
[  390.483532][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  390.522868][ T5602] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  390.593062][ T5602] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  390.666583][ T5602] usb 5-1: USB disconnect, device number 4
[  391.748102][ T8543] IPVS: stopping master sync thread 8460 ...
[  392.047272][ T8167] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  392.129854][ T8167] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  392.231012][ T8167] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  392.598567][ T8167] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  392.789168][ T8167] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  393.246413][ T8167] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  393.295217][ T8167] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  394.628253][ T8167] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  395.380889][ T8167] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.497933][ T8167] 8021q: adding VLAN 0 to HW filter on device team0
[  395.553802][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.561009][ T5884] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.641392][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.648595][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.413014][ T8610] IPVS: stopping master sync thread 8614 ...
[  405.669242][ T8699] loop3: detected capacity change from 0 to 128
[  405.965378][ T8699] FAT-fs (loop3): Directory bread(block 1048) failed
[  406.012901][ T8699] FAT-fs (loop3): Directory bread(block 1049) failed
[  406.049010][ T8699] FAT-fs (loop3): Directory bread(block 1050) failed
[  406.093758][ T8699] FAT-fs (loop3): Directory bread(block 1051) failed
[  406.122023][ T8699] FAT-fs (loop3): Directory bread(block 1052) failed
[  406.139624][ T8167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.152402][ T8699] FAT-fs (loop3): Directory bread(block 1053) failed
[  406.166061][ T8699] FAT-fs (loop3): Directory bread(block 1054) failed
[  406.180990][ T8699] FAT-fs (loop3): Directory bread(block 1055) failed
[  406.198133][ T8709] UDC core: g1: couldn't find an available UDC or it's busy
[  406.624028][ T8717] syz.3.539: attempt to access beyond end of device
[  406.624028][ T8717] loop3: rw=8390659, sector=1096, nr_sectors = 8 limit=128
[  410.203856][ T8167] veth0_vlan: entered promiscuous mode
[  410.310192][ T8167] veth1_vlan: entered promiscuous mode
[  410.684216][ T8743] UDC core: g1: couldn't find an available UDC or it's busy
[  411.731360][ T8167] veth0_macvtap: entered promiscuous mode
[  411.965906][ T8167] veth1_macvtap: entered promiscuous mode
[  412.317108][ T8167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.386801][ T8167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.382151][ T5884] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.446694][ T5884] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.548060][   T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.568223][   T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.750552][ T8769] IPVS: stopping master sync thread 8393 ...
[  415.672535][ T8781] loop3: detected capacity change from 0 to 512
[  415.733004][ T8781] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  415.757015][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.884577][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.186069][ T8781] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.556: corrupted in-inode xattr: e_value size too large
[  416.232920][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.294726][ T8781] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  416.295785][    C1] EXT4-fs (loop3): initial error at time 1786406807: ext4_iget_extra_inode:5180: inode 15
[  416.316308][    C1] EXT4-fs (loop3): last error at time 1786406807: ext4_iget_extra_inode:5180: inode 15
[  416.385297][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.400652][ T8781] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.556: couldn't read orphan inode 15 (err -117)
[  416.476229][ T8781] loop3: lost filesystem error report for type 5 error -117
[  416.532446][ T8781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.941488][ T8813] netlink: 44 bytes leftover after parsing attributes in process `syz.6.225'.
[  417.057160][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.162936][ T8813] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  417.207013][ T8813] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  417.231866][ T8813] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  417.252329][ T8813] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  417.273037][ T8813] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  417.308032][ T8813] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  419.198329][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout
[  419.276857][ T5615] Bluetooth: hci5: command 0x0405 tx timeout
[  419.283179][ T5627] Bluetooth: hci4: command 0x0406 tx timeout
[  419.289320][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout
[  419.295576][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout
[  419.505953][ T5615] Bluetooth: hci6: command 0x041b tx timeout
[  421.784064][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.570'.
[  421.825693][ T8860] nbd: must specify a device to reconfigure
[  421.946083][ T5734] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  422.141550][ T5734] usb 7-1: not running at top speed; connect to a high speed hub
[  422.179944][ T5734] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  422.203939][ T5734] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  422.227691][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.284699][ T5734] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected
[  422.385604][ T5734] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  422.583091][ T8869] syzkaller0: entered promiscuous mode
[  422.631038][ T8869] syzkaller0: entered allmulticast mode
[  423.196956][ T5734] usb 7-1: USB disconnect, device number 2
[  424.281693][ T5734] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  424.360088][ T5734] garmin_gps 7-1:1.0: device disconnected
[  424.766566][ T8917] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5605] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8917]
[  427.722133][  T185] IPVS: starting estimator thread 0...
[  427.985816][ T8942] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  428.225352][ T8952] netlink: 44 bytes leftover after parsing attributes in process `syz.6.589'.
[  428.301753][ T8947] IPVS: using max 35 ests per chain, 84000 per kthread
[  428.568222][ T8952] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  428.585750][ T8952] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  428.658923][ T8952] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  428.675190][ T8952] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  428.694460][ T8952] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  428.718518][ T8952] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  428.855624][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'.
[  428.872728][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'.
[  428.886082][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'.
[  428.902198][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'.
[  430.679929][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout
[  430.686061][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout
[  430.715904][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  430.722498][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  430.728647][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout
[  430.918748][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  431.295161][ T5776] IPVS: starting estimator thread 0...
[  431.387422][ T8994] IPVS: using max 35 ests per chain, 84000 per kthread
[  431.403721][ T8989] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  431.582828][ T8999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.899866][ T9003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.291400][ T9016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  439.358043][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  439.364510][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  442.322258][ T9105] loop4: detected capacity change from 0 to 1024
[  442.336377][ T9105] EXT4-fs: Ignoring removed nomblk_io_submit option
[  442.348869][ T9105] EXT4-fs: Ignoring removed nomblk_io_submit option
[  442.537735][ T9105] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  442.635392][ T9105] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  442.691005][ T9115] netlink: 44 bytes leftover after parsing attributes in process `syz.6.623'.
[  442.816369][ T9105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.620: bg 0: block 112: padding at end of block bitmap is not set
[  442.851098][ T9115] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  442.872155][ T9115] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  442.905932][ T9115] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  442.935067][ T9115] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  442.996142][ T9115] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  443.182256][ T9115] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  444.887511][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout
[  444.887527][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  445.361624][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  445.367773][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout
[  445.374407][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  445.381122][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  445.470009][ T5604] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000.
[  447.047510][ T9141] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  447.090594][ T9141] cramfs: wrong magic
[  449.524104][ T9159] loop3: detected capacity change from 0 to 128
[  449.576175][ T9159] FAT-fs (loop3): Directory bread(block 1048) failed
[  449.638106][ T9159] FAT-fs (loop3): Directory bread(block 1049) failed
[  449.685741][ T9159] FAT-fs (loop3): Directory bread(block 1050) failed
[  449.720557][ T9159] FAT-fs (loop3): Directory bread(block 1051) failed
[  449.755454][ T9159] FAT-fs (loop3): Directory bread(block 1052) failed
[  449.809954][ T9159] FAT-fs (loop3): Directory bread(block 1053) failed
[  449.930225][ T9159] FAT-fs (loop3): Directory bread(block 1054) failed
[  450.023629][ T9159] FAT-fs (loop3): Directory bread(block 1055) failed
[  451.035880][ T9175] syz.3.634: attempt to access beyond end of device
[  451.035880][ T9175] loop3: rw=8390659, sector=1096, nr_sectors = 8 limit=128
[  451.645622][ T9185] loop3: detected capacity change from 0 to 1024
[  451.668275][   T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  451.688460][ T9191] netlink: 44 bytes leftover after parsing attributes in process `syz.4.641'.
[  451.711845][ T9185] EXT4-fs: Ignoring removed nomblk_io_submit option
[  451.752349][ T9185] EXT4-fs: Ignoring removed nomblk_io_submit option
[  451.856308][ T9191] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  451.873509][ T9191] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  451.886221][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  451.894228][ T9185] EXT4-fs (loop3): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  451.937445][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.958235][   T10] usb 7-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  451.982391][ T9185] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  451.999285][ T9191] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  452.033334][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  452.063745][ T9191] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  452.145285][ T9191] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  452.146552][   T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  452.214475][ T9185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.639: bg 0: block 112: padding at end of block bitmap is not set
[  452.246456][ T9191] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  452.327068][   T10] usb 7-1: Product: syz
[  452.552677][   T10] usb 7-1: Manufacturer: syz
[  453.531126][   T10] usb 7-1: SerialNumber: syz
[  453.557930][   T10] usb 7-1: config 0 descriptor??
[  454.236371][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout
[  454.242554][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout
[  454.248725][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  454.255698][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout
[  454.255731][ T5612] Bluetooth: hci5: command 0x0405 tx timeout
[  454.316367][ T5612] Bluetooth: hci6: command 0x041b tx timeout
[  454.614208][ T5610] EXT4-fs (loop3): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000.
[  457.165741][ T9222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.405516][  T979] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  457.565648][  T979] usb 5-1: Using ep0 maxpacket: 16
[  457.579667][   T10] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[  457.622211][  T979] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  457.673131][   T10] usb 7-1: USB disconnect, device number 3
[  457.693297][  T979] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  457.745389][  T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  457.802394][  T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  457.817599][ T9230] udevd[9230]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  457.890112][  T979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  459.248226][  T979] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  459.298141][  T979] usb 5-1: string descriptor 0 read error: -71
[  459.316380][  T979] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  459.342608][  T979] usb 5-1: config 0 descriptor??
[  459.356696][  T979] usb 5-1: can't set config #0, error -71
[  459.404154][  T979] usb 5-1: USB disconnect, device number 5
[  460.068558][ T9253] netlink: 44 bytes leftover after parsing attributes in process `syz.5.652'.
[  460.768806][ T9264] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5608] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[9264]
[  462.069523][ T9270] netlink: 44 bytes leftover after parsing attributes in process `syz.5.656'.
[  465.650690][ T9305] loop3: detected capacity change from 0 to 1024
[  465.692263][ T9305] EXT4-fs: Ignoring removed nomblk_io_submit option
[  465.740464][ T9305] EXT4-fs: Ignoring removed nomblk_io_submit option
[  466.564854][ T9305] EXT4-fs (loop3): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  466.763073][ T9305] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  467.027069][ T9305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.648: bg 0: block 112: padding at end of block bitmap is not set
[  467.109359][ T9328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  469.512139][ T9343] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  469.576863][ T5610] EXT4-fs (loop3): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000.
[  469.787830][ T9348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  473.781266][ T9394] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  475.790862][ T9413] loop6: detected capacity change from 0 to 1024
[  475.802222][ T9413] hfsplus: Unknown parameter ''
[  476.770002][ T9423] loop3: detected capacity change from 0 to 512
[  477.141784][ T9423] EXT4-fs (loop3): unsupported inode size: 0
[  477.529340][ T9423] EXT4-fs (loop3): blocksize: 2048
[  478.899130][ T9443] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5610] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[9443]
[  479.877143][ T9447] loop3: detected capacity change from 0 to 1024
[  479.913938][ T9447] EXT4-fs: Ignoring removed nomblk_io_submit option
[  479.951624][ T9447] EXT4-fs: Ignoring removed nomblk_io_submit option
[  480.016742][ T9447] EXT4-fs (loop3): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  480.030292][ T9447] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  480.098601][ T9447] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.697: bg 0: block 112: padding at end of block bitmap is not set
[  482.301016][ T5610] EXT4-fs (loop3): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000.
[  483.942206][ T9486] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  483.948769][ T9486] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  483.957618][ T9486] vhci_hcd vhci_hcd.0: Device attached
[  483.974820][ T9487] usbip_core: unknown command
[  483.985168][ T9487] vhci_hcd: unknown pdu 0
[  483.991683][ T9487] usbip_core: unknown command
[  484.001971][ T5907] vhci_hcd vhci_hcd.0: stop threads
[  484.010712][ T5907] vhci_hcd vhci_hcd.0: release socket
[  484.197106][ T5907] vhci_hcd vhci_hcd.0: disconnect device
[  489.515545][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  489.856303][   T10] usb 5-1: Using ep0 maxpacket: 32
[  489.876024][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  490.835660][   T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  491.723431][   T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  491.783236][   T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  491.821269][   T10] usb 5-1: config 14 has no interface number 0
[  491.857479][   T10] usb 5-1: config 14 has no interface number 1
[  491.891562][   T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  491.924715][   T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  491.994681][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  492.033593][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  492.076428][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  492.131859][   T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  492.204400][   T10] usb 5-1: config 14 interface 57 has no altsetting 0
[  492.310489][ T9566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.319034][   T10] usb 5-1: config 14 interface 228 has no altsetting 0
[  494.416010][   T10] usb 5-1: string descriptor 0 read error: -71
[  494.503938][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.690486][   T10] usb 5-1: can't set config #14, error -71
[  494.784723][   T10] usb 5-1: USB disconnect, device number 6
[  500.000994][ T9641] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  500.080436][ T9643] netlink: 44 bytes leftover after parsing attributes in process `syz.1.740'.
[  501.036482][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  501.048108][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  502.352961][ T9650] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  502.778846][ T9659] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5611] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[9659]
[  503.350881][ T9650] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f2: 0000 [#1] SMP KASAN NOPTI
[  503.363003][ T9650] KASAN: null-ptr-deref in range [0x0000000000000790-0x0000000000000797]
[  503.371424][ T9650] CPU: 1 UID: 0 PID: 9650 Comm: syz.4.743 Not tainted syzkaller #0 PREEMPT(full) 
[  503.380620][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  503.390674][ T9650] RIP: 0010:uvcg_video_init+0x4e7/0x630
[  503.396314][ T9650] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7a 8b 69 fa 48 8b 1b 4c 8d bb 90 07 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 5a 8b 69 fa 4d 8b 3f 49 83 c7 30
[  503.415917][ T9650] RSP: 0018:ffffc9000e20f710 EFLAGS: 00010212
[  503.421987][ T9650] RAX: 00000000000000f2 RBX: 0000000000000000 RCX: 0000000000080000
[  503.429989][ T9650] RDX: ffffc90006502000 RSI: 0000000000003e2b RDI: 0000000000003e2c
[  503.437974][ T9650] RBP: 1ffff1100a45a914 R08: ffffffff90574837 R09: 1ffffffff20ae906
[  503.445937][ T9650] R10: dffffc0000000000 R11: fffffbfff20ae907 R12: fffffffffffffffc
[  503.454069][ T9650] R13: dffffc0000000000 R14: ffff8880522d48a0 R15: 0000000000000790
[  503.462035][ T9650] FS:  00007fa3010546c0(0000) GS:ffff888125055000(0000) knlGS:0000000000000000
[  503.470971][ T9650] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  503.477560][ T9650] CR2: 00007fa4c2614608 CR3: 000000007c388000 CR4: 0000000000350ef0
[  503.485528][ T9650] Call Trace:
[  503.488800][ T9650]  <TASK>
[  503.491721][ T9650]  uvc_function_bind+0x1076/0x15a0
[  503.496877][ T9650]  usb_add_function+0x2e1/0x9f0
[  503.501758][ T9650]  configfs_composite_bind+0xde0/0x1410
[  503.507331][ T9650]  ? __pfx_configfs_composite_bind+0x10/0x10
[  503.513328][ T9650]  gadget_bind_driver+0x2ca/0x9e0
[  503.518364][ T9650]  ? __pfx_gadget_bind_driver+0x10/0x10
[  503.523908][ T9650]  really_probe+0x254/0xae0
[  503.528416][ T9650]  __driver_probe_device+0x1e8/0x360
[  503.533703][ T9650]  driver_probe_device+0x4f/0x240
[  503.538730][ T9650]  __driver_attach+0x339/0x600
[  503.543490][ T9650]  bus_for_each_dev+0x23b/0x2c0
[  503.548342][ T9650]  ? __pfx___driver_attach+0x10/0x10
[  503.553623][ T9650]  ? __pfx_bus_for_each_dev+0x10/0x10
[  503.558995][ T9650]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.564652][ T9650]  ? do_raw_spin_unlock+0xf5/0x210
[  503.569765][ T9650]  bus_add_driver+0x345/0x670
[  503.574455][ T9650]  driver_register+0x23a/0x320
[  503.579217][ T9650]  usb_gadget_register_driver_owner+0xf9/0x270
[  503.585496][ T9650]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[  503.591253][ T9650]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[  503.597404][ T9650]  configfs_write_iter+0x337/0x430
[  503.602612][ T9650]  vfs_write+0x612/0xba0
[  503.606866][ T9650]  ? __pfx_vfs_write+0x10/0x10
[  503.611644][ T9650]  ? __fget_files+0x2a/0x420
[  503.616232][ T9650]  ? srso_alias_return_thunk+0x5/0xfbef5
[  503.621864][ T9650]  ksys_write+0x150/0x270
[  503.626206][ T9650]  ? __pfx_ksys_write+0x10/0x10
[  503.631061][ T9650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.637120][ T9650]  do_syscall_64+0x174/0x580
[  503.641711][ T9650]  ? trace_irq_disable+0x3b/0x140
[  503.646738][ T9650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.652634][ T9650] RIP: 0033:0x7fa30019e0d9
[  503.657046][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.676685][ T9650] RSP: 002b:00007fa301054028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  503.685099][ T9650] RAX: ffffffffffffffda RBX: 00007fa300425fa0 RCX: 00007fa30019e0d9
[  503.693063][ T9650] RDX: 000000000000000c RSI: 0000200000002100 RDI: 0000000000000004
[  503.701031][ T9650] RBP: 00007fa300235024 R08: 0000000000000000 R09: 0000000000000000
[  503.708994][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  503.716955][ T9650] R13: 00007fa300426038 R14: 00007fa300425fa0 R15: 00007ffc35a60708
[  503.724933][ T9650]  </TASK>
[  503.728053][ T9650] Modules linked in:
[  503.733495][ T9650] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[  503.914673][ T9650] RIP: 0010:uvcg_video_init+0x4e7/0x630
[  503.935641][ T9650] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7a 8b 69 fa 48 8b 1b 4c 8d bb 90 07 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 5a 8b 69 fa 4d 8b 3f 49 83 c7 30
[  503.975516][ T9650] RSP: 0018:ffffc9000e20f710 EFLAGS: 00010212
[  503.981645][ T9650] RAX: 00000000000000f2 RBX: 0000000000000000 RCX: 0000000000080000
[  503.990189][ T9650] RDX: ffffc90006502000 RSI: 0000000000003e2b RDI: 0000000000003e2c
[  504.061937][ T9650] RBP: 1ffff1100a45a914 R08: ffffffff90574837 R09: 1ffffffff20ae906
[  504.155886][ T9650] R10: dffffc0000000000 R11: fffffbfff20ae907 R12: fffffffffffffffc
[  504.249796][ T9650] R13: dffffc0000000000 R14: ffff8880522d48a0 R15: 0000000000000790
[  504.325663][ T9650] FS:  00007fa3010546c0(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000
[  504.383135][ T9650] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  504.432051][ T9650] CR2: 0000561faabf3ee8 CR3: 000000007c388000 CR4: 0000000000350ef0
[  504.445900][ T9650] Kernel panic - not syncing: Fatal exception
[  504.452363][ T9650] Kernel Offset: disabled
[  504.456698][ T9650] Rebooting in 86400 seconds..