last executing test programs:

7m7.599980487s ago: executing program 32 (id=87):
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

6m29.433040462s ago: executing program 5 (id=123):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
flistxattr(r0, &(0x7f0000000040)=""/36, 0x24)

6m29.021534186s ago: executing program 5 (id=208):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe80)
socket(0x23, 0x5, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x1})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x17, 0x6, 0xf8f3, 0xc, 0x100000}, 0x14)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

6m25.820992404s ago: executing program 5 (id=212):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x20040800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8000)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x40000080806, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040001}, 0x80)
fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x44)
fsopen(&(0x7f0000000480)='reiserfs\x00', 0x1)
fsetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0xfffffffffffff043)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x40)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@sg0, &(0x7f0000000640)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x0, 0x0)

6m10.733476813s ago: executing program 33 (id=212):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x20040800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8000)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x40000080806, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040001}, 0x80)
fsopen(&(0x7f0000000000)='proc\x00', 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x44)
fsopen(&(0x7f0000000480)='reiserfs\x00', 0x1)
fsetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0xfffffffffffff043)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x40)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@sg0, &(0x7f0000000640)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x0, 0x0)

5m46.758702502s ago: executing program 0 (id=311):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000c501"])

5m46.335401744s ago: executing program 0 (id=315):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000340)="08000000010000", 0x7)

5m44.685470795s ago: executing program 0 (id=316):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892", 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000140))
ioctl$TCSETS(r2, 0x40045431, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x6, 0x0, 0x17, "afee3aaaba9a7afcf637553cd6c46c11cef163"})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
accept4(r0, 0x0, 0x0, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x7, 0xc, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}})

5m43.991722623s ago: executing program 0 (id=319):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, 0x0, 0x0)
write$cgroup_devices(r4, &(0x7f0000000700)={'c', ' *:* ', 'r\x00'}, 0x8)

5m42.926137117s ago: executing program 0 (id=321):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000700)={'c', ' *:* ', 'r\x00'}, 0x8)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r4, 0x0, 0x0)

5m38.125162321s ago: executing program 0 (id=332):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1e)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000800004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x700)

5m22.66270962s ago: executing program 34 (id=332):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1e)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000800004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x700)

5m12.231182422s ago: executing program 1 (id=394):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r2, 0x0, 0x0, 0x3c)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
mount$afs(0x0, &(0x7f00000011c0)='./control\x00', &(0x7f0000000100), 0x400092, &(0x7f0000000000)=ANY=[@ANYBLOB='dyn,flock=write'])
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020)

5m10.687023356s ago: executing program 1 (id=395):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x2b, 0x80801, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setresgid(0x0, 0xee00, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r5, 0x8, r6)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r7=>0x0})
r8 = syz_open_procfs(r7, &(0x7f00000008c0)='wchan\x00')
pread64(r8, &(0x7f0000000280)=""/252, 0xfc, 0x0)

5m9.952803528s ago: executing program 1 (id=396):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38)

5m9.724585851s ago: executing program 1 (id=398):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, 0x0, 0x200048cc)
close(r1)

5m9.398108877s ago: executing program 1 (id=401):
syz_usb_connect$uac1(0x2, 0xa2, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000407b1d0101400001020301090290007d00038000090458fd44420100000aa4010f00030201020c2402060602040c0032a30409048001000001020000090401010101020000072401200404000c2402010201400f0a3b47"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, 0x0)

5m6.670529069s ago: executing program 1 (id=408):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r1, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0)
lseek(r1, 0x1003ff, 0x4)

4m51.164069917s ago: executing program 35 (id=408):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r1, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0)
lseek(r1, 0x1003ff, 0x4)

4m1.380242908s ago: executing program 8 (id=438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a31000000002000078005000300040000000c0001800800014000000000080006400000070005000500020000000500"], 0x6c}}, 0x0)

4m1.207953813s ago: executing program 8 (id=516):
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r2, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c)

3m46.186635894s ago: executing program 36 (id=516):
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r2, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c)

1m46.5223907s ago: executing program 7 (id=862):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0)

1m44.278486135s ago: executing program 7 (id=866):
syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r2, 0x0, 0x20000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r3, &(0x7f0000001880)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40001)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r5, 0x0, 0x0)

1m42.505112136s ago: executing program 7 (id=871):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000004000020"])
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})

1m37.88805942s ago: executing program 7 (id=879):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setpriority(0x2, 0x0, 0x0)

1m30.018320617s ago: executing program 7 (id=892):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, 0x0, 0x0)
write$cgroup_devices(r4, &(0x7f0000000700)={'c', ' *:* ', 'r\x00'}, 0x8)
write$cgroup_devices(r4, &(0x7f0000003080)={'c', ' *:* ', 'r\x00'}, 0x8)

1m28.458869401s ago: executing program 7 (id=894):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x4008000)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x880)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x200, 0x0, 'queue1\x00', 0xfffffffe})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m12.712186318s ago: executing program 37 (id=894):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x4008000)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x1}}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x880)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x200, 0x0, 'queue1\x00', 0xfffffffe})
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

19.710364471s ago: executing program 3 (id=1047):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = semget$private(0x0, 0x4000000009, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x763, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
semop(r1, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1)

15.72948823s ago: executing program 3 (id=1056):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f00000000c0)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="20000000000000008400000002000000000051000000000000000000", @ANYRES32=0x0, @ANYBLOB='0\x00\x00\x00'], 0x50}, 0x80)

13.624319068s ago: executing program 3 (id=1058):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
r1 = syz_io_uring_setup(0x324d, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x2}, &(0x7f0000000100)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x8, 0x2007, @fd_index=0x4, 0x9, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x54, 0x96d7, 0x1, 0x0, 0x0)

13.523783869s ago: executing program 9 (id=1059):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100009, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)

12.558202671s ago: executing program 3 (id=1062):
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x3c}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000300))
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
ptrace(0x8, r7)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r7, 0x1, 0x5002)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)

12.526165687s ago: executing program 4 (id=1063):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x0)

12.281377458s ago: executing program 4 (id=1065):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="e11afc", 0x3}], 0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000540)={0x0, [[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {0x0, 0x20000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

12.280745762s ago: executing program 2 (id=1066):
socket$inet6_udplite(0xa, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0)
bind$inet(r1, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0x98}}, 0x4)

12.268307824s ago: executing program 9 (id=1067):
openat$tun(0xffffffffffffff9c, 0x0, 0x98041, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000900, 0xee01, 0x0)

10.797359509s ago: executing program 4 (id=1069):
io_uring_setup(0xa12, &(0x7f0000000040)={0x0, 0x2c1, 0x800, 0x1, 0x307})
openat$null(0xffffffffffffff9c, &(0x7f0000002500), 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0x401, 0x0, 0x4, 0xfffc}, 'syz0\x00', 0x4c})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x5, 0x0, 0x29, 0x1e, 0x280, &(0x7f0000000880)="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"})

8.758388863s ago: executing program 2 (id=1071):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe80)
socket(0x23, 0x5, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x1})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x17, 0x6, 0xf8f3, 0xc, 0x100000}, 0x14)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

8.690341566s ago: executing program 6 (id=1072):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fanotify_init(0x200, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/4014, 0xfae)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)

8.665356057s ago: executing program 9 (id=1073):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20000000)
r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0)

6.386637538s ago: executing program 4 (id=1074):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x59, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x40008c0}, 0x0)

6.386265303s ago: executing program 9 (id=1075):
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0)
r1 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, r0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x1ff]}, 0x8, 0x800)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, 0x0)
r3 = syz_usb_connect(0x2, 0x2c, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x80, 0x2b, 0x39, 0x40, 0x413c, 0x819b, 0x90d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x7, 0xff, 0x40, 0x3, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0x2, 0x6, 0x0, 0xd, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd, 0x1, 0x3}]}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x5, &(0x7f0000000a80)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})
keyctl$link(0x8, 0x0, r1)
bind$inet6(r2, &(0x7f0000000c40)={0xa, 0x4e20, 0x74, @private2, 0xffff}, 0x1c)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000c80)={0x40000000, 0x5, 0x7})
keyctl$get_security(0x11, r0, 0x0, 0x0)
r4 = add_key$keyring(0x0, &(0x7f0000000e00)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/223)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000001f80)={[{}]})
pread64(r2, &(0x7f00000020c0)=""/122, 0x7a, 0xea1)
keyctl$unlink(0x9, r0, r1)
keyctl$reject(0x13, 0x0, 0x5, 0x2, r4)
socket$inet_udplite(0x2, 0x2, 0x88)

6.386010487s ago: executing program 2 (id=1076):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x121)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = epoll_create(0x3f)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000})
r9 = fcntl$dupfd(r8, 0x0, r5)
ioctl$SW_SYNC_IOC_INC(r9, 0x40046201, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r10 = dup(r4)
write$FUSE_DIRENT(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf4166382", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r12 = accept4(r11, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4)
sendto$unix(r12, 0x0, 0x0, 0x0, 0x0, 0x0)

6.361566024s ago: executing program 6 (id=1077):
creat(&(0x7f00000002c0)='./file0\x00', 0x40)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)

5.657227059s ago: executing program 6 (id=1078):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(r5, 0x0, 0x0, 0x10fff9)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r6, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, 0x0)
connect$can_bcm(r4, 0x0, 0x0)
r7 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f00000004c0)={0x0, 0x1, 0x4, 0x20, 0x995b, 0x4, 0x2})
sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
lseek(r5, 0x0, 0x3)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0xfbff9000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
io_uring_setup(0x4e93, 0x0)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000080)={0x9, 0x2, 0x1, "a33a5c3971e215704e95c775fb575a94d4c60e49b805c23528627dca500399be", 0xf0f})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="145d38001000010000000000e09f640e977e02000078070000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a01040000000000000000d93841a90100000008000a400000000009000200b7102e05254b0000000082bd73797a32000000000900010073797a30000000000800054000000021280011800b000100746172676574f3a9de6640764fc80240000000000a000100415544495400000014000000100001fcae000000000000000000000aa894c9a7c6a1"], 0xac}}, 0x0)

5.302456474s ago: executing program 2 (id=1079):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10)
shutdown(r0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x8)
listen(r0, 0x9)

5.285135177s ago: executing program 4 (id=1080):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}]}], {0x14}}, 0x70}}, 0x0)

5.284674789s ago: executing program 2 (id=1081):
socket$inet6_udplite(0xa, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0)
bind$inet(r1, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0x98}}, 0x4)

5.132779526s ago: executing program 4 (id=1082):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2})

4.166423125s ago: executing program 6 (id=1083):
openat$tun(0xffffffffffffff9c, 0x0, 0x98041, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000900, 0xee01, 0x0)

3.483376175s ago: executing program 2 (id=1084):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
syz_usb_connect$uac1(0x2, 0xab, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x8, 0x60, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x7, "f68967042daa70eb65"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xff, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0xff, 0x0, "7647f3", "ca"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0xa, 0x6, "", '9'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x1, "9440564e62"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1, 0x1, {0x7, 0x25, 0x1, 0x2, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe, 0x81, 0x2, {0x7, 0x25, 0x1, 0x3, 0x2, 0x9}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x29, &(0x7f00000006c0)={0x5, 0xf, 0x29, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x1, 0x10, 0x5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "22dbd301e9947a18961e7d00666b1b5c"}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x425}}, {0x59, &(0x7f0000000740)=@string={0x59, 0x3, "a7db5ea60a54abc8be17971b637e32aa80324c99ef471da70dfbfdd9138d7c32fba80d3cbfc1980cbfd66530ec2dee1b92598d7b7c25dfd05281f053d53e95ce5ee8279319f93c2a190c39c45b415b591933f5b2d8dcc3"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x142d}}, {0x1b, &(0x7f0000000800)=@string={0x1b, 0x3, "38845ee86abb0e9d367997d28f96714dee80ec5d38e8117299"}}, {0x14, &(0x7f0000000840)=@string={0x14, 0x3, "ef0985f48fd3ed770950684277c07a71407e"}}]})
read(r1, &(0x7f0000000200)=""/164, 0xa4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setrlimit(0x6, &(0x7f0000000680)={0xba, 0x8})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r5}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="964fb7029c8023002686c5dd5228ad84fef9c4", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r7 = syz_open_procfs(0x0, 0x0)
getdents64(r7, &(0x7f0000000140)=""/49, 0x31)
getdents64(r7, 0x0, 0x18)
write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12)

2.850466872s ago: executing program 9 (id=1085):
io_uring_setup(0xa12, &(0x7f0000000040)={0x0, 0x2c1, 0x800, 0x1, 0x307})
openat$null(0xffffffffffffff9c, &(0x7f0000002500), 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0x401, 0x0, 0x4, 0xfffc}, 'syz0\x00', 0x4c})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x5, 0x0, 0x29, 0x1e, 0x280, &(0x7f0000000880)="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"})

2.23034113s ago: executing program 6 (id=1086):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe80)
socket(0x23, 0x5, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x1})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x17, 0x6, 0xf8f3, 0xc, 0x100000}, 0x14)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

1.945963299s ago: executing program 3 (id=1087):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fanotify_init(0x200, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/4014, 0xfae)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)

668.079308ms ago: executing program 9 (id=1088):
creat(&(0x7f00000002c0)='./file0\x00', 0x40)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)

46.473699ms ago: executing program 3 (id=1089):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setpriority(0x2, 0x0, 0x0)

0s ago: executing program 6 (id=1090):
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x2, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$key(0xf, 0x3, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000004a00)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2e, 0x58, 0x67, 0x0, 0x29, 0x2f, 0x0, @multicast1, @private=0xa010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x80}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

: entered promiscuous mode
[   67.087939][ T5836] veth0_vlan: entered promiscuous mode
[   67.109240][ T5840] veth1_macvtap: entered promiscuous mode
[   67.181507][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.192575][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.204502][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.215444][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.226346][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.236970][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.249404][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.270805][ T5836] veth1_vlan: entered promiscuous mode
[   67.296134][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.296339][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.307446][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.322069][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.326626][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.343400][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.353620][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.364524][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.376003][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.419294][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.424493][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.428121][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.436614][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.452682][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.461846][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.486568][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.495711][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.499890][ T5836] veth0_macvtap: entered promiscuous mode
[   67.552675][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.553099][ T5836] veth1_macvtap: entered promiscuous mode
[   67.574663][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.644883][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.655992][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.660531][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.674880][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.683587][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.686108][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.693850][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.721688][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.732013][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.742621][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.752735][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.763292][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.774991][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.776531][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.827093][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.840866][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.850756][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.861279][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.871674][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.882227][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.892383][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.903320][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.914186][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.928731][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.936581][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.970834][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.989263][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.997988][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.034690][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.096519][  T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.121664][  T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.273927][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.283633][   T54] Bluetooth: hci2: command tx timeout
[   68.321963][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.348728][ T5848] Bluetooth: hci3: command tx timeout
[   68.349177][ T5846] Bluetooth: hci4: command tx timeout
[   68.354159][ T5848] Bluetooth: hci0: command tx timeout
[   68.367090][   T54] Bluetooth: hci1: command tx timeout
[   68.480788][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.488937][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.177249][ T5948] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   69.200648][ T4784] IPVS: starting estimator thread 0...
[   69.289324][ T5955] IPVS: using max 20 ests per chain, 48000 per kthread
[   69.333731][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   69.436527][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   69.538848][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[   69.739461][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[   70.098137][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.112427][ T5965] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   70.128743][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   70.209264][ T5885] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   70.349001][   T54] Bluetooth: hci2: command tx timeout
[   70.358477][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   70.369376][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   70.403956][ T5885] usb 4-1: config 0 has too many interfaces: 125, using maximum allowed: 32
[   70.426566][ T5885] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[   70.429056][   T54] Bluetooth: hci1: command tx timeout
[   70.441290][ T5848] Bluetooth: hci0: command tx timeout
[   70.441550][ T5846] Bluetooth: hci4: command tx timeout
[   70.446721][ T5848] Bluetooth: hci3: command tx timeout
[   70.468983][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.488492][ T5885] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 125
[   70.498550][ T5885] usb 4-1: config 0 has no interface number 0
[   70.505015][ T5885] usb 4-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30
[   70.528958][ T5885] usb 4-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68
[   70.542443][ T5885] usb 4-1: config 0 interface 88 has no altsetting 0
[   70.770466][ T5885] usb 4-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40
[   70.801873][ T5976] overlayfs: workdir and upperdir must be separate subtrees
[   71.426864][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.435138][ T5885] usb 4-1: Product: syz
[   71.439409][ T5885] usb 4-1: Manufacturer: syz
[   71.444036][ T5885] usb 4-1: SerialNumber: syz
[   71.540978][ T5885] usb 4-1: config 0 descriptor??
[   71.662352][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[   71.668892][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[   71.688337][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   71.696565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   71.798707][ T5885] usb 4-1: USB disconnect, device number 2
[   72.008357][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   72.258346][ T5882] usb 5-1: Using ep0 maxpacket: 16
[   72.335581][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   72.351083][ T5882] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   73.054777][ T5882] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   73.067757][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0
[   73.148831][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   73.155562][ T5882] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   73.167623][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.266734][ T5882] usb 5-1: Product: syz
[   73.432473][ T5882] usb 5-1: Manufacturer: syz
[   73.437487][ T5882] usb 5-1: SerialNumber: syz
[   73.459925][ T5882] usb 5-1: config 0 descriptor??
[   75.480111][ T5882] usb 5-1: USB disconnect, device number 2
[   79.140695][ T6100] netlink: 64 bytes leftover after parsing attributes in process `syz.4.43'.
[   79.743435][ T6103] fuse: Bad value for 'fd'
[   80.537861][ T6124] Zero length message leads to an empty skb
[   81.672903][ T6135] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   81.888692][    T9] cfg80211: failed to load regulatory.db
[   83.875959][ T6154] netlink: 64 bytes leftover after parsing attributes in process `syz.2.59'.
[   83.927225][ T6154] fuse: Bad value for 'fd'
[   89.125622][ T6190] netlink: 64 bytes leftover after parsing attributes in process `syz.4.70'.
[   89.142282][ T6190] fuse: Bad value for 'fd'
[   89.975263][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   90.000759][ T6192] binder_alloc: 6191: binder_alloc_buf, no vma
[   90.072925][ T5843] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   91.818173][ T6225] usb usb8: usbfs: process 6225 (syz.3.82) did not claim interface 0 before use
[   93.523543][ T6245] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.88'.
[   93.550955][ T6245] openvswitch: netlink: Flow actions attr not present in new flow.
[   93.837115][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   94.665182][ T6254] netlink: 'syz.3.91': attribute type 1 has an invalid length.
[   94.730071][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'.
[   96.216487][ T6268] usb usb8: usbfs: process 6268 (syz.3.96) did not claim interface 0 before use
[  100.178835][ T6301] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  101.647606][ T6311] Bluetooth: MGMT ver 1.23
[  103.424714][ T6323] process 'syz.3.112' launched './file0' with NULL argv: empty string added
[  103.437345][ T6323] =======================================================
[  103.437345][ T6323] WARNING: The mand mount option has been deprecated and
[  103.437345][ T6323]          and is ignored by this kernel. Remove the mand
[  103.437345][ T6323]          option from the mount to silence this warning.
[  103.437345][ T6323] =======================================================
[  103.570667][ T6327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.114'.
[  103.648375][ T5841] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.806363][ T5841] usb 1-1: config 0 has an invalid interface number: 63 but max is 0
[  103.819186][ T5841] usb 1-1: config 0 has no interface number 0
[  103.836779][ T5841] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=77.e3
[  103.850575][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.861999][ T5841] usb 1-1: Product: syz
[  103.972533][ T5841] usb 1-1: Manufacturer: syz
[  103.977705][ T5841] usb 1-1: SerialNumber: syz
[  103.985743][ T5841] usb 1-1: config 0 descriptor??
[  103.999383][ T5841] gspca_main: conex-2.14.0 probing 0572:0041
[  104.803278][ T5841] usb 1-1: USB disconnect, device number 2
[  104.993574][ T6342] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  108.507382][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  108.515954][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  108.524312][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  108.658320][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  108.900544][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  109.033766][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  110.050244][ T6381] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.128' sets config #0
[  111.266083][ T6386] netlink: 'syz.0.131': attribute type 7 has an invalid length.
[  111.384907][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'.
[  111.395777][   T54] Bluetooth: hci5: command tx timeout
[  112.499143][ T6360] chnl_net:caif_netlink_parms(): no params data found
[  113.667404][   T54] Bluetooth: hci5: command tx timeout
[  114.643026][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.652715][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.663346][ T6360] bridge_slave_0: entered allmulticast mode
[  114.702711][ T6360] bridge_slave_0: entered promiscuous mode
[  114.750749][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.758081][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.767198][ T6360] bridge_slave_1: entered allmulticast mode
[  114.774714][ T6360] bridge_slave_1: entered promiscuous mode
[  115.013991][ T3465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.726970][   T54] Bluetooth: hci5: command tx timeout
[  116.169717][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.222125][ T3465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.396062][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.861612][ T3465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.300492][ T6441] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  117.392408][ T3465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.799406][   T54] Bluetooth: hci5: command tx timeout
[  118.058439][ T6360] team0: Port device team_slave_0 added
[  118.081826][ T6360] team0: Port device team_slave_1 added
[  118.407409][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.448497][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.489079][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.520890][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.527926][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.554091][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.705815][ T6452] kvm: emulating exchange as write
[  119.667155][ T5919] IPVS: starting estimator thread 0...
[  119.709030][ T6360] hsr_slave_0: entered promiscuous mode
[  119.724279][ T6360] hsr_slave_1: entered promiscuous mode
[  119.758450][ T6464] IPVS: using max 38 ests per chain, 91200 per kthread
[  119.775837][ T6360] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.808658][ T6360] Cannot create hsr debugfs directory
[  120.260773][ T3465] bridge_slave_1: left allmulticast mode
[  120.318488][ T3465] bridge_slave_1: left promiscuous mode
[  120.331232][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.680230][ T3465] bridge_slave_0: left allmulticast mode
[  120.686053][ T3465] bridge_slave_0: left promiscuous mode
[  120.715836][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.375426][ T4784] IPVS: starting estimator thread 0...
[  124.471305][ T6497] IPVS: using max 27 ests per chain, 64800 per kthread
[  125.593908][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.968783][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.988123][ T3465] bond0 (unregistering): Released all slaves
[  127.341602][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.350123][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.027379][ T6516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.395118][ T6516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.604206][ T6552] overlayfs: failed to resolve './file0': -2
[  132.079235][ T6516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.575141][ T6516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.705719][ T3465] hsr_slave_0: left promiscuous mode
[  132.712690][ T6546] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  132.739572][ T3465] hsr_slave_1: left promiscuous mode
[  132.769906][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.778046][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.796222][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.804080][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.890062][ T3465] veth1_macvtap: left promiscuous mode
[  132.896096][ T3465] veth0_macvtap: left promiscuous mode
[  132.908214][ T3465] veth1_vlan: left promiscuous mode
[  132.915600][ T3465] veth0_vlan: left promiscuous mode
[  133.080362][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  133.086736][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  133.628826][ T4784] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  133.839922][ T4784] usb 4-1: Using ep0 maxpacket: 16
[  133.847519][ T4784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.873751][ T4784] usb 4-1: config 0 interface 0 has no altsetting 0
[  133.962785][ T4784] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  134.003093][ T4784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.019224][ T4784] usb 4-1: Product: syz
[  134.023437][ T4784] usb 4-1: Manufacturer: syz
[  134.028434][ T4784] usb 4-1: SerialNumber: syz
[  134.055094][ T4784] usb 4-1: config 0 descriptor??
[  134.194253][ T3465] team0 (unregistering): Port device team_slave_1 removed
[  134.239318][ T3465] team0 (unregistering): Port device team_slave_0 removed
[  134.390187][ T6580] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  134.927105][ T5885] usb 4-1: USB disconnect, device number 3
[  135.218504][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  135.244300][ T6360] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  135.285275][ T6360] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  135.449578][ T6360] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  135.490639][ T6516] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.521003][ T6516] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.534298][ T6516] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.545906][ T6516] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.128412][ T6360] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  136.468360][    T9] usb 2-1: Using ep0 maxpacket: 16
[  136.481569][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.503510][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.586770][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.602596][ T6360] 8021q: adding VLAN 0 to HW filter on device team0
[  136.614442][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  136.627769][    T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  136.637793][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.692468][ T6360] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  136.702922][ T6360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  136.720379][  T997] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.728455][  T997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.740641][  T997] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.747776][  T997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.833065][    T9] usb 2-1: config 0 descriptor??
[  137.182097][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.513427][    T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input5
[  137.986209][    T9] shield 0003:0955:7214.0001: Registered Thunderstrike controller
[  137.995735][    T9] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  138.082676][ T5841] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  138.155754][    T9] usb 2-1: USB disconnect, device number 2
[  138.219077][ T5841] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  138.858665][ T5841] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  138.920236][ T5841] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  140.006079][ T6360] veth0_vlan: entered promiscuous mode
[  140.053642][ T6360] veth1_vlan: entered promiscuous mode
[  140.552080][ T6649] usb usb8: usbfs: process 6649 (syz.3.191) did not claim interface 0 before use
[  140.656268][ T6653] overlayfs: failed to resolve './file1': -2
[  140.853598][ T6360] veth0_macvtap: entered promiscuous mode
[  140.960248][ T6360] veth1_macvtap: entered promiscuous mode
[  141.055858][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.095022][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.106325][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.124801][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.185747][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.240738][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.298446][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.060378][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.354084][  T972] IPVS: starting estimator thread 0...
[  142.756976][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.840851][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.914245][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.974906][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.994043][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.004030][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.014863][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.031330][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.044369][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.048375][ T6676] IPVS: using max 20 ests per chain, 48000 per kthread
[  143.093182][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.266378][ T6360] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.279675][ T6360] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.326495][ T6360] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.335336][ T6360] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.835231][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.889702][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.953794][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.999471][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.400369][ T6714] usb usb8: usbfs: process 6714 (syz.2.203) did not claim interface 0 before use
[  150.160549][ T6764] /dev/sg0: Can't lookup blockdev
[  152.201016][ T6791] usb usb8: usbfs: process 6791 (syz.3.217) did not claim interface 0 before use
[  155.030874][ T6798] Invalid option length (1048372) for dns_resolver key
[  166.212276][ T5912] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  167.088471][ T5912] usb 2-1: Using ep0 maxpacket: 32
[  167.128119][ T6934] Driver unsupported XDP return value 0 on prog  (id 50) dev N/A, expect packet loss!
[  167.557268][ T6941] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  167.557268][ T6941]    program syz.0.253 not setting count and/or reply_len properly
[  169.088409][ T5912] usb 2-1: device descriptor read/all, error -71
[  170.460961][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  170.471311][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  170.486499][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  170.496745][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  170.506350][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  170.514188][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.651014][ T5848] Bluetooth: hci3: command tx timeout
[  173.079057][ T6977] overlayfs: missing 'lowerdir'
[  174.470765][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.673557][ T5848] Bluetooth: hci3: command tx timeout
[  174.881195][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.057865][ T7002] netlink: 256 bytes leftover after parsing attributes in process `syz.3.272'.
[  175.339746][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.580090][ T6956] chnl_net:caif_netlink_parms(): no params data found
[  176.131683][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.659832][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.673444][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.693240][ T6956] bridge_slave_0: entered allmulticast mode
[  176.710167][ T6956] bridge_slave_0: entered promiscuous mode
[  176.745998][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.758656][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.775770][ T6956] bridge_slave_1: entered allmulticast mode
[  176.785401][ T5848] Bluetooth: hci3: command tx timeout
[  176.796162][ T6956] bridge_slave_1: entered promiscuous mode
[  177.031736][ T6956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.132280][ T6956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.187100][   T11] bridge_slave_1: left allmulticast mode
[  177.203608][   T11] bridge_slave_1: left promiscuous mode
[  177.219564][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.247740][   T11] bridge_slave_0: left allmulticast mode
[  177.254048][   T11] bridge_slave_0: left promiscuous mode
[  177.272008][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.334497][   T54] Bluetooth: hci3: command tx timeout
[  179.418600][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.429156][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.440007][   T11] bond0 (unregistering): Released all slaves
[  179.621120][ T6956] team0: Port device team_slave_0 added
[  179.630658][ T6956] team0: Port device team_slave_1 added
[  179.922388][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.938511][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.981329][ T6956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.084960][ T6956] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.092207][ T6956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.118238][    C0] vkms_vblank_simulate: vblank timer overrun
[  180.156294][ T6956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.197836][   T11] hsr_slave_0: left promiscuous mode
[  180.213896][   T11] hsr_slave_1: left promiscuous mode
[  180.257034][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.346233][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.478976][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.488434][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.545438][   T11] veth1_macvtap: left promiscuous mode
[  180.551990][   T11] veth0_macvtap: left promiscuous mode
[  180.567778][   T11] veth1_vlan: left promiscuous mode
[  180.574161][   T11] veth0_vlan: left promiscuous mode
[  182.691835][ T7098] tmpfs: Bad value for 'mpol'
[  182.807688][ T7101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.296'.
[  182.902177][   T11] team0 (unregistering): Port device team_slave_1 removed
[  182.962543][   T11] team0 (unregistering): Port device team_slave_0 removed
[  184.175905][ T6956] hsr_slave_0: entered promiscuous mode
[  184.202969][ T6956] hsr_slave_1: entered promiscuous mode
[  184.238207][ T6956] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.252421][ T6956] Cannot create hsr debugfs directory
[  186.246799][ T6956] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  186.378559][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  186.398969][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  186.405077][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  186.411322][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  186.469925][ T6956] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  186.509070][ T6956] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  186.533074][ T6956] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  186.818360][   T25] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  187.175151][   T25] usb 3-1: config 0 has too many interfaces: 125, using maximum allowed: 32
[  187.281229][   T25] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  187.555346][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.565565][   T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 125
[  187.575029][   T25] usb 3-1: config 0 has no interface number 0
[  187.581300][   T25] usb 3-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30
[  187.592802][   T25] usb 3-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68
[  187.606228][   T25] usb 3-1: config 0 interface 88 has no altsetting 0
[  187.615531][   T25] usb 3-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40
[  187.660589][ T6956] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.690805][ T6956] 8021q: adding VLAN 0 to HW filter on device team0
[  187.725953][ T6956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  187.736460][ T6956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.757839][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.765042][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.782413][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.789599][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.825606][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.834239][   T25] usb 3-1: Product: syz
[  187.838512][   T25] usb 3-1: Manufacturer: syz
[  187.843847][   T25] usb 3-1: SerialNumber: syz
[  187.853379][   T25] usb 3-1: config 0 descriptor??
[  188.618759][   T25] usb 3-1: USB disconnect, device number 3
[  188.716159][ T7165] netlink: 68 bytes leftover after parsing attributes in process `syz.0.310'.
[  188.789508][ T6956] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.412659][ T6956] veth0_vlan: entered promiscuous mode
[  189.458574][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  189.776884][ T5883] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  189.928858][ T6956] veth1_vlan: entered promiscuous mode
[  189.935496][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.978634][ T6956] veth0_macvtap: entered promiscuous mode
[  189.987411][ T6956] veth1_macvtap: entered promiscuous mode
[  190.002086][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.012618][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.022620][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.033345][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.043370][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.053937][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.064708][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.075964][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.087103][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.097063][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.107686][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.117827][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.128362][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.138903][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.156484][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.167198][ T6956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.178082][ T6956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.191379][ T6956] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.202106][ T6956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.211185][ T6956] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.389895][ T6956] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.909671][ T5883] usb 2-1: config 0 descriptor??
[  190.939638][ T6956] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.484530][ T5883] kaweth 2-1:0.0: Firmware present in device.
[  193.377225][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.477201][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.664540][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.692188][ T5883] kaweth 2-1:0.0: Error reading configuration (-71), no net device created
[  193.707407][ T5883] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[  193.718521][ T5883] usb 2-1: USB disconnect, device number 5
[  193.758409][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.138494][ T5883] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  194.311833][ T5883] usb 2-1: config 0 has too many interfaces: 125, using maximum allowed: 32
[  194.399053][ T5883] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  194.546192][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.594297][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.612983][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.629655][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 125
[  194.684812][ T5883] usb 2-1: config 0 has no interface number 0
[  194.707936][ T5883] usb 2-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30
[  194.851146][ T5883] usb 2-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68
[  194.946248][ T5883] usb 2-1: config 0 interface 88 has no altsetting 0
[  195.124424][ T5883] usb 2-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40
[  195.432552][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.686249][ T5883] usb 2-1: Product: syz
[  195.710699][ T5883] usb 2-1: Manufacturer: syz
[  195.736606][ T5883] usb 2-1: SerialNumber: syz
[  195.756139][ T5883] usb 2-1: config 0 descriptor??
[  196.720712][ T5883] usb 2-1: USB disconnect, device number 6
[  196.883070][ T7273] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  198.238667][   T25] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  198.517291][   T25] usb 4-1: not running at top speed; connect to a high speed hub
[  199.202084][   T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  199.221256][   T25] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  199.392089][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  199.419983][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  199.429366][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.437396][   T25] usb 4-1: Product: ᐭ
[  200.247229][   T25] usb 4-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답
[  200.262219][   T25] usb 4-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑
[  200.745268][ T7303] block device autoloading is deprecated and will be removed.
[  200.757226][ T7303] syz.3.333: attempt to access beyond end of device
[  200.757226][ T7303] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  202.070613][   T25] usb 4-1: 0:2 : does not exist
[  202.375301][   T25] usb 4-1: USB disconnect, device number 4
[  202.661421][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.009025][ T5912] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  205.592743][ T5912] usb 2-1: config 0 has too many interfaces: 125, using maximum allowed: 32
[  205.602622][ T5912] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  205.611906][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.637700][ T5912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 125
[  205.647039][ T5912] usb 2-1: config 0 has no interface number 0
[  205.666841][ T5912] usb 2-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30
[  205.682684][ T5912] usb 2-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68
[  205.708715][ T5912] usb 2-1: config 0 interface 88 has no altsetting 0
[  205.819765][ T5912] usb 2-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40
[  205.854010][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.896550][ T5912] usb 2-1: config 0 descriptor??
[  205.929112][ T5912] usb 2-1: can't set config #0, error -71
[  206.063938][ T5912] usb 2-1: USB disconnect, device number 7
[  211.239049][  T972] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  211.398571][  T972] usb 7-1: config 0 has too many interfaces: 125, using maximum allowed: 32
[  211.407376][  T972] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  211.451723][  T972] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.491217][  T972] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 125
[  211.514129][  T972] usb 7-1: config 0 has no interface number 0
[  211.531416][  T972] usb 7-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30
[  211.588677][  T972] usb 7-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68
[  211.631385][  T972] usb 7-1: config 0 interface 88 has no altsetting 0
[  211.650056][  T972] usb 7-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40
[  211.667426][  T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.699508][  T972] usb 7-1: Product: syz
[  211.703697][  T972] usb 7-1: Manufacturer: syz
[  211.720458][  T972] usb 7-1: SerialNumber: syz
[  211.738776][  T972] usb 7-1: config 0 descriptor??
[  212.966808][  T972] usb 7-1: USB disconnect, device number 2
[  216.449230][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  216.518986][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  216.527722][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  216.539040][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  216.559958][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  216.588955][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  216.598351][    T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  216.706919][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'.
[  216.811663][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  216.821027][    T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  216.858494][    T9] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  216.916924][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  216.945987][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  216.965632][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.985294][    T9] usb 7-1: Product: ᐭ
[  216.995142][    T9] usb 7-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답
[  217.061536][    T9] usb 7-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑
[  217.622642][ T7484] syz.6.370: attempt to access beyond end of device
[  217.622642][ T7484] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  217.746280][ T7486] usb usb8: usbfs: process 7486 (syz.1.374) did not claim interface 0 before use
[  217.762397][ T7465] chnl_net:caif_netlink_parms(): no params data found
[  217.985264][ T3491] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.142248][ T3491] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.416539][ T3491] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.575241][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.648588][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.665418][ T7465] bridge_slave_0: entered allmulticast mode
[  218.679868][ T7465] bridge_slave_0: entered promiscuous mode
[  218.691979][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.699705][ T5846] Bluetooth: hci5: command tx timeout
[  218.707125][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.775902][ T7465] bridge_slave_1: entered allmulticast mode
[  218.801509][ T7465] bridge_slave_1: entered promiscuous mode
[  219.497761][ T3491] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.543196][    T9] usb 7-1: 0:2 : does not exist
[  219.582330][    T9] usb 7-1: USB disconnect, device number 3
[  219.642816][ T7465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.654127][ T7512] overlayfs: missing 'workdir'
[  219.664872][ T7465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.834712][ T5883] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  220.441534][ T7465] team0: Port device team_slave_0 added
[  220.713503][ T7465] team0: Port device team_slave_1 added
[  220.729785][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.750314][ T5846] Bluetooth: hci5: command tx timeout
[  220.871250][ T5883] usb 2-1: config 0 has too many interfaces: 125, using maximum allowed: 32
[  220.880073][ T5883] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  220.890404][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.900597][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 125
[  220.909734][ T5883] usb 2-1: config 0 has no interface number 0
[  220.915851][ T5883] usb 2-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30
[  221.063260][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.108392][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.6.383'.
[  221.137482][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.333365][ T5883] usb 2-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68
[  221.346776][ T5883] usb 2-1: config 0 interface 88 has no altsetting 0
[  221.884146][ T7465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.010114][ T5883] usb 2-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40
[  222.138407][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.188332][ T5883] usb 2-1: Product: syz
[  222.192638][ T5883] usb 2-1: Manufacturer: syz
[  222.197255][ T5883] usb 2-1: SerialNumber: syz
[  222.199059][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.243855][ T5883] usb 2-1: config 0 descriptor??
[  222.252976][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.279495][ T7465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.295434][ T3491] bridge_slave_1: left allmulticast mode
[  222.302257][ T3491] bridge_slave_1: left promiscuous mode
[  222.308027][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.394113][ T3491] bridge_slave_0: left allmulticast mode
[  222.404894][ T3491] bridge_slave_0: left promiscuous mode
[  222.410833][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.628157][ T5883] usb 2-1: USB disconnect, device number 8
[  222.668932][ T4784] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  222.766950][ T7546] netlink: 'syz.1.392': attribute type 24 has an invalid length.
[  222.775737][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'.
[  222.869934][ T5846] Bluetooth: hci5: command tx timeout
[  222.977614][ T4784] usb 7-1: not running at top speed; connect to a high speed hub
[  222.987109][ T4784] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  223.001374][ T4784] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  223.020975][ T4784] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.063850][ T4784] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.086269][ T4784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.105691][ T4784] usb 7-1: Product: ᐭ
[  223.121947][ T4784] usb 7-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답
[  223.148055][ T4784] usb 7-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑
[  223.664209][ T7553] syz.6.389: attempt to access beyond end of device
[  223.664209][ T7553] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  224.909653][ T5846] Bluetooth: hci5: command tx timeout
[  225.243693][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.262942][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.283740][ T3491] bond0 (unregistering): Released all slaves
[  225.395031][ T7465] hsr_slave_0: entered promiscuous mode
[  225.410582][ T7465] hsr_slave_1: entered promiscuous mode
[  225.417029][ T7465] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.443654][ T7465] Cannot create hsr debugfs directory
[  226.078743][ T4784] usb 7-1: 0:2 : does not exist
[  226.171773][ T4784] usb 7-1: USB disconnect, device number 4
[  226.242962][ T7465] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  226.563942][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.638503][    T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  226.814403][    T9] usb 2-1: config 0 has too many interfaces: 125, using maximum allowed: 32
[  226.970949][    T9] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  227.143885][ T7465] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  227.320105][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.360666][ T7465] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  227.394249][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 125
[  227.592133][    T9] usb 2-1: config 0 has no interface number 0
[  227.602226][    T9] usb 2-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30
[  227.613351][    T9] usb 2-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68
[  227.626823][    T9] usb 2-1: config 0 interface 88 has no altsetting 0
[  227.893675][    T9] usb 2-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40
[  227.910315][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.932065][    T9] usb 2-1: Product: syz
[  227.936401][    T9] usb 2-1: Manufacturer: syz
[  227.944958][    T9] usb 2-1: SerialNumber: syz
[  227.975031][    T9] usb 2-1: config 0 descriptor??
[  228.219987][    T9] usb 2-1: USB disconnect, device number 9
[  228.317788][ T3491] hsr_slave_0: left promiscuous mode
[  228.335362][ T3491] hsr_slave_1: left promiscuous mode
[  228.341388][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.353274][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.440535][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.473948][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.557793][ T3491] veth1_macvtap: left promiscuous mode
[  228.580461][ T3491] veth0_macvtap: left promiscuous mode
[  228.605704][ T3491] veth1_vlan: left promiscuous mode
[  228.639110][ T3491] veth0_vlan: left promiscuous mode
[  230.065704][ T7615] overlayfs: missing 'lowerdir'
[  231.186705][ T3491] team0 (unregistering): Port device team_slave_1 removed
[  231.325875][ T3491] team0 (unregistering): Port device team_slave_0 removed
[  234.591421][ T7465] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  236.377566][ T7465] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.513409][ T7465] 8021q: adding VLAN 0 to HW filter on device team0
[  236.540383][ T7465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  236.550909][ T7465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.727047][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.734231][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.743265][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.750426][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.774396][ T3491] IPVS: stop unused estimator thread 0...
[  239.685748][ T7465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.215608][ T7465] veth0_vlan: entered promiscuous mode
[  243.306803][ T7465] veth1_vlan: entered promiscuous mode
[  244.554167][ T7465] veth0_macvtap: entered promiscuous mode
[  244.600711][ T7465] veth1_macvtap: entered promiscuous mode
[  244.661387][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.780685][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.028737][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.064957][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.519364][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.560008][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.931010][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.952031][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.029214][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.085069][ T7751] netlink: 'syz.3.439': attribute type 10 has an invalid length.
[  246.216932][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.258488][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.278332][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.300263][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.322674][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.343486][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.364278][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.381815][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.392784][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.401297][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  246.410380][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.422163][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  246.429928][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  246.437299][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.445746][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.756886][ T7751] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  248.570670][ T5846] Bluetooth: hci4: command tx timeout
[  248.729483][ T7465] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.827158][ T7465] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.868493][ T7465] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.877232][ T7465] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.158631][ T7773] dlm: no local IP address has been set
[  249.165472][ T7773] dlm: cannot start dlm midcomms -107
[  249.687500][ T7780] binder: BINDER_SET_CONTEXT_MGR already set
[  249.757121][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.775422][ T7780] binder: 7779:7780 ioctl 4018620d 20000040 returned -16
[  250.589503][ T5846] Bluetooth: hci4: command tx timeout
[  250.977506][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.678774][ T5846] Bluetooth: hci4: command tx timeout
[  252.707599][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.773545][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.893766][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.750910][ T5846] Bluetooth: hci4: command tx timeout
[  254.851307][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.205163][  T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.239155][  T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.261350][ T7752] chnl_net:caif_netlink_parms(): no params data found
[  256.018767][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  256.025157][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  258.215945][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.461'.
[  258.887019][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.937340][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.957699][ T7752] bridge_slave_0: entered allmulticast mode
[  258.987412][ T7752] bridge_slave_0: entered promiscuous mode
[  259.138083][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.146838][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.168863][ T7752] bridge_slave_1: entered allmulticast mode
[  259.939562][ T7752] bridge_slave_1: entered promiscuous mode
[  259.947276][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  260.214661][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.192118][ T5919] usb 4-1: Using ep0 maxpacket: 16
[  261.200317][ T5919] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.211424][ T5919] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.678785][ T5919] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  261.691691][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0
[  261.698451][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  261.707576][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.730571][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.986129][ T5919] usb 4-1: config 0 descriptor??
[  263.032240][ T5919] usbhid 4-1:0.0: can't add hid device: -71
[  263.041975][ T7752] team0: Port device team_slave_0 added
[  263.077375][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  263.144583][ T7752] team0: Port device team_slave_1 added
[  263.188199][ T5919] usb 4-1: USB disconnect, device number 5
[  263.259280][   T52] bridge_slave_1: left allmulticast mode
[  263.275573][   T52] bridge_slave_1: left promiscuous mode
[  263.337870][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.374707][   T52] bridge_slave_0: left allmulticast mode
[  264.458432][   T52] bridge_slave_0: left promiscuous mode
[  264.493188][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.781587][ T5919] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  264.963554][ T5919] usb 4-1: not running at top speed; connect to a high speed hub
[  264.975939][ T5919] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  265.001782][ T5919] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  265.032309][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.082713][ T5919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  265.098368][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.118346][ T5919] usb 4-1: Product: ᐭ
[  265.132527][ T5919] usb 4-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답
[  265.304083][ T5919] usb 4-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑
[  265.805941][ T7930] syz.3.473: attempt to access beyond end of device
[  265.805941][ T7930] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  266.075450][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.155650][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.743273][   T52] bond0 (unregistering): Released all slaves
[  267.941861][ T5919] usb 4-1: 0:2 : does not exist
[  268.179513][ T5919] usb 4-1: USB disconnect, device number 6
[  268.517806][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.541698][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.587160][ T7752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.600310][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.607542][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.633840][ T7752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.836967][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  269.511765][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  270.103484][    T9] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf
[  270.121365][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.158401][    T9] usb 7-1: Product: syz
[  270.162614][    T9] usb 7-1: Manufacturer: syz
[  270.167225][    T9] usb 7-1: SerialNumber: syz
[  270.178518][ T5885] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  270.221106][    T9] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  270.229614][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  270.257440][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  270.282937][    T9] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  270.292058][    T9] usb 7-1: media controller created
[  270.360573][ T5885] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  270.380223][ T7752] hsr_slave_0: entered promiscuous mode
[  270.402595][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.421826][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  270.441316][ T7752] hsr_slave_1: entered promiscuous mode
[  270.467144][ T7752] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  270.479392][ T5885] usb 8-1: config 0 descriptor??
[  270.498543][ T7752] Cannot create hsr debugfs directory
[  270.531618][   T52] hsr_slave_0: left promiscuous mode
[  270.552871][   T52] hsr_slave_1: left promiscuous mode
[  270.576044][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.592262][    T9] DVB: Unable to find symbol mt352_attach()
[  270.613070][    T9] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  270.632067][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  270.658506][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.678900][    T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  270.777301][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.786658][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.618678][    T9] usb 7-1: USB disconnect, device number 5
[  271.633317][   T52] veth1_macvtap: left promiscuous mode
[  271.641712][   T52] veth0_macvtap: left promiscuous mode
[  271.666416][   T52] veth1_vlan: left promiscuous mode
[  271.672088][   T52] veth0_vlan: left promiscuous mode
[  271.717685][    T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[  274.870183][   T52] team0 (unregistering): Port device team_slave_1 removed
[  275.468527][   T52] team0 (unregistering): Port device team_slave_0 removed
[  275.947431][ T5885] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  275.959620][ T5885] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  275.988486][ T5885] [drm:udl_init] *ERROR* Selecting channel failed
[  276.268034][ T5885] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2
[  276.468977][ T5885] [drm] Initialized udl on minor 2
[  276.559835][ T5885] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  276.572778][ T5885] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  276.672796][    T9] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  276.687429][    T9] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  276.696933][    T9] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  276.902890][ T5885] usb 8-1: USB disconnect, device number 2
[  278.523536][ T5885] libceph: connect (1)[c::]:6789 error -101
[  278.554661][ T5885] libceph: mon0 (1)[c::]:6789 connect error
[  278.780054][   T52] IPVS: stop unused estimator thread 0...
[  278.881811][ T8026] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  279.578719][ T5885] libceph: connect (1)[c::]:6789 error -101
[  279.584791][ T5885] libceph: mon0 (1)[c::]:6789 connect error
[  280.137947][ T5883] libceph: connect (1)[c::]:6789 error -101
[  280.145655][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  280.212649][ T7752] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  280.222728][ T7752] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  280.232932][ T7752] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  280.279670][ T7752] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  280.717539][ T8015] ceph: No mds server is up or the cluster is laggy
[  281.664861][ T5883] libceph: connect (1)[c::]:6789 error -101
[  281.769661][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  282.459357][ T7752] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.477363][ T7752] 8021q: adding VLAN 0 to HW filter on device team0
[  282.537076][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.544320][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.549457][ T8054] 9pnet_fd: Insufficient options for proto=fd
[  282.579930][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.587098][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.851067][  T972] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  282.874724][ T8061] netlink: 68 bytes leftover after parsing attributes in process `syz.3.500'.
[  282.919323][    T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  283.008649][  T972] usb 8-1: Using ep0 maxpacket: 8
[  283.020183][  T972] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  283.033840][  T972] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  283.062972][  T972] usb 8-1: Product: syz
[  283.072267][    T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  283.081967][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.148727][  T972] usb 8-1: Manufacturer: syz
[  283.153381][  T972] usb 8-1: SerialNumber: syz
[  283.172309][    T9] usb 3-1: config 0 descriptor??
[  283.178694][  T972] usb 8-1: config 0 descriptor??
[  283.250473][  T972] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  284.125406][    T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  284.148501][    T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  284.173611][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  284.182445][ T7752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.205418][    T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  284.241420][    T9] [drm] Initialized udl on minor 2
[  284.308123][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  284.330521][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  284.340916][ T5841] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  284.364990][    T9] usb 3-1: USB disconnect, device number 4
[  284.371907][ T5841] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  284.393544][ T5841] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  284.563468][  T972] input: gspca_zc3xx as /devices/platform/dummy_hcd.7/usb8/8-1/input/input6
[  284.835186][    T9] usb 8-1: USB disconnect, device number 3
[  285.007196][ T7752] veth0_vlan: entered promiscuous mode
[  285.036076][ T7752] veth1_vlan: entered promiscuous mode
[  285.104819][ T7752] veth0_macvtap: entered promiscuous mode
[  286.055587][ T7752] veth1_macvtap: entered promiscuous mode
[  286.126765][ T8104] can0: slcan on ttyS3.
[  286.376092][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.390524][ T8105] can0 (unregistered): slcan off ttyS3.
[  286.466075][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.476035][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.486847][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.648477][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.687873][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.188710][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.199265][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.216506][ T7752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.241370][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.265031][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.276925][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.287433][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.297466][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.308060][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.318201][ T7752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.328800][ T7752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.339812][ T7752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.356989][ T7752] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.365798][ T7752] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.374596][ T7752] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.383339][ T7752] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.014702][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.039545][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.961461][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.977342][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.427653][ T8163] dlm: no local IP address has been set
[  294.434223][ T8163] dlm: cannot start dlm midcomms -107
[  294.607416][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  296.817592][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'.
[  298.441968][ T8232] dlm: no local IP address has been set
[  298.448231][ T8232] dlm: cannot start dlm midcomms -107
[  300.048537][ T5883] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  300.084889][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'.
[  300.261288][ T5883] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  300.273091][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.285338][ T5883] usb 3-1: config 0 descriptor??
[  300.516155][ T5883] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  300.549441][ T5883] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  300.569056][ T5883] [drm:udl_init] *ERROR* Selecting channel failed
[  300.583978][ T8271] binder_alloc: 8266: binder_alloc_buf, no vma
[  300.640065][ T5883] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  300.701981][ T5883] [drm] Initialized udl on minor 2
[  300.709935][ T5883] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  300.721721][ T5883] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  300.730966][  T972] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  300.739414][  T972] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  300.778750][ T5883] usb 3-1: USB disconnect, device number 5
[  301.403979][ T8287] xt_nat: multiple ranges no longer supported
[  302.085046][ T8290] 9pnet_fd: Insufficient options for proto=fd
[  302.652602][ T8298] pim6reg: entered allmulticast mode
[  302.968637][  T972] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  303.172114][  T972] usb 3-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82
[  303.265618][ T8304] dlm: no local IP address has been set
[  303.271520][ T8304] dlm: cannot start dlm midcomms -107
[  303.627739][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.665787][  T972] usb 3-1: Product: syz
[  303.688925][  T972] usb 3-1: Manufacturer: syz
[  303.702807][  T972] usb 3-1: SerialNumber: syz
[  303.721039][  T972] usb 3-1: config 0 descriptor??
[  303.744178][  T972] smsc75xx v1.0.0
[  303.779779][  T972] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  303.862863][  T972] smsc75xx 3-1:0.0: probe with driver smsc75xx failed with error -22
[  305.041704][ T5919] usb 3-1: USB disconnect, device number 6
[  305.050511][ T8297] pim6reg: left allmulticast mode
[  307.231282][ T8347] netlink: 68 bytes leftover after parsing attributes in process `syz.2.555'.
[  309.631959][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  309.677254][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  309.717976][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  309.752060][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  309.759928][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  309.767118][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  311.641133][ T8365] chnl_net:caif_netlink_parms(): no params data found
[  311.747685][ T8384] netlink: 68 bytes leftover after parsing attributes in process `syz.6.566'.
[  311.807848][   T52] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.868513][ T5846] Bluetooth: hci0: command tx timeout
[  312.334215][ T8387] nvme_fabrics: unknown parameter or missing value '0x000000000000000a' in ctrl creation request
[  312.651282][   T52] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.950146][ T5846] Bluetooth: hci0: command tx timeout
[  315.377546][   T52] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.501679][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.523805][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.540151][ T8365] bridge_slave_0: entered allmulticast mode
[  315.546879][ T8365] bridge_slave_0: entered promiscuous mode
[  315.595795][   T52] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.703369][ T8422] xt_CT: You must specify a L4 protocol and not use inversions on it
[  316.051496][ T5846] Bluetooth: hci0: command tx timeout
[  316.108926][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.116087][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.124056][ T8365] bridge_slave_1: entered allmulticast mode
[  316.131281][ T8365] bridge_slave_1: entered promiscuous mode
[  316.336120][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.460679][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.619459][   T52] bridge_slave_1: left allmulticast mode
[  316.625125][   T52] bridge_slave_1: left promiscuous mode
[  316.634827][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.391824][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  317.398163][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  317.726037][   T52] bridge_slave_0: left allmulticast mode
[  318.730764][   T52] bridge_slave_0: left promiscuous mode
[  318.737075][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.767202][ T5846] Bluetooth: hci0: command tx timeout
[  322.263639][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'.
[  324.384613][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.419150][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.466037][   T52] bond0 (unregistering): Released all slaves
[  324.647470][ T8365] team0: Port device team_slave_0 added
[  324.680612][ T8365] team0: Port device team_slave_1 added
[  326.362390][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.159997][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.305376][ T8365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.913009][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.920414][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.947968][ T8365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.984483][ T8495] unknown channel width for channel at 909000KHz?
[  328.146291][ T8365] hsr_slave_0: entered promiscuous mode
[  328.169157][ T8365] hsr_slave_1: entered promiscuous mode
[  328.743636][ T8517] Bluetooth: MGMT ver 1.23
[  328.948202][   T52] hsr_slave_0: left promiscuous mode
[  329.045009][   T52] hsr_slave_1: left promiscuous mode
[  329.212546][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.017471][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.174392][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.219590][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.470552][   T52] veth1_macvtap: left promiscuous mode
[  330.500597][   T52] veth0_macvtap: left promiscuous mode
[  330.538652][   T52] veth1_vlan: left promiscuous mode
[  330.544015][   T52] veth0_vlan: left promiscuous mode
[  331.306254][ T8538] capability: warning: `syz.6.612' uses 32-bit capabilities (legacy support in use)
[  332.280131][   T52] team0 (unregistering): Port device team_slave_1 removed
[  332.356588][   T52] team0 (unregistering): Port device team_slave_0 removed
[  333.980619][ T8365] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  334.068091][ T8365] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  334.166154][ T8556] xt_CT: You must specify a L4 protocol and not use inversions on it
[  334.735292][ T8365] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  335.239737][ T8365] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  335.363312][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.379295][ T8365] 8021q: adding VLAN 0 to HW filter on device team0
[  335.410423][ T8365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  335.420862][ T8365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.492932][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.500132][ T7934] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.509054][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.516164][ T7934] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.578346][  T972] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  336.367067][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.462679][  T972] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  336.472709][  T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.504396][  T972] usb 4-1: config 0 descriptor??
[  336.787024][  T972] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  336.825359][  T972] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  336.851977][  T972] [drm:udl_init] *ERROR* Selecting channel failed
[  336.888755][  T972] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  336.928580][  T972] [drm] Initialized udl on minor 2
[  336.944691][  T972] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  336.979441][  T972] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  337.026304][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  337.061157][  T972] usb 4-1: USB disconnect, device number 7
[  337.094332][ T5884] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  338.463939][ T8365] veth0_vlan: entered promiscuous mode
[  338.475783][ T8365] veth1_vlan: entered promiscuous mode
[  338.620268][ T8365] veth0_macvtap: entered promiscuous mode
[  338.629112][ T8365] veth1_macvtap: entered promiscuous mode
[  338.643361][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.655827][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.665870][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.676697][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.687652][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.699104][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.709067][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.719795][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.730864][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.740557][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.753201][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.763182][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.773831][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.783809][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.794463][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.804439][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.815205][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.826346][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.836362][ T8365] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.845351][ T8365] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.854838][ T8365] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.864194][ T8365] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.246341][ T8616] netlink: 72 bytes leftover after parsing attributes in process `syz.3.629'.
[  340.055881][ T8615] xt_CT: No such helper "pptp"
[  340.207518][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[  340.308539][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.316410][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.126266][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.310210][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.624583][ T8701] netlink: 260 bytes leftover after parsing attributes in process `syz.2.647'.
[  351.298612][    T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  351.466339][    T8] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  351.478933][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 4633, setting to 1024
[  351.660001][    T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  352.021965][    T8] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  352.048417][    T8] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  352.056450][    T8] usb 7-1: Manufacturer: syz
[  352.104019][ T8744] 9pnet_fd: Insufficient options for proto=fd
[  352.130519][    T8] usb 7-1: config 0 descriptor??
[  352.136157][ T8729] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  352.156681][    T8] igorplugusb 7-1:0.0: endpoint incorrect
[  352.750335][ T8753] syz.7.656: attempt to access beyond end of device
[  352.750335][ T8753] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  353.070457][ T8770] xt_CT: You must specify a L4 protocol and not use inversions on it
[  355.548490][ T8795] xt_CT: You must specify a L4 protocol and not use inversions on it
[  356.041314][    T8] usb 7-1: USB disconnect, device number 6
[  356.612189][ T8801] infiniband syz0: set active
[  356.617223][ T8801] infiniband syz0: added team_slave_1
[  356.904695][ T8801] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  356.907916][ T8801] infiniband syz0: Couldn't open port 1
[  357.176137][ T8801] RDS/IB: syz0: added
[  357.182131][ T8801] smc: adding ib device syz0 with port count 1
[  357.188635][ T8801] smc:    ib device syz0 port 1 has pnetid 
[  359.984756][ T8835] xt_CT: You must specify a L4 protocol and not use inversions on it
[  366.511773][ T8901] xt_CT: You must specify a L4 protocol and not use inversions on it
[  373.182070][ T8981] binder_alloc: 8974: binder_alloc_buf, no vma
[  378.899373][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.905727][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  382.567824][ T9097] binder_alloc: 9095: binder_alloc_buf, no vma
[  384.210771][ T9127] xt_CT: You must specify a L4 protocol and not use inversions on it
[  384.797831][ T9130] netlink: 36 bytes leftover after parsing attributes in process `syz.7.733'.
[  385.199579][  T972] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  385.505103][  T972] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  386.133676][  T972] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  386.143442][  T972] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice=10.00
[  386.153002][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.203327][  T972] usb 3-1: config 0 descriptor??
[  387.128106][  T972] usb 3-1: string descriptor 0 read error: -71
[  387.142503][  T972] usb 3-1: USB disconnect, device number 7
[  387.178805][   T46] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  387.350791][   T46] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  387.360571][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.391561][   T46] usb 4-1: config 0 descriptor??
[  387.608739][   T46] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  387.658016][   T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  387.713019][   T46] [drm:udl_init] *ERROR* Selecting channel failed
[  388.250195][   T46] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  388.298393][   T46] [drm] Initialized udl on minor 2
[  388.349240][   T46] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  388.554018][   T46] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  388.566388][ T5915] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  388.576122][ T5915] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  388.861539][   T46] usb 4-1: USB disconnect, device number 8
[  389.076720][ T9183] usb usb8: usbfs: process 9183 (syz.9.740) did not claim interface 0 before use
[  389.428866][ T9186] xt_CT: You must specify a L4 protocol and not use inversions on it
[  389.990101][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'.
[  394.857025][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'.
[  395.607778][ T9269] xt_CT: You must specify a L4 protocol and not use inversions on it
[  398.168882][ T9311] usb usb8: usbfs: process 9311 (syz.9.765) did not claim interface 0 before use
[  399.602964][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.774'.
[  400.351184][ T9330] xt_CT: You must specify a L4 protocol and not use inversions on it
[  401.808315][ T9350] xt_CT: You must specify a L4 protocol and not use inversions on it
[  402.558376][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  403.443903][    T9] usb 7-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea
[  403.445314][ T9377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.786'.
[  403.453335][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.475088][    T9] usb 7-1: config 0 descriptor??
[  403.485203][    T9] usb 7-1: Invalid firmware size=18.
[  403.708422][ T5843] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  403.859873][ T5843] usb 8-1: Using ep0 maxpacket: 8
[  403.867262][ T9392] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad)
[  403.917667][ T9392] PKCS7: Only support pkcs7_signedData type
[  403.942139][ T9394] netlink: 76 bytes leftover after parsing attributes in process `syz.9.790'.
[  403.988482][ T9394] netlink: 76 bytes leftover after parsing attributes in process `syz.9.790'.
[  404.284240][ T5915] usb 7-1: USB disconnect, device number 7
[  404.451173][ T5843] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  404.461112][ T5843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  404.471632][ T5843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  404.481796][ T5843] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  404.495508][ T5843] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  404.505240][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.768142][ T9412] xt_CT: You must specify a L4 protocol and not use inversions on it
[  405.092345][ T5843] usb 8-1: GET_CAPABILITIES returned 0
[  405.161271][ T5843] usbtmc 8-1:16.0: can't read capabilities
[  405.206488][ T5843] usb 8-1: USB disconnect, device number 4
[  405.578397][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  405.741724][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.796911][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.868606][    T8] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00
[  405.937946][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.004605][    T8] usb 4-1: config 0 descriptor??
[  406.799353][ T9442] usb usb8: usbfs: process 9442 (syz.9.792) did not claim interface 0 before use
[  406.911839][    T8] topre 0003:0853:0146.0002: hidraw0: USB HID v0.00 Device [HID 0853:0146] on usb-dummy_hcd.3-1/input0
[  407.036983][ T9446] netlink: 36 bytes leftover after parsing attributes in process `syz.6.799'.
[  407.115210][    T8] usb 4-1: USB disconnect, device number 9
[  409.623742][ T9487] xt_CT: You must specify a L4 protocol and not use inversions on it
[  410.520236][ T9511] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  410.772378][ T9517] xt_CT: You must specify a L4 protocol and not use inversions on it
[  417.140525][ T9579] xt_CT: You must specify a L4 protocol and not use inversions on it
[  422.349180][ T9638] xt_CT: You must specify a L4 protocol and not use inversions on it
[  424.165325][ T9670] netlink: 'syz.2.845': attribute type 4 has an invalid length.
[  428.460258][   T29] audit: type=1326 audit(1733902590.354:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  428.550880][   T29] audit: type=1326 audit(1733902590.364:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  428.835146][   T29] audit: type=1326 audit(1733902590.364:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  429.850160][   T29] audit: type=1326 audit(1733902590.384:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  429.925273][   T29] audit: type=1326 audit(1733902590.384:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  429.947392][    C0] vkms_vblank_simulate: vblank timer overrun
[  430.018611][   T29] audit: type=1326 audit(1733902590.384:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  430.098925][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.109398][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.119966][ T9727] infiniband syz0: set active
[  430.124917][ T9727] infiniband syz0: set active
[  430.161554][   T29] audit: type=1326 audit(1733902590.404:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  430.183559][    C0] vkms_vblank_simulate: vblank timer overrun
[  430.190223][   T29] audit: type=1326 audit(1733902590.404:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  430.213302][   T29] audit: type=1326 audit(1733902590.404:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  430.235369][    C0] vkms_vblank_simulate: vblank timer overrun
[  430.242289][   T29] audit: type=1326 audit(1733902590.404:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb44e57ff19 code=0x7ffc0000
[  430.264351][    C0] vkms_vblank_simulate: vblank timer overrun
[  432.314910][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  441.103110][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  441.109628][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  460.581244][  T972] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  460.971063][  T972] usb 10-1: not running at top speed; connect to a high speed hub
[  461.024904][  T972] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  461.077535][  T972] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  461.092489][  T972] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  461.453326][  T972] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  461.507541][  T972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.583057][  T972] usb 10-1: can't set config #1, error -71
[  461.643105][  T972] usb 10-1: USB disconnect, device number 2
[  464.059102][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  464.069684][T10100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  464.081132][T10100] overlayfs: maximum fs stacking depth exceeded
[  464.115434][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  464.198069][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  464.218609][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  464.226328][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  464.233878][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  464.248824][  T972] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  464.461365][  T972] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  464.483570][  T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.538209][  T972] usb 7-1: config 0 descriptor??
[  465.594317][  T972] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  465.637932][  T972] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  465.657481][  T972] [drm:udl_init] *ERROR* Selecting channel failed
[  465.691805][  T972] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2
[  465.769389][  T972] [drm] Initialized udl on minor 2
[  465.805622][  T972] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  465.818769][    T8] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  465.919432][  T972] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  465.934107][ T5883] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  465.963508][ T5883] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  465.986285][  T972] usb 7-1: USB disconnect, device number 8
[  465.997831][T10097] chnl_net:caif_netlink_parms(): no params data found
[  466.002351][    T8] usb 4-1: not running at top speed; connect to a high speed hub
[  466.021023][ T5883] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  466.050158][    T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  466.086471][    T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  466.099998][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  466.156550][    T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  466.165904][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.174673][    T8] usb 4-1: Product: ᐭ
[  466.200712][    T8] usb 4-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답
[  466.236642][    T8] usb 4-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑
[  466.270201][ T5839] Bluetooth: hci4: command tx timeout
[  467.372045][T10147] syz.3.936: attempt to access beyond end of device
[  467.372045][T10147] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  467.917901][ T3587] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.660993][ T5839] Bluetooth: hci4: command tx timeout
[  468.851186][T10156] sctp: [Deprecated]: syz.6.946 (pid 10156) Use of int in max_burst socket option.
[  468.851186][T10156] Use struct sctp_assoc_value instead
[  469.169515][    T8] usb 4-1: 0:2 : does not exist
[  469.276354][    T8] usb 4-1: USB disconnect, device number 10
[  469.342328][ T3587] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.550600][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  469.669117][ T3587] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.779648][T10097] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.800220][T10097] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.919803][T10097] bridge_slave_0: entered allmulticast mode
[  470.067202][T10097] bridge_slave_0: entered promiscuous mode
[  470.621140][T10097] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.640021][T10097] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.660379][T10097] bridge_slave_1: entered allmulticast mode
[  470.674563][T10097] bridge_slave_1: entered promiscuous mode
[  470.748363][ T5839] Bluetooth: hci4: command tx timeout
[  470.799331][ T3587] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.826594][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.851739][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.977882][ T5846] Bluetooth: hci4: command tx timeout
[  473.328130][T10097] team0: Port device team_slave_0 added
[  473.341369][T10097] team0: Port device team_slave_1 added
[  474.146706][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.154008][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.195839][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.210489][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.217464][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.263407][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.326884][ T3587] bridge_slave_1: left allmulticast mode
[  474.339094][ T3587] bridge_slave_1: left promiscuous mode
[  474.344994][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.355285][ T3587] bridge_slave_0: left allmulticast mode
[  474.362021][ T3587] bridge_slave_0: left promiscuous mode
[  474.367897][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.547533][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.569268][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.582753][ T3587] bond0 (unregistering): Released all slaves
[  477.613693][T10097] hsr_slave_0: entered promiscuous mode
[  477.621412][T10097] hsr_slave_1: entered promiscuous mode
[  477.629985][T10097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  477.637789][T10097] Cannot create hsr debugfs directory
[  481.194363][T10253] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  482.438386][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  482.600331][ T5915] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  482.673423][ T5915] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  482.713154][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  482.736603][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  482.750518][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  482.816103][ T5915] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  482.825731][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  482.843508][ T5915] usb 3-1: Product: syz
[  482.847699][ T5915] usb 3-1: Manufacturer: syz
[  482.887034][ T5915] cdc_wdm 3-1:1.0: skipping garbage
[  482.902747][ T5915] cdc_wdm 3-1:1.0: skipping garbage
[  482.935300][ T3587] hsr_slave_0: left promiscuous mode
[  482.946533][ T3587] hsr_slave_1: left promiscuous mode
[  482.972222][ T5915] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  482.981244][ T5915] cdc_wdm 3-1:1.0: Unknown control protocol
[  482.990129][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.997586][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.054135][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.071372][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.139844][ T3587] veth1_macvtap: left promiscuous mode
[  483.145371][ T3587] veth0_macvtap: left promiscuous mode
[  483.237404][ T3587] veth1_vlan: left promiscuous mode
[  483.269746][ T3587] veth0_vlan: left promiscuous mode
[  483.274705][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.281746][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.288621][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.295256][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.301683][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.308304][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.314804][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.321425][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.327750][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.334357][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.342701][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.349410][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.356995][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.363623][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.370380][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.377001][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.383438][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.390063][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.396823][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  483.403439][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  483.484910][    T9] usb 3-1: USB disconnect, device number 8
[  483.490831][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  483.928778][ T3587] infiniband syz0: set down
[  483.989448][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.073147][   T29] kauditd_printk_skb: 14 callbacks suppressed
[  484.073164][   T29] audit: type=1326 audit(1733902645.974:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.561409][   T29] audit: type=1326 audit(1733902646.004:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.614804][   T29] audit: type=1326 audit(1733902646.004:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.644245][   T29] audit: type=1326 audit(1733902646.004:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.696738][   T29] audit: type=1326 audit(1733902646.004:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.722882][   T29] audit: type=1326 audit(1733902646.004:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.745542][   T29] audit: type=1326 audit(1733902646.004:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.888673][   T29] audit: type=1326 audit(1733902646.004:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.912202][   T29] audit: type=1326 audit(1733902646.004:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  484.934580][   T29] audit: type=1326 audit(1733902646.004:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.9.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d49f7ff19 code=0x7ffc0000
[  486.867793][T10293] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  487.011658][ T3587] team0 (unregistering): Port device team_slave_1 removed
[  487.029813][  T997] smc: removing ib device syz0
[  487.264053][T10300] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  487.359058][ T3587] team0 (unregistering): Port device team_slave_0 removed
[  488.184362][T10308] usb usb8: usbfs: process 10308 (syz.3.985) did not claim interface 0 before use
[  489.272465][T10290] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  493.546238][T10343] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  494.389274][T10097] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  494.669816][T10097] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  495.635015][T10097] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  495.659354][T10097] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  495.772905][T10372] usb usb8: usbfs: process 10372 (syz.9.999) did not claim interface 0 before use
[  496.073766][T10097] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.126339][T10097] 8021q: adding VLAN 0 to HW filter on device team0
[  496.161727][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.168942][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.219450][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.226620][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.864418][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.989784][T10393] nvme_fabrics: missing parameter 'transport=%s'
[  497.996615][T10393] nvme_fabrics: missing parameter 'nqn=%s'
[  499.592042][T10410] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  500.348309][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1013'.
[  500.854395][T10424] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  501.016945][T10097] veth0_vlan: entered promiscuous mode
[  501.051051][T10097] veth1_vlan: entered promiscuous mode
[  501.155502][T10097] veth0_macvtap: entered promiscuous mode
[  501.220623][T10097] veth1_macvtap: entered promiscuous mode
[  501.270809][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.325306][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.360452][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.381569][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.404302][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.446175][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.487113][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.509254][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.535944][T10097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  501.584958][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.632380][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.648379][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.678855][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.712975][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.719601][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  501.725217][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.757059][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.808612][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.858382][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  502.317517][T10097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.909721][T10097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.918940][T10097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.927670][T10097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.938497][T10097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  503.073117][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.102035][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  503.195593][T10466] usb usb8: usbfs: process 10466 (syz.9.1020) did not claim interface 0 before use
[  503.302671][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  503.334008][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.602000][   T46] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  507.793612][T10515] delete_channel: no stack
[  507.797006][   T46] usb 10-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf
[  507.816903][   T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.894878][   T46] usb 10-1: Product: syz
[  507.944302][   T46] usb 10-1: Manufacturer: syz
[  508.015393][   T46] usb 10-1: SerialNumber: syz
[  508.287784][   T46] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  508.342972][   T46] dvb-usb: bulk message failed: -22 (3/0)
[  508.375451][   T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  508.546465][   T46] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  508.927528][   T46] usb 10-1: media controller created
[  508.944541][   T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  509.073544][   T46] DVB: Unable to find symbol mt352_attach()
[  509.079872][   T46] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  509.128992][   T46] dvb-usb: bulk message failed: -22 (3/0)
[  509.176433][   T46] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  509.234650][   T46] usb 10-1: USB disconnect, device number 3
[  510.277429][   T46] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[  512.727553][T10568] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  513.457084][T10567] bridge_slave_0: left allmulticast mode
[  513.463109][T10567] bridge_slave_0: left promiscuous mode
[  513.473018][T10567] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.801750][T10567] bridge_slave_1: left allmulticast mode
[  513.852460][T10567] bridge_slave_1: left promiscuous mode
[  513.858336][T10567] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.913172][T10567] bond0: (slave bond_slave_0): Releasing backup interface
[  513.935409][T10567] bond0: (slave bond_slave_1): Releasing backup interface
[  514.034040][T10567] team0: Port device team_slave_0 removed
[  514.654541][T10567] team0: Port device team_slave_1 removed
[  514.711796][T10567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  514.728446][T10567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.859705][T10567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  514.867278][T10567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  515.469166][T10567] bond0: (slave wlan1): Releasing backup interface
[  515.516089][T10552] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  520.018544][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  520.178405][    T8] usb 5-1: Using ep0 maxpacket: 8
[  520.185310][    T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  520.209348][    T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  520.240359][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  520.268537][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  520.313346][    T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  520.388385][    T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  520.428067][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.492536][T10633] warning: `syz.6.1053' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  520.689029][    T8] usb 5-1: usb_control_msg returned -32
[  520.699956][    T8] usbtmc 5-1:16.0: can't read capabilities
[  523.024845][  T972] usb 5-1: USB disconnect, device number 3
[  523.212796][T10685] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  524.176497][T10705] RDS: rds_bind could not find a transport for fe80::11, load rds_tcp or rds_rdma?
[  524.537756][T10707] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  524.547003][T10707] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  524.555928][T10707] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  524.564903][T10707] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  529.822899][   T25] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  530.336027][   T25] usb 10-1: not running at top speed; connect to a high speed hub
[  530.556985][   T25] usb 10-1: config 7 has an invalid interface number: 105 but max is 0
[  530.565402][   T25] usb 10-1: config 7 has no interface number 0
[  530.574348][   T25] usb 10-1: string descriptor 0 read error: -22
[  530.580795][   T25] usb 10-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=90.d3
[  530.590109][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.679415][   T25] qmi_wwan 10-1:7.105: probe with driver qmi_wwan failed with error -22
[  531.875347][   T25] usb 10-1: USB disconnect, device number 4
[  532.218479][ T5915] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  532.628556][ T5915] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  532.972928][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  532.984664][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  532.995974][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  533.007458][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  533.021652][ T5915] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  533.030926][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.046266][ T5915] usb 5-1: config 0 descriptor??
[  533.065246][T10759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  533.321898][ T5883] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  533.681002][ T5883] usb 3-1: not running at top speed; connect to a high speed hub
[  533.722535][ T5915] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[  533.725436][ T5883] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  533.732294][ T5915] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  533.748578][ T5883] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  533.788436][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  533.849042][ T5915] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  535.104829][ T5883] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  535.441928][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.450169][ T5883] usb 3-1: Product: ᐭ
[  535.454441][ T5883] usb 3-1: Manufacturer: Ꙟ吊좫ើᮗ繣ꨲ㊀饌䟯ꜝ﬍贓㉼ꣻ㰍솿ಘ횿づⷬᯮ妒箍╼탟腒台㻕캕錧酪⨼ఙ쐹䅛奛㌙답
[  535.470047][ T5883] usb 3-1: SerialNumber: 萸뭪鴎礶튗随䵱胮巬爑
[  535.679186][T10791] ------------[ cut here ]------------
[  535.685111][T10791] do not call blocking ops when !TASK_RUNNING; state=2 set at [<ffffffff8177a556>] prepare_to_wait+0x186/0x210
[  535.740485][T10791] WARNING: CPU: 0 PID: 10791 at kernel/sched/core.c:8687 __might_sleep+0xb9/0xe0
[  535.749971][T10791] Modules linked in:
[  535.754142][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.9.1088 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0
[  535.764614][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  535.777194][T10791] RIP: 0010:__might_sleep+0xb9/0xe0
[  535.783182][T10791] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 8e 8a 96 00 48 8b 4d 00 48 c7 c7 20 29 0a 8c 44 89 ee 48 89 ca e8 28 e0 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff
[  535.803222][T10791] RSP: 0018:ffffc900030c65c8 EFLAGS: 00010246
[  535.809466][T10791] RAX: 02588f52f5e3b000 RBX: 1ffff11004aebe2e RCX: 0000000000080000
[  535.817508][T10791] RDX: ffffc90005cd9000 RSI: 0000000000009161 RDI: 0000000000009162
[  535.825642][T10791] RBP: ffff88802575f170 R08: ffffffff81600dd2 R09: fffffbfff1cfa10c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  535.833775][T10791] R10: dffffc0000000000 R11: fffffbfff1cfa10c R12: dffffc0000000000
[  535.841933][T10791] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1cafc0
[  535.850116][T10791] FS:  00007f5d4add06c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  535.860140][T10791] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  535.866809][T10791] CR2: 0000556603044950 CR3: 000000005eb3c000 CR4: 00000000003526f0
[  535.875787][T10791] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  535.884566][T10791] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  535.892832][T10791] Call Trace:
[  535.896183][T10791]  <TASK>
[  535.899263][T10791]  ? __warn+0x165/0x4d0
[  535.903506][T10791]  ? __might_sleep+0xb9/0xe0
[  535.908760][T10791]  ? report_bug+0x2b3/0x500
[  535.913483][T10791]  ? __might_sleep+0xb9/0xe0
[  535.918389][T10791]  ? handle_bug+0x60/0x90
[  535.922786][T10791]  ? exc_invalid_op+0x1a/0x50
[  535.927566][T10791]  ? asm_exc_invalid_op+0x1a/0x20
[  535.932785][T10791]  ? __warn_printk+0x292/0x360
[  535.937666][T10791]  ? __might_sleep+0xb9/0xe0
[  535.942413][T10791]  ? __might_sleep+0xb8/0xe0
[  535.947082][T10791]  netfs_retry_reads+0xde/0x1e10
[  535.952214][T10791]  ? __lock_acquire+0x1397/0x2100
[  535.959183][T10791]  ? __pfx_netfs_retry_reads+0x10/0x10
[  535.959254][T10791]  netfs_read_collection+0x2e01/0x3ab0
[  535.959322][T10791]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  535.959358][T10791]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  535.959389][T10791]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  535.959458][T10791]  netfs_wait_for_read+0x2ba/0x4e0
[  535.959482][T10791]  ? trace_netfs_sreq_ref+0x94/0x230
[  535.959511][T10791]  ? __pfx_netfs_wait_for_read+0x10/0x10
[  535.959536][T10791]  ? __pfx_autoremove_wake_function+0x10/0x10
[  535.959556][T10791]  ? __pfx_v9fs_issue_read+0x10/0x10
[  535.959609][T10791]  ? iov_iter_iovec_advance+0x1fc/0x2c0
[  535.959640][T10791]  netfs_unbuffered_read_iter_locked+0x11fc/0x1540
[  535.959684][T10791]  netfs_unbuffered_read_iter+0xbf/0xe0
[  535.959714][T10791]  __kernel_read+0x513/0x9d0
[  535.959766][T10791]  ? do_sys_openat2+0x13e/0x1d0
[  535.959799][T10791]  ? __pfx___kernel_read+0x10/0x10
[  535.959851][T10791]  integrity_kernel_read+0xb0/0x100
[  535.959905][T10791]  ? __pfx_integrity_kernel_read+0x10/0x10
[  535.959932][T10791]  ? __kmalloc_cache_noprof+0x243/0x390
[  535.959955][T10791]  ? ima_calc_file_hash+0xaae/0x1b30
[  535.959984][T10791]  ima_calc_file_hash+0xae6/0x1b30
[  535.960014][T10791]  ? p9_client_stat+0x1be/0x280
[  535.960060][T10791]  ? v9fs_vfs_getattr+0x1c0/0x370
[  535.960083][T10791]  ? ima_collect_measurement+0x2b1/0xb10
[  535.960110][T10791]  ? process_measurement+0x1351/0x1fb0
[  535.960136][T10791]  ? ima_file_check+0xd9/0x120
[  535.960160][T10791]  ? security_file_post_open+0xb9/0x280
[  535.960212][T10791]  ? path_openat+0x2ccd/0x3590
[  535.960231][T10791]  ? do_filp_open+0x27f/0x4e0
[  535.960250][T10791]  ? __x64_sys_open+0x225/0x270
[  535.960274][T10791]  ? do_syscall_64+0xf3/0x230
[  535.960298][T10791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.960355][T10791]  ? __pfx_ima_calc_file_hash+0x10/0x10
[  535.960428][T10791]  ? p9_client_stat+0x1be/0x280
[  535.960451][T10791]  ? kfree+0x196/0x430
[  535.960498][T10791]  ? p9_client_stat+0x1be/0x280
[  535.960530][T10791]  ? p9_client_stat+0x1be/0x280
[  535.960554][T10791]  ? __pfx_p9_client_stat+0x10/0x10
[  535.960574][T10791]  ? v9fs_fid_lookup+0x1b2/0xf30
[  535.960609][T10791]  ? v9fs_vfs_getattr+0x2eb/0x370
[  535.960664][T10791]  ima_collect_measurement+0x520/0xb10
[  535.960705][T10791]  ? __pfx_ima_collect_measurement+0x10/0x10
[  535.960742][T10791]  ? rcu_is_watching+0x15/0xb0
[  535.960793][T10791]  ? trace_contention_end+0x3c/0x120
[  535.960827][T10791]  ? __asan_memset+0x23/0x50
[  535.960870][T10791]  ? ima_get_hash_algo+0x156/0x4d0
[  535.960894][T10791]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  535.960953][T10791]  process_measurement+0x1351/0x1fb0
[  535.961000][T10791]  ? __pfx_process_measurement+0x10/0x10
[  535.961025][T10791]  ? do_raw_spin_lock+0x14f/0x370
[  535.961114][T10791]  ? __pfx_v9fs_file_open+0x10/0x10
[  535.961141][T10791]  ? do_raw_spin_unlock+0x13c/0x8b0
[  535.961170][T10791]  ? inode_to_bdi+0x69/0xf0
[  535.961221][T10791]  ? apparmor_current_getlsmprop_subj+0xde/0x160
[  535.961251][T10791]  ima_file_check+0xd9/0x120
[  535.961280][T10791]  ? __pfx_ima_file_check+0x10/0x10
[  535.961315][T10791]  security_file_post_open+0xb9/0x280
[  535.961367][T10791]  path_openat+0x2ccd/0x3590
[  535.961425][T10791]  ? __pfx_path_openat+0x10/0x10
[  535.961465][T10791]  do_filp_open+0x27f/0x4e0
[  535.961514][T10791]  ? __pfx_do_filp_open+0x10/0x10
[  535.961543][T10791]  ? do_raw_spin_lock+0x14f/0x370
[  535.961606][T10791]  do_sys_openat2+0x13e/0x1d0
[  535.961658][T10791]  ? __pfx_do_sys_openat2+0x10/0x10
[  535.961698][T10791]  __x64_sys_open+0x225/0x270
[  535.961725][T10791]  ? __pfx___x64_sys_open+0x10/0x10
[  535.961755][T10791]  ? do_syscall_64+0x100/0x230
[  535.961807][T10791]  ? do_syscall_64+0xb6/0x230
[  535.961835][T10791]  do_syscall_64+0xf3/0x230
[  535.961860][T10791]  ? clear_bhb_loop+0x35/0x90
[  535.961890][T10791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.961913][T10791] RIP: 0033:0x7f5d49f7ff19
[  535.961971][T10791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  535.961992][T10791] RSP: 002b:00007f5d4add0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  535.962019][T10791] RAX: ffffffffffffffda RBX: 00007f5d4a145fa0 RCX: 00007f5d49f7ff19
[  535.962037][T10791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340
[  535.962053][T10791] RBP: 00007f5d49ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[  535.962069][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.962106][T10791] R13: 0000000000000000 R14: 00007f5d4a145fa0 R15: 00007ffed1cd05f8
[  535.962139][T10791]  </TASK>
[  535.962163][T10791] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  535.962183][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.9.1088 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0
[  535.962208][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  535.962220][T10791] Call Trace:
[  535.962232][T10791]  <TASK>
[  535.962241][T10791]  dump_stack_lvl+0x241/0x360
[  535.962272][T10791]  ? __pfx_dump_stack_lvl+0x10/0x10
[  535.962294][T10791]  ? __pfx__printk+0x10/0x10
[  535.962314][T10791]  ? _printk+0xd5/0x120
[  535.962339][T10791]  ? __init_begin+0x41000/0x41000
[  535.962366][T10791]  ? vscnprintf+0x5d/0x90
[  535.962387][T10791]  panic+0x349/0x880
[  535.962426][T10791]  ? __warn+0x174/0x4d0
[  535.962448][T10791]  ? __pfx_panic+0x10/0x10
[  535.962492][T10791]  __warn+0x344/0x4d0
[  535.962512][T10791]  ? __might_sleep+0xb9/0xe0
[  535.962542][T10791]  report_bug+0x2b3/0x500
[  535.962563][T10791]  ? __might_sleep+0xb9/0xe0
[  535.962593][T10791]  handle_bug+0x60/0x90
[  535.962616][T10791]  exc_invalid_op+0x1a/0x50
[  535.962640][T10791]  asm_exc_invalid_op+0x1a/0x20
[  535.962660][T10791] RIP: 0010:__might_sleep+0xb9/0xe0
[  535.962687][T10791] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 8e 8a 96 00 48 8b 4d 00 48 c7 c7 20 29 0a 8c 44 89 ee 48 89 ca e8 28 e0 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff
[  535.962704][T10791] RSP: 0018:ffffc900030c65c8 EFLAGS: 00010246
[  535.962722][T10791] RAX: 02588f52f5e3b000 RBX: 1ffff11004aebe2e RCX: 0000000000080000
[  535.962738][T10791] RDX: ffffc90005cd9000 RSI: 0000000000009161 RDI: 0000000000009162
[  535.962752][T10791] RBP: ffff88802575f170 R08: ffffffff81600dd2 R09: fffffbfff1cfa10c
[  535.962767][T10791] R10: dffffc0000000000 R11: fffffbfff1cfa10c R12: dffffc0000000000
[  535.962783][T10791] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1cafc0
[  535.962804][T10791]  ? __warn_printk+0x292/0x360
[  535.962833][T10791]  ? __might_sleep+0xb8/0xe0
[  535.962861][T10791]  netfs_retry_reads+0xde/0x1e10
[  535.962890][T10791]  ? __lock_acquire+0x1397/0x2100
[  535.962924][T10791]  ? __pfx_netfs_retry_reads+0x10/0x10
[  535.962967][T10791]  netfs_read_collection+0x2e01/0x3ab0
[  535.963003][T10791]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  535.963027][T10791]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  535.963059][T10791]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  535.963093][T10791]  netfs_wait_for_read+0x2ba/0x4e0
[  535.963118][T10791]  ? trace_netfs_sreq_ref+0x94/0x230
[  535.963147][T10791]  ? __pfx_netfs_wait_for_read+0x10/0x10
[  535.963174][T10791]  ? __pfx_autoremove_wake_function+0x10/0x10
[  535.963196][T10791]  ? __pfx_v9fs_issue_read+0x10/0x10
[  535.963220][T10791]  ? iov_iter_iovec_advance+0x1fc/0x2c0
[  535.963250][T10791]  netfs_unbuffered_read_iter_locked+0x11fc/0x1540
[  535.963298][T10791]  netfs_unbuffered_read_iter+0xbf/0xe0
[  535.963326][T10791]  __kernel_read+0x513/0x9d0
[  535.963351][T10791]  ? do_sys_openat2+0x13e/0x1d0
[  535.963383][T10791]  ? __pfx___kernel_read+0x10/0x10
[  535.963441][T10791]  integrity_kernel_read+0xb0/0x100
[  535.963468][T10791]  ? __pfx_integrity_kernel_read+0x10/0x10
[  535.963491][T10791]  ? __kmalloc_cache_noprof+0x243/0x390
[  535.963512][T10791]  ? ima_calc_file_hash+0xaae/0x1b30
[  535.963536][T10791]  ima_calc_file_hash+0xae6/0x1b30
[  535.963564][T10791]  ? p9_client_stat+0x1be/0x280
[  535.963581][T10791]  ? v9fs_vfs_getattr+0x1c0/0x370
[  535.963599][T10791]  ? ima_collect_measurement+0x2b1/0xb10
[  535.963624][T10791]  ? process_measurement+0x1351/0x1fb0
[  535.963646][T10791]  ? ima_file_check+0xd9/0x120
[  535.963667][T10791]  ? security_file_post_open+0xb9/0x280
[  535.963686][T10791]  ? path_openat+0x2ccd/0x3590
[  535.963702][T10791]  ? do_filp_open+0x27f/0x4e0
[  535.963719][T10791]  ? __x64_sys_open+0x225/0x270
[  535.963738][T10791]  ? do_syscall_64+0xf3/0x230
[  535.963758][T10791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.963783][T10791]  ? __pfx_ima_calc_file_hash+0x10/0x10
[  535.963841][T10791]  ? p9_client_stat+0x1be/0x280
[  535.963864][T10791]  ? kfree+0x196/0x430
[  535.963885][T10791]  ? p9_client_stat+0x1be/0x280
[  535.963909][T10791]  ? p9_client_stat+0x1be/0x280
[  535.963932][T10791]  ? __pfx_p9_client_stat+0x10/0x10
[  535.963950][T10791]  ? v9fs_fid_lookup+0x1b2/0xf30
[  535.963984][T10791]  ? v9fs_vfs_getattr+0x2eb/0x370
[  535.964013][T10791]  ima_collect_measurement+0x520/0xb10
[  535.964052][T10791]  ? __pfx_ima_collect_measurement+0x10/0x10
[  535.964087][T10791]  ? rcu_is_watching+0x15/0xb0
[  535.964111][T10791]  ? trace_contention_end+0x3c/0x120
[  535.964143][T10791]  ? __asan_memset+0x23/0x50
[  535.964185][T10791]  ? ima_get_hash_algo+0x156/0x4d0
[  535.964208][T10791]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  535.964241][T10791]  process_measurement+0x1351/0x1fb0
[  535.964286][T10791]  ? __pfx_process_measurement+0x10/0x10
[  535.964310][T10791]  ? do_raw_spin_lock+0x14f/0x370
[  535.964381][T10791]  ? __pfx_v9fs_file_open+0x10/0x10
[  535.964411][T10791]  ? do_raw_spin_unlock+0x13c/0x8b0
[  535.964439][T10791]  ? inode_to_bdi+0x69/0xf0
[  535.964467][T10791]  ? apparmor_current_getlsmprop_subj+0xde/0x160
[  535.964495][T10791]  ima_file_check+0xd9/0x120
[  535.964523][T10791]  ? __pfx_ima_file_check+0x10/0x10
[  535.964559][T10791]  security_file_post_open+0xb9/0x280
[  535.964582][T10791]  path_openat+0x2ccd/0x3590
[  535.964633][T10791]  ? __pfx_path_openat+0x10/0x10
[  535.964671][T10791]  do_filp_open+0x27f/0x4e0
[  535.964693][T10791]  ? __pfx_do_filp_open+0x10/0x10
[  535.964718][T10791]  ? do_raw_spin_lock+0x14f/0x370
[  535.964781][T10791]  do_sys_openat2+0x13e/0x1d0
[  535.964808][T10791]  ? __pfx_do_sys_openat2+0x10/0x10
[  535.964846][T10791]  __x64_sys_open+0x225/0x270
[  535.964873][T10791]  ? __pfx___x64_sys_open+0x10/0x10
[  535.964902][T10791]  ? do_syscall_64+0x100/0x230
[  535.964928][T10791]  ? do_syscall_64+0xb6/0x230
[  535.964954][T10791]  do_syscall_64+0xf3/0x230
[  535.964977][T10791]  ? clear_bhb_loop+0x35/0x90
[  535.965003][T10791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.965025][T10791] RIP: 0033:0x7f5d49f7ff19
[  535.965045][T10791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  535.965063][T10791] RSP: 002b:00007f5d4add0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  535.965084][T10791] RAX: ffffffffffffffda RBX: 00007f5d4a145fa0 RCX: 00007f5d49f7ff19
[  535.965100][T10791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340
[  535.965113][T10791] RBP: 00007f5d49ff3cc8 R08: 0000000000000000 R09: 0000000000000000
[  535.965126][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.965140][T10791] R13: 0000000000000000 R14: 00007f5d4a145fa0 R15: 00007ffed1cd05f8
[  535.965170][T10791]  </TASK>
[  535.965449][T10791] Kernel Offset: disabled