last executing test programs:

18m29.961738293s ago: executing program 0 (id=1145):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200020c0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x1}, 0x1})
io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0)
readv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/19, 0x13}], 0x2)

18m28.03330042s ago: executing program 0 (id=1152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={r3, 0x3ff, 0x8}, &(0x7f0000000580)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, 0x0, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f00000000c0)="4fb800ffa2f1e7ee7422a179caffffcd000040000086dd", 0x17, 0x0, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="6d6ebbf60d83"}, 0x14)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)

18m27.650089148s ago: executing program 0 (id=1153):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
unshare(0x8040480)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
cachestat(r4, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r6, 0x400, 0x1)
fremovexattr(r6, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, 0x0, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0xb8}}, 0x0)

18m24.353824319s ago: executing program 0 (id=1158):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2d, 'net_cls'}, {0x2b, 'net_cls'}, {0x2d, 'freezer'}, {0x2b, 'perf_event'}, {0x2d, 'rlimit'}, {0x2b, 'cpuacct'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x77, 'cpuset'}]}, 0x4d)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r1=>0x0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)

18m24.263619927s ago: executing program 0 (id=1160):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
chdir(0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0)

18m22.025039496s ago: executing program 0 (id=1166):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00)
sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000088c0))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
sendmmsg$inet_sctp(r0, &(0x7f000000a840)=[{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000007c0)="4e21fec1efcd", 0x6}], 0x2, 0x0, 0x0, 0x4040044}], 0x1, 0x800)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)

18m6.584504824s ago: executing program 32 (id=1166):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00)
sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000088c0))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
sendmmsg$inet_sctp(r0, &(0x7f000000a840)=[{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000007c0)="4e21fec1efcd", 0x6}], 0x2, 0x0, 0x0, 0x4040044}], 0x1, 0x800)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)

15m58.597981058s ago: executing program 3 (id=1541):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0)

15m58.453802642s ago: executing program 3 (id=1542):
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000380)={0x2, {0x8002, 0x7fffffff, 0xfffffffe, 0x10}})
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xeb, 0x0, 0x5, 0x7fffffff}})

15m58.267302146s ago: executing program 3 (id=1544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

15m57.85292406s ago: executing program 3 (id=1547):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)

15m57.535513098s ago: executing program 3 (id=1550):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200020c0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x1}, 0x1})
io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0)
readv(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1)

15m54.621541006s ago: executing program 3 (id=1559):
socket(0x2000000015, 0x80005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
writev(r1, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)

15m53.167940572s ago: executing program 33 (id=1559):
socket(0x2000000015, 0x80005, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
writev(r1, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x4, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)

15m52.530365731s ago: executing program 5 (id=1565):
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000380)={0x2, {0x8002, 0x7fffffff, 0xfffffffe, 0x10}})
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xeb, 0x0, 0x5, 0x7fffffff}})

15m52.321269579s ago: executing program 5 (id=1566):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$packet(r0, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r1 = socket$xdp(0x2c, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r2}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x304214, 0x4)
syz_emit_ethernet(0x16, &(0x7f0000000b00)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xa9, 'O', "82e871", 0x6001}}}}}, 0x0)

15m50.329115004s ago: executing program 5 (id=1572):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ppoll(&(0x7f0000000080)=[{r2, 0x2034}, {r0, 0x4480}, {r0, 0x8200}, {r3, 0x8}, {r2, 0x82}], 0x5, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x1]}, 0x8)

15m46.119814926s ago: executing program 5 (id=1590):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)

15m45.807301283s ago: executing program 5 (id=1594):
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xc, 0x8, 0x4, 0x3}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x107142, 0x0)
sendfile(r0, r0, 0x0, 0x8001)

15m43.113979975s ago: executing program 5 (id=1596):
r0 = epoll_create1(0x80000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x2000})
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2549000000080001003b00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x1)

15m42.512833614s ago: executing program 34 (id=1596):
r0 = epoll_create1(0x80000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x2000})
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2549000000080001003b00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x1)

15m19.396451235s ago: executing program 4 (id=1654):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, 0x0, 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

15m19.217274491s ago: executing program 4 (id=1655):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1})
io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0)

15m19.154559123s ago: executing program 4 (id=1656):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x30a})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1)
ioctl$BLKPG(r3, 0xc0104d08, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

15m18.824031975s ago: executing program 4 (id=1657):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)

15m18.770769222s ago: executing program 4 (id=1658):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000560012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ceff14d6d930dfe1d9d322fe7c9f8775730d16a4683f5af34e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbf85b7276505de6c1d40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55", 0xd2}], 0x1}, 0x894)

15m15.488422679s ago: executing program 4 (id=1666):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)

15m15.090431404s ago: executing program 35 (id=1666):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)

11m40.364305278s ago: executing program 7 (id=2256):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

11m36.66528287s ago: executing program 7 (id=2264):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001380), 0x40440, 0x0)
epoll_create1(0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0x8000000000, 0x9, 0xfffffffffffffffe}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0)

11m35.708240882s ago: executing program 7 (id=2266):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x8)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)

11m35.461006113s ago: executing program 7 (id=2268):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

11m35.215160303s ago: executing program 7 (id=2269):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xfe, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r4, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

11m33.598042523s ago: executing program 7 (id=2270):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90)
openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_STATUS_ACCEL_DEV(r6, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"})
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3})
syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r7, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x2})
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000007100)={0x2020}, 0x941f)

11m16.786683691s ago: executing program 36 (id=2270):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r4}}, 0x48)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90)
openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_STATUS_ACCEL_DEV(r6, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"})
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3})
syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r7, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x2})
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r8, &(0x7f0000007100)={0x2020}, 0x941f)

9m40.82332834s ago: executing program 2 (id=2527):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

9m39.777040851s ago: executing program 2 (id=2532):
socket(0x10, 0x80002, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

9m39.405420987s ago: executing program 2 (id=2533):
r0 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r1, &(0x7f0000000080)="99", 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/cgroup\x00')

9m38.42982793s ago: executing program 2 (id=2536):
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

9m38.032249995s ago: executing program 2 (id=2538):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x3, 0x8000, 0x2, 0xb, 0xc, "af"}}, 0x119)
write$UHID_INPUT(r3, &(0x7f0000001080)={0xa, {"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", 0xfffffee6}}, 0x1006)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x140, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

9m35.065623429s ago: executing program 2 (id=2548):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c844)
eventfd(0x8c69)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3})
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0)

9m4.97937636s ago: executing program 6 (id=2600):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0)
ftruncate(r2, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r3, r2, 0x0, 0x578410eb)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
dup(0xffffffffffffffff)

9m0.059662737s ago: executing program 6 (id=2606):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000040"], 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, <r5=>0x0})
ptrace$cont(0x1f, r5, 0x100, 0x4)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket(0x10, 0x803, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
sendto$packet(r6, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x17, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)

8m54.643112215s ago: executing program 6 (id=2613):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x16, 0x1}, {0xc}, {0x12}]}, @void, @void, @void, @void, @void, @void}, 0x31)
nanosleep(0x0, &(0x7f0000000380))
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x1, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x40000020, 0x0, 0x0)

8m49.587579194s ago: executing program 6 (id=2627):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0xff00, 0xc401, 0x10d, &(0x7f00000004c0)="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"}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0})

8m45.20797864s ago: executing program 6 (id=2634):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x1a7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba20baa8cc06a99", 0x2a}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18debc", 0x7f}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633a", 0x37}], 0x3}}], 0x3, 0x54004)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

8m44.989156951s ago: executing program 6 (id=2635):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x3, 0x8000, 0x2, 0xb, 0xc, "af"}}, 0x119)
write$UHID_INPUT(r1, &(0x7f0000001080)={0xa, {"a2e3ad08ed6b52f99cfbf4c087f71e9b3d0963ff7fc6e5539b9b3b0a8b9b441b4552101b080d29558f0e1ac6e7049b3468959b189a242a9b4bf3988f7ef319520700ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65331334ffc15cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac293d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014f9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09112fdb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf06b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203737aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cbe670454fdce68a395a3d361c040babb171607caac3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40626db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aadca8366d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6da1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932ae98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb08ffea69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2aadf3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffee6}}, 0x1006)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x140, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

8m28.697814483s ago: executing program 37 (id=2635):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet(0x2, 0x2, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x3, 0x8000, 0x2, 0xb, 0xc, "af"}}, 0x119)
write$UHID_INPUT(r1, &(0x7f0000001080)={0xa, {"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", 0xfffffee6}}, 0x1006)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x140, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

4m56.087713702s ago: executing program 1 (id=2956):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0)
ioctl$RTC_PIE_OFF(r0, 0x7006)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1)
socket(0x18, 0x0, 0x1)
ioctl(r0, 0xffffffff, &(0x7f0000002080))

4m51.750004783s ago: executing program 1 (id=2963):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xfe, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009280), 0x0, 0x20008800)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(0x0, 0x42, 0x0)
r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x4101, 0x190)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x20000000000006)
setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='security.selinux\x00', &(0x7f0000000340)='/sys/kernel/debug/sync/sw_sync\x00', 0x1f, 0x2)

4m49.07864084s ago: executing program 1 (id=2966):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0x6, 0x9, 0x1, 0x7, 0x5, 0xffffffffffffffff})
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
socket$packet(0x11, 0x2, 0x300)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xc8f, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close(r0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})

4m44.530526085s ago: executing program 1 (id=2971):
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$kcm(0x29, 0x5, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f0000000440)=0x1f)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe)
write$binfmt_script(r2, &(0x7f0000000200), 0xfffffdef)

4m40.288930507s ago: executing program 1 (id=2976):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

4m39.219056774s ago: executing program 1 (id=2978):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
socket$alg(0x26, 0x5, 0x0)

4m24.051608626s ago: executing program 38 (id=2978):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
socket$alg(0x26, 0x5, 0x0)

15.55052962s ago: executing program 9 (id=3221):
add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x2255, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x50, 0xffffffffffffffff, 0x80000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x41)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil})
syz_open_dev$audion(&(0x7f0000000100), 0x9, 0x612000)
userfaultfd(0x80001)
socket$netlink(0x10, 0x3, 0x1)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

13.882548893s ago: executing program 9 (id=3222):
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x7d, 0xa8, 0xe3, 0x40, 0xdba, 0x5000, 0x3d88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0x77, 0xb3, 0x6a}}]}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404b", 0x173}], 0x1}}], 0x1, 0x400c0)
sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

11.960482994s ago: executing program 8 (id=3224):
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = gettid()
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff})
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
syz_open_dev$tty1(0xc, 0x4, 0x1)
timer_create(0x8, 0x0, &(0x7f0000000100))

10.473920322s ago: executing program 9 (id=3225):
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x2, 0x3fff}, 0xc)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
dup(r5)
get_robust_list(r1, &(0x7f00000004c0)=&(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f0000000340)}, 0x0)
sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r6 = dup(r5)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

8.211742168s ago: executing program 8 (id=3226):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
setrlimit(0x3, &(0x7f0000000000)={0x3ff, 0x8001})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmsg(0xffffffffffffffff, 0x0, 0x40000100)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe64, 0xb, @loopback, 0x2}, 0x1c)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
r3 = syz_io_uring_setup(0x49b, &(0x7f0000002180)={0x0, 0xa365, 0x100, 0x3, 0x1b0}, &(0x7f00000001c0), &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17, @time={0xbf, 0x316575}, 0x0, {0x6}})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1)

7.905279623s ago: executing program 9 (id=3227):
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x7d, 0xa8, 0xe3, 0x40, 0xdba, 0x5000, 0x3d88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0x77, 0xb3, 0x6a}}]}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x18e}], 0x1}}], 0x1, 0x400c0)
sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

6.990381696s ago: executing program 8 (id=3228):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
setrlimit(0x3, &(0x7f0000000000)={0x3ff, 0x8001})
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmsg(0xffffffffffffffff, 0x0, 0x40000100)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe64, 0xb, @loopback, 0x2}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
r3 = syz_io_uring_setup(0x49b, &(0x7f0000002180)={0x0, 0xa365, 0x100, 0x3, 0x1b0}, &(0x7f00000001c0), &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17, @time={0xbf, 0x316575}, 0x0, {0x6}})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1)

4.909556626s ago: executing program 8 (id=3229):
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = gettid()
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff})
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
tkill(r4, 0xb)
timer_create(0x8, 0x0, &(0x7f0000000100))

3.485076509s ago: executing program 9 (id=3230):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_UID={0x8}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x3c}}, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100)
r6 = dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
writev(r0, &(0x7f0000005740)=[{&(0x7f0000000040)='\n', 0x1}], 0x1)

3.197134374s ago: executing program 8 (id=3231):
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
connect$qrtr(r0, &(0x7f0000000100)={0x2a, 0x2, 0x3fff}, 0xc)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
get_robust_list(r1, &(0x7f00000004c0)=&(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f0000000340)}, 0x0)
sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r6 = dup(r5)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

591.4123ms ago: executing program 8 (id=3232):
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x7d, 0xa8, 0xe3, 0x40, 0xdba, 0x5000, 0x3d88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0x77, 0xb3, 0x6a}}]}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

0s ago: executing program 9 (id=3233):
add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0x2255, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x50, 0xffffffffffffffff, 0x80000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x41)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil})
syz_open_dev$audion(&(0x7f0000000100), 0x9, 0x612000)
socket$netlink(0x10, 0x3, 0x1)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Manufacturer: syz
[  908.822249][T12066] usb 7-1: SerialNumber: syz
[  908.827997][T12066] usb 7-1: config 0 descriptor??
[  908.835472][T12066] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  908.835502][T12066] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  909.092305][T11812] hsr_slave_0: left promiscuous mode
[  909.251286][T11812] hsr_slave_1: left promiscuous mode
[  909.574948][T12066] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  909.982520][T12066] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  909.982542][T12066] em28xx 7-1:0.0: board has no eeprom
[  910.445919][T12066] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  910.445951][T12066] em28xx 7-1:0.0: dvb set to bulk mode.
[  910.451859][T12066] em28xx 7-1:0.0: Binding DVB extension
[  911.464831][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'.
[  911.736602][ T5802] usb 7-1: USB disconnect, device number 12
[  911.739117][ T5802] em28xx 7-1:0.0: Disconnecting em28xx
[  911.920721][T12066] em28xx 7-1:0.0: Registering input extension
[  911.935780][ T5802] em28xx 7-1:0.0: Closing input extension
[  911.980555][ T5802] em28xx 7-1:0.0: Freeing device
[  912.726703][ T5802] hid-generic 0003:8000:0002.0013: item fetching failed at offset 0/1
[  912.727131][ T5802] hid-generic 0003:8000:0002.0013: probe with driver hid-generic failed with error -22
[  915.070307][T13445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.264632][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'.
[  917.973317][ T7306] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  919.176217][T13480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2647'.
[  919.195897][ T7306] usb 9-1: Using ep0 maxpacket: 16
[  919.197919][ T7306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  919.199897][ T7306] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  919.199915][ T7306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.199926][ T7306] usb 9-1: Product: syz
[  919.199934][ T7306] usb 9-1: Manufacturer: syz
[  919.199942][ T7306] usb 9-1: SerialNumber: syz
[  919.203247][ T7306] usb 9-1: config 0 descriptor??
[  919.239608][ T7306] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  919.239631][ T7306] em28xx 9-1:0.0: DVB interface 0 found: bulk
[  919.847819][ T7306] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  921.329299][ T7306] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  921.329332][ T7306] em28xx 9-1:0.0: board has no eeprom
[  921.425876][ T7306] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  921.425908][ T7306] em28xx 9-1:0.0: dvb set to bulk mode.
[  921.426289][ T5969] em28xx 9-1:0.0: Binding DVB extension
[  921.485983][ T7306] usb 9-1: USB disconnect, device number 15
[  921.488520][ T7306] em28xx 9-1:0.0: Disconnecting em28xx
[  921.559653][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2651'.
[  921.625377][ T5969] em28xx 9-1:0.0: Registering input extension
[  921.632831][ T7306] em28xx 9-1:0.0: Closing input extension
[  921.661990][ T7306] em28xx 9-1:0.0: Freeing device
[  924.044822][T13511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2657'.
[  929.285668][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  929.307425][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  929.309880][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  929.310711][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  929.311232][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  929.660159][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2668'.
[  929.660177][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2668'.
[  931.723857][ T5797] Bluetooth: hci4: command tx timeout
[  933.221850][T13431] bond0: (slave syz_tun): Releasing backup interface
[  933.786147][ T5797] Bluetooth: hci4: command tx timeout
[  935.865843][ T5797] Bluetooth: hci4: command tx timeout
[  935.912075][ T7109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  935.957700][ T7109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  935.959336][ T7109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  935.962057][ T7109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  935.963962][ T7109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  936.396616][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2677'.
[  936.396645][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2677'.
[  937.533709][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  937.533790][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  937.777591][T13594] netlink: 'syz.8.2678': attribute type 8 has an invalid length.
[  937.777618][T13594] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2678'.
[  937.869289][T13549] chnl_net:caif_netlink_parms(): no params data found
[  938.031599][ T5797] Bluetooth: hci4: command tx timeout
[  938.031673][ T5797] Bluetooth: hci0: command tx timeout
[  941.136529][ T7109] Bluetooth: hci0: command tx timeout
[  941.405558][T11812] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.502042][T11812] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.146325][ T5797] Bluetooth: hci0: command tx timeout
[  943.584926][ T5950] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  943.749267][ T5950] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  943.749332][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  943.749354][ T5950] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  943.749378][ T5950] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  943.751762][ T5950] usb 9-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  943.751790][ T5950] usb 9-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  943.751809][ T5950] usb 9-1: Manufacturer: syz
[  943.833755][ T5950] usb 9-1: config 0 descriptor??
[  943.846596][ T5950] smsusb:smsusb_probe: board id=9, interface number 0
[  943.847126][ T5950] smsusb:smsusb_probe: Device initialized with return code -19
[  943.952387][ T5797] Bluetooth: hci5: command 0x0406 tx timeout
[  944.053466][T11812] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.115161][T13549] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.115409][T13549] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.115655][T13549] bridge_slave_0: entered allmulticast mode
[  944.135850][T13549] bridge_slave_0: entered promiscuous mode
[  944.191533][T13549] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.191678][T13549] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.191932][T13549] bridge_slave_1: entered allmulticast mode
[  944.201955][T13549] bridge_slave_1: entered promiscuous mode
[  944.338717][ T5950] usb 9-1: USB disconnect, device number 16
[  944.891809][T11812] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.992004][T13549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  945.017236][T13549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  945.064690][T13645] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2690'.
[  945.227623][ T7109] Bluetooth: hci0: command tx timeout
[  945.307501][T13640] syz.9.2689 (13640): drop_caches: 2
[  945.427115][T13549] team0: Port device team_slave_0 added
[  945.465159][T13549] team0: Port device team_slave_1 added
[  945.517293][T12504] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  945.665844][T12504] usb 9-1: Using ep0 maxpacket: 16
[  945.693787][T12504] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  945.693817][T12504] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  945.808363][T12504] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  945.808397][T12504] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.808418][T12504] usb 9-1: Product: syz
[  945.808432][T12504] usb 9-1: Manufacturer: syz
[  945.808447][T12504] usb 9-1: SerialNumber: syz
[  945.962315][T12504] usb 9-1: config 0 descriptor??
[  946.192740][T13549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  946.192754][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  946.192770][T13549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  946.249872][T13549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  946.249887][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  946.249903][T13549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  946.797969][T13549] hsr_slave_0: entered promiscuous mode
[  946.802975][T13549] hsr_slave_1: entered promiscuous mode
[  946.803684][T13549] debugfs: 'hsr0' already exists in 'hsr'
[  946.803702][T13549] Cannot create hsr debugfs directory
[  946.811855][T13584] chnl_net:caif_netlink_parms(): no params data found
[  946.856067][T13636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  946.867571][T11812] bridge_slave_1: left allmulticast mode
[  946.867600][T11812] bridge_slave_1: left promiscuous mode
[  946.867860][T11812] bridge0: port 2(bridge_slave_1) entered disabled state
[  946.978316][T11812] bridge_slave_0: left allmulticast mode
[  946.978349][T11812] bridge_slave_0: left promiscuous mode
[  946.978714][T11812] bridge0: port 1(bridge_slave_0) entered disabled state
[  948.352934][ T5969] usb 9-1: USB disconnect, device number 17
[  948.530437][ T6118] libceph: connect (1)[c::]:6789 error -101
[  948.530666][ T6118] libceph: mon0 (1)[c::]:6789 connect error
[  948.550147][ T6118] libceph: connect (1)[c::]:6789 error -101
[  948.550371][ T6118] libceph: mon0 (1)[c::]:6789 connect error
[  948.831392][ T6118] libceph: connect (1)[c::]:6789 error -101
[  948.831593][ T6118] libceph: mon0 (1)[c::]:6789 connect error
[  948.857390][T13671] ceph: No mds server is up or the cluster is laggy
[  949.316001][T11812] gretap0 (unregistering): left promiscuous mode
[  949.544072][T13681] netlink: 71 bytes leftover after parsing attributes in process `syz.8.2698'.
[  949.892207][T13687] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2699'.
[  951.105958][T11812] bond0 (unregistering): left promiscuous mode
[  951.105982][T11812] bond_slave_0: left promiscuous mode
[  951.106262][T11812] bond_slave_1: left promiscuous mode
[  951.156464][T11812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  952.278019][T11812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  952.305979][T11812] bond0 (unregistering): Released all slaves
[  952.353844][   T37] audit: type=1800 audit(1768024199.410:127): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2703" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  952.354299][T13701] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  952.354343][T13701] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  952.354364][T13701] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  952.516873][ T5883] libceph: connect (1)[c::]:6789 error -101
[  952.517085][ T5883] libceph: mon0 (1)[c::]:6789 connect error
[  952.522992][T13704] ceph: No mds server is up or the cluster is laggy
[  955.820777][T13739] netlink: 71 bytes leftover after parsing attributes in process `syz.8.2713'.
[  956.440467][T13750] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2714'.
[  956.774326][T13584] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.774534][T13584] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.774777][T13584] bridge_slave_0: entered allmulticast mode
[  956.802192][T13584] bridge_slave_0: entered promiscuous mode
[  956.938366][T13584] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.938484][T13584] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.938619][T13584] bridge_slave_1: entered allmulticast mode
[  956.944252][T13584] bridge_slave_1: entered promiscuous mode
[  958.510450][T11812] team0: left promiscuous mode
[  958.510487][T11812] team_slave_0: left promiscuous mode
[  958.511812][T11812] team_slave_1: left promiscuous mode
[  958.849412][T11812] hsr_slave_0: left promiscuous mode
[  958.942841][T11812] hsr_slave_1: left promiscuous mode
[  958.944086][T11812] batman_adv: batadv0: Removing interface: batadv_slave_0
[  959.017346][T11812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  959.017378][T11812] batman_adv: batadv0: Removing interface: batadv_slave_1
[  959.142694][T11812] veth1_macvtap: left promiscuous mode
[  959.142776][T11812] veth0_macvtap: left promiscuous mode
[  959.143034][T11812] veth1_vlan: left promiscuous mode
[  959.143184][T11812] veth0_vlan: left promiscuous mode
[  961.327709][T13793] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2724'.
[  961.333475][T13795] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2725'.
[  962.596495][T11812] team0 (unregistering): Port device team_slave_1 removed
[  962.796728][T11812] team0 (unregistering): Port device team_slave_0 removed
[  965.328345][T13783] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  965.328394][T13783] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  965.328415][T13783] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  965.344174][   T37] audit: type=1800 audit(1768024212.390:128): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2722" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  965.537398][T13584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  965.608942][T13584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  966.934036][T13584] team0: Port device team_slave_0 added
[  967.054426][T13584] team0: Port device team_slave_1 added
[  967.531387][T13584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  967.531403][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.531419][T13584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  967.904022][T13584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  967.904037][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.904054][T13584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  973.059324][T13584] hsr_slave_0: entered promiscuous mode
[  973.060920][T13584] hsr_slave_1: entered promiscuous mode
[  973.062240][T13584] debugfs: 'hsr0' already exists in 'hsr'
[  973.062271][T13584] Cannot create hsr debugfs directory
[  973.193812][T13834] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2736'.
[  973.511510][T13827] syz.8.2733 (13827): drop_caches: 2
[  973.514702][T11812] bridge_slave_1: left allmulticast mode
[  973.514732][T11812] bridge_slave_1: left promiscuous mode
[  973.515017][T11812] bridge0: port 2(bridge_slave_1) entered disabled state
[  973.738165][T13841] capability: warning: `syz.9.2737' uses 32-bit capabilities (legacy support in use)
[  973.996118][ T5993] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  974.243871][ T5993] usb 9-1: config index 0 descriptor too short (expected 45, got 36)
[  974.252379][ T5993] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  974.252465][ T5993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  974.252525][ T5993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  974.252603][ T5993] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  974.256968][ T5993] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  974.257001][ T5993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.337014][ T5993] usb 9-1: config 0 descriptor??
[  974.356164][T13840] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  975.426724][ T5993] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd
[  976.025453][ T5993] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  976.154821][T13842] nvme_fabrics: missing parameter 'transport=%s'
[  976.154879][T13842] nvme_fabrics: missing parameter 'nqn=%s'
[  976.614676][ T5993] usb 9-1: USB disconnect, device number 18
[  977.740488][T11812] bridge_slave_0: left allmulticast mode
[  977.740520][T11812] bridge_slave_0: left promiscuous mode
[  977.740816][T11812] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.897099][T13845] ceph: No mds server is up or the cluster is laggy
[  978.262800][ T7306] libceph: connect (1)[c::]:6789 error -101
[  978.263021][ T7306] libceph: mon0 (1)[c::]:6789 connect error
[  978.591925][T13837] syz.9.2737 (13837): drop_caches: 2
[  980.475000][T13859] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2735'.
[  981.162332][T11812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  981.269227][T11812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  981.328210][T11812] bond0 (unregistering): Released all slaves
[  983.126052][T11812] hsr_slave_0: left promiscuous mode
[  983.195889][T11812] hsr_slave_1: left promiscuous mode
[  983.206099][T11812] batman_adv: batadv0: Removing interface: batadv_slave_0
[  983.355857][T11812] batman_adv: batadv0: Removing interface: batadv_slave_1
[  986.900812][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2746'.
[  987.247994][T11812] team0 (unregistering): Port device team_slave_1 removed
[  987.527588][T11812] team0 (unregistering): Port device team_slave_0 removed
[  987.880439][T13905] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2751'.
[  991.287656][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  991.421200][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  991.435619][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  991.653457][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  991.664569][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  995.792372][ T5797] Bluetooth: hci3: command tx timeout
[  996.816904][ T7109] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  996.822457][ T7109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  996.824613][ T7109] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  996.851302][ T7109] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  996.852721][ T7109] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  997.361455][T13923] chnl_net:caif_netlink_parms(): no params data found
[  997.866551][ T7109] Bluetooth: hci3: command tx timeout
[  998.246552][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  998.246634][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  999.124716][ T7109] Bluetooth: hci6: command tx timeout
[  999.239166][T13959] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2760'.
[  999.292221][T13962] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2760'.
[  999.527269][T13968] netlink: 71 bytes leftover after parsing attributes in process `syz.9.2763'.
[  999.832738][ T1139] bridge_slave_1: left allmulticast mode
[  999.832769][ T1139] bridge_slave_1: left promiscuous mode
[  999.833054][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.886843][ T1139] bridge_slave_0: left allmulticast mode
[  999.886867][ T1139] bridge_slave_0: left promiscuous mode
[  999.887063][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.945929][ T7109] Bluetooth: hci3: command tx timeout
[  999.976066][ T5993] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1000.128036][ T5993] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1000.128069][ T5993] usb 9-1: config 1 has no interface number 0
[ 1000.128119][ T5993] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1000.128145][ T5993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.146082][ T7109] Bluetooth: hci6: command tx timeout
[ 1001.367356][ T5993] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1001.523660][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1001.596870][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1002.026146][ T7109] Bluetooth: hci3: command tx timeout
[ 1002.780608][ T1139] bond0 (unregistering): Released all slaves
[ 1003.225788][ T7109] Bluetooth: hci6: command tx timeout
[ 1003.237191][T13923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1003.237385][T13923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1003.237575][T13923] bridge_slave_0: entered allmulticast mode
[ 1003.241261][T13923] bridge_slave_0: entered promiscuous mode
[ 1003.437790][ T1139] hsr_slave_0: left promiscuous mode
[ 1003.457867][ T1139] hsr_slave_1: left promiscuous mode
[ 1003.459033][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1003.482233][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1003.836899][ T5883] usb 9-1: USB disconnect, device number 19
[ 1005.306711][ T7109] Bluetooth: hci6: command tx timeout
[ 1007.618320][ T1139] team0 (unregistering): Port device team_slave_1 removed
[ 1008.908530][T14018] syz.9.2773 (14018): drop_caches: 2
[ 1009.033613][ T1139] team0 (unregistering): Port device team_slave_0 removed
[ 1009.227958][T14020] netlink: 71 bytes leftover after parsing attributes in process `syz.8.2774'.
[ 1010.150638][T14028] loop2: detected capacity change from 0 to 7
[ 1010.151862][T14028] Dev loop2: unable to read RDB block 7
[ 1010.151889][T14028]  loop2: AHDI p1 p2
[ 1010.151918][T14028] loop2: partition table partially beyond EOD, truncated
[ 1010.152032][T14028] loop2: p1 start 1818582900 is beyond EOD, truncated
[ 1010.477955][T14034] syz.9.2776 (14034): drop_caches: 2
[ 1011.726477][T14034] nvme_fabrics: missing parameter 'transport=%s'
[ 1011.726491][T14034] nvme_fabrics: missing parameter 'nqn=%s'
[ 1012.001109][   T37] audit: type=1800 audit(1768024259.060:129): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2777" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[ 1012.001364][T14038] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1012.001389][T14038] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1012.001401][T14038] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1012.077643][T13923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1012.077858][T13923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.078103][T13923] bridge_slave_1: entered allmulticast mode
[ 1012.114004][T13923] bridge_slave_1: entered promiscuous mode
[ 1013.320281][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.889824][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1014.259315][T13945] chnl_net:caif_netlink_parms(): no params data found
[ 1014.308361][T13923] team0: Port device team_slave_0 added
[ 1015.406332][T14068] loop2: detected capacity change from 0 to 7
[ 1015.655503][T14068] Dev loop2: unable to read RDB block 7
[ 1015.655615][T14068]  loop2: AHDI p1 p2
[ 1015.656356][T14068] loop2: partition table partially beyond EOD, truncated
[ 1015.657144][T14068] loop2: p1 start 1818582900 is beyond EOD, truncated
[ 1016.947404][T13923] team0: Port device team_slave_1 added
[ 1018.502197][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1018.502215][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1018.502237][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1018.676924][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1018.676943][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1018.676969][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1018.863536][T14088] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2788'.
[ 1019.126435][T13945] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.126684][T13945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1019.126931][T13945] bridge_slave_0: entered allmulticast mode
[ 1019.129892][T13945] bridge_slave_0: entered promiscuous mode
[ 1019.145927][ T5993] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1019.277357][T13945] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.277503][T13945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1019.277712][T13945] bridge_slave_1: entered allmulticast mode
[ 1019.281015][T13945] bridge_slave_1: entered promiscuous mode
[ 1019.315004][ T5993] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1019.315033][ T5993] usb 10-1: config 1 has no interface number 0
[ 1019.315085][ T5993] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1019.315109][ T5993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.374150][ T5993] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1019.400903][T14102] loop2: detected capacity change from 0 to 7
[ 1019.401806][T14102] Dev loop2: unable to read RDB block 7
[ 1019.401835][T14102]  loop2: AHDI p1 p2
[ 1019.401875][T14102] loop2: partition table partially beyond EOD, truncated
[ 1019.401983][T14102] loop2: p1 start 1818582900 is beyond EOD, truncated
[ 1020.787977][T13923] hsr_slave_0: entered promiscuous mode
[ 1020.789607][T13923] hsr_slave_1: entered promiscuous mode
[ 1020.790695][T13923] debugfs: 'hsr0' already exists in 'hsr'
[ 1020.790722][T13923] Cannot create hsr debugfs directory
[ 1021.069446][T13945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1021.199337][T13945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1021.531611][T13945] team0: Port device team_slave_0 added
[ 1021.562439][T13945] team0: Port device team_slave_1 added
[ 1021.916697][ T7306] usb 10-1: USB disconnect, device number 2
[ 1021.987415][T13945] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1021.987434][T13945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1021.987461][T13945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1022.202451][T13945] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1022.202470][T13945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1022.202500][T13945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1022.492408][T14130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2801'.
[ 1022.492445][T14130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2801'.
[ 1026.395095][T13945] hsr_slave_0: entered promiscuous mode
[ 1026.397045][T13945] hsr_slave_1: entered promiscuous mode
[ 1026.397965][T13945] debugfs: 'hsr0' already exists in 'hsr'
[ 1026.397987][T13945] Cannot create hsr debugfs directory
[ 1026.878179][T14148] syz.8.2805 (14148): drop_caches: 2
[ 1029.179762][T14149] nvme_fabrics: missing parameter 'transport=%s'
[ 1029.179824][T14149] nvme_fabrics: missing parameter 'nqn=%s'
[ 1029.328323][ T1139] bridge_slave_1: left allmulticast mode
[ 1029.328357][ T1139] bridge_slave_1: left promiscuous mode
[ 1029.328634][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1029.471603][ T1139] bridge_slave_0: left allmulticast mode
[ 1029.471640][ T1139] bridge_slave_0: left promiscuous mode
[ 1029.471976][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1032.839410][T14174] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2814'.
[ 1033.274682][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1033.498626][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1033.547885][ T1139] bond0 (unregistering): Released all slaves
[ 1033.851168][T14190] syz.9.2816 (14190): drop_caches: 2
[ 1042.467757][ T1139] hsr_slave_0: left promiscuous mode
[ 1042.939983][ T1139] hsr_slave_1: left promiscuous mode
[ 1042.941171][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1043.064312][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1043.445863][T11915] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1043.609446][T11915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1043.609480][T11915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1043.610605][T11915] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1043.610627][T11915] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1043.610639][T11915] usb 10-1: Manufacturer: syz
[ 1043.614018][T11915] usb 10-1: config 0 descriptor??
[ 1045.011031][T11915] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0
[ 1045.011058][T11915] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0
[ 1045.011073][T11915] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0
[ 1045.011095][T11915] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0
[ 1045.011109][T11915] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0
[ 1045.011123][T11915] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0
[ 1045.011137][T11915] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0
[ 1045.064540][T11915] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[ 1045.206910][T11915] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device
[ 1045.206974][T11915] pyra 0003:1E7D:2CF6.0015: couldn't install mouse
[ 1045.248037][T11915] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -32
[ 1046.812501][T12221] usb 10-1: USB disconnect, device number 3
[ 1047.000222][ T1139] team0 (unregistering): Port device team_slave_1 removed
[ 1048.126519][ T1139] team0 (unregistering): Port device team_slave_0 removed
[ 1050.439585][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1050.452081][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1050.453695][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1050.455080][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1050.456085][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1052.555537][ T5797] Bluetooth: hci0: command tx timeout
[ 1055.124577][ T5797] Bluetooth: hci0: command tx timeout
[ 1055.174218][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2843'.
[ 1055.174246][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2843'.
[ 1055.293904][T14245] chnl_net:caif_netlink_parms(): no params data found
[ 1055.614988][T13945] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1055.810198][ T1139] bridge_slave_1: left allmulticast mode
[ 1055.822229][ T1139] bridge_slave_1: left promiscuous mode
[ 1055.865349][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1056.018875][ T1139] bridge_slave_0: left allmulticast mode
[ 1056.018906][ T1139] bridge_slave_0: left promiscuous mode
[ 1056.019251][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1056.473123][T14293] syz.9.2848 (14293): drop_caches: 2
[ 1056.683409][ T5950] libceph: connect (1)[c::]:6789 error -101
[ 1056.683634][ T5950] libceph: mon0 (1)[c::]:6789 connect error
[ 1056.789613][T14301] ceph: No mds server is up or the cluster is laggy
[ 1056.837481][ T5950] libceph: connect (1)[c::]:6789 error -101
[ 1056.837691][ T5950] libceph: mon0 (1)[c::]:6789 connect error
[ 1057.149596][ T7109] Bluetooth: hci0: command tx timeout
[ 1057.207001][ T5913] libceph: connect (1)[c::]:6789 error -101
[ 1057.207224][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[ 1057.409628][ T7109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1057.431920][ T7109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1057.433710][ T7109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1057.440072][ T7109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1057.441099][ T7109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1059.609543][ T7109] Bluetooth: hci3: command tx timeout
[ 1059.610107][ T5797] Bluetooth: hci0: command tx timeout
[ 1059.815054][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.815144][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.896766][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1060.016771][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1060.367923][ T1139] bond0 (unregistering): Released all slaves
[ 1061.358418][T13945] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1061.626499][ T5797] Bluetooth: hci3: command tx timeout
[ 1063.801266][ T5797] Bluetooth: hci3: command tx timeout
[ 1064.175857][ T1139] hsr_slave_0: left promiscuous mode
[ 1064.221197][ T1139] hsr_slave_1: left promiscuous mode
[ 1064.233326][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1064.298210][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1065.879964][ T5797] Bluetooth: hci3: command tx timeout
[ 1066.657720][ T1139] team0 (unregistering): Port device team_slave_1 removed
[ 1067.425243][ T1139] team0 (unregistering): Port device team_slave_0 removed
[ 1071.087860][T14245] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1071.088008][T14245] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.088278][T14245] bridge_slave_0: entered allmulticast mode
[ 1071.133484][T14245] bridge_slave_0: entered promiscuous mode
[ 1071.248911][T14245] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1071.249063][T14245] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.249317][T14245] bridge_slave_1: entered allmulticast mode
[ 1071.285944][T14245] bridge_slave_1: entered promiscuous mode
[ 1071.987424][T14245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1072.124433][T14245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1073.937731][T14245] team0: Port device team_slave_0 added
[ 1073.960211][T14245] team0: Port device team_slave_1 added
[ 1074.406738][T14412] syz.8.2876 (14412): drop_caches: 2
[ 1075.611804][T14245] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1075.611828][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1075.611854][T14245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1076.741684][T14245] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1076.741705][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1076.741734][T14245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1077.090734][ T5993] libceph: connect (1)[c::]:6789 error -101
[ 1077.090959][ T5993] libceph: mon0 (1)[c::]:6789 connect error
[ 1077.369210][T11915] libceph: connect (1)[c::]:6789 error -101
[ 1078.278673][T11915] libceph: mon0 (1)[c::]:6789 connect error
[ 1078.435955][T14429] ceph: No mds server is up or the cluster is laggy
[ 1078.937928][T14245] hsr_slave_0: entered promiscuous mode
[ 1078.938819][T14245] hsr_slave_1: entered promiscuous mode
[ 1078.939425][T14245] debugfs: 'hsr0' already exists in 'hsr'
[ 1078.939444][T14245] Cannot create hsr debugfs directory
[ 1078.986969][T14442] syz.9.2885 (14442): drop_caches: 2
[ 1080.529398][T14304] chnl_net:caif_netlink_parms(): no params data found
[ 1084.761031][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2891'.
[ 1085.240692][T14304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.240934][T14304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.241200][T14304] bridge_slave_0: entered allmulticast mode
[ 1085.244292][T14304] bridge_slave_0: entered promiscuous mode
[ 1085.328654][T14304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.328810][T14304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.329035][T14304] bridge_slave_1: entered allmulticast mode
[ 1085.332062][T14304] bridge_slave_1: entered promiscuous mode
[ 1085.450687][T14490] netlink: 71 bytes leftover after parsing attributes in process `syz.9.2896'.
[ 1085.921345][T14304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1087.448194][T14304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1087.448748][ T1139] bridge_slave_1: left allmulticast mode
[ 1087.448773][ T1139] bridge_slave_1: left promiscuous mode
[ 1087.449055][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.726824][ T1139] bridge_slave_0: left allmulticast mode
[ 1087.726847][ T1139] bridge_slave_0: left promiscuous mode
[ 1087.727040][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.814929][T14510] 9pnet_virtio: no channels available for device syz
[ 1090.777100][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1090.927287][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1090.975266][ T1139] bond0 (unregistering): Released all slaves
[ 1091.196322][ T7306] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1091.345890][ T7306] usb 9-1: Using ep0 maxpacket: 16
[ 1091.379523][ T7306] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1091.434986][ T7306] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1091.435053][ T7306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.435130][ T7306] usb 9-1: Product: syz
[ 1091.435187][ T7306] usb 9-1: Manufacturer: syz
[ 1091.435204][ T7306] usb 9-1: SerialNumber: syz
[ 1091.550203][ T7306] usb 9-1: config 0 descriptor??
[ 1091.620212][ T7306] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1091.620253][ T7306] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1092.746240][ T7306] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1093.152644][ T7306] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1093.152676][ T7306] em28xx 9-1:0.0: board has no eeprom
[ 1093.468161][ T7306] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1093.468193][ T7306] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1093.493948][ T5950] em28xx 9-1:0.0: Binding DVB extension
[ 1094.213299][T11915] usb 9-1: USB disconnect, device number 20
[ 1094.216870][T11915] em28xx 9-1:0.0: Disconnecting em28xx
[ 1094.390272][ T1139] hsr_slave_0: left promiscuous mode
[ 1094.438286][ T1139] hsr_slave_1: left promiscuous mode
[ 1094.438981][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1094.450634][ T5950] em28xx 9-1:0.0: Registering input extension
[ 1094.451255][T11915] em28xx 9-1:0.0: Closing input extension
[ 1094.467278][T11915] em28xx 9-1:0.0: Freeing device
[ 1094.711074][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1098.540990][T14561] 9pnet_virtio: no channels available for device syz
[ 1102.346080][T14574] syz.8.2916 (14574): drop_caches: 2
[ 1102.698262][T14577] syz.8.2918 (14577): drop_caches: 2
[ 1104.260374][T14586] 9pnet_virtio: no channels available for device syz
[ 1106.298524][ T1139] team0 (unregistering): Port device team_slave_1 removed
[ 1106.303224][T14589] 9pnet_virtio: no channels available for device syz
[ 1106.886786][T14591] netlink: 'syz.8.2921': attribute type 4 has an invalid length.
[ 1106.991422][T14594] netlink: 71 bytes leftover after parsing attributes in process `syz.9.2922'.
[ 1107.016505][ T1139] team0 (unregistering): Port device team_slave_0 removed
[ 1108.035355][T14304] team0: Port device team_slave_0 added
[ 1108.135455][T14304] team0: Port device team_slave_1 added
[ 1110.435937][T14608] 9pnet_virtio: no channels available for device syz
[ 1115.112661][ T7109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1116.116108][ T7109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1116.124238][ T7109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1116.483770][ T7109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1116.487770][ T7109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1118.461036][T12743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1118.547767][T12743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1118.571509][T14615] chnl_net:caif_netlink_parms(): no params data found
[ 1118.593225][T12743] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1118.603671][ T5797] Bluetooth: hci4: command tx timeout
[ 1118.612766][T12743] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1118.614319][T12743] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1119.016122][ T6567] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1119.206963][ T6567] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1119.207001][ T6567] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1119.240083][ T6567] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1119.240115][ T6567] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1119.240131][ T6567] usb 9-1: Manufacturer: syz
[ 1119.310036][ T6567] usb 9-1: config 0 descriptor??
[ 1119.663981][T14642] netlink: 'syz.1.2932': attribute type 4 has an invalid length.
[ 1120.028356][ T6567] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[ 1120.028394][ T6567] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[ 1120.028420][ T6567] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[ 1120.028444][ T6567] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[ 1120.028469][ T6567] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[ 1120.028494][ T6567] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[ 1120.028518][ T6567] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0
[ 1120.045363][ T6567] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[ 1120.092576][T14645] netlink: 71 bytes leftover after parsing attributes in process `syz.9.2933'.
[ 1120.456572][ T6567] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device
[ 1120.456636][ T6567] pyra 0003:1E7D:2CF6.0016: couldn't install mouse
[ 1120.463305][ T6567] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -32
[ 1121.607428][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.607537][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.622453][T14618] Bluetooth: hci6: command tx timeout
[ 1121.623050][T14618] Bluetooth: hci4: command tx timeout
[ 1121.682120][ T6567] usb 9-1: USB disconnect, device number 21
[ 1122.245185][   T43] bridge_slave_1: left allmulticast mode
[ 1122.245209][   T43] bridge_slave_1: left promiscuous mode
[ 1122.245389][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1122.852841][   T43] bridge_slave_0: left allmulticast mode
[ 1122.852876][   T43] bridge_slave_0: left promiscuous mode
[ 1122.853522][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1123.656145][T12743] Bluetooth: hci4: command tx timeout
[ 1123.656171][T14618] Bluetooth: hci6: command tx timeout
[ 1124.763800][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1125.079502][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1125.175541][   T43] bond0 (unregistering): Released all slaves
[ 1125.724178][T12743] Bluetooth: hci6: command tx timeout
[ 1125.727054][T14618] Bluetooth: hci4: command tx timeout
[ 1126.254726][T14692] netlink: 'syz.9.2942': attribute type 4 has an invalid length.
[ 1126.797842][T14615] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1126.798013][T14615] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.799668][T14615] bridge_slave_0: entered allmulticast mode
[ 1126.806669][T14615] bridge_slave_0: entered promiscuous mode
[ 1126.850590][T14615] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1126.850670][T14615] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.850818][T14615] bridge_slave_1: entered allmulticast mode
[ 1126.852526][T14615] bridge_slave_1: entered promiscuous mode
[ 1128.773149][T14618] Bluetooth: hci6: command tx timeout
[ 1128.825920][ T5950] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1128.826069][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1129.014934][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1129.014969][ T5950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1129.076075][ T5950] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1129.076097][ T5950] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1129.076108][ T5950] usb 9-1: Manufacturer: syz
[ 1129.149287][ T5950] usb 9-1: config 0 descriptor??
[ 1129.380302][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1129.588052][ T5950] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1129.588092][ T5950] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1129.588117][ T5950] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1129.588142][ T5950] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1129.588166][ T5950] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1129.588195][ T5950] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1129.588220][ T5950] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0
[ 1129.595511][ T5950] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[ 1130.169655][ T5950] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device
[ 1130.169716][ T5950] pyra 0003:1E7D:2CF6.0017: couldn't install mouse
[ 1130.191856][ T5950] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -32
[ 1130.754022][T14615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1130.798682][T14615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1131.132580][T14615] team0: Port device team_slave_0 added
[ 1131.158802][T14615] team0: Port device team_slave_1 added
[ 1131.522003][T14615] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1131.522016][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1131.522032][T14615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1131.526756][T14615] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1131.526771][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1131.526795][T14615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1131.976978][T12066] usb 9-1: USB disconnect, device number 22
[ 1134.067777][T14615] hsr_slave_0: entered promiscuous mode
[ 1134.069056][T14615] hsr_slave_1: entered promiscuous mode
[ 1134.069836][T14615] debugfs: 'hsr0' already exists in 'hsr'
[ 1134.069854][T14615] Cannot create hsr debugfs directory
[ 1136.681030][T14628] chnl_net:caif_netlink_parms(): no params data found
[ 1136.718476][T14736] netlink: 'syz.1.2952': attribute type 4 has an invalid length.
[ 1141.526675][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2955'.
[ 1145.723945][T14769] netlink: 'syz.9.2961': attribute type 4 has an invalid length.
[ 1148.717274][T14628] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1148.851398][T14628] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1148.851674][T14628] bridge_slave_0: entered allmulticast mode
[ 1148.885868][T14628] bridge_slave_0: entered promiscuous mode
[ 1149.089532][T14628] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1149.089682][T14628] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1149.089886][T14628] bridge_slave_1: entered allmulticast mode
[ 1149.131116][T14628] bridge_slave_1: entered promiscuous mode
[ 1149.555547][T14628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1149.582515][T14628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1150.720626][T14628] team0: Port device team_slave_0 added
[ 1150.725181][T14628] team0: Port device team_slave_1 added
[ 1153.135256][T14628] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1153.135277][T14628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1153.135306][T14628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1153.209383][T14628] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1153.209403][T14628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1153.209431][T14628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1153.715964][   T43] bridge_slave_1: left allmulticast mode
[ 1153.715987][   T43] bridge_slave_1: left promiscuous mode
[ 1153.716169][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.891783][   T43] bridge_slave_0: left allmulticast mode
[ 1153.891862][   T43] bridge_slave_0: left promiscuous mode
[ 1153.892998][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1154.004546][T14818] netlink: 'syz.8.2972': attribute type 4 has an invalid length.
[ 1154.456951][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1154.547184][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1154.608861][   T43] bond0 (unregistering): Released all slaves
[ 1155.070115][T14628] hsr_slave_0: entered promiscuous mode
[ 1155.071711][T14628] hsr_slave_1: entered promiscuous mode
[ 1155.072811][T14628] debugfs: 'hsr0' already exists in 'hsr'
[ 1155.072836][T14628] Cannot create hsr debugfs directory
[ 1155.246616][   T43] hsr_slave_0: left promiscuous mode
[ 1155.297830][   T43] hsr_slave_1: left promiscuous mode
[ 1155.298525][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1157.090705][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1158.525817][ T7306] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1158.787845][ T7306] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1158.787876][ T7306] usb 9-1: config 1 has no interface number 0
[ 1158.787936][ T7306] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1158.787961][ T7306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.180194][ T7306] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1159.802465][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1161.147444][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1161.945136][ T6567] usb 9-1: USB disconnect, device number 23
[ 1169.953621][T14615] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1171.105456][T14615] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1171.163910][T14615] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1171.218807][T14615] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1174.317566][T12743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1174.340083][T12743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1174.345520][T12743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1174.347521][T12743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1174.348417][T12743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1175.080894][T14618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1175.087473][T14618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1175.097651][T14618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1175.099094][T14618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1175.100561][T14618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1176.428144][T14618] Bluetooth: hci0: command tx timeout
[ 1177.313932][T14618] Bluetooth: hci3: command tx timeout
[ 1177.936479][T14908] chnl_net:caif_netlink_parms(): no params data found
[ 1178.247985][T12743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1178.251861][T12743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1178.287408][T12743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1178.289406][T12743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1178.290212][T12743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1178.781196][T14618] Bluetooth: hci0: command tx timeout
[ 1179.805738][T14618] Bluetooth: hci3: command tx timeout
[ 1180.345846][T14618] Bluetooth: hci1: command tx timeout
[ 1180.826388][T14618] Bluetooth: hci0: command tx timeout
[ 1180.874469][T14951] syz.9.2999 (14951): drop_caches: 2
[ 1181.875995][T14618] Bluetooth: hci3: command tx timeout
[ 1182.177213][T14957] nvme_fabrics: missing parameter 'transport=%s'
[ 1182.177234][T14957] nvme_fabrics: missing parameter 'nqn=%s'
[ 1182.425953][T14618] Bluetooth: hci1: command tx timeout
[ 1182.511359][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.511460][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.905820][T14618] Bluetooth: hci0: command tx timeout
[ 1183.791290][T14908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.791454][T14908] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1183.791639][T14908] bridge_slave_0: entered allmulticast mode
[ 1183.793401][T14908] bridge_slave_0: entered promiscuous mode
[ 1183.858059][T14908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.881804][T14908] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1183.882123][T14908] bridge_slave_1: entered allmulticast mode
[ 1183.885153][T14908] bridge_slave_1: entered promiscuous mode
[ 1183.946282][T14618] Bluetooth: hci3: command tx timeout
[ 1184.477160][T14908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1184.506030][T14618] Bluetooth: hci1: command tx timeout
[ 1184.527359][T14908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1186.461244][T14914] chnl_net:caif_netlink_parms(): no params data found
[ 1186.585873][T14618] Bluetooth: hci1: command tx timeout
[ 1186.908148][T14908] team0: Port device team_slave_0 added
[ 1186.958088][T14908] team0: Port device team_slave_1 added
[ 1187.115933][ T7306] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1187.240448][T14908] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1187.240461][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1187.240476][T14908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1187.292270][ T7306] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1187.292299][ T7306] usb 10-1: config 1 has no interface number 0
[ 1187.292353][ T7306] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1187.292375][ T7306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1187.320194][T14908] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1187.320212][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1187.320287][T14908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1187.370801][ T7306] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1187.574964][ T3550] bridge_slave_1: left allmulticast mode
[ 1187.574996][ T3550] bridge_slave_1: left promiscuous mode
[ 1187.575267][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.597885][T14988] syz.8.3007 (14988) used greatest stack depth: 17624 bytes left
[ 1187.648221][ T3550] bridge_slave_0: left allmulticast mode
[ 1187.648256][ T3550] bridge_slave_0: left promiscuous mode
[ 1187.648604][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1190.046583][ T6118] usb 10-1: USB disconnect, device number 4
[ 1190.687902][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1190.928545][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1191.055157][ T3550] bond0 (unregistering): Released all slaves
[ 1191.346715][T14914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1191.347380][T14914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1191.348490][T14914] bridge_slave_0: entered allmulticast mode
[ 1191.380901][T14914] bridge_slave_0: entered promiscuous mode
[ 1191.586178][T14914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1191.586361][T14914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1191.586616][T14914] bridge_slave_1: entered allmulticast mode
[ 1191.588267][T14914] bridge_slave_1: entered promiscuous mode
[ 1192.154715][T14908] hsr_slave_0: entered promiscuous mode
[ 1192.167620][T14908] hsr_slave_1: entered promiscuous mode
[ 1192.168350][T14908] debugfs: 'hsr0' already exists in 'hsr'
[ 1192.168368][T14908] Cannot create hsr debugfs directory
[ 1192.538965][T15019] 9pnet_virtio: no channels available for device syz
[ 1192.686350][ T3550] hsr_slave_0: left promiscuous mode
[ 1194.653808][ T3550] hsr_slave_1: left promiscuous mode
[ 1194.654894][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1194.703393][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1195.090080][ T7306] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1195.248189][ T7306] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1195.248215][ T7306] usb 9-1: config 1 has no interface number 0
[ 1195.248244][ T7306] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1195.248257][ T7306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.313183][ T7306] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1197.017860][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1197.238463][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1197.905389][ T5913] usb 9-1: USB disconnect, device number 24
[ 1198.351810][T15035] syz.8.3017 (15035): drop_caches: 2
[ 1199.068077][T15036] nvme_fabrics: missing parameter 'transport=%s'
[ 1199.068097][T15036] nvme_fabrics: missing parameter 'nqn=%s'
[ 1202.823220][T14914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1204.127193][T14914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1204.127611][T14934] chnl_net:caif_netlink_parms(): no params data found
[ 1204.785833][T14914] team0: Port device team_slave_0 added
[ 1205.147451][T14914] team0: Port device team_slave_1 added
[ 1208.917675][T14914] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1208.917689][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1208.917705][T14914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1209.079705][T14914] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1209.079721][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1209.079738][T14914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1209.279152][T14934] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1209.279819][T14934] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1209.279961][T14934] bridge_slave_0: entered allmulticast mode
[ 1209.281705][T14934] bridge_slave_0: entered promiscuous mode
[ 1209.448571][T14934] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1209.448723][T14934] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1209.448924][T14934] bridge_slave_1: entered allmulticast mode
[ 1209.451282][T14934] bridge_slave_1: entered promiscuous mode
[ 1210.188419][T14914] hsr_slave_0: entered promiscuous mode
[ 1210.189341][T14914] hsr_slave_1: entered promiscuous mode
[ 1210.189959][T14914] debugfs: 'hsr0' already exists in 'hsr'
[ 1210.189977][T14914] Cannot create hsr debugfs directory
[ 1210.199061][T14934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1210.262270][T14934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1213.291963][T14934] team0: Port device team_slave_0 added
[ 1213.498128][T14934] team0: Port device team_slave_1 added
[ 1213.635768][ T5809] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1213.790085][ T5809] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1213.790107][ T5809] usb 10-1: config 1 has no interface number 0
[ 1213.790136][ T5809] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1213.790150][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1213.811513][ T5809] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1215.259342][T14934] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1215.259356][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1215.259372][T14934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1215.276339][T14934] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1215.276358][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1215.276382][T14934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1215.485942][ T5913] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1215.635698][ T5913] usb 9-1: Using ep0 maxpacket: 16
[ 1215.638924][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1215.644549][ T5913] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1215.644583][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.644602][ T5913] usb 9-1: Product: syz
[ 1215.644617][ T5913] usb 9-1: Manufacturer: syz
[ 1215.644631][ T5913] usb 9-1: SerialNumber: syz
[ 1215.711256][ T5913] usb 9-1: config 0 descriptor??
[ 1215.734356][ T5913] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1215.734380][ T5913] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1216.319429][T14934] hsr_slave_0: entered promiscuous mode
[ 1216.322433][T14934] hsr_slave_1: entered promiscuous mode
[ 1216.323391][T14934] debugfs: 'hsr0' already exists in 'hsr'
[ 1216.323409][T14934] Cannot create hsr debugfs directory
[ 1216.360899][ T5950] usb 10-1: USB disconnect, device number 5
[ 1216.404915][ T5913] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1217.100934][ T5913] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1217.100969][ T5913] em28xx 9-1:0.0: board has no eeprom
[ 1217.415831][ T5913] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1217.415865][ T5913] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1217.616679][ T5913] em28xx 9-1:0.0: Binding DVB extension
[ 1217.835253][ T6118] usb 9-1: USB disconnect, device number 25
[ 1217.845272][ T6118] em28xx 9-1:0.0: Disconnecting em28xx
[ 1218.059515][ T5913] em28xx 9-1:0.0: Registering input extension
[ 1218.062420][ T6118] em28xx 9-1:0.0: Closing input extension
[ 1218.103420][ T6118] em28xx 9-1:0.0: Freeing device
[ 1219.875414][T14908] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1220.049092][T14908] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1220.683540][T14908] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1223.284601][T14908] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1224.525618][T15146] syz.9.3044 (15146): drop_caches: 2
[ 1226.321063][T15146] nvme_fabrics: missing parameter 'transport=%s'
[ 1226.321087][T15146] nvme_fabrics: missing parameter 'nqn=%s'
[ 1226.395850][ T6118] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1226.671730][ T6118] usb 9-1: Using ep0 maxpacket: 16
[ 1227.643013][ T6118] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1227.649573][ T6118] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1227.649598][ T6118] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.649610][ T6118] usb 9-1: Product: syz
[ 1227.649618][ T6118] usb 9-1: Manufacturer: syz
[ 1227.649626][ T6118] usb 9-1: SerialNumber: syz
[ 1227.697855][ T6118] usb 9-1: config 0 descriptor??
[ 1227.864023][ T6118] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1227.864059][ T6118] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1229.036294][ T6118] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1229.101464][ T6118] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1229.101506][ T6118] em28xx 9-1:0.0: board has no eeprom
[ 1229.175903][ T6118] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1229.175936][ T6118] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1229.178362][ T6567] em28xx 9-1:0.0: Binding DVB extension
[ 1229.183977][ T6118] usb 9-1: USB disconnect, device number 26
[ 1229.265922][ T6118] em28xx 9-1:0.0: Disconnecting em28xx
[ 1231.662713][ T6567] em28xx 9-1:0.0: Registering input extension
[ 1231.662977][ T6118] em28xx 9-1:0.0: Closing input extension
[ 1231.752811][ T6118] em28xx 9-1:0.0: Freeing device
[ 1234.672427][T12743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1236.309169][T12743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1236.310841][T12743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1236.314829][T12743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1236.330888][T12743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1238.429706][T14618] Bluetooth: hci4: command tx timeout
[ 1238.752420][T12743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1238.765030][T12743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1238.776801][T12743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1238.778745][T12743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1238.800682][T12743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1239.627838][T14618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1239.635327][T14618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1239.654108][T14618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1239.655499][T14618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1239.682142][T14618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1240.515885][T12743] Bluetooth: hci4: command tx timeout
[ 1240.915751][T12743] Bluetooth: hci0: command tx timeout
[ 1240.946294][ T7306] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1241.107764][ T7306] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1241.107811][ T7306] usb 10-1: config 1 has no interface number 0
[ 1241.107950][ T7306] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1241.108011][ T7306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.307855][ T7306] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1242.691757][T12743] Bluetooth: hci3: command tx timeout
[ 1242.692206][T12743] Bluetooth: hci4: command tx timeout
[ 1243.002480][T14618] Bluetooth: hci0: command tx timeout
[ 1243.891959][ T3550] bridge_slave_1: left allmulticast mode
[ 1243.891981][ T3550] bridge_slave_1: left promiscuous mode
[ 1243.892997][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1243.984989][ T3550] bridge_slave_0: left allmulticast mode
[ 1243.985014][ T3550] bridge_slave_0: left promiscuous mode
[ 1243.985189][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1244.004459][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.004506][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.076529][ T5913] usb 10-1: USB disconnect, device number 6
[ 1244.749994][T12743] Bluetooth: hci4: command tx timeout
[ 1244.750114][T12743] Bluetooth: hci3: command tx timeout
[ 1245.066058][T12743] Bluetooth: hci0: command tx timeout
[ 1245.806512][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1246.904879][T12743] Bluetooth: hci3: command tx timeout
[ 1247.135884][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1247.146286][T14618] Bluetooth: hci0: command tx timeout
[ 1247.189104][ T3550] bond0 (unregistering): Released all slaves
[ 1248.905822][T14618] Bluetooth: hci3: command tx timeout
[ 1255.691828][ T3550] bond0 (unregistering): Released all slaves
[ 1255.721434][ T3550] bond1 (unregistering): Released all slaves
[ 1258.306934][ T5809] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1258.556128][ T5809] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1258.556160][ T5809] usb 9-1: config 1 has no interface number 0
[ 1258.556207][ T5809] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1258.556221][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1258.563606][ T5809] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1260.943941][T15321] syz.9.3080 (15321): drop_caches: 2
[ 1261.004379][T15197] chnl_net:caif_netlink_parms(): no params data found
[ 1261.009823][ T5993] usb 9-1: USB disconnect, device number 27
[ 1261.620870][T15323] nvme_fabrics: missing parameter 'transport=%s'
[ 1261.620892][T15323] nvme_fabrics: missing parameter 'nqn=%s'
[ 1263.186829][ T3550] hsr_slave_0: left promiscuous mode
[ 1264.175796][ T3550] hsr_slave_1: left promiscuous mode
[ 1264.180058][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1264.218272][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1264.425054][T15346] syz.9.3085 (15346): drop_caches: 2
[ 1264.792523][ T5950] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1264.971539][ T3550] hsr_slave_0: left promiscuous mode
[ 1265.039786][ T5950] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1265.039864][ T5950] usb 9-1: config 1 has no interface number 0
[ 1265.040044][ T5950] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1265.040102][ T5950] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.261627][T15346] nvme_fabrics: missing parameter 'transport=%s'
[ 1265.261695][T15346] nvme_fabrics: missing parameter 'nqn=%s'
[ 1265.306298][ T5950] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1265.378804][ T3550] hsr_slave_1: left promiscuous mode
[ 1266.198147][ T5809] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1266.519729][ T5809] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1266.519761][ T5809] usb 10-1: config 1 has no interface number 0
[ 1266.519807][ T5809] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1266.519820][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.559299][ T5809] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1267.890734][ T5950] usb 9-1: USB disconnect, device number 28
[ 1269.067075][ T5809] usb 10-1: USB disconnect, device number 7
[ 1269.264463][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1271.383738][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1273.022481][T15377] syz.8.3090 (15377): drop_caches: 2
[ 1273.934871][T15377] nvme_fabrics: missing parameter 'transport=%s'
[ 1273.934893][T15377] nvme_fabrics: missing parameter 'nqn=%s'
[ 1276.137047][ T5913] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1276.365670][ T5913] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1276.365692][ T5913] usb 9-1: config 1 has no interface number 0
[ 1276.365722][ T5913] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1276.365736][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1276.372361][ T5913] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1278.892207][ T5809] usb 9-1: USB disconnect, device number 29
[ 1279.005002][T15392] Bluetooth: MGMT ver 1.23
[ 1279.005031][T15392] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[ 1279.867235][T15209] chnl_net:caif_netlink_parms(): no params data found
[ 1279.894951][T15212] chnl_net:caif_netlink_parms(): no params data found
[ 1282.670746][T15410] syz.9.3096 (15410): drop_caches: 2
[ 1283.829912][T15410] nvme_fabrics: missing parameter 'transport=%s'
[ 1283.829931][T15410] nvme_fabrics: missing parameter 'nqn=%s'
[ 1283.869098][ T7306] IPVS: starting estimator thread 0...
[ 1284.970542][T15418] IPVS: using max 7 ests per chain, 16800 per kthread
[ 1286.832528][T15197] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1286.832665][T15197] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1286.832801][T15197] bridge_slave_0: entered allmulticast mode
[ 1286.834435][T15197] bridge_slave_0: entered promiscuous mode
[ 1286.862113][T15197] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1286.862241][T15197] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1286.862462][T15197] bridge_slave_1: entered allmulticast mode
[ 1286.866130][T15197] bridge_slave_1: entered promiscuous mode
[ 1288.939891][T15197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1289.184453][T15209] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1289.211436][T15209] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1289.213230][T15209] bridge_slave_0: entered allmulticast mode
[ 1289.331470][T15209] bridge_slave_0: entered promiscuous mode
[ 1289.429086][T15212] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1289.429642][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1289.430938][T15212] bridge_slave_0: entered allmulticast mode
[ 1289.534011][T15212] bridge_slave_0: entered promiscuous mode
[ 1289.708108][T15197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1289.759468][T15209] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1289.759854][T15209] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1289.760749][T15209] bridge_slave_1: entered allmulticast mode
[ 1289.839661][T15209] bridge_slave_1: entered promiscuous mode
[ 1289.850385][T15212] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1289.850704][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1289.851510][T15212] bridge_slave_1: entered allmulticast mode
[ 1289.872602][T15212] bridge_slave_1: entered promiscuous mode
[ 1290.549400][T15197] team0: Port device team_slave_0 added
[ 1290.565122][T15209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1290.586967][T15212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1290.591312][T15197] team0: Port device team_slave_1 added
[ 1290.617249][T15209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1290.622081][T15212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1293.883798][T15463] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1293.899293][T15463] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1295.461654][T12743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1295.496979][T12743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1295.505258][T12743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1295.532329][T12743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1295.533347][T12743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1297.500265][T15197] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1297.500284][T15197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1297.500300][T15197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1297.503531][T15209] team0: Port device team_slave_0 added
[ 1297.625745][T12743] Bluetooth: hci1: command tx timeout
[ 1298.405985][T15212] team0: Port device team_slave_0 added
[ 1298.415385][T15212] team0: Port device team_slave_1 added
[ 1298.735335][T14618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1298.759829][T14618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1298.770737][T14618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1298.779081][T14618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1298.783434][T14618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1298.877711][T15212] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1298.877725][T15212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1298.877740][T15212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1298.987004][T15212] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1298.987018][T15212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1298.987034][T15212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1299.705693][T14618] Bluetooth: hci1: command tx timeout
[ 1300.354680][T12743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1300.909533][T12743] Bluetooth: hci6: command tx timeout
[ 1301.359082][T12743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1301.364672][T12743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1301.440650][T12743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1301.460006][T12743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1301.785669][T14618] Bluetooth: hci1: command tx timeout
[ 1302.989019][T14618] Bluetooth: hci6: command tx timeout
[ 1303.275692][ T5913] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1303.432262][ T5913] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1303.432292][ T5913] usb 9-1: config 1 has no interface number 0
[ 1303.432348][ T5913] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1303.432373][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.477818][ T5913] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1303.545827][T14618] Bluetooth: hci0: command tx timeout
[ 1304.741232][T14618] Bluetooth: hci1: command tx timeout
[ 1305.077729][T14618] Bluetooth: hci6: command tx timeout
[ 1305.432420][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.432525][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1305.625845][T14618] Bluetooth: hci0: command tx timeout
[ 1305.944718][T15470] chnl_net:caif_netlink_parms(): no params data found
[ 1306.109275][ T6118] usb 9-1: USB disconnect, device number 30
[ 1307.345777][T14618] Bluetooth: hci6: command tx timeout
[ 1307.706138][T14618] Bluetooth: hci0: command tx timeout
[ 1308.245651][ T6118] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1308.415848][ T6118] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1308.415868][ T6118] usb 10-1: config 1 has no interface number 0
[ 1308.415900][ T6118] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1308.415914][ T6118] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1308.472043][ T6118] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1308.556666][T15485] chnl_net:caif_netlink_parms(): no params data found
[ 1308.646660][T15470] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1308.646890][T15470] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1308.647152][T15470] bridge_slave_0: entered allmulticast mode
[ 1308.649957][T15470] bridge_slave_0: entered promiscuous mode
[ 1309.788457][T14618] Bluetooth: hci0: command tx timeout
[ 1309.911402][T15470] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1309.911582][T15470] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.911861][T15470] bridge_slave_1: entered allmulticast mode
[ 1309.941611][T15470] bridge_slave_1: entered promiscuous mode
[ 1310.241016][T15490] chnl_net:caif_netlink_parms(): no params data found
[ 1310.262264][T15470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1310.308805][T15470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1310.731424][T15470] team0: Port device team_slave_0 added
[ 1310.731679][T15485] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1310.732093][T15485] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1310.732298][T15485] bridge_slave_0: entered allmulticast mode
[ 1310.761834][T15485] bridge_slave_0: entered promiscuous mode
[ 1310.787542][T15470] team0: Port device team_slave_1 added
[ 1310.787791][T15485] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1310.788167][T15485] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1310.788298][T15485] bridge_slave_1: entered allmulticast mode
[ 1310.790101][T15485] bridge_slave_1: entered promiscuous mode
[ 1310.795297][ T3550] bridge_slave_1: left allmulticast mode
[ 1310.795319][ T3550] bridge_slave_1: left promiscuous mode
[ 1310.795496][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1310.887459][ T3550] bridge_slave_0: left allmulticast mode
[ 1310.887481][ T3550] bridge_slave_0: left promiscuous mode
[ 1310.887658][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1311.006705][ T5913] usb 10-1: USB disconnect, device number 8
[ 1311.017320][ T3550] bridge_slave_1: left allmulticast mode
[ 1311.017347][ T3550] bridge_slave_1: left promiscuous mode
[ 1311.017595][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1311.096730][ T3550] bridge_slave_0: left allmulticast mode
[ 1311.096752][ T3550] bridge_slave_0: left promiscuous mode
[ 1311.101514][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1311.198817][ T3550] bridge_slave_1: left allmulticast mode
[ 1311.198839][ T3550] bridge_slave_1: left promiscuous mode
[ 1311.199002][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1311.267016][ T3550] bridge_slave_0: left allmulticast mode
[ 1311.267039][ T3550] bridge_slave_0: left promiscuous mode
[ 1311.267241][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1311.339009][ T3550] bridge_slave_1: left allmulticast mode
[ 1311.339032][ T3550] bridge_slave_1: left promiscuous mode
[ 1311.339230][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1311.397108][ T3550] bridge_slave_0: left allmulticast mode
[ 1311.397142][ T3550] bridge_slave_0: left promiscuous mode
[ 1311.397319][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1311.460411][ T3550] bridge_slave_1: left allmulticast mode
[ 1311.460433][ T3550] bridge_slave_1: left promiscuous mode
[ 1311.460710][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1311.516834][ T3550] bridge_slave_0: left allmulticast mode
[ 1311.516856][ T3550] bridge_slave_0: left promiscuous mode
[ 1311.517038][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1311.578872][ T3550] bridge_slave_1: left allmulticast mode
[ 1311.578894][ T3550] bridge_slave_1: left promiscuous mode
[ 1311.579060][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1311.636750][ T3550] bridge_slave_0: left allmulticast mode
[ 1311.636772][ T3550] bridge_slave_0: left promiscuous mode
[ 1311.636975][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1311.969521][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1313.282071][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1313.438041][ T3550] bond0 (unregistering): Released all slaves
[ 1314.632304][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1314.766595][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1315.030258][ T3550] bond0 (unregistering): Released all slaves
[ 1317.886295][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1317.987121][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1318.079657][ T3550] bond0 (unregistering): Released all slaves
[ 1318.846813][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1318.936639][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1320.401861][ T3550] bond0 (unregistering): Released all slaves
[ 1320.622119][T15586] Bluetooth: MGMT ver 1.23
[ 1320.816173][ T6118] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1321.076721][ T6118] usb 10-1: Using ep0 maxpacket: 16
[ 1321.120527][ T6118] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1321.226682][ T6118] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1321.227063][ T6118] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.227197][ T6118] usb 10-1: Product: syz
[ 1321.227324][ T6118] usb 10-1: Manufacturer: syz
[ 1321.227452][ T6118] usb 10-1: SerialNumber: syz
[ 1321.785036][ T6118] usb 10-1: config 0 descriptor??
[ 1321.807453][ T6118] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1321.807491][ T6118] em28xx 10-1:0.0: DVB interface 0 found: bulk
[ 1321.901571][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1322.518339][ T6118] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[ 1322.540137][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1322.689478][ T3550] bond0 (unregistering): Released all slaves
[ 1323.105979][ T6118] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1323.106010][ T6118] em28xx 10-1:0.0: board has no eeprom
[ 1323.515838][ T6118] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1323.515871][ T6118] em28xx 10-1:0.0: dvb set to bulk mode.
[ 1323.516030][ T5809] em28xx 10-1:0.0: Binding DVB extension
[ 1323.666852][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1323.748246][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1323.815491][ T3550] bond0 (unregistering): Released all slaves
[ 1323.845758][ T6118] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1324.080625][ T6118] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1324.080650][ T6118] usb 9-1: config 1 has no interface number 0
[ 1324.080681][ T6118] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1324.080735][ T6118] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1324.120731][ T6118] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1325.557189][ T6118] usb 10-1: USB disconnect, device number 9
[ 1325.573841][ T6118] em28xx 10-1:0.0: Disconnecting em28xx
[ 1325.575496][ T5809] em28xx 10-1:0.0: Registering input extension
[ 1325.583131][ T6118] em28xx 10-1:0.0: Closing input extension
[ 1325.602109][ T6118] em28xx 10-1:0.0: Freeing device
[ 1326.906652][ T5809] usb 9-1: USB disconnect, device number 31
[ 1328.609423][T15618] siw: device registration error -23
[ 1330.720935][T15470] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1330.720954][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1330.720983][T15470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1330.725248][T15485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1330.785102][T15470] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1330.785120][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1330.785149][T15470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1330.826267][T15490] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1330.826480][T15490] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1330.826721][T15490] bridge_slave_0: entered allmulticast mode
[ 1330.855155][T15490] bridge_slave_0: entered promiscuous mode
[ 1332.671336][T15485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1332.671812][T15490] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1332.671953][T15490] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1332.672178][T15490] bridge_slave_1: entered allmulticast mode
[ 1332.675247][T15490] bridge_slave_1: entered promiscuous mode
[ 1336.629031][T15485] team0: Port device team_slave_0 added
[ 1336.713092][T15490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1338.332309][T15485] team0: Port device team_slave_1 added
[ 1338.336531][T15490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1338.344908][T15470] hsr_slave_0: entered promiscuous mode
[ 1338.346522][T15470] hsr_slave_1: entered promiscuous mode
[ 1339.445461][T15485] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1339.445476][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1339.445491][T15485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1339.455142][T15490] team0: Port device team_slave_0 added
[ 1339.654493][T15485] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1339.654558][T15485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1339.654619][T15485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1339.674084][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1339.809480][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1339.846745][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1341.455723][ T3550] hsr_slave_0: left promiscuous mode
[ 1341.509454][ T7306] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1342.643201][ T3550] hsr_slave_1: left promiscuous mode
[ 1342.644325][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.661435][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1342.777925][ T7306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1342.777957][ T7306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1342.779114][ T7306] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1342.779135][ T7306] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1342.779147][ T7306] usb 10-1: Manufacturer: syz
[ 1342.782213][ T7306] usb 10-1: config 0 descriptor??
[ 1342.875770][ T3550] hsr_slave_0: left promiscuous mode
[ 1342.915945][ T3550] hsr_slave_1: left promiscuous mode
[ 1342.917342][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.950360][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1343.106138][ T3550] hsr_slave_0: left promiscuous mode
[ 1343.125824][ T3550] hsr_slave_1: left promiscuous mode
[ 1343.131186][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1343.198339][ T7306] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1343.198365][ T7306] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1343.198379][ T7306] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1343.198394][ T7306] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1343.198408][ T7306] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1343.198422][ T7306] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1343.198436][ T7306] pyra 0003:1E7D:2CF6.0018: unknown main item tag 0x0
[ 1343.201893][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1343.202440][ T7306] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[ 1343.620187][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1343.827845][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1344.601232][ T7306] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device
[ 1344.601296][ T7306] pyra 0003:1E7D:2CF6.0018: couldn't install mouse
[ 1344.622689][ T7306] pyra 0003:1E7D:2CF6.0018: probe with driver pyra failed with error -71
[ 1344.645873][ T7306] usb 10-1: USB disconnect, device number 10
[ 1345.026832][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1346.493173][ T5809] IPVS: starting estimator thread 0...
[ 1346.839303][T15701] IPVS: using max 6 ests per chain, 14400 per kthread
[ 1349.886667][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1351.036324][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1352.021634][T15722] syz.9.3169 (15722): drop_caches: 2
[ 1352.084108][T15722] nvme_fabrics: missing parameter 'transport=%s'
[ 1352.084130][T15722] nvme_fabrics: missing parameter 'nqn=%s'
[ 1352.986477][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1354.226135][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1355.437045][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1355.508423][T12743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1355.514293][T12743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1355.533212][T12743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1355.574713][T12743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1355.582958][T12743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1355.610593][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1355.659702][ T5809] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1355.837911][ T5809] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1355.837942][ T5809] usb 10-1: config 1 has no interface number 0
[ 1355.837986][ T5809] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1355.838001][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1355.848739][ T5809] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1356.597898][ T5802] kworker/1:3 (5802) used greatest stack depth: 12960 bytes left
[ 1357.744617][T14618] Bluetooth: hci3: command tx timeout
[ 1357.846445][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1357.976289][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1358.376093][ T5809] usb 10-1: USB disconnect, device number 11
[ 1358.630395][T15714] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1358.630443][T15714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1358.630462][T15714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1358.630642][T15490] team0: Port device team_slave_1 added
[ 1359.116822][T15490] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1359.116842][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1359.116868][T15490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1359.137434][T15490] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1359.137452][T15490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1359.137476][T15490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1362.021382][T14618] Bluetooth: hci3: command tx timeout
[ 1365.239704][T12743] Bluetooth: hci3: command tx timeout
[ 1365.642455][T12743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1365.665976][T12743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1365.672748][T12743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1365.674139][T12743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1365.704895][T12743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1366.879368][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1366.879498][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1367.305709][T14618] Bluetooth: hci3: command tx timeout
[ 1367.367363][T12743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1367.371226][T12743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1367.704369][T12743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1367.793161][T12743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1367.796193][T12743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1367.865993][T12743] Bluetooth: hci4: command tx timeout
[ 1368.495631][ T5809] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1369.535689][ T5809] usb 9-1: Using ep0 maxpacket: 16
[ 1369.538203][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1369.541288][ T5809] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1369.541316][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.541336][ T5809] usb 9-1: Product: syz
[ 1369.541351][ T5809] usb 9-1: Manufacturer: syz
[ 1369.541366][ T5809] usb 9-1: SerialNumber: syz
[ 1369.945724][T12743] Bluetooth: hci0: command tx timeout
[ 1370.569380][ T5809] usb 9-1: config 0 descriptor??
[ 1370.569970][T12743] Bluetooth: hci4: command tx timeout
[ 1370.599776][ T5809] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1370.599814][ T5809] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1370.837288][T15777] netlink: 71 bytes leftover after parsing attributes in process `syz.9.3180'.
[ 1371.124604][T15736] chnl_net:caif_netlink_parms(): no params data found
[ 1371.242834][ T5809] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1371.516215][T15750] chnl_net:caif_netlink_parms(): no params data found
[ 1371.756143][ T5809] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1371.756180][ T5809] em28xx 9-1:0.0: board has no eeprom
[ 1372.129200][T15793] syz.9.3182 (15793): drop_caches: 2
[ 1372.132470][T12743] Bluetooth: hci0: command tx timeout
[ 1372.145635][ T5809] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1372.145669][ T5809] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1372.147054][ T6567] em28xx 9-1:0.0: Binding DVB extension
[ 1372.466125][ T5809] usb 9-1: USB disconnect, device number 32
[ 1372.501894][ T5809] em28xx 9-1:0.0: Disconnecting em28xx
[ 1372.590620][T12743] Bluetooth: hci4: command tx timeout
[ 1372.843322][T15796] nvme_fabrics: missing parameter 'transport=%s'
[ 1372.843342][T15796] nvme_fabrics: missing parameter 'nqn=%s'
[ 1372.897486][ T6567] em28xx 9-1:0.0: Registering input extension
[ 1372.897667][ T5809] em28xx 9-1:0.0: Closing input extension
[ 1372.967784][ T5809] em28xx 9-1:0.0: Freeing device
[ 1372.969811][T15763] chnl_net:caif_netlink_parms(): no params data found
[ 1373.043710][T15800] Bluetooth: MGMT ver 1.23
[ 1374.231677][T12743] Bluetooth: hci0: command tx timeout
[ 1374.665823][T12743] Bluetooth: hci4: command tx timeout
[ 1375.605157][T15736] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1375.605300][T15736] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1375.605671][T15736] bridge_slave_0: entered allmulticast mode
[ 1375.611684][T15736] bridge_slave_0: entered promiscuous mode
[ 1376.695677][T12743] Bluetooth: hci0: command tx timeout
[ 1376.921449][T15736] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1376.921555][T15736] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1376.921735][T15736] bridge_slave_1: entered allmulticast mode
[ 1376.923336][T15736] bridge_slave_1: entered promiscuous mode
[ 1378.775615][ T5809] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1378.949627][ T5809] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1378.949667][ T5809] usb 10-1: config 1 has no interface number 0
[ 1378.949717][ T5809] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1378.949737][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.029291][ T5809] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1382.259313][T15750] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1382.259629][T15750] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1382.259858][T15750] bridge_slave_0: entered allmulticast mode
[ 1382.266028][T15750] bridge_slave_0: entered promiscuous mode
[ 1382.344989][T15736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1382.348177][T15750] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1382.348308][T15750] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1382.348553][T15750] bridge_slave_1: entered allmulticast mode
[ 1382.351253][T15750] bridge_slave_1: entered promiscuous mode
[ 1382.479277][T15736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1383.060781][ T7306] usb 10-1: USB disconnect, device number 12
[ 1383.226983][T15763] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1383.227230][T15763] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1383.227447][T15763] bridge_slave_0: entered allmulticast mode
[ 1383.230565][T15763] bridge_slave_0: entered promiscuous mode
[ 1383.370780][T15750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1383.371040][T15763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1383.371174][T15763] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1383.371345][T15763] bridge_slave_1: entered allmulticast mode
[ 1383.374250][T15763] bridge_slave_1: entered promiscuous mode
[ 1383.447996][T15736] team0: Port device team_slave_0 added
[ 1383.452075][T15750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1383.470185][ T7306] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1383.618931][T15736] team0: Port device team_slave_1 added
[ 1383.673055][ T7306] usb 10-1: Using ep0 maxpacket: 16
[ 1383.675740][ T7306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1383.680324][ T7306] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1383.680351][ T7306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1383.680369][ T7306] usb 10-1: Product: syz
[ 1383.680390][ T7306] usb 10-1: Manufacturer: syz
[ 1383.680403][ T7306] usb 10-1: SerialNumber: syz
[ 1383.689098][ T7306] usb 10-1: config 0 descriptor??
[ 1383.701900][ T7306] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1383.701933][ T7306] em28xx 10-1:0.0: DVB interface 0 found: bulk
[ 1384.085037][T15763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1384.155854][ T5809] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1384.161524][T15750] team0: Port device team_slave_0 added
[ 1384.165176][T15763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1384.189185][T15736] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1384.189201][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1384.189227][T15736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1384.201027][T15750] team0: Port device team_slave_1 added
[ 1384.304191][T15736] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1384.304210][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1384.304238][T15736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1384.351272][ T7306] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[ 1384.370203][ T5809] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1384.370235][ T5809] usb 9-1: config 1 has no interface number 0
[ 1384.370289][ T5809] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1384.370311][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1384.445296][ T5809] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1385.731353][ T7306] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1385.731388][ T7306] em28xx 10-1:0.0: board has no eeprom
[ 1385.881771][T15763] team0: Port device team_slave_0 added
[ 1385.889478][T15750] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1385.889498][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1385.889527][T15750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1385.943211][T15763] team0: Port device team_slave_1 added
[ 1385.945115][T15750] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1385.945127][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1385.945143][T15750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1386.105806][ T7306] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1386.105839][ T7306] em28xx 10-1:0.0: dvb set to bulk mode.
[ 1386.113952][ T5950] em28xx 10-1:0.0: Binding DVB extension
[ 1386.238807][ T7306] usb 10-1: USB disconnect, device number 13
[ 1386.243581][ T7306] em28xx 10-1:0.0: Disconnecting em28xx
[ 1386.302395][ T5950] em28xx 10-1:0.0: Registering input extension
[ 1386.302598][ T7306] em28xx 10-1:0.0: Closing input extension
[ 1386.335039][ T7306] em28xx 10-1:0.0: Freeing device
[ 1386.486233][T15763] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1386.486247][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1386.486262][T15763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1386.492564][T15736] hsr_slave_0: entered promiscuous mode
[ 1386.493550][T15736] hsr_slave_1: entered promiscuous mode
[ 1386.494235][T15736] debugfs: 'hsr0' already exists in 'hsr'
[ 1386.494252][T15736] Cannot create hsr debugfs directory
[ 1386.532667][T15763] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1386.532685][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1386.532711][T15763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1387.916593][ T5809] usb 9-1: USB disconnect, device number 33
[ 1388.179755][T15750] hsr_slave_0: entered promiscuous mode
[ 1388.181484][T15750] hsr_slave_1: entered promiscuous mode
[ 1388.182711][T15750] debugfs: 'hsr0' already exists in 'hsr'
[ 1388.182739][T15750] Cannot create hsr debugfs directory
[ 1388.942979][T15763] hsr_slave_0: entered promiscuous mode
[ 1388.943989][T15763] hsr_slave_1: entered promiscuous mode
[ 1388.944552][T15763] debugfs: 'hsr0' already exists in 'hsr'
[ 1388.944568][T15763] Cannot create hsr debugfs directory
[ 1389.125865][ T7306] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1389.294196][ T7306] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1389.294226][ T7306] usb 9-1: config 1 has no interface number 0
[ 1389.294277][ T7306] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1389.294300][ T7306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1389.310236][ T7306] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1392.364442][ T7306] usb 9-1: USB disconnect, device number 34
[ 1392.787376][ T5950] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1392.947823][ T5950] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1392.947844][ T5950] usb 10-1: config 1 has no interface number 0
[ 1392.947874][ T5950] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1392.947887][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.955317][ T5950] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1394.625736][ T3550] bridge_slave_1: left allmulticast mode
[ 1394.625760][ T3550] bridge_slave_1: left promiscuous mode
[ 1394.625989][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1394.682416][ T3550] bridge_slave_0: left allmulticast mode
[ 1394.682439][ T3550] bridge_slave_0: left promiscuous mode
[ 1394.682638][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1394.763830][ T3550] bridge_slave_1: left allmulticast mode
[ 1394.763854][ T3550] bridge_slave_1: left promiscuous mode
[ 1394.764020][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1394.817953][ T3550] bridge_slave_0: left allmulticast mode
[ 1394.817976][ T3550] bridge_slave_0: left promiscuous mode
[ 1394.818548][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1394.891012][ T3550] bridge_slave_1: left allmulticast mode
[ 1394.891036][ T3550] bridge_slave_1: left promiscuous mode
[ 1394.894046][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1394.947462][ T3550] bridge_slave_0: left allmulticast mode
[ 1394.947488][ T3550] bridge_slave_0: left promiscuous mode
[ 1394.953337][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1395.317095][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1395.437203][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1395.504374][ T7306] usb 10-1: USB disconnect, device number 14
[ 1395.529624][ T3550] bond0 (unregistering): Released all slaves
[ 1395.846520][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1395.926306][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1395.990465][ T3550] bond0 (unregistering): Released all slaves
[ 1396.025820][ T5809] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1396.188319][ T5809] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1396.188350][ T5809] usb 9-1: config 1 has no interface number 0
[ 1396.188402][ T5809] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1396.188425][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.195963][ T5809] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1396.266520][ T3550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1396.354464][ T3550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1396.404895][ T3550] bond0 (unregistering): Released all slaves
[ 1397.715405][ T5950] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1397.920477][ T5950] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1397.920507][ T5950] usb 10-1: config 1 has no interface number 0
[ 1397.920557][ T5950] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1397.920577][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1397.935166][ T5950] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1399.161835][ T6118] usb 9-1: USB disconnect, device number 35
[ 1399.284609][T15736] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1399.359132][T15736] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1399.428529][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1399.456356][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1399.496427][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1399.538472][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1399.595678][ T6118] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1399.605661][ T3550] hsr_slave_0: left promiscuous mode
[ 1399.635968][ T3550] hsr_slave_1: left promiscuous mode
[ 1399.636746][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1399.659463][ T3550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1399.749986][ T6118] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1399.750074][ T6118] usb 9-1: config 1 has no interface number 0
[ 1399.750108][ T6118] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1399.750121][ T6118] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.762361][ T6118] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1399.956487][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1401.139556][ T5950] usb 10-1: USB disconnect, device number 15
[ 1401.708841][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1402.345692][ T6118] usb 9-1: USB disconnect, device number 36
[ 1406.303068][ T5950] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1406.558715][ T5950] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1406.558749][ T5950] usb 10-1: config 1 has no interface number 0
[ 1406.558942][ T5950] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1406.559001][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1406.731123][ T5950] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1408.886819][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1409.046247][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1409.471352][ T5809] usb 10-1: USB disconnect, device number 16
[ 1411.116460][ T3550] team0 (unregistering): Port device team_slave_1 removed
[ 1411.125716][ T5809] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1411.314125][ T5809] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1411.314159][ T5809] usb 9-1: config 1 has no interface number 0
[ 1411.314212][ T5809] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1411.314235][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.451053][ T5809] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1411.496610][ T3550] team0 (unregistering): Port device team_slave_0 removed
[ 1414.499598][ T5950] usb 9-1: USB disconnect, device number 37
[ 1415.389641][T15736] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1415.537731][T15736] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1415.818860][T15763] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1415.893098][T15763] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1415.967833][T15763] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1416.251094][T15763] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1416.509119][ T5809] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1416.538067][T14618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1416.604515][T14618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1416.612467][T14618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1416.618672][T14618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1416.625073][T14618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1416.670816][ T5809] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1416.670855][ T5809] usb 9-1: config 1 has no interface number 0
[ 1416.670900][ T5809] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1416.670921][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.739737][ T5809] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1416.871992][T15750] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1417.014724][T15750] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1418.760898][T12743] Bluetooth: hci1: command tx timeout
[ 1419.962523][ T5950] libceph: connect (1)[c::]:6789 error -101
[ 1419.962744][ T5950] libceph: mon0 (1)[c::]:6789 connect error
[ 1419.970223][ T5950] libceph: connect (1)[c::]:6789 error -101
[ 1419.970461][ T5950] libceph: mon0 (1)[c::]:6789 connect error
[ 1419.970557][T15973] ceph: No mds server is up or the cluster is laggy
[ 1419.983275][ T5950] usb 9-1: USB disconnect, device number 38
[ 1420.228760][T15750] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1420.845714][T12743] Bluetooth: hci1: command tx timeout
[ 1420.863488][T15763] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1421.053613][T15964] chnl_net:caif_netlink_parms(): no params data found
[ 1421.229194][T15763] 8021q: adding VLAN 0 to HW filter on device team0
[ 1421.301098][T14618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1421.332253][T14618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1421.356241][T14618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1421.361474][T14618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1421.362551][T14618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1422.783639][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1422.784587][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1422.917250][T14618] Bluetooth: hci1: command tx timeout
[ 1423.572775][T14618] Bluetooth: hci3: command tx timeout
[ 1423.905301][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1423.918895][ T7306] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1423.932453][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1423.938438][T15964] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1423.938570][T15964] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1423.938810][T15964] bridge_slave_0: entered allmulticast mode
[ 1423.941755][T15964] bridge_slave_0: entered promiscuous mode
[ 1424.041313][T15964] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1424.041470][T15964] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1424.041703][T15964] bridge_slave_1: entered allmulticast mode
[ 1424.052089][T15964] bridge_slave_1: entered promiscuous mode
[ 1424.068936][ T7306] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1424.068966][ T7306] usb 10-1: config 1 has no interface number 0
[ 1424.069012][ T7306] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1424.069033][ T7306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1424.101975][ T7306] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1424.985912][T14618] Bluetooth: hci1: command tx timeout
[ 1425.492927][T15964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1425.620537][T15964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1425.635689][T14618] Bluetooth: hci3: command tx timeout
[ 1426.568847][T16039] ceph: No mds server is up or the cluster is laggy
[ 1427.076145][ T6118] libceph: connect (1)[c::]:6789 error -101
[ 1427.076362][ T6118] libceph: mon0 (1)[c::]:6789 connect error
[ 1427.104679][ T6118] usb 10-1: USB disconnect, device number 17
[ 1428.547615][T14618] Bluetooth: hci3: command tx timeout
[ 1429.415609][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1429.415694][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1430.576798][ T5913] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1430.577508][T12743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1430.581558][T12743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1430.583277][T12743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1430.584661][T12743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1430.586003][T12743] Bluetooth: hci3: command tx timeout
[ 1430.586093][T12743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1430.738922][ T5913] usb 10-1: config 1 has an invalid interface number: 140 but max is 0
[ 1430.738954][ T5913] usb 10-1: config 1 has no interface number 0
[ 1430.739005][ T5913] usb 10-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1430.739030][ T5913] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1430.822467][ T5913] usb 10-1: MBOX3: Invalid descriptor size=18.
[ 1432.592827][T15964] team0: Port device team_slave_0 added
[ 1432.619287][T15964] team0: Port device team_slave_1 added
[ 1432.669223][T15989] Bluetooth: hci4: command tx timeout
[ 1433.229724][T16063] ceph: No mds server is up or the cluster is laggy
[ 1433.239818][ T6567] libceph: connect (1)[c::]:6789 error -101
[ 1433.249127][ T6567] libceph: mon0 (1)[c::]:6789 connect error
[ 1434.155863][ T6567] usb 10-1: USB disconnect, device number 18
[ 1434.160264][ T6118] libceph: connect (1)[c::]:6789 error -101
[ 1434.160423][ T6118] libceph: mon0 (1)[c::]:6789 connect error
[ 1436.945658][T15989] Bluetooth: hci4: command tx timeout
[ 1437.031806][T16072] syz.9.3230 (16072): drop_caches: 2
[ 1437.588569][ T7306] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1437.737779][ T7306] usb 9-1: config 1 has an invalid interface number: 140 but max is 0
[ 1437.737811][ T7306] usb 9-1: config 1 has no interface number 0
[ 1437.737849][ T7306] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[ 1437.737864][ T7306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1437.744829][ T7306] usb 9-1: MBOX3: Invalid descriptor size=18.
[ 1438.991543][T15989] Bluetooth: hci4: command tx timeout
[ 1439.164010][T16083] ==================================================================
[ 1439.164024][T16083] BUG: KASA[ 1439.164024][T16083] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0
[ 1439.164087][T16083] Read of size 1 at addr ffff88803168e200 by task syz.9.3233/16083
[ 1439.164097][T16083] 
[ 1439.164107][T16083] CPU: 1 UID: 0 PID: 16083 Comm: syz.9.3233 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1439.164125][T16083] Tainted: [L]=SOFTLOCKUP
[ 1439.164130][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1439.164137][T16083] Call Trace:
[ 1439.164142][T16083]  <TASK>
[ 1439.164148][T16083]  dump_stack_lvl+0xe8/0x150
[ 1439.164164][T16083]  print_report+0xca/0x240
[ 1439.164178][T16083]  ? rt_spin_lock+0x88/0x3e0
[ 1439.164191][T16083]  kasan_report+0x118/0x150
[ 1439.164209][T16083]  ? rt_spin_lock+0x88/0x3e0
[ 1439.164225][T16083]  ? __wake_up_common_lock+0x2f/0x1e0
[ 1439.164239][T16083]  __kasan_check_byte+0x2a/0x40
[ 1439.164254][T16083]  lock_acquire+0x84/0x340
[ 1439.164268][T16083]  ? rt_mutex_slowunlock+0x668/0x8a0
[ 1439.164281][T16083]  ? reacquire_held_locks+0x104/0x190
[ 1439.164299][T16083]  rt_spin_lock+0x88/0x3e0
[ 1439.164320][T16083]  ? __wake_up_common_lock+0x2f/0x1e0
[ 1439.164333][T16083]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1439.164346][T16083]  ? rt_spin_unlock+0x161/0x200
[ 1439.164361][T16083]  ? __wake_up_common_lock+0x18a/0x1e0
[ 1439.164375][T16083]  __wake_up_common_lock+0x2f/0x1e0
[ 1439.164388][T16083]  ? snd_pcm_post_stop+0x14a/0x1e0
[ 1439.164401][T16083]  ? __pfx_snd_pcm_post_stop+0x10/0x10
[ 1439.164411][T16083]  snd_pcm_action+0x1f4/0x240
[ 1439.164427][T16083]  loopback_trigger+0xb82/0x1b60
[ 1439.164439][T16083]  ? rcu_is_watching+0x15/0xb0
[ 1439.164451][T16083]  snd_pcm_do_start+0xb7/0x180
[ 1439.164463][T16083]  snd_pcm_action+0xe7/0x240
[ 1439.164476][T16083]  __snd_pcm_lib_xfer+0x1762/0x1d00
[ 1439.164490][T16083]  ? __pfx_interleaved_copy+0x10/0x10
[ 1439.164503][T16083]  ? __pfx_default_write_copy+0x10/0x10
[ 1439.164515][T16083]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1439.164528][T16083]  ? __pfx___snd_pcm_lib_xfer+0x10/0x10
[ 1439.164539][T16083]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1439.164553][T16083]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1439.164568][T16083]  ? snd_pcm_oss_write3+0x1a2/0x350
[ 1439.164585][T16083]  snd_pcm_oss_write3+0x1bc/0x350
[ 1439.164603][T16083]  snd_pcm_plug_write_transfer+0x2cb/0x4c0
[ 1439.164618][T16083]  ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10
[ 1439.164631][T16083]  ? snd_pcm_plug_client_channels_buf+0x490/0x640
[ 1439.164646][T16083]  snd_pcm_oss_write+0xa31/0xf20
[ 1439.164660][T16083]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 1439.164677][T16083]  ? rw_verify_area+0x25b/0x4e0
[ 1439.164692][T16083]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 1439.164702][T16083]  vfs_write+0x287/0xb40
[ 1439.164719][T16083]  ? __pfx_vfs_write+0x10/0x10
[ 1439.164734][T16083]  ? __fget_files+0x2a/0x420
[ 1439.164746][T16083]  ? __fget_files+0x2a/0x420
[ 1439.164756][T16083]  ? __fget_files+0x3a6/0x420
[ 1439.164767][T16083]  ? __fget_files+0x2a/0x420
[ 1439.164780][T16083]  ksys_write+0x14b/0x260
[ 1439.164795][T16083]  ? __pfx_ksys_write+0x10/0x10
[ 1439.164812][T16083]  do_syscall_64+0xec/0xf80
[ 1439.164823][T16083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.164834][T16083]  ? trace_irq_disable+0x37/0x100
[ 1439.164846][T16083]  ? clear_bhb_loop+0x60/0xb0
[ 1439.164858][T16083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.164870][T16083] RIP: 0033:0x7fafa222f749
[ 1439.164881][T16083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1439.164891][T16083] RSP: 002b:00007fafa0475038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1439.164905][T16083] RAX: ffffffffffffffda RBX: 00007fafa2486090 RCX: 00007fafa222f749
[ 1439.164915][T16083] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000006
[ 1439.164922][T16083] RBP: 00007fafa22b3f91 R08: 0000000000000000 R09: 0000000000000000
[ 1439.164929][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1439.164937][T16083] R13: 00007fafa2486128 R14: 00007fafa2486090 R15: 00007ffd3a98be08
[ 1439.164950][T16083]  </TASK>
[ 1439.164954][T16083] 
[ 1439.164956][T16083] Allocated by task 16081:
[ 1439.164962][T16083]  kasan_save_track+0x3e/0x80
[ 1439.164976][T16083]  __kasan_kmalloc+0x93/0xb0
[ 1439.164990][T16083]  __kmalloc_cache_noprof+0x1fb/0x6d0
[ 1439.165005][T16083]  snd_pcm_attach_substream+0x5b7/0xb30
[ 1439.165017][T16083]  snd_pcm_open_substream+0xb6/0x2410
[ 1439.165031][T16083]  snd_pcm_oss_open+0xf2a/0x1bd0
[ 1439.165041][T16083]  chrdev_open+0x4cf/0x5e0
[ 1439.165049][T16083]  do_dentry_open+0x7d0/0x1270
[ 1439.165060][T16083]  vfs_open+0x3b/0x350
[ 1439.165070][T16083]  path_openat+0x342a/0x3df0
[ 1439.165084][T16083]  do_filp_open+0x1fa/0x410
[ 1439.165097][T16083]  do_sys_openat2+0x121/0x200
[ 1439.165107][T16083]  __x64_sys_openat+0x138/0x170
[ 1439.165118][T16083]  do_syscall_64+0xec/0xf80
[ 1439.165127][T16083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.165137][T16083] 
[ 1439.165140][T16083] Freed by task 16081:
[ 1439.165144][T16083]  kasan_save_track+0x3e/0x80
[ 1439.165157][T16083]  kasan_save_free_info+0x46/0x50
[ 1439.165168][T16083]  __kasan_slab_free+0x5c/0x80
[ 1439.165182][T16083]  kfree+0x1bd/0x900
[ 1439.165194][T16083]  snd_pcm_detach_substream+0x1e1/0x290
[ 1439.165206][T16083]  snd_pcm_oss_release+0x184/0x250
[ 1439.165215][T16083]  __fput+0x45b/0xa80
[ 1439.165225][T16083]  task_work_run+0x1d4/0x260
[ 1439.165240][T16083]  exit_to_user_mode_loop+0xef/0x4e0
[ 1439.165254][T16083]  do_syscall_64+0x2c1/0xf80
[ 1439.165263][T16083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.165279][T16083] 
[ 1439.165282][T16083] The buggy address belongs to the object at ffff88803168e000
[ 1439.165282][T16083]  which belongs to the cache kmalloc-2k of size 2048
[ 1439.165291][T16083] The buggy address is located 512 bytes inside of
[ 1439.165291][T16083]  freed 2048-byte region [ffff88803168e000, ffff88803168e800)
[ 1439.165303][T16083] 
[ 1439.165306][T16083] The buggy address belongs to the physical page:
[ 1439.165319][T16083] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31688
[ 1439.165331][T16083] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1439.165340][T16083] anon flags: 0x80000000000040(head|node=0|zone=1)
[ 1439.165350][T16083] page_type: f5(slab)
[ 1439.165360][T16083] raw: 0080000000000040 ffff88813ff27000 0000000000000000 0000000000000001
[ 1439.165370][T16083] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 1439.165380][T16083] head: 0080000000000040 ffff88813ff27000 0000000000000000 0000000000000001
[ 1439.165389][T16083] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 1439.165399][T16083] head: 0080000000000003 ffffea0000c5a201 00000000ffffffff 00000000ffffffff
[ 1439.165408][T16083] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1439.165414][T16083] page dumped because: kasan: bad access detected
[ 1439.165420][T16083] page_owner tracks the page as allocated
[ 1439.165425][T16083] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15750, tgid 15750 (syz-executor), ts 1385945885112, free_ts 1385161333307
[ 1439.165447][T16083]  post_alloc_hook+0x234/0x290
[ 1439.165466][T16083]  get_page_from_freelist+0x28c0/0x2960
[ 1439.165481][T16083]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1439.165498][T16083]  alloc_pages_mpol+0xd1/0x380
[ 1439.165513][T16083]  allocate_slab+0x86/0x3b0
[ 1439.165530][T16083]  ___slab_alloc+0xb10/0x13e0
[ 1439.165547][T16083]  __slab_alloc+0xc6/0x1f0
[ 1439.165563][T16083]  __kmalloc_cache_noprof+0x101/0x6d0
[ 1439.165585][T16083]  rtnl_newlink+0xfb/0x1c90
[ 1439.165604][T16083]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1439.165620][T16083]  netlink_rcv_skb+0x208/0x470
[ 1439.165643][T16083]  netlink_unicast+0x846/0xa10
[ 1439.165660][T16083]  netlink_sendmsg+0x805/0xb30
[ 1439.165684][T16083]  __sock_sendmsg+0x21c/0x270
[ 1439.165709][T16083]  __sys_sendto+0x3c7/0x520
[ 1439.165728][T16083]  __x64_sys_sendto+0xde/0x100
[ 1439.165748][T16083] page last free pid 15845 tgid 15843 stack trace:
[ 1439.165760][T16083]  __free_frozen_pages+0xfe1/0x1170
[ 1439.165786][T16083]  __put_partials+0x149/0x170
[ 1439.165804][T16083]  __slab_free+0x2af/0x330
[ 1439.165825][T16083]  qlist_free_all+0x97/0x100
[ 1439.165847][T16083]  kasan_quarantine_reduce+0x148/0x160
[ 1439.165870][T16083]  __kasan_slab_alloc+0x22/0x80
[ 1439.165894][T16083]  kmem_cache_alloc_noprof+0x18d/0x6c0
[ 1439.165917][T16083]  ptlock_alloc+0x20/0x70
[ 1439.165941][T16083]  pte_alloc_one+0x7e/0x380
[ 1439.165964][T16083]  __pte_alloc+0x25/0x1a0
[ 1439.165981][T16083]  do_pte_missing+0x203a/0x27a0
[ 1439.165998][T16083]  handle_mm_fault+0xcc1/0x1330
[ 1439.166019][T16083]  do_user_addr_fault+0x764/0x1380
[ 1439.166036][T16083]  exc_page_fault+0x71/0xd0
[ 1439.166054][T16083]  asm_exc_page_fault+0x26/0x30
[ 1439.166072][T16083] 
[ 1439.166077][T16083] Memory state around the buggy address:
[ 1439.166087][T16083]  ffff88803168e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1439.166099][T16083]  ffff88803168e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1439.166107][T16083] >ffff88803168e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1439.166113][T16083]                    ^
[ 1439.166118][T16083]  ffff88803168e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1439.166127][T16083]  ffff88803168e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1439.166133][T16083] ==================================================================
[ 1439.175725][T16083] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1439.175751][T16083] CPU: 1 UID: 0 PID: 16083 Comm: syz.9.3233 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1439.175774][T16083] Tainted: [L]=SOFTLOCKUP
[ 1439.175779][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1439.175786][T16083] Call Trace:
[ 1439.175791][T16083]  <TASK>
[ 1439.175798][T16083]  vpanic+0x1e0/0x670
[ 1439.175817][T16083]  panic+0xb9/0xc0
[ 1439.175831][T16083]  ? __pfx_panic+0x10/0x10
[ 1439.175846][T16083]  ? preempt_schedule_thunk+0x16/0x30
[ 1439.175860][T16083]  ? preempt_schedule_thunk+0x16/0x30
[ 1439.175872][T16083]  ? rt_spin_lock+0x88/0x3e0
[ 1439.175887][T16083]  check_panic_on_warn+0x89/0xb0
[ 1439.175903][T16083]  ? rt_spin_lock+0x88/0x3e0
[ 1439.175916][T16083]  end_report+0x6f/0x140
[ 1439.175931][T16083]  kasan_report+0x129/0x150
[ 1439.175946][T16083]  ? rt_spin_lock+0x88/0x3e0
[ 1439.175962][T16083]  ? __wake_up_common_lock+0x2f/0x1e0
[ 1439.175975][T16083]  __kasan_check_byte+0x2a/0x40
[ 1439.175991][T16083]  lock_acquire+0x84/0x340
[ 1439.176005][T16083]  ? rt_mutex_slowunlock+0x668/0x8a0
[ 1439.176019][T16083]  ? reacquire_held_locks+0x104/0x190
[ 1439.176036][T16083]  rt_spin_lock+0x88/0x3e0
[ 1439.176050][T16083]  ? __wake_up_common_lock+0x2f/0x1e0
[ 1439.176064][T16083]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1439.176077][T16083]  ? rt_spin_unlock+0x161/0x200
[ 1439.176096][T16083]  ? __wake_up_common_lock+0x18a/0x1e0
[ 1439.176120][T16083]  __wake_up_common_lock+0x2f/0x1e0
[ 1439.176145][T16083]  ? snd_pcm_post_stop+0x14a/0x1e0
[ 1439.176167][T16083]  ? __pfx_snd_pcm_post_stop+0x10/0x10
[ 1439.176185][T16083]  snd_pcm_action+0x1f4/0x240
[ 1439.176212][T16083]  loopback_trigger+0xb82/0x1b60
[ 1439.176232][T16083]  ? rcu_is_watching+0x15/0xb0
[ 1439.176253][T16083]  snd_pcm_do_start+0xb7/0x180
[ 1439.176272][T16083]  snd_pcm_action+0xe7/0x240
[ 1439.176297][T16083]  __snd_pcm_lib_xfer+0x1762/0x1d00
[ 1439.176331][T16083]  ? __pfx_interleaved_copy+0x10/0x10
[ 1439.176351][T16083]  ? __pfx_default_write_copy+0x10/0x10
[ 1439.176372][T16083]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1439.176393][T16083]  ? __pfx___snd_pcm_lib_xfer+0x10/0x10
[ 1439.176412][T16083]  ? rt_mutex_slowunlock+0x1be/0x2e0
[ 1439.176436][T16083]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1439.176462][T16083]  ? snd_pcm_oss_write3+0x1a2/0x350
[ 1439.176492][T16083]  snd_pcm_oss_write3+0x1bc/0x350
[ 1439.176522][T16083]  snd_pcm_plug_write_transfer+0x2cb/0x4c0
[ 1439.176548][T16083]  ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10
[ 1439.176571][T16083]  ? snd_pcm_plug_client_channels_buf+0x490/0x640
[ 1439.176597][T16083]  snd_pcm_oss_write+0xa31/0xf20
[ 1439.176622][T16083]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 1439.176641][T16083]  ? rw_verify_area+0x25b/0x4e0
[ 1439.176664][T16083]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[ 1439.176684][T16083]  vfs_write+0x287/0xb40
[ 1439.176711][T16083]  ? __pfx_vfs_write+0x10/0x10
[ 1439.176737][T16083]  ? __fget_files+0x2a/0x420
[ 1439.176756][T16083]  ? __fget_files+0x2a/0x420
[ 1439.176774][T16083]  ? __fget_files+0x3a6/0x420
[ 1439.176791][T16083]  ? __fget_files+0x2a/0x420
[ 1439.176812][T16083]  ksys_write+0x14b/0x260
[ 1439.176837][T16083]  ? __pfx_ksys_write+0x10/0x10
[ 1439.176865][T16083]  do_syscall_64+0xec/0xf80
[ 1439.176883][T16083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.176901][T16083]  ? trace_irq_disable+0x37/0x100
[ 1439.176920][T16083]  ? clear_bhb_loop+0x60/0xb0
[ 1439.176939][T16083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.176958][T16083] RIP: 0033:0x7fafa222f749
[ 1439.176974][T16083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1439.176990][T16083] RSP: 002b:00007fafa0475038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1439.177012][T16083] RAX: ffffffffffffffda RBX: 00007fafa2486090 RCX: 00007fafa222f749
[ 1439.177026][T16083] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000006
[ 1439.177038][T16083] RBP: 00007fafa22b3f91 R08: 0000000000000000 R09: 0000000000000000
[ 1439.177050][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1439.177062][T16083] R13: 00007fafa2486128 R14: 00007fafa2486090 R15: 00007ffd3a98be08
[ 1439.177082][T16083]  </TASK>
[ 1439.177475][T16083] Kernel Offset: disabled