last executing test programs:

8m35.869458402s ago: executing program 2 (id=689):
preadv2(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000200)=""/125, 0x7d}], 0x1, 0xffffffff, 0xffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r3 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r3, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x4, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0xb, 0x4, {{0x31, 0x4, 0x0, 0x8, 0xc4, 0x68, 0x0, 0xc, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0x46, 0xffffffffffffffff, [{0x2, 0x10, "64d747772de912c40b6251887ae0"}, {0x0, 0x7, "d409abc629"}, {0x2, 0x8, "9260267d54a8"}, {0x4, 0xf, "178a5ee065d8d63a9321e4f7b7"}, {0x5, 0x9, "044d113e37913c"}, {0x7, 0x9, "9f744e1528a0df"}]}, @cipso={0x86, 0x67, 0x0, [{0x7, 0xc, "f73db8a69f51a9d953a6"}, {0x2, 0xc, "067b5dba23e82e0b404a"}, {0x0, 0x9, "79d1ad8d715a15"}, {0x1, 0xd, "3bc3b97fae4f9df914d473"}, {0x2, 0x5, "ba4757"}, {0x77464c46b11790e8, 0xf, "8ab83a4829942e45c93ea12b88"}, {0x6, 0xd, "ff32032ec1e3d332cfcfde"}, {0x6, 0x12, "6c952474e741a27c7fa49fded45200db"}]}]}}}}})
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x108402)

8m33.37258591s ago: executing program 2 (id=693):
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x1000000)
io_uring_setup(0xdf1, 0x0)
r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_emit_ethernet(0x46, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='so@\xdc\xcd\xf8H-\xb8\x16u\x96\x15\f\xa2ce', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fp\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00'/119, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x4, "563e359cde7ccdca47d10000dc0000000000000000800a00000000007310717d", <r4=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r5, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r6})
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000001a40)={&(0x7f00000019c0)=[{&(0x7f0000000080)="2498d0d7632484e91d4b031d427fb8348a01d5dabee7", 0x16}], 0x1, 0x6, 0x0, 0xfffffffffffffff8, 0x7ff, 0x3, 0x7, 0x3})
syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0)

8m30.182643795s ago: executing program 2 (id=700):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e00", 0xc, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

8m28.891338724s ago: executing program 2 (id=704):
preadv2(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000200)=""/125, 0x7d}], 0x1, 0xffffffff, 0xffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, r0, 0x2})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r4 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e)
flock(r4, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x4, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$kcm(r3, &(0x7f0000000980)={&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xd8, @private2, 0x6}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)="c66009714da7c1b30f0e193bb480a2485a645dd4c429425aa4f2d18c0689e7868e49297f74a22add14730bfc8aa4f88c3c45b2638da9d40787ff1f0be8d0bae7ef79bbe0b85042d52700cc165cf3f16d35a4a6ef0c440ed4961e747d14ad379fd92d2b71bb2ff61a7e5dcc2ccab3ecdb14e9c1853466c321c73fd2a0af620cd391feb2e42658999d95cebc98d78c9f651b78945ceb2757367bd6eaeb439ccb139632947571c05baf94a9c8f8", 0xac}, {&(0x7f0000000640)="c39af3c8444b1c1f854e007cdbdbde11eac795031aad32e70cf035a5d92d1f71abe64f36bfe180", 0x27}, {&(0x7f0000000680)="14f626a40de831d0351a314b7aea585439d3427bbdfbe2f4f969b3a5ad149d1e1f924bfbb5d30d483a3f2df3bb08af4c373d1789766b5cf6519ca580caca710ac5ad70634c001287814860e041f4cb50de808b9da4d065bc80b61e73c7172a0760b10b614721cc618a121c0d4c934bb7762f88a40030dc3dd680813fe29ebbb5bdffd12113244cf077a409a0a61d59bc2de7db15c75752ca36c9451614d6027716b8fdcf1038596d2d6795b2930d4bbd04bf07457ea458752d72f6c102a0f473c5243de22347", 0xc6}], 0x3, &(0x7f0000000880)=[{0xe0, 0x112, 0x4, "f9b352c35c7eb04d4b6933e301c24c8dbaee64fc4de69cf3b63de841f2eb76821242a2c89c759e1f91f53e869b944adc0fa7d8006694d2310e2a4603d7c8f53fdb8031d4917d0bdfaa182fdbb7ea6affb89258986fa81d3584f0e5df91efa8738c50c2461797161a3069e143d3b05d846b0fc2805ed5379d4fe2203b74f101bf0655737822a9c73a562c12523d9617043f4b6fe128ab11521b2ceb3e6d63bba6f9b01bfbf0fac98254deca17a268e9d62f9eebb2e57c17da0afad3bc070ef78ba92550be108dcd300b6b989cb73b68"}], 0xe0}, 0x40c0)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0xb, 0x4, {{0x31, 0x4, 0x0, 0x8, 0xc4, 0x68, 0x0, 0xc, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0x46, 0xffffffffffffffff, [{0x2, 0x10, "64d747772de912c40b6251887ae0"}, {0x0, 0x7, "d409abc629"}, {0x2, 0x8, "9260267d54a8"}, {0x4, 0xf, "178a5ee065d8d63a9321e4f7b7"}, {0x5, 0x9, "044d113e37913c"}, {0x7, 0x9, "9f744e1528a0df"}]}, @cipso={0x86, 0x67, 0x0, [{0x7, 0xc, "f73db8a69f51a9d953a6"}, {0x2, 0xc, "067b5dba23e82e0b404a"}, {0x0, 0x9, "79d1ad8d715a15"}, {0x1, 0xd, "3bc3b97fae4f9df914d473"}, {0x2, 0x5, "ba4757"}, {0x77464c46b11790e8, 0xf, "8ab83a4829942e45c93ea12b88"}, {0x6, 0xd, "ff32032ec1e3d332cfcfde"}, {0x6, 0x12, "6c952474e741a27c7fa49fded45200db"}]}]}}}}})
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x108402)

8m27.42680553s ago: executing program 2 (id=706):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f00000002c0)=""/153, 0x99)
socket$nl_netfilter(0x10, 0x3, 0xc)

8m26.279205174s ago: executing program 2 (id=710):
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x40)
fchdir(r0)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f00000001c0)={0x10, 0x0, r6})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

8m10.970519621s ago: executing program 32 (id=710):
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x40)
fchdir(r0)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f00000001c0)={0x10, 0x0, r6})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

3m38.641226895s ago: executing program 5 (id=1228):
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
mount$9p_fd(0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=ANY=[])
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
getdents(r3, &(0x7f00000005c0)=""/4096, 0x1000)

3m37.780495951s ago: executing program 5 (id=1229):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
socket$packet(0x11, 0x3, 0x300)
add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
r4 = getpid()
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r6, 0x7})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

3m34.878072025s ago: executing program 5 (id=1234):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa)

3m31.027686272s ago: executing program 5 (id=1248):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_ep_write(r2, 0x8d, 0x24, &(0x7f0000000340)="d021ed1197742c23f25f46099a48eff79729d7dad9b11fdfb209413df45ebc1d558ac859")
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
shutdown(r5, 0x0)
statx(0xffffffffffffffff, 0x0, 0x400, 0xe6025bc676a83de5, 0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r6, 0x80086303, &(0x7f0000000000))

3m26.284388562s ago: executing program 5 (id=1266):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
socket$packet(0x11, 0x3, 0x300)
add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
r4 = getpid()
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r7, &(0x7f0000000280)={0xffffffffffffffff, r6, 0x7})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

3m25.241438257s ago: executing program 5 (id=1268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

3m9.953759799s ago: executing program 33 (id=1268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

48.50408806s ago: executing program 3 (id=1567):
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x81}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x210, 0x138, 0x210, 0x138, 0x210, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xfa}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000ea900040000000800000001000003b4383a0044e5dabaf1c55ef3aaee3fc7c0ec6c29504a57308eb367a181c2be35d3635486a141e11e62cf92df1ef9932d3603cfc64b57e0c9cd06b0002dc98c995044f5c33ece50fe13c522da73582ac423b37afeea724a4edb42f24c3392653dc6618f", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000020027bd30200144152500000000", @ANYRES32=0x0, @ANYBLOB="00800000241100002000128009000100766c616e000000001000028004000480060001000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x8, '\x00', r3}, 0x94)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000940)=@sack_info={0x0, 0xc, 0x95a9}, &(0x7f0000000980)=0xc)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(r0, 0x7, &(0x7f0000000280)={0x2000a05c, 0x1ba0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
sendfile(r4, r4, 0x0, 0x200000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

46.654327234s ago: executing program 3 (id=1570):
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x5, 0x6)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0)

45.198601877s ago: executing program 3 (id=1575):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x400, 0x8070b922, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
set_robust_list(&(0x7f0000000100)={0x0, 0xf9}, 0x18)
close_range(r2, r2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={<r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
io_setup(0x4, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x81, r3, 0x2})

42.986535684s ago: executing program 3 (id=1577):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$getflags(r1, 0x401)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002800), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = io_uring_setup(0x115c, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)

41.43343813s ago: executing program 3 (id=1580):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000e0d10f460f6d2b380008000300", @ANYRES32=r2], 0x24}}, 0x0)

38.542330902s ago: executing program 3 (id=1583):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
setresuid(0xee01, 0xee01, 0xee00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='syz1\x00', &(0x7f0000000400)='/dev/video#\x00', 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

37.844917208s ago: executing program 1 (id=1587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x400, 0x8070b922, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
set_robust_list(&(0x7f0000000100)={0x0, 0xf9}, 0x18)
close_range(r2, r2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={<r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
io_setup(0x4, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x81, r3, 0x2})

36.297644494s ago: executing program 1 (id=1589):
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0x8}}}, 0x108)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r3, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_SET(r6, 0x0, 0x20008000)
mknodat$loop(r0, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0x80003, @name="51da06bc7338e17dfebb1580e17695473b09f0d1fb8aa1e9959ef9dc00"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)

33.9208404s ago: executing program 1 (id=1593):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

32.343581042s ago: executing program 1 (id=1595):
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x81}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x210, 0x138, 0x210, 0x138, 0x210, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xfa}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000ea900040000000800000001000003b4383a0044e5dabaf1c55ef3aaee3fc7c0ec6c29504a57308eb367a181c2be35d3635486a141e11e62cf92df1ef9932d3603cfc64b57e0c9cd06b0002dc98c995044f5c33ece50fe13c522da73582ac423b37afeea724a4edb42f24c3392653dc6618f", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000020027bd30200144152500000000", @ANYRES32=0x0, @ANYBLOB="00800000241100002000128009000100766c616e000000001000028004000480060001000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x8, '\x00', r3}, 0x94)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000940)=@sack_info={0x0, 0xc, 0x95a9}, &(0x7f0000000980)=0xc)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(r0, 0x7, &(0x7f0000000280)={0x2000a05c, 0x1ba0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13d00000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
sendfile(r4, r4, 0x0, 0x200000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

31.746960148s ago: executing program 1 (id=1599):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x400, 0x8070b922, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
set_robust_list(&(0x7f0000000100)={0x0, 0xf9}, 0x18)
close_range(r2, r2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={<r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
io_setup(0x4, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x81, r3, 0x2})

29.837613997s ago: executing program 1 (id=1602):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pipe(0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0)
r4 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
gettid()
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40b, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]})

21.472851508s ago: executing program 34 (id=1583):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
setresuid(0xee01, 0xee01, 0xee00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='syz1\x00', &(0x7f0000000400)='/dev/video#\x00', 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

14.553950156s ago: executing program 35 (id=1602):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pipe(0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0)
r4 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
gettid()
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40b, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]})

8.706232358s ago: executing program 6 (id=1635):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

7.775435103s ago: executing program 6 (id=1636):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x400, 0x8070b922, 0x80100, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x6}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
set_robust_list(&(0x7f0000000100)={0x0, 0xf9}, 0x18)
close_range(r2, r2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={<r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
io_setup(0x4, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x81, r3, 0x2})

7.00587325s ago: executing program 0 (id=1637):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8812, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000a80)=""/188, 0xba)
write$char_usb(r2, &(0x7f0000000140)="b4", 0x1)
syz_usb_disconnect(0xffffffffffffffff)

7.005693341s ago: executing program 6 (id=1638):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

6.805281051s ago: executing program 6 (id=1640):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0x79, 0x1, 0xc, [{@multicast2}, {@local, 0x374}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r2 = socket(0x2b, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a31000000002000078005000300200000000c00018008000140ffffffff08000840000000e4050005000200000005000100", @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c8)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x0, 0x3}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x3, 0xde, 0xc, {0xc, 0x1, 0x0, 0x400, 0x0, 0x10000}, {0xd, 0x0, 0xb4, 0x7af1}, 0x401, 0xff, 0x5}}]}]}}]}, 0x70}}, 0x24040084)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4)

4.995287334s ago: executing program 0 (id=1641):
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
mount$9p_fd(0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=ANY=[])
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
getdents(r2, &(0x7f00000005c0)=""/4096, 0x1000)

4.442599287s ago: executing program 0 (id=1642):
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x10001, @private0}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0x8}}}, 0x108)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r2, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_SET(r5, 0x0, 0x20008000)
mknodat$loop(r0, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0x80003, @name="51da06bc7338e17dfebb1580e17695473b09f0d1fb8aa1e9959ef9dc00"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)

3.353131177s ago: executing program 0 (id=1645):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0))

3.321265301s ago: executing program 4 (id=1646):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

3.115191446s ago: executing program 6 (id=1647):
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0xfffffffc, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x200000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x48091)
syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202", @ANYRESDEC], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_emit_vhci(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x800)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
syz_usb_connect$uac2(0x5, 0xcb, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0xa3, 0x60, 0x5, {0x8, 0xb, 0x2, 0x1, 0x1, 0xfb, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff, 0x8, 0x2b, 0x6}, [@processing_unit={0x9, 0x24, 0x8, 0x6, 0x4, [0x2, 0x1]}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x1}, @selector_unit={0x7, 0x24, 0xb, 0xd, 0x2, "903f"}, @sample_rate={0xd, 0x24, 0xd, 0x5, 0x3, 0x1, [0x2, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x13, 0x1, 0x22, 0x7, "f69a2ab5235d"}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x0, 0x3, 0x64, 0x80, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x9, 0x5, {0x8, 0x25, 0x1, 0x80, 0x3, 0xf9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x4, "b6dbdfbffbef0c33"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc, 0x0, 0xa2, {0x8, 0x25, 0x1, 0x1, 0x221459770f8f12f0, 0x63, 0x1}}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0xfa, 0x7, 0x1, 0x8, 0x5}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x804}}, {0x31, &(0x7f0000000580)=@string={0x31, 0x3, "1a51495807fc6e655c6fefb143fc0d0cf7efa124a5cf69679f0de04c993cb1abab572f8fccbe86a0ec64242afcb943"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x8d, &(0x7f0000000600)=@string={0x8d, 0x3, "c3b21a7330f2b689dae517ed252f5d9daeaaec65a73544940e23bcf223fd2cfafe25b90a68a8e8d301b7187bf91a3050cbd824388fccd1beb59ccb8923a09d7909cd76a67b07cc547027ad92a347961ea69e3c04d7745a9094f7421f7a279bfb6b2774baf0b46e1657d49e638ef351b2728d27628727331c1c60e1b15b5035edc210014de8c10215d9fc40"}}, {0xed, &(0x7f0000000740)=@string={0xed, 0x3, "b8630b140b399fe2ee563163523078b974f7d7efc82529009d40a6cb7b921fb17594bedf4c1d9cb66a892794cdf3aa15e2d329c80196230b9cc08299b767eed4814ac1170246dd82bcc551d2d73c0280effaa6b02b19415fdc2ba8f348aad69ceec13e0e93898afa6870c7bbb460b7376d2e3e08b9daf263f984f19945b3f33d8183c002f4a2474d73759da2d656cd182f5fd499cad8938fed4d4ea0729e82feb7db7654b1b9f20b2d383b583752a9656b10a08e035b674adaa84dd2486287a7f73f89115b8b3cda0e03b3572c6475e1ed23fc1f1eedafb1097e50d626d63b97d89c7aaada52c836b89051"}}]})
writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

3.101668761s ago: executing program 0 (id=1648):
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x1000000)
io_uring_setup(0xdf1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
socket$phonet(0x23, 0x2, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_emit_ethernet(0x46, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='so@\xdc\xcd\xf8H-\xb8\x16u\x96\x15\f\xa2ce', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fp\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00'/119, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x4, "563e359cde7ccdca47d10000dc0000000000000000800a00000000007310717d", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r3, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r4})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000001a40)={&(0x7f00000019c0)=[{&(0x7f0000000080)="2498d0d7632484e91d4b031d427fb8348a01d5dabee7", 0x16}], 0x1, 0x6, 0x0, 0xfffffffffffffff8, 0x7ff, 0x3, 0x7, 0x3})
syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0)

3.08219482s ago: executing program 4 (id=1649):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8812, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000a80)=""/188, 0xba)
write$char_usb(r2, &(0x7f0000000140)="b4", 0x1)
syz_usb_disconnect(0xffffffffffffffff)

2.029814948s ago: executing program 4 (id=1650):
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
mount$9p_fd(0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=ANY=[])
bind$bt_sco(0xffffffffffffffff, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
getdents(r3, &(0x7f00000005c0)=""/4096, 0x1000)

1.980693319s ago: executing program 0 (id=1651):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = getpgrp(0xffffffffffffffff)
sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0xffffffffffffff60, 0x0, 0xfffffffffffffce0, 0x0, 0x0, 0x2663}, 0x40040c1)
bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRESHEX, @ANYBLOB="18"], 0x50)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota')

1.286281799s ago: executing program 4 (id=1652):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9c", 0x3}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

855.155288ms ago: executing program 6 (id=1653):
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x10001, @private0}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0x8}}}, 0x108)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r2, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_SET(r5, 0x0, 0x20008000)
mknodat$loop(r0, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0x80003, @name="51da06bc7338e17dfebb1580e17695473b09f0d1fb8aa1e9959ef9dc00"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)

762.922057ms ago: executing program 4 (id=1654):
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x81}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x210, 0x138, 0x210, 0x138, 0x210, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xfa}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000ea900040000000800000001000003b4383a0044e5dabaf1c55ef3aaee3fc7c0ec6c29504a57308eb367a181c2be35d3635486a141e11e62cf92df1ef9932d3603cfc64b57e0c9cd06b0002dc98c995044f5c33ece50fe13c522da73582ac423b37afeea724a4edb42f24c3392653dc6618f", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000020027bd30200144152500000000", @ANYRES32=0x0, @ANYBLOB="00800000241100002000128009000100766c616e000000001000028004000480060001000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x8, '\x00', r3}, 0x94)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000940)=@sack_info={0x0, 0xc, 0x95a9}, &(0x7f0000000980)=0xc)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prlimit64(r0, 0x7, &(0x7f0000000280)={0x2000a05c, 0x1ba0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13d00000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, 0x0, 0x0)
sendfile(r4, r4, 0x0, 0x200000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

0s ago: executing program 4 (id=1655):
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002900"], 0x14}, 0x1, 0x0, 0x0, 0x2404c880}, 0x40000)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
socket$kcm(0x2b, 0x1, 0x0)
accept4(r3, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

valid maxpacket 0
[  341.730667][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  341.905004][   T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  341.905086][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.905157][   T10] usb 5-1: Product: syz
[  341.905198][   T10] usb 5-1: Manufacturer: syz
[  341.905240][   T10] usb 5-1: SerialNumber: syz
[  342.661107][   T10] usb 5-1: config 0 descriptor??
[  343.162886][   T37] usb 1-1: config 0 descriptor??
[  344.447562][   T37] usb 1-1: can't set config #0, error -71
[  344.454883][   T37] usb 1-1: USB disconnect, device number 9
[  344.469169][   T10] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[  344.469212][   T10] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  344.521597][   T10] usb 5-1: USB disconnect, device number 11
[  345.181394][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'.
[  345.854234][   T38] audit: type=1326 audit(1775709300.011:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7693 comm="syz.2.532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfc2d7c819 code=0x0
[  345.969244][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'.
[  353.878698][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'.
[  353.950530][   T38] audit: type=1326 audit(1775709308.701:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7736 comm="syz.0.543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  355.390795][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'.
[  356.381326][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'.
[  356.772596][ T6047] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  357.256508][ T6047] usb 4-1: Using ep0 maxpacket: 32
[  357.260732][ T7757] veth3: entered allmulticast mode
[  357.263929][ T6047] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  357.263957][ T6047] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  357.263982][ T6047] usb 4-1: config 0 interface 0 has no altsetting 0
[  357.303559][ T6047] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  357.303598][ T6047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.303620][ T6047] usb 4-1: Product: syz
[  357.303635][ T6047] usb 4-1: Manufacturer: syz
[  357.303650][ T6047] usb 4-1: SerialNumber: syz
[  357.345212][ T6047] usb 4-1: config 0 descriptor??
[  359.086121][ T6047] gs_usb 4-1:0.0: Couldn't get device config: (err=-110)
[  359.086186][ T6047] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110
[  359.330914][ T6047] usb 4-1: USB disconnect, device number 7
[  360.194061][ T7784] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  360.458355][ T7792] vivid-001: disconnect
[  361.969474][ T7789] vivid-001: reconnect
[  364.650472][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'.
[  365.952920][ T7829] netlink: 'syz.4.568': attribute type 10 has an invalid length.
[  366.242483][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.271805][ T7829] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  367.150135][ T7820] veth3: entered allmulticast mode
[  369.529332][ T7849] vivid-001: disconnect
[  370.015335][ T7843] vivid-001: reconnect
[  372.142332][ T7870] netlink: 'syz.2.579': attribute type 10 has an invalid length.
[  372.193656][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.215248][ T7870] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  375.774552][ T7891] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  376.722501][ T7897] vivid-001: disconnect
[  377.019205][ T7893] vivid-001: reconnect
[  379.079781][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  379.088890][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  379.324344][ T7910] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  382.448435][ T7936] vivid-002: disconnect
[  382.494849][ T7934] vivid-002: reconnect
[  382.761374][ T7939] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  383.064929][ T7932] loop6: detected capacity change from 0 to 7
[  383.115635][    C0] blk_print_req_error: 10 callbacks suppressed
[  383.115701][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.115782][    C0] buffer_io_error: 10 callbacks suppressed
[  383.115851][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.170561][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.170673][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.205661][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.205737][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.236183][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.242528][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.369435][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.369466][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.443791][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.446489][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.479005][ T7932] ldm_validate_partition_table(): Disk read failed.
[  383.480914][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.480951][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.482134][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.482166][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.483385][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.483413][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.491621][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  383.491714][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  383.497226][ T7932] Dev loop6: unable to read RDB block 0
[  383.517536][ T7932]  loop6: unable to read partition table
[  383.517706][ T7932] loop6: partition table beyond EOD, truncated
[  383.517765][ T7932] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾SêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[  386.076442][ T7961] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  389.796162][ T7996] netlink: 'syz.1.614': attribute type 2 has an invalid length.
[  389.796236][ T7996] netlink: 'syz.1.614': attribute type 1 has an invalid length.
[  389.796319][ T7996] netlink: 'syz.1.614': attribute type 1 has an invalid length.
[  391.453102][ T8005] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  394.895015][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'.
[  395.127275][ T8033] capability: warning: `syz.4.625' uses 32-bit capabilities (legacy support in use)
[  395.137676][ T8033] program syz.4.625 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  395.195425][ T8028] veth3: entered allmulticast mode
[  395.638136][ T8040] netlink: 'syz.2.627': attribute type 2 has an invalid length.
[  395.638185][ T8040] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  395.638225][ T8040] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  396.366112][ T5989] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  396.538040][ T5989] usb 5-1: Using ep0 maxpacket: 32
[  396.997624][ T5989] usb 5-1: unable to get BOS descriptor or descriptor too short
[  397.006529][ T5989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  397.006556][ T5989] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  397.032689][ T5989] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40
[  397.032778][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.032851][ T5989] usb 5-1: Product: syz
[  397.032888][ T5989] usb 5-1: Manufacturer: syz
[  397.032930][ T5989] usb 5-1: SerialNumber: syz
[  397.899021][ T8051] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  398.370291][ T5989] usb 5-1: unit 4 not found!
[  398.542076][ T5989] usb 5-1: invalid MIDI EP
[  398.542092][ T5989] usb 5-1: snd-bcd2000: error during probing
[  398.571616][ T5989] snd-bcd2000 5-1:1.1: probe with driver snd-bcd2000 failed with error -22
[  398.594288][ T5989] usb 5-1: USB disconnect, device number 12
[  399.219443][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  402.525790][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'.
[  402.621559][ T8083] netlink: 'syz.3.639': attribute type 10 has an invalid length.
[  402.927416][ T5989] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  403.096502][ T5989] usb 5-1: Using ep0 maxpacket: 32
[  403.567329][ T5989] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  403.567362][ T5989] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  403.567387][ T5989] usb 5-1: config 0 interface 0 has no altsetting 0
[  403.593346][ T8081] veth3: entered allmulticast mode
[  403.626013][ T5989] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  403.626036][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.626050][ T5989] usb 5-1: Product: syz
[  403.626060][ T5989] usb 5-1: Manufacturer: syz
[  403.626071][ T5989] usb 5-1: SerialNumber: syz
[  403.668720][ T5989] usb 5-1: config 0 descriptor??
[  403.732946][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.735332][ T8083] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  405.259555][ T5989] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[  405.259603][ T5989] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  405.321101][ T5989] usb 5-1: USB disconnect, device number 13
[  405.401711][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.642'.
[  405.607954][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'.
[  405.956387][  T811] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  406.466418][  T811] usb 2-1: Using ep0 maxpacket: 8
[  406.472719][  T811] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  406.472761][  T811] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  406.472777][  T811] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  406.472794][  T811] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  406.472811][  T811] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  406.472841][  T811] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  406.472857][  T811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.086411][  T811] usb 2-1: usb_control_msg returned -32
[  408.086448][  T811] usbtmc 2-1:16.0: can't read capabilities
[  410.096700][   T10] usb 2-1: USB disconnect, device number 10
[  411.910668][ T8126] netlink: 'syz.3.652': attribute type 2 has an invalid length.
[  411.910718][ T8126] netlink: 'syz.3.652': attribute type 1 has an invalid length.
[  411.910756][ T8126] netlink: 'syz.3.652': attribute type 1 has an invalid length.
[  412.686438][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'.
[  413.101885][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'.
[  413.225198][ T8136] vivid-002: disconnect
[  413.236950][ T8131] veth3: entered allmulticast mode
[  413.275217][ T8135] vivid-002: reconnect
[  414.078875][ T8146] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[  414.131729][ T8146] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.151811][ T8146] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  417.142724][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'.
[  417.264637][ T8170] netlink: 'syz.4.666': attribute type 2 has an invalid length.
[  417.264685][ T8170] netlink: 'syz.4.666': attribute type 1 has an invalid length.
[  417.264724][ T8170] netlink: 'syz.4.666': attribute type 1 has an invalid length.
[  418.094956][ T8169] vivid-000: disconnect
[  418.165028][ T8168] vivid-000: reconnect
[  419.555871][ T8187] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  421.425471][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  421.865565][ T8208] netlink: 'syz.2.680': attribute type 2 has an invalid length.
[  421.865642][ T8208] netlink: 'syz.2.680': attribute type 1 has an invalid length.
[  421.865692][ T8208] netlink: 'syz.2.680': attribute type 1 has an invalid length.
[  422.596618][ T8207] vivid-000: disconnect
[  422.690899][ T8204] vivid-000: reconnect
[  423.959791][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'.
[  424.794621][   T38] audit: type=1326 audit(1775709378.781:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.4.688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34846ac819 code=0x0
[  426.745604][ T8240] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  426.766104][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[  426.835336][ T8243] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  427.391446][ T8257] netlink: 'syz.3.695': attribute type 2 has an invalid length.
[  427.391496][ T8257] netlink: 'syz.3.695': attribute type 1 has an invalid length.
[  427.391534][ T8257] netlink: 'syz.3.695': attribute type 1 has an invalid length.
[  428.195824][ T8259] vivid-003: disconnect
[  428.949146][ T8253] vivid-003: reconnect
[  429.171928][ T8266] loop5: detected capacity change from 0 to 7
[  429.208686][ T8266] Dev loop5: unable to read RDB block 7
[  429.208832][ T8266]  loop5: AHDI p1
[  429.209094][ T8266] loop5: partition table partially beyond EOD, truncated
[  432.017581][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'.
[  432.320025][ T5989] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  432.620000][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  432.620037][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.620081][ T5989] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  432.620097][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.625229][ T5989] usb 5-1: config 0 descriptor??
[  432.649892][ T8295] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  433.090956][ T8309] vivid-000: disconnect
[  433.203318][ T8310] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  433.738976][ T8311] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  433.819977][ T5989] usbhid 5-1:0.0: can't add hid device: -71
[  433.820071][ T5989] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  433.860553][ T5989] usb 5-1: USB disconnect, device number 14
[  433.879166][ T8303] vivid-000: reconnect
[  434.225544][ T8320] loop5: detected capacity change from 0 to 7
[  435.062807][ T8320] Dev loop5: unable to read RDB block 7
[  435.062838][ T8320]  loop5: AHDI p1
[  435.062866][ T8320] loop5: partition table partially beyond EOD, truncated
[  437.809685][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'.
[  439.940004][ T8350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  440.189945][ T8356] loop5: detected capacity change from 0 to 7
[  440.255660][ T8356] Dev loop5: unable to read RDB block 7
[  440.255821][ T8356]  loop5: AHDI p1
[  440.256110][ T8356] loop5: partition table partially beyond EOD, truncated
[  441.268615][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  441.268682][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  443.612560][ T8368] vivid-003: disconnect
[  445.459282][ T8358] vivid-003: reconnect
[  448.693557][ T8397] 9p: Bad value for 'rfdno'
[  450.435558][   T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  450.460315][   T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  450.463982][   T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  450.481518][   T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  450.484136][   T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  451.922237][ T8414] loop5: detected capacity change from 0 to 7
[  451.925490][ T8414] Dev loop5: unable to read RDB block 7
[  451.925518][ T8414]  loop5: AHDI p1
[  451.925547][ T8414] loop5: partition table partially beyond EOD, truncated
[  452.375625][ T8422] vivid-002: disconnect
[  453.496485][ T6731] Bluetooth: hci5: command tx timeout
[  453.647682][ T8411] vivid-002: reconnect
[  454.549369][ T8431] random: crng reseeded on system resumption
[  457.016510][ T6731] Bluetooth: hci5: command tx timeout
[  457.362135][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[  458.034922][ T8456] 9p: Bad value for 'rfdno'
[  458.724372][ T8455] loop5: detected capacity change from 0 to 7
[  459.211413][   T60] Bluetooth: hci5: command tx timeout
[  459.240093][ T8455] Dev loop5: unable to read RDB block 7
[  459.240119][ T8455]  loop5: AHDI p1
[  459.240148][ T8455] loop5: partition table partially beyond EOD, truncated
[  461.041211][ T8472] vivid-002: disconnect
[  461.118995][ T8467] vivid-002: reconnect
[  461.226459][   T60] Bluetooth: hci5: command tx timeout
[  461.413899][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'.
[  461.466832][   T38] audit: type=1326 audit(1775709416.291:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8471 comm="syz.0.756" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  461.720110][ T8483] random: crng reseeded on system resumption
[  462.852899][ T8490] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  463.419133][ T8494] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  466.028465][ T8505] 9p: Bad value for 'rfdno'
[  466.190511][ T8408] chnl_net:caif_netlink_parms(): no params data found
[  467.939168][ T8516] vivid-001: disconnect
[  467.984148][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'.
[  468.080642][   T38] audit: type=1326 audit(1775709422.851:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8513 comm="syz.0.768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  468.176087][ T8511] vivid-001: reconnect
[  468.190774][ T1431] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  468.190810][ T1431] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.298474][ T8520] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  468.488092][ T8524] random: crng reseeded on system resumption
[  470.808246][ T1431] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.808286][ T1431] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.169952][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.170180][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.170386][ T8408] bridge_slave_0: entered allmulticast mode
[  473.173199][ T8408] bridge_slave_0: entered promiscuous mode
[  473.236543][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.236672][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.236910][ T8408] bridge_slave_1: entered allmulticast mode
[  473.256781][ T8408] bridge_slave_1: entered promiscuous mode
[  473.720939][ T8560] 9p: Bad value for 'rfdno'
[  474.078978][ T8563] vivid-001: disconnect
[  474.832063][ T8555] vivid-001: reconnect
[  475.314522][ T1431] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.314561][ T1431] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.474942][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.491213][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.802111][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'.
[  475.873350][   T38] audit: type=1326 audit(1775709430.701:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8565 comm="syz.3.781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd165ac819 code=0x0
[  475.914089][ T1431] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.914128][ T1431] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.161584][ T8574] random: crng reseeded on system resumption
[  476.974630][ T8573] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  477.085909][ T8408] team0: Port device team_slave_0 added
[  477.107619][ T8408] team0: Port device team_slave_1 added
[  477.417282][ T8591] netlink: 'syz.1.787': attribute type 10 has an invalid length.
[  477.507396][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.507413][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.507441][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.530707][ T8591] loop5: detected capacity change from 0 to 7
[  478.230840][ T8591] Dev loop5: unable to read RDB block 7
[  478.230872][ T8591]  loop5: AHDI p1
[  478.230900][ T8591] loop5: partition table partially beyond EOD, truncated
[  478.316001][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.316020][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.316048][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.680181][ T8598] vivid-002: disconnect
[  478.757378][ T8596] vivid-002: reconnect
[  480.362832][ T8609] 9p: Bad value for 'rfdno'
[  481.757124][ T8408] hsr_slave_0: entered promiscuous mode
[  481.764000][ T8408] hsr_slave_1: entered promiscuous mode
[  481.765225][ T8408] debugfs: 'hsr0' already exists in 'hsr'
[  481.765251][ T8408] Cannot create hsr debugfs directory
[  481.795247][ T1431] bridge_slave_1: left allmulticast mode
[  481.795843][ T1431] bridge_slave_1: left promiscuous mode
[  481.805363][ T1431] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.093215][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'.
[  482.107585][ T1431] bridge_slave_0: left allmulticast mode
[  482.107615][ T1431] bridge_slave_0: left promiscuous mode
[  482.109751][ T1431] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.213431][   T38] audit: type=1326 audit(1775709436.961:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8612 comm="syz.3.794" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd165ac819 code=0x0
[  483.027754][ T8630] random: crng reseeded on system resumption
[  484.348209][ T8641] vivid-000: disconnect
[  484.381598][ T8636] vivid-000: reconnect
[  486.084720][ T1431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.239075][ T8652] 9p: Bad value for 'rfdno'
[  487.073610][ T1431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.398975][ T1431] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  487.453585][ T1431] bond0 (unregistering): Released all slaves
[  491.047094][ T8675] vivid-001: disconnect
[  491.065049][ T8677] random: crng reseeded on system resumption
[  491.269628][ T8670] vivid-001: reconnect
[  493.560994][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'.
[  493.571987][   T38] audit: type=1326 audit(1775709448.391:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8684 comm="syz.0.816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  498.788209][ T8731] vivid-001: disconnect
[  498.832664][ T8725] vivid-001: reconnect
[  499.063596][ T8735] random: crng reseeded on system resumption
[  500.512492][ T5969] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  500.716329][ T5969] usb 4-1: Using ep0 maxpacket: 8
[  500.766998][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  500.767036][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  500.767058][ T5969] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  500.767082][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  500.767108][ T5969] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  500.767152][ T5969] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  500.767184][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.775496][ T5969] usb 4-1: config 0 descriptor??
[  500.776955][ T8742] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  500.957271][ T1431] hsr_slave_0: left promiscuous mode
[  500.978586][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  501.017933][ T1431] hsr_slave_1: left promiscuous mode
[  501.034839][ T1431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.061432][ T1431] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.141206][ T1431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.141247][ T1431] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.197217][   T60] Bluetooth: hci0: Opcode 0x0c03 failed: -71
[  501.201566][ T5969] usb 4-1: USB disconnect, device number 8
[  501.430574][ T1431] veth1_macvtap: left promiscuous mode
[  501.430734][ T1431] veth0_macvtap: left promiscuous mode
[  501.435384][ T1431] veth1_vlan: left promiscuous mode
[  501.435794][ T1431] veth0_vlan: left promiscuous mode
[  501.630011][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  501.630063][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  502.225835][ T8761] netlink: 'syz.0.834': attribute type 10 has an invalid length.
[  502.287725][ T8762] loop5: detected capacity change from 0 to 7
[  502.320110][ T8762] Dev loop5: unable to read RDB block 7
[  502.320154][ T8762]  loop5: AHDI p1
[  502.320452][ T8762] loop5: partition table partially beyond EOD, truncated
[  503.234517][ T8763] 9p: Bad value for 'rfdno'
[  503.707020][ T1431] team0 (unregistering): Port device team_slave_1 removed
[  503.760863][ T1431] team0 (unregistering): Port device team_slave_0 removed
[  505.412898][ T8408] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  505.459299][ T8408] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  505.522482][ T8408] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  505.778332][ T8408] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  515.377066][ T8806] netlink: 'syz.4.844': attribute type 10 has an invalid length.
[  515.413961][ T8806] loop5: detected capacity change from 0 to 7
[  515.438114][ T8806] Dev loop5: unable to read RDB block 7
[  515.438261][ T8806]  loop5: AHDI p1
[  515.438532][ T8806] loop5: partition table partially beyond EOD, truncated
[  516.282906][ T6731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  516.304980][ T6731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  516.316507][ T6731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  516.345643][ T6731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  516.353763][ T6731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  517.236508][  T811] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  517.352283][ T8833] vivid-003: disconnect
[  517.396377][  T811] usb 4-1: Using ep0 maxpacket: 8
[  517.398684][  T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  517.398710][  T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  517.398726][  T811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  517.398742][  T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  517.398761][  T811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  517.398788][  T811] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  517.398805][  T811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.493058][  T811] usb 4-1: config 0 descriptor??
[  517.516644][ T8826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  517.530229][ T8829] vivid-003: reconnect
[  517.737399][    C1] Bluetooth: hci6: Unexpected continuation: 1 bytes
[  517.898528][ T8839] random: crng reseeded on system resumption
[  518.557351][ T5969] usb 4-1: USB disconnect, device number 9
[  518.574462][ T6731] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  518.597980][   T60] Bluetooth: hci0: command tx timeout
[  520.677033][ T8842] Bluetooth: hci0: command tx timeout
[  522.605722][ T8883] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  522.756641][ T8842] Bluetooth: hci0: command tx timeout
[  524.827031][ T8842] Bluetooth: hci0: command tx timeout
[  524.956976][ T8802] chnl_net:caif_netlink_parms(): no params data found
[  525.247787][ T8899] vivid-002: disconnect
[  525.311372][ T8893] vivid-002: reconnect
[  525.539260][ T8902] random: crng reseeded on system resumption
[  529.363945][ T8931] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  530.286380][ T5811] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  530.448929][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  530.448967][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.449006][ T5811] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  530.449030][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.494583][ T5811] usb 4-1: config 0 descriptor??
[  530.637604][ T8957] 9p: Bad value for 'rfdno'
[  531.243092][ T8963] netlink: 'syz.1.873': attribute type 10 has an invalid length.
[  531.357639][ T8963] loop5: detected capacity change from 0 to 7
[  531.545352][ T8963] Dev loop5: unable to read RDB block 7
[  531.545394][ T8963]  loop5: AHDI p1
[  531.545597][ T8963] loop5: partition table partially beyond EOD, truncated
[  532.103197][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.104775][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.105027][ T8802] bridge_slave_0: entered allmulticast mode
[  532.139989][ T8802] bridge_slave_0: entered promiscuous mode
[  532.227122][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.227269][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.227607][ T8802] bridge_slave_1: entered allmulticast mode
[  532.230838][ T8802] bridge_slave_1: entered promiscuous mode
[  532.404047][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  532.427273][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.350913][ T8802] team0: Port device team_slave_0 added
[  533.395971][ T8802] team0: Port device team_slave_1 added
[  533.862198][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.862218][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.862246][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  533.897459][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.897489][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.897518][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.372847][ T8802] hsr_slave_0: entered promiscuous mode
[  535.374246][ T8802] hsr_slave_1: entered promiscuous mode
[  535.386504][ T5811] usbhid 4-1:0.0: can't add hid device: -71
[  535.386910][ T5811] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  535.480547][ T5811] usb 4-1: USB disconnect, device number 10
[  535.519941][ T8982] random: crng reseeded on system resumption
[  537.051186][ T1431] bridge_slave_1: left allmulticast mode
[  537.051209][ T1431] bridge_slave_1: left promiscuous mode
[  537.051418][ T1431] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.172815][ T1431] bridge_slave_0: left allmulticast mode
[  537.172846][ T1431] bridge_slave_0: left promiscuous mode
[  537.208976][ T1431] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.517851][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'.
[  539.571392][   T38] audit: type=1326 audit(1775709494.391:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.0.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  539.717423][ T1431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.777156][ T1431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  539.822146][ T1431] bond0 (unregistering): Released all slaves
[  541.230014][ T1431] hsr_slave_0: left promiscuous mode
[  541.273164][ T1431] hsr_slave_1: left promiscuous mode
[  541.275548][ T1431] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.330589][ T1431] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.748992][ T9030] 9p: Bad value for 'rfdno'
[  542.419637][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'.
[  542.547432][ T1431] team0 (unregistering): Port device team_slave_1 removed
[  542.594343][   T38] audit: type=1326 audit(1775709497.401:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9031 comm="syz.3.887" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd165ac819 code=0x0
[  542.679512][ T1431] team0 (unregistering): Port device team_slave_0 removed
[  542.986030][ T9042] random: crng reseeded on system resumption
[  545.353775][ T9050] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  547.708184][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'.
[  547.760413][   T38] audit: type=1326 audit(1775709502.581:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9067 comm="syz.1.894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c7513c819 code=0x0
[  549.950142][ T9090] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  550.400945][ T9101] random: crng reseeded on system resumption
[  551.529450][ T8802] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  553.009819][ T8802] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  553.437903][ T8802] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  553.489782][ T8802] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  553.539791][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'.
[  553.546128][   T38] audit: type=1326 audit(1775709508.361:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9115 comm="syz.0.904" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  556.173432][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.313709][ T8802] 8021q: adding VLAN 0 to HW filter on device team0
[  556.367322][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.367470][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.431177][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.434071][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.550039][ T9157] random: crng reseeded on system resumption
[  556.919406][ T9164] random: crng reseeded on system resumption
[  559.177723][ T9176] 9p: Bad value for 'rfdno'
[  559.754151][ T8802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.149292][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  563.149367][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  563.446738][ T8802] veth0_vlan: entered promiscuous mode
[  563.635918][ T8802] veth1_vlan: entered promiscuous mode
[  563.648674][ T9222] random: crng reseeded on system resumption
[  564.869584][ T8802] veth0_macvtap: entered promiscuous mode
[  564.928893][ T8802] veth1_macvtap: entered promiscuous mode
[  565.653610][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.703244][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.952722][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.953375][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.955831][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.140025][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.352315][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'.
[  566.385281][   T38] audit: type=1326 audit(1775709521.201:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.4.928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34846ac819 code=0x0
[  568.371224][ T9259] 9p: Bad value for 'rfdno'
[  569.389362][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.389378][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.885415][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.885438][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  571.735305][ T9287] random: crng reseeded on system resumption
[  573.054688][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'.
[  573.054712][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.940'.
[  574.127340][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  574.130297][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  574.131402][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  574.132552][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  574.165937][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  574.451457][ T9320] vivid-000: disconnect
[  575.608800][ T9314] vivid-000: reconnect
[  575.723059][ T9319] dummy0: entered promiscuous mode
[  575.724694][ T9319] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  575.727057][ T9319] hsr1: entered allmulticast mode
[  575.727072][ T9319] dummy0: entered allmulticast mode
[  575.727089][ T9319] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  576.276415][ T8842] Bluetooth: hci5: command tx timeout
[  579.080925][ T8842] Bluetooth: hci5: command tx timeout
[  579.087092][ T9335] random: crng reseeded on system resumption
[  579.643282][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'.
[  579.983262][   T38] audit: type=1326 audit(1775709534.651:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.4.948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34846ac819 code=0x0
[  581.187178][ T8842] Bluetooth: hci5: command tx timeout
[  582.294752][  T607] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.457150][ T9309] chnl_net:caif_netlink_parms(): no params data found
[  582.823590][ T9378] vivid-001: disconnect
[  583.238237][ T8842] Bluetooth: hci5: command tx timeout
[  583.707452][ T9372] vivid-001: reconnect
[  584.320150][  T607] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.131775][ T9400] random: crng reseeded on system resumption
[  587.330919][  T607] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.903261][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'.
[  587.974606][   T38] audit: type=1326 audit(1775709542.781:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.0.960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  588.769874][  T607] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.127227][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.127316][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.127506][ T9309] bridge_slave_0: entered allmulticast mode
[  589.129915][ T9309] bridge_slave_0: entered promiscuous mode
[  589.132577][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.132778][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.132927][ T9309] bridge_slave_1: entered allmulticast mode
[  589.135107][ T9309] bridge_slave_1: entered promiscuous mode
[  589.448113][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.463178][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.683823][ T9309] team0: Port device team_slave_0 added
[  589.792817][ T9309] team0: Port device team_slave_1 added
[  590.171226][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.171240][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  590.171261][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.038680][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  592.112171][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.113047][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.113176][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.270742][ T9448] veth3: entered allmulticast mode
[  592.633243][ T9452] random: crng reseeded on system resumption
[  592.830562][  T607] bridge_slave_1: left allmulticast mode
[  592.830592][  T607] bridge_slave_1: left promiscuous mode
[  592.830827][  T607] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.991375][  T607] bridge_slave_0: left allmulticast mode
[  592.991398][  T607] bridge_slave_0: left promiscuous mode
[  592.991577][  T607] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.646398][ T5811] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  593.806995][ T5811] usb 1-1: Using ep0 maxpacket: 8
[  593.822296][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  593.822323][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  593.822339][ T5811] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  593.822356][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  593.822375][ T5811] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  593.822406][ T5811] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  593.822422][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.840673][ T5811] usb 1-1: config 0 descriptor??
[  593.887967][ T9455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  594.951996][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'.
[  595.011380][   T38] audit: type=1326 audit(1775709549.831:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.1.973" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c7513c819 code=0x0
[  596.026394][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  596.256932][  T607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  596.453131][  T607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  596.549011][  T607] bond0 (unregistering): Released all slaves
[  596.957893][ T9309] hsr_slave_0: entered promiscuous mode
[  596.996817][ T9309] hsr_slave_1: entered promiscuous mode
[  596.997853][ T9309] debugfs: 'hsr0' already exists in 'hsr'
[  596.997879][ T9309] Cannot create hsr debugfs directory
[  597.239422][ T9490] random: crng reseeded on system resumption
[  597.941017][ T9491] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  597.981999][   T37] usb 1-1: USB disconnect, device number 10
[  600.820463][ T9518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  603.116802][ T9530] random: crng reseeded on system resumption
[  603.889102][ T9535] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  604.588575][  T607] hsr_slave_0: left promiscuous mode
[  604.679979][ T9544] 9p: Bad value for 'rfdno'
[  604.710368][  T607] hsr_slave_1: left promiscuous mode
[  604.711194][  T607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  604.711214][  T607] batman_adv: batadv0: Removing interface: batadv_slave_0
[  604.770203][  T607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  604.770225][  T607] batman_adv: batadv0: Removing interface: batadv_slave_1
[  605.166636][  T607] veth1_macvtap: left promiscuous mode
[  605.166758][  T607] veth0_macvtap: left promiscuous mode
[  605.167352][  T607] veth1_vlan: left promiscuous mode
[  605.167558][  T607] veth0_vlan: left promiscuous mode
[  608.590255][ T9570] random: crng reseeded on system resumption
[  608.935229][ T9574] random: crng reseeded on system resumption
[  610.158543][ T9580] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  610.165423][ T9583] 9p: Bad value for 'rfdno'
[  610.929296][  T607] team0 (unregistering): Port device team_slave_1 removed
[  610.998770][  T607] team0 (unregistering): Port device team_slave_0 removed
[  612.104597][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1007'.
[  612.872594][ T9598] random: crng reseeded on system resumption
[  613.114778][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'.
[  613.452323][ T9608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  613.947176][ T9611] random: crng reseeded on system resumption
[  614.322947][ T9614] netlink: 'syz.4.1014': attribute type 2 has an invalid length.
[  614.323020][ T9614] netlink: 'syz.4.1014': attribute type 1 has an invalid length.
[  614.323058][ T9614] netlink: 'syz.4.1014': attribute type 1 has an invalid length.
[  615.046117][ T9601] veth3: entered allmulticast mode
[  615.886041][ T9617] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  619.535872][ T9309] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  619.667284][ T9309] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  619.867790][ T9309] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  619.909490][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'.
[  620.592779][ T9665] random: crng reseeded on system resumption
[  622.362165][ T9662] veth3: entered allmulticast mode
[  622.848809][ T9675] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  622.979522][ T9678] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  623.496059][ T9309] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  624.513337][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  624.513418][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  624.572359][ T9309] 8021q: adding VLAN 0 to HW filter on device bond0
[  624.702499][ T9309] 8021q: adding VLAN 0 to HW filter on device team0
[  624.751435][  T607] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.755487][  T607] bridge0: port 1(bridge_slave_0) entered forwarding state
[  624.824465][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.824559][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  625.996782][ T9720] random: crng reseeded on system resumption
[  626.311208][ T9309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.276358][ T9744] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  631.272419][ T9309] veth0_vlan: entered promiscuous mode
[  631.322458][ T9309] veth1_vlan: entered promiscuous mode
[  634.084790][ T9775] random: crng reseeded on system resumption
[  634.106417][   T37] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  634.276372][   T37] usb 5-1: Using ep0 maxpacket: 8
[  634.279112][   T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  634.279148][   T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  634.279173][   T37] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  634.279199][   T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  634.279226][   T37] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  634.279269][   T37] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  634.279294][   T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.443148][   T37] usb 5-1: config 0 descriptor??
[  634.458195][ T9764] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  636.173570][ T6731] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  636.196744][ T6731] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  636.201243][ T6731] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  636.203734][ T6731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  636.229464][ T6731] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  636.511009][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -71
[  636.554587][   T37] usb 5-1: USB disconnect, device number 15
[  638.442878][ T8842] Bluetooth: hci6: command tx timeout
[  639.271162][ T9796] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  640.896356][ T8842] Bluetooth: hci6: command tx timeout
[  642.694139][ T9824] random: crng reseeded on system resumption
[  642.906364][ T8842] Bluetooth: hci6: command tx timeout
[  643.696833][   T37] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  644.427317][   T37] usb 1-1: Using ep0 maxpacket: 8
[  644.433025][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  644.433063][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  644.433086][   T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  644.433109][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  644.433135][   T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  644.433176][   T37] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  644.433196][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.617293][   T37] usb 1-1: config 0 descriptor??
[  644.618411][ T9827] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  645.126305][ T8842] Bluetooth: hci6: command tx timeout
[  645.292541][ T9840] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  647.386479][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  647.807680][ T9853] random: crng reseeded on system resumption
[  648.328822][ T9783] chnl_net:caif_netlink_parms(): no params data found
[  648.476940][  T811] usb 1-1: USB disconnect, device number 11
[  651.846336][  T811] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  652.010881][  T811] usb 4-1: Using ep0 maxpacket: 8
[  652.017736][  T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  652.017835][  T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  652.017923][  T811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  652.018010][  T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  652.018094][  T811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  652.018237][  T811] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  652.018305][  T811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.111399][  T811] usb 4-1: config 0 descriptor??
[  652.121390][ T9875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  652.411581][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -71
[  652.414709][   T37] usb 4-1: USB disconnect, device number 11
[  652.826558][ T9783] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.826691][ T9783] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.826915][ T9783] bridge_slave_0: entered allmulticast mode
[  652.828650][ T9783] bridge_slave_0: entered promiscuous mode
[  652.986479][ T9783] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.986605][ T9783] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.986817][ T9783] bridge_slave_1: entered allmulticast mode
[  652.990833][ T9783] bridge_slave_1: entered promiscuous mode
[  653.293754][ T9783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.369007][ T9783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  653.639302][ T9783] team0: Port device team_slave_0 added
[  653.769210][ T9783] team0: Port device team_slave_1 added
[  653.898526][ T9238] bridge_slave_1: left allmulticast mode
[  653.898550][ T9238] bridge_slave_1: left promiscuous mode
[  653.898723][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.066716][ T9238] bridge_slave_0: left allmulticast mode
[  654.067453][ T9238] bridge_slave_0: left promiscuous mode
[  654.073784][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.172497][ T9900] random: crng reseeded on system resumption
[  657.942149][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'.
[  658.296308][   T37] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  658.456320][   T37] usb 1-1: Using ep0 maxpacket: 8
[  658.475003][ T9238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  658.485456][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  658.485493][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  658.485515][   T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  658.485543][   T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  658.485563][   T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  658.485592][   T37] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  658.485609][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.590136][   T37] usb 1-1: config 0 descriptor??
[  658.602064][ T9918] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  658.717992][ T9238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  658.784928][ T9238] bond0 (unregistering): Released all slaves
[  658.845032][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  659.097657][ T9783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.097678][ T9783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.097709][ T9783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.202150][ T9783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.202164][ T9783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.202185][ T9783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.566905][ T9238] hsr_slave_0: left promiscuous mode
[  659.607707][ T9238] hsr_slave_1: left promiscuous mode
[  659.627691][ T9238] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.670992][ T9238] batman_adv: batadv0: Removing interface: batadv_slave_1
[  659.757613][ T9238] veth1_vlan: left promiscuous mode
[  659.762813][ T9238] veth0_vlan: left promiscuous mode
[  660.401944][ T9936] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  660.761462][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  661.027360][   T37] usb 1-1: USB disconnect, device number 12
[  663.098994][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'.
[  663.489704][ T9238] team0 (unregistering): Port device team_slave_1 removed
[  663.570681][ T9238] team0 (unregistering): Port device team_slave_0 removed
[  664.093189][ T9783] hsr_slave_0: entered promiscuous mode
[  664.116867][ T9783] hsr_slave_1: entered promiscuous mode
[  665.896348][ T5811] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  666.156605][ T5811] usb 4-1: Using ep0 maxpacket: 8
[  666.666287][ T5811] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  666.666353][ T5811] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  666.666377][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  666.666402][ T5811] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  666.666427][ T5811] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  666.666475][ T5811] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  666.666492][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.022488][ T5811] usb 4-1: usb_control_msg returned -32
[  667.022540][ T5811] usbtmc 4-1:16.0: can't read capabilities
[  667.600509][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'.
[  668.948260][   T31] usb 4-1: USB disconnect, device number 12
[  670.186325][   T37] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  670.447087][   T37] usb 2-1: Using ep0 maxpacket: 8
[  670.906930][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  670.906968][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  670.906992][   T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  670.907018][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  670.907046][   T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  670.907088][   T37] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  670.907112][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.912651][   T37] usb 2-1: config 0 descriptor??
[  670.913728][T10020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  671.120584][    C0] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  673.168474][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  674.138542][ T9783] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  674.163678][  T811] usb 2-1: USB disconnect, device number 11
[  675.227717][ T9783] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  675.313866][ T9783] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  675.410887][ T9783] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  676.360934][ T9783] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.610431][ T9783] 8021q: adding VLAN 0 to HW filter on device team0
[  676.734977][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.740098][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.805033][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.805141][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  676.974923][ T9783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  676.974943][ T9783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  678.384617][ T9783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.674939][ T9783] veth0_vlan: entered promiscuous mode
[  680.716426][   T37] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  680.922493][ T9783] veth1_vlan: entered promiscuous mode
[  680.939548][   T37] usb 5-1: Using ep0 maxpacket: 8
[  680.951609][   T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  680.951654][   T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  680.951676][   T37] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  680.951703][   T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  680.951731][   T37] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  680.951772][   T37] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  680.951797][   T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.952644][T10124] netlink: 'syz.1.1148': attribute type 2 has an invalid length.
[  680.952657][T10124] netlink: 'syz.1.1148': attribute type 1 has an invalid length.
[  680.952667][T10124] netlink: 'syz.1.1148': attribute type 1 has an invalid length.
[  680.993482][   T37] usb 5-1: config 0 descriptor??
[  681.019765][T10116] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  681.219015][ T9783] veth0_macvtap: entered promiscuous mode
[  681.250201][ T9783] veth1_macvtap: entered promiscuous mode
[  681.273227][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  681.385696][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  681.456795][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  681.661624][ T4289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.675860][ T4289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.693370][  T451] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.693816][  T451] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  683.458386][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  683.850149][ T5811] usb 5-1: USB disconnect, device number 16
[  685.115237][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.115261][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.743034][T10148] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1155'.
[  685.821016][  T451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.821039][  T451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.961269][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  685.961321][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  686.388967][T10155] netlink: 'syz.0.1158': attribute type 2 has an invalid length.
[  686.388990][T10155] netlink: 'syz.0.1158': attribute type 1 has an invalid length.
[  686.389004][T10155] netlink: 'syz.0.1158': attribute type 1 has an invalid length.
[  687.287876][T10162] netlink: 'syz.1.1159': attribute type 2 has an invalid length.
[  687.287898][T10162] netlink: 'syz.1.1159': attribute type 1 has an invalid length.
[  687.287912][T10162] netlink: 'syz.1.1159': attribute type 1 has an invalid length.
[  688.010341][T10174] netlink: 'syz.1.1163': attribute type 10 has an invalid length.
[  688.012583][T10174] loop5: detected capacity change from 0 to 7
[  688.014001][T10174] Dev loop5: unable to read RDB block 7
[  688.014039][T10174]  loop5: AHDI p1
[  688.014067][T10174] loop5: partition table partially beyond EOD, truncated
[  688.719450][ T5165] Dev loop5: unable to read RDB block 7
[  688.719473][ T5165]  loop5: AHDI p1
[  688.719497][ T5165] loop5: partition table partially beyond EOD, truncated
[  690.335732][T10193] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.1168'.
[  690.346657][ T5969] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  690.506574][ T5969] usb 4-1: Using ep0 maxpacket: 8
[  690.930105][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  690.930149][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  690.930165][ T5969] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  690.930182][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  690.930200][ T5969] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  690.930230][ T5969] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  690.930247][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.980106][ T5969] usb 4-1: config 0 descriptor??
[  691.000107][T10186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  691.220183][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  691.928578][T10215] netlink: 'syz.5.1173': attribute type 2 has an invalid length.
[  691.928630][T10215] netlink: 'syz.5.1173': attribute type 1 has an invalid length.
[  692.032320][T10217] netlink: 'syz.1.1175': attribute type 10 has an invalid length.
[  692.065334][T10217] loop5: detected capacity change from 0 to 7
[  692.550748][T10217] Dev loop5: unable to read RDB block 7
[  692.550783][T10217]  loop5: AHDI p1
[  692.550819][T10217] loop5: partition table partially beyond EOD, truncated
[  693.156267][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  695.016461][   T31] usb 4-1: USB disconnect, device number 13
[  698.086110][T10237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  698.936314][ T5811] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  699.200809][T10261] netlink: 'syz.4.1188': attribute type 2 has an invalid length.
[  699.200884][T10261] netlink: 'syz.4.1188': attribute type 1 has an invalid length.
[  700.690294][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  700.690321][ T5811] usb 1-1: config 0 has no interfaces?
[  700.690357][ T5811] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  700.690380][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.694548][ T5811] usb 1-1: config 0 descriptor??
[  700.934086][ T5811] usb 1-1: USB disconnect, device number 13
[  702.151244][ T5880] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  702.296458][ T5880] usb 5-1: Using ep0 maxpacket: 8
[  702.298840][ T5880] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  702.298898][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  702.298924][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  702.298949][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  702.298974][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  702.299020][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  702.299037][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.616335][ T5880] usb 5-1: usb_control_msg returned -32
[  702.616386][ T5880] usbtmc 5-1:16.0: can't read capabilities
[  702.646456][   T37] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  702.668119][ T5880] usb 5-1: USB disconnect, device number 17
[  702.798606][   T37] usb 2-1: Using ep0 maxpacket: 8
[  702.801500][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  702.801538][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  702.801561][   T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  702.801586][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  702.801614][   T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  702.801654][   T37] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  702.801678][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.898469][   T37] usb 2-1: config 0 descriptor??
[  702.905279][T10283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  705.626400][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  706.126670][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'.
[  706.126706][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'.
[  706.870433][ T5811] usb 2-1: USB disconnect, device number 12
[  707.617152][T10323] netlink: 'syz.3.1208': attribute type 10 has an invalid length.
[  707.670402][T10324] loop5: detected capacity change from 0 to 7
[  707.902142][T10324] Dev loop5: unable to read RDB block 7
[  707.902186][T10324]  loop5: AHDI p1
[  707.902236][T10324] loop5: partition table partially beyond EOD, truncated
[  708.597739][   T37] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  708.793927][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'.
[  708.973229][   T38] audit: type=1326 audit(1775709663.621:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10330 comm="syz.4.1210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34846ac819 code=0x0
[  709.717679][   T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  709.717709][   T37] usb 1-1: config 0 has no interfaces?
[  709.717741][   T37] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  709.717765][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.795550][   T37] usb 1-1: config 0 descriptor??
[  709.816353][   T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  709.976259][   T31] usb 4-1: Using ep0 maxpacket: 8
[  709.980985][   T31] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  709.981048][   T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  709.981073][   T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  709.981099][   T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  709.981124][   T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  709.981168][   T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  709.981193][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.076486][ T5880] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  710.102611][ T5811] usb 1-1: USB disconnect, device number 14
[  710.233037][ T5880] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  710.233068][ T5880] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  710.236463][ T5880] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  710.236508][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.236530][ T5880] usb 5-1: Product: syz
[  710.236546][ T5880] usb 5-1: Manufacturer: syz
[  710.236570][ T5880] usb 5-1: SerialNumber: syz
[  710.313746][   T31] usb 4-1: usb_control_msg returned -32
[  710.313806][   T31] usbtmc 4-1:16.0: can't read capabilities
[  710.361091][   T31] usb 4-1: USB disconnect, device number 14
[  710.557663][T10347] Mount JFS Failure: -22
[  710.557683][T10347] jfs_mount failed w/return code = -22
[  712.329719][  T811] libceph: connect (1)[c::]:6789 error -101
[  712.330335][  T811] libceph: mon0 (1)[c::]:6789 connect error
[  712.383523][T10338] ceph: No mds server is up or the cluster is laggy
[  712.817756][T10357] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1217'.
[  712.839349][  T811] libceph: connect (1)[c::]:6789 error -101
[  712.848108][  T811] libceph: mon0 (1)[c::]:6789 connect error
[  713.895660][ T5880] usb 5-1: USB disconnect, device number 18
[  717.042017][T10372] nbd: must specify at least one socket
[  717.675683][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'.
[  718.163506][   T38] audit: type=1326 audit(1775709672.521:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.3.1222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd165ac819 code=0x0
[  719.146318][   T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  719.316294][   T31] usb 1-1: Using ep0 maxpacket: 8
[  719.318773][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  719.318809][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  719.318834][   T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  719.318861][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  719.318889][   T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  719.318931][   T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  719.318955][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.445981][   T31] usb 1-1: config 0 descriptor??
[  719.451904][T10384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  722.117069][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  722.202341][T10404] netlink: 'syz.1.1230': attribute type 10 has an invalid length.
[  722.204226][T10404] loop5: detected capacity change from 0 to 7
[  722.208134][T10404] Dev loop5: unable to read RDB block 7
[  722.208210][T10404]  loop5: AHDI p1
[  722.208295][T10404] loop5: partition table partially beyond EOD, truncated
[  724.072888][ T5880] usb 1-1: USB disconnect, device number 15
[  724.291549][T10411] nbd: must specify at least one socket
[  724.527502][T10415] input: syz0 as /devices/virtual/input/input5
[  724.945677][T10422] tmpfs: Unsupported parameter 'huge'
[  726.040183][T10433] netlink: 'syz.4.1241': attribute type 10 has an invalid length.
[  726.042496][T10433] loop5: detected capacity change from 0 to 7
[  726.043559][T10433] Dev loop5: unable to read RDB block 7
[  726.043586][T10433]  loop5: AHDI p1
[  726.043612][T10433] loop5: partition table partially beyond EOD, truncated
[  728.548320][ T5801] block nbd0: Receive control failed (result -32)
[  728.796314][   T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  729.209153][   T37] usb 6-1: Using ep0 maxpacket: 8
[  729.211931][   T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  729.211967][   T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  729.211990][   T37] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  729.212015][   T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  729.212042][   T37] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  729.212084][   T37] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  729.212108][   T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.363548][   T37] usb 6-1: config 0 descriptor??
[  729.376628][T10458] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  729.631189][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  731.466357][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  731.794072][   T37] usb 6-1: USB disconnect, device number 2
[  736.109542][T10523] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  739.856216][   T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  740.006274][   T31] usb 2-1: Using ep0 maxpacket: 8
[  740.010864][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  740.010903][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  740.010926][   T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  740.010958][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  740.010986][   T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  740.011026][   T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  740.011049][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.103818][   T31] usb 2-1: config 0 descriptor??
[  740.104940][T10540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  740.341300][    C0] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  742.175352][T10552] syz.3.1279 (10552) used greatest stack depth: 17600 bytes left
[  742.269786][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  742.506810][ T5969] usb 2-1: USB disconnect, device number 13
[  742.952960][T10558] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  744.640873][T10567] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  747.391742][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  747.391835][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  749.516316][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  749.666458][   T10] usb 2-1: Using ep0 maxpacket: 8
[  749.670804][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  749.670842][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  749.670866][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  749.670892][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  749.670919][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  749.670961][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  749.670986][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.759541][   T10] usb 2-1: config 0 descriptor??
[  749.761107][T10601] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  749.975939][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  750.463850][T10605] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  750.558838][ T6731] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  750.574236][ T6731] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  750.585629][ T6731] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  750.636011][ T6731] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  750.650855][ T6731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  751.866600][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  751.992071][T10618] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  752.647175][   T10] usb 2-1: USB disconnect, device number 14
[  752.666460][ T5801] Bluetooth: hci5: command tx timeout
[  753.312310][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'.
[  753.314527][   T38] audit: type=1326 audit(1775709708.131:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.3.1300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd165ac819 code=0x0
[  753.787903][T10624] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  754.836549][ T5801] Bluetooth: hci5: command tx timeout
[  754.884972][T10606] chnl_net:caif_netlink_parms(): no params data found
[  754.896268][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  755.046268][   T10] usb 2-1: Using ep0 maxpacket: 8
[  755.048417][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  755.048459][   T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  755.048499][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  755.048529][   T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  755.048547][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  755.048566][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  755.048586][   T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  755.048605][   T10] usb 2-1: config 168 interface 0 has no altsetting 0
[  755.183027][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  755.183069][   T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  755.183112][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  755.183142][   T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  755.183169][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  755.183196][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  755.183224][   T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  755.183252][   T10] usb 2-1: config 168 interface 0 has no altsetting 0
[  755.246284][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  755.246327][   T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  755.246367][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  755.246397][   T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  755.246424][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  755.246450][   T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  755.246476][   T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  755.246505][   T10] usb 2-1: config 168 interface 0 has no altsetting 0
[  755.389984][   T10] usb 2-1: string descriptor 0 read error: -22
[  755.390138][   T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  755.390163][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.449469][   T10] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  756.332800][   T10] usb 2-1: USB disconnect, device number 15
[  756.336059][T10648] usb 2-1: Couldn't submit interrupt_out_urb -19
[  756.502054][T10651] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  756.665574][T10606] bridge0: port 1(bridge_slave_0) entered blocking state
[  756.665716][T10606] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.665965][T10606] bridge_slave_0: entered allmulticast mode
[  756.672947][T10606] bridge_slave_0: entered promiscuous mode
[  756.712139][T10606] bridge0: port 2(bridge_slave_1) entered blocking state
[  756.741782][T10606] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.741995][T10606] bridge_slave_1: entered allmulticast mode
[  756.743943][T10606] bridge_slave_1: entered promiscuous mode
[  756.899445][T10606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  756.902950][T10606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  756.926250][ T5801] Bluetooth: hci5: command tx timeout
[  757.103405][T10606] team0: Port device team_slave_0 added
[  757.447293][T10606] team0: Port device team_slave_1 added
[  758.032312][T10661] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1309'.
[  758.055956][T10661] unsupported nlmsg_type 40
[  758.187165][T10662] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1309'.
[  758.582211][T10606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.582227][T10606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.582249][T10606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.602410][T10606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.602486][T10606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.602572][T10606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  759.103778][ T8842] Bluetooth: hci5: command tx timeout
[  759.256339][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  759.261114][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'.
[  759.265620][T10606] hsr_slave_0: entered promiscuous mode
[  759.267175][T10606] hsr_slave_1: entered promiscuous mode
[  759.268213][T10606] debugfs: 'hsr0' already exists in 'hsr'
[  759.268240][T10606] Cannot create hsr debugfs directory
[  759.269701][   T38] audit: type=1326 audit(1775709714.091:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.1.1310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c7513c819 code=0x0
[  759.406242][   T10] usb 1-1: Using ep0 maxpacket: 8
[  759.409795][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  759.409831][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  759.409854][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  759.409879][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  759.409907][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  759.409949][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  759.409974][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.511393][   T10] usb 1-1: config 0 descriptor??
[  759.512906][T10665] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  759.716838][ T6731] Bluetooth: hci6: command 0x0406 tx timeout
[  759.720498][    C0] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  761.626301][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  762.091684][   T10] usb 1-1: USB disconnect, device number 16
[  762.193598][T10606] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  762.391563][T10606] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  762.443137][T10606] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  762.543801][T10606] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  764.470438][T10606] 8021q: adding VLAN 0 to HW filter on device bond0
[  764.487937][T10693] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  764.721389][T10606] 8021q: adding VLAN 0 to HW filter on device team0
[  764.815586][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.815680][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.954156][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.954304][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  767.228333][T10606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  767.606352][ T5880] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  767.762643][ T5880] usb 1-1: Using ep0 maxpacket: 8
[  767.765071][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  767.765106][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  767.765130][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  767.765154][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  767.765182][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  767.765224][ T5880] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  767.765247][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.854499][ T5880] usb 1-1: config 0 descriptor??
[  767.861395][T10717] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  768.069818][    C0] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  768.669134][T10606] veth0_vlan: entered promiscuous mode
[  768.735332][T10606] veth1_vlan: entered promiscuous mode
[  769.195294][T10606] veth0_macvtap: entered promiscuous mode
[  769.323483][T10606] veth1_macvtap: entered promiscuous mode
[  769.660725][T10606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  769.700695][T10606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  769.825790][ T1431] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  769.849540][ T1431] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  769.866991][ T1431] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  769.868261][ T1431] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  770.026472][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  770.911140][   T31] usb 1-1: USB disconnect, device number 17
[  771.390316][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.390339][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  771.529360][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.529383][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  772.852188][T10746] random: crng reseeded on system resumption
[  776.629993][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.268015][ T5969] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  777.282189][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.426218][ T5969] usb 4-1: Using ep0 maxpacket: 8
[  777.428807][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  777.428844][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  777.428867][ T5969] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  777.428899][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  777.428926][ T5969] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  777.428974][ T5969] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  777.428998][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.434741][ T5969] usb 4-1: config 0 descriptor??
[  777.448330][T10765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  777.852956][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  777.921528][T10772] tmpfs: Unsupported parameter 'huge'
[  778.862644][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.910623][T10780] random: crng reseeded on system resumption
[  779.641787][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  780.242376][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.540904][ T5811] usb 4-1: USB disconnect, device number 15
[  782.135096][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'.
[  782.930414][   T12] bridge_slave_1: left allmulticast mode
[  782.930446][   T12] bridge_slave_1: left promiscuous mode
[  782.930711][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.126047][   T12] bridge_slave_0: left allmulticast mode
[  783.126079][   T12] bridge_slave_0: left promiscuous mode
[  783.143241][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.413188][T10845] random: crng reseeded on system resumption
[  787.956285][   T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  788.463929][T10859] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1356'.
[  789.024615][   T31] usb 1-1: Using ep0 maxpacket: 8
[  789.033792][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  789.033819][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  789.033834][   T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  789.033851][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  789.033870][   T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  789.033901][   T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  789.033918][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.162837][   T31] usb 1-1: config 0 descriptor??
[  789.163948][T10850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  789.181535][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  789.303059][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  789.344067][   T12] bond0 (unregistering): Released all slaves
[  789.366513][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  789.584868][T10861] nbd: socks must be embedded in a SOCK_ITEM attr
[  789.630358][T10861] block nbd1: shutting down sockets
[  791.366331][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  791.863023][   T31] usb 1-1: USB disconnect, device number 18
[  793.410727][T10885] random: crng reseeded on system resumption
[  793.531410][   T38] audit: type=1326 audit(1775709748.341:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10881 comm="syz.0.1364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  795.117138][T10906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1368'.
[  796.944761][   T12] hsr_slave_0: left promiscuous mode
[  797.019762][ T5811] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  797.500702][   T12] hsr_slave_1: left promiscuous mode
[  797.502048][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  797.502077][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  797.561700][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  797.561742][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  797.626222][ T5811] usb 4-1: Using ep0 maxpacket: 8
[  797.630991][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  797.631028][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  797.631054][ T5811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  797.631071][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  797.631171][ T5811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  797.631214][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  797.631238][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.745485][ T5811] usb 4-1: config 0 descriptor??
[  797.751794][T10919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  797.797657][   T12] veth1_macvtap: left promiscuous mode
[  797.797769][   T12] veth0_macvtap: left promiscuous mode
[  797.798029][   T12] veth1_vlan: left promiscuous mode
[  797.798210][   T12] veth0_vlan: left promiscuous mode
[  798.208390][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  798.323537][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'.
[  798.776239][   T38] audit: type=1326 audit(1775709753.201:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10930 comm="syz.0.1376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  799.330339][T10944] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  799.707135][   T12] team0 (unregistering): Port device team_slave_1 removed
[  799.757799][   T12] team0 (unregistering): Port device team_slave_0 removed
[  799.956262][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  801.374499][T10963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1381'.
[  802.159709][   T31] usb 4-1: USB disconnect, device number 16
[  803.336488][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  803.804948][   T10] usb 4-1: config 0 has an invalid interface number: 208 but max is 0
[  803.804971][   T10] usb 4-1: config 0 has no interface number 0
[  803.805004][   T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  803.805024][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.888018][   T10] usb 4-1: config 0 descriptor??
[  803.894100][   T10] cp210x 4-1:0.208: cp210x converter detected
[  804.100562][   T10] cp210x 4-1:0.208: failed to get vendor val 0x370b size 1: -32
[  804.100585][   T10] cp210x 4-1:0.208: querying part number failed
[  804.150179][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[  804.612792][T10990] tmpfs: Unsupported parameter 'huge'
[  806.312670][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'.
[  806.323503][   T38] audit: type=1326 audit(1775709761.131:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10995 comm="syz.0.1388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25c1b5c819 code=0x0
[  807.097738][  T810] usb 4-1: USB disconnect, device number 17
[  807.152613][  T810] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  807.153209][  T810] cp210x 4-1:0.208: device disconnected
[  808.546307][ T5811] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  808.697428][ T5811] usb 2-1: Using ep0 maxpacket: 8
[  808.707075][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  808.707111][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  808.707134][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  808.707158][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  808.707185][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  808.707227][ T5811] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  808.707250][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.780060][ T5811] usb 2-1: config 0 descriptor??
[  808.804588][T11023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  808.832048][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  808.832128][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  809.008833][    C0] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  809.338624][T11042] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  809.901370][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'.
[  809.960618][   T38] audit: type=1326 audit(1775709764.781:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.4.1401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34846ac819 code=0x0
[  811.066248][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  811.169307][ T5811] usb 2-1: USB disconnect, device number 16
[  812.935882][T11075] netlink: 'syz.0.1406': attribute type 2 has an invalid length.
[  812.935932][T11075] netlink: 'syz.0.1406': attribute type 1 has an invalid length.
[  812.935973][T11075] netlink: 'syz.0.1406': attribute type 1 has an invalid length.
[  817.200956][T11118] netlink: 'syz.0.1417': attribute type 2 has an invalid length.
[  817.201033][T11118] netlink: 'syz.0.1417': attribute type 1 has an invalid length.
[  817.201083][T11118] netlink: 'syz.0.1417': attribute type 1 has an invalid length.
[  818.897250][  T810] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  819.057944][  T810] usb 2-1: Using ep0 maxpacket: 8
[  819.060770][  T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  819.060806][  T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  819.060829][  T810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  819.060854][  T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  819.060889][  T810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  819.060931][  T810] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  819.060955][  T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.101619][  T810] usb 2-1: config 0 descriptor??
[  819.103080][T11124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  819.611478][T11140] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1423'.
[  820.298815][T11139] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1423'.
[  821.386461][   T10] usb 2-1: USB disconnect, device number 17
[  821.395921][ T8842] Bluetooth: hci0: Opcode 0x0c03 failed: -71
[  821.861798][T11151] random: crng reseeded on system resumption
[  823.934916][T11169] tipc: Started in network mode
[  823.935121][T11169] tipc: Node identity ac14140f, cluster identity 4711
[  823.965822][T11169] tipc: New replicast peer: 255.255.255.255
[  823.995086][T11169] tipc: Enabled bearer <udp:syz2>, priority 10
[  824.018324][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'.
[  825.055950][  T810] tipc: Node number set to 2886997007
[  825.602024][T11178] input: syz1 as /devices/virtual/input/input8
[  826.035667][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1434'.
[  826.117650][T11184] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1434'.
[  826.971134][T11193] random: crng reseeded on system resumption
[  827.256255][   T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  827.366336][  T810] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  827.406299][   T10] usb 1-1: Using ep0 maxpacket: 8
[  827.414165][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  827.414205][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  827.414237][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  827.414263][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  827.414297][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  827.414340][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  827.414364][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.543521][   T10] usb 1-1: config 0 descriptor??
[  827.545606][T11192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  827.594670][  T810] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  827.594702][  T810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.594722][  T810] usb 7-1: Product: syz
[  827.594736][  T810] usb 7-1: Manufacturer: syz
[  827.594751][  T810] usb 7-1: SerialNumber: syz
[  827.658331][  T810] usb 7-1: config 0 descriptor??
[  827.661876][  T810] hub 7-1:0.0: bad descriptor, ignoring hub
[  827.661915][  T810] hub 7-1:0.0: probe with driver hub failed with error -5
[  827.751101][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  827.875208][  T810] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  828.143087][  T810] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  828.143150][  T810] dib0700: firmware download failed at 7 with -22
[  828.252392][  T810] usb 7-1: USB disconnect, device number 2
[  829.742776][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  831.048382][   T37] usb 1-1: USB disconnect, device number 19
[  834.636376][T11237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1446'.
[  834.820079][T11238] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1446'.
[  835.077742][T11242] input: syz1 as /devices/virtual/input/input9
[  835.077778][T11242] input: failed to attach handler leds to device input9, error: -6
[  835.323625][T11249] random: crng reseeded on system resumption
[  837.511141][T11270] tmpfs: Unsupported parameter 'huge'
[  837.897566][ T5811] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  838.502293][ T5811] usb 4-1: Using ep0 maxpacket: 8
[  838.504728][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  838.504764][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  838.504788][ T5811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  838.504814][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  838.504842][ T5811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  838.504884][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  838.504908][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.091310][ T5811] usb 4-1: config 0 descriptor??
[  839.095037][T11272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  839.139375][T11285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1459'.
[  839.151705][T11285] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1459'.
[  839.310245][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  839.382927][T11289] input: syz1 as /devices/virtual/input/input10
[  839.382961][T11289] input: failed to attach handler leds to device input10, error: -6
[  840.469641][T11309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1465'.
[  841.316329][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  841.411528][  T811] usb 4-1: USB disconnect, device number 18
[  842.528699][T11328] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  842.850004][T11331] tmpfs: Unsupported parameter 'huge'
[  844.760247][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1474'.
[  845.088210][T11351] input: syz1 as /devices/virtual/input/input11
[  845.088248][T11351] input: failed to attach handler leds to device input11, error: -6
[  845.434652][T11353] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1477'.
[  847.234680][   T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  847.263035][T11372] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  847.416625][   T31] usb 5-1: Using ep0 maxpacket: 8
[  847.422006][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  847.422031][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  847.422047][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  847.422064][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  847.422083][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  847.422112][   T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  847.422129][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.436654][   T31] usb 5-1: config 0 descriptor??
[  847.518477][T11366] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  847.890993][    C1] Bluetooth: hci0: Unexpected continuation: 1 bytes
[  848.000145][T11380] tmpfs: Unsupported parameter 'huge'
[  849.706255][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  850.026404][   T37] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  850.121371][T11399] 9p: Bad value for 'rfdno'
[  851.072946][   T37] usb 7-1: Using ep0 maxpacket: 8
[  851.108529][   T37] usb 7-1: config 0 has an invalid interface number: 48 but max is 0
[  851.108563][   T37] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  851.108577][   T37] usb 7-1: config 0 has no interface number 0
[  851.108599][   T37] usb 7-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30
[  851.108625][   T37] usb 7-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55
[  851.108644][   T37] usb 7-1: config 0 interface 48 has no altsetting 0
[  851.108670][   T37] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  851.108686][   T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.211626][   T37] usb 7-1: config 0 descriptor??
[  851.575357][T11403] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  851.956830][   T37] usb 7-1: string descriptor 0 read error: -71
[  852.000452][   T37] usb 7-1: USB disconnect, device number 3
[  852.027681][  T811] usb 5-1: USB disconnect, device number 19
[  853.212937][T11431] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  853.251114][T11430] tmpfs: Unsupported parameter 'huge'
[  854.855629][T11436] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  857.452155][T11467] 9p: Bad value for 'rfdno'
[  858.808981][T11466] ufs: You didn't specify the type of your ufs filesystem
[  858.808981][T11466] 
[  858.808981][T11466] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  858.808981][T11466] 
[  858.808981][T11466] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  858.811382][T11466] ufs: ufstype=old is supported read-only
[  858.930547][T11466] ufs: ufs_fill_super(): bad magic number
[  858.986260][   T37] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  859.136216][   T37] usb 4-1: Using ep0 maxpacket: 8
[  859.138224][   T37] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  859.138244][   T37] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  859.138257][   T37] usb 4-1: config 0 has no interface number 0
[  859.138279][   T37] usb 4-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30
[  859.138307][   T37] usb 4-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55
[  859.138326][   T37] usb 4-1: config 0 interface 48 has no altsetting 0
[  859.138350][   T37] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  859.138367][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.847105][   T37] usb 4-1: config 0 descriptor??
[  860.186916][T11481] tmpfs: Unsupported parameter 'huge'
[  860.301300][   T37] usb 4-1: string descriptor 0 read error: -71
[  860.421162][   T37] usb 4-1: USB disconnect, device number 19
[  863.510077][T11510] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  864.936945][T11525] 9p: Bad value for 'rfdno'
[  868.325599][T11545] tmpfs: Unsupported parameter 'huge'
[  869.490979][T11548] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  871.151149][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  871.151223][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  871.768372][T11568] 9p: Bad value for 'rfdno'
[  873.029086][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1536'.
[  873.788507][T11579] tmpfs: Unsupported parameter 'huge'
[  874.806374][ T5801] Bluetooth: hci3: unexpected event for opcode 0x0c47
[  875.284799][T11592] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  877.503247][ T5801] Bluetooth: hci5: command 0x0406 tx timeout
[  877.580129][T11603] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  877.960098][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'.
[  877.961437][   T38] audit: type=1326 audit(1775709832.781:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11588 comm="syz.4.1543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34846ac819 code=0x0
[  879.282458][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1549'.
[  881.234068][T11625] tmpfs: Unsupported parameter 'huge'
[  882.966270][  T811] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  883.366214][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  883.422558][  T811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.422579][  T811] usb 1-1: config 0 has no interfaces?
[  883.422603][  T811] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  883.422621][  T811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.275227][  T811] usb 1-1: config 0 descriptor??
[  884.346366][   T10] usb 4-1: Using ep0 maxpacket: 8
[  884.348599][   T10] usb 4-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config
[  884.348639][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  884.348659][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  884.348763][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  884.348781][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.438084][   T10] usb 4-1: config 0 descriptor??
[  884.927026][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1560'.
[  885.968194][   T10] usb 4-1: USB disconnect, device number 20
[  887.309724][T11655] tmpfs: Unsupported parameter 'huge'
[  888.155234][T11658] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  889.311734][  T811] usb 1-1: can't set config #0, error -110
[  889.642887][T11669] tmpfs: Unsupported parameter 'huge'
[  890.639133][T11670] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  893.243621][   T10] usb 1-1: USB disconnect, device number 20
[  894.552207][T11692] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  894.970311][T11702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1576'.
[  897.857601][T11711] tmpfs: Unsupported parameter 'huge'
[  899.106828][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'.
[  899.292618][T11715] tmpfs: Unsupported parameter 'huge'
[  902.152553][T11743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1588'.
[  902.241911][   T37] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  902.526171][   T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  902.526200][   T37] usb 4-1: config 0 has no interfaces?
[  902.526236][   T37] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  902.526259][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.600123][   T37] usb 4-1: config 0 descriptor??
[  903.020036][   T37] usb 4-1: USB disconnect, device number 21
[  903.582888][T11747] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  906.449550][T11763] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  912.474190][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1600'.
[  914.633687][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1604'.
[  918.174911][T11817] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  918.836559][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  918.860763][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  918.904548][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  918.988005][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  918.990722][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  920.577509][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1615'.
[  921.459748][ T8842] Bluetooth: hci0: command tx timeout
[  923.466312][ T5801] Bluetooth: hci0: command tx timeout
[  923.599077][T11849] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  926.059966][ T5801] Bluetooth: hci0: command tx timeout
[  926.091792][T11866] tmpfs: Unsupported parameter 'huge'
[  926.279436][T11868] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  926.616434][T11820] chnl_net:caif_netlink_parms(): no params data found
[  927.406418][T11820] bridge0: port 1(bridge_slave_0) entered blocking state
[  927.406632][T11820] bridge0: port 1(bridge_slave_0) entered disabled state
[  927.406957][T11820] bridge_slave_0: entered allmulticast mode
[  927.411872][T11820] bridge_slave_0: entered promiscuous mode
[  927.454144][T11820] bridge0: port 2(bridge_slave_1) entered blocking state
[  927.454359][T11820] bridge0: port 2(bridge_slave_1) entered disabled state
[  927.454569][T11820] bridge_slave_1: entered allmulticast mode
[  927.478582][T11820] bridge_slave_1: entered promiscuous mode
[  927.551920][T11820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  927.568655][T11820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  927.749174][ T8842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  927.769591][ T8842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  927.789345][ T8842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  927.811450][ T8842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  927.823416][ T8842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  927.960111][T11820] team0: Port device team_slave_0 added
[  928.007436][T11820] team0: Port device team_slave_1 added
[  928.106905][ T5801] Bluetooth: hci0: command tx timeout
[  928.601298][T11893] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  929.006637][   T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  929.946404][ T5801] Bluetooth: hci4: command tx timeout
[  930.122319][T11820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.122337][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.122366][T11820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.174103][   T31] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  930.174139][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[  930.236475][   T31] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  930.236512][   T31] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  930.236535][   T31] usb 1-1: Product: syz
[  930.236552][   T31] usb 1-1: Manufacturer: syz
[  930.236568][   T31] usb 1-1: SerialNumber: syz
[  930.295262][   T31] usb 1-1: config 0 descriptor??
[  930.296373][T11897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  930.330383][T11820] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.330403][T11820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.330430][T11820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.385637][   T31] usb 1-1: selecting invalid altsetting 0
[  930.518502][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  930.520738][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  930.881910][ T5801] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  931.085665][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  931.112364][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  931.155015][   T31] usb 1-1: USB disconnect, device number 21
[  931.332638][T11805] udevd[11805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  932.037463][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[  932.037535][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[  932.156089][ T5801] Bluetooth: hci4: command tx timeout
[  933.778215][T11820] hsr_slave_0: entered promiscuous mode
[  933.779244][T11820] hsr_slave_1: entered promiscuous mode
[  934.008350][ T6407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.186311][ T5801] Bluetooth: hci4: command tx timeout
[  934.824442][ T6407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.388535][T11935] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  935.948689][ T6407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.273536][ T5801] Bluetooth: hci4: command tx timeout
[  936.577427][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  936.798318][   T10] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  936.798356][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  936.800806][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  936.800835][   T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  936.800850][   T10] usb 7-1: Product: syz
[  936.800860][   T10] usb 7-1: Manufacturer: syz
[  936.800871][   T10] usb 7-1: SerialNumber: syz
[  936.805881][   T10] usb 7-1: config 0 descriptor??
[  936.891326][T11948] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  936.930294][   T10] usb 7-1: selecting invalid altsetting 0
[  936.988202][ T6407] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[  936.990574][ T6407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.132662][T11948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  937.133228][T11948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  937.206518][T11948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  937.213442][T11948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  937.239201][   T10] usb 7-1: USB disconnect, device number 4
[  937.916589][T11961] Mount JFS Failure: -22
[  937.916608][T11961] jfs_mount failed w/return code = -22
[  938.869564][T11965] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  939.053038][T11883] chnl_net:caif_netlink_parms(): no params data found
[ 1047.056026][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1047.056053][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7735/1:b..l P11904/1:b..l
[ 1047.056109][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=44525, q=217 ncpus=2)
[ 1047.056136][    C0] task:udevd           state:R  running task     stack:24576 pid:11904 tgid:11904 ppid:5165   task_flags:0x400140 flags:0x00080000
[ 1047.056227][    C0] Call Trace:
[ 1047.056237][    C0]  <TASK>
[ 1047.056255][    C0]  __schedule+0x1553/0x5240
[ 1047.056488][    C0]  ? __pfx___schedule+0x10/0x10
[ 1047.056531][    C0]  preempt_schedule_irq+0x4d/0xa0
[ 1047.056580][    C0]  irqentry_exit+0x599/0x620
[ 1047.056629][    C0]  ? trace_irq_disable+0x3b/0x150
[ 1047.056716][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1047.056782][    C0] RIP: 0010:lock_release+0x2d7/0x3d0
[ 1047.056829][    C0] Code: c0 ae 10 00 00 00 00 eb b5 e8 15 cc 83 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 85 79 ae 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d d2 35 cd
[ 1047.056851][    C0] RSP: 0018:ffffc900058370c0 EFLAGS: 00000286
[ 1047.056871][    C0] RAX: 125d02d77b4d3700 RBX: 0000000000000202 RCX: 0000000000000046
[ 1047.056888][    C0] RDX: 0000000000000001 RSI: ffffffff8d7c2291 RDI: ffffffff8ba67a80
[ 1047.056905][    C0] RBP: ffff88801e7448e0 R08: ffffc900058375d0 R09: 0000000000000000
[ 1047.056921][    C0] R10: ffffc90005837218 R11: fffff52000b06e45 R12: 0000000000000001
[ 1047.056938][    C0] R13: 0000000000000001 R14: ffffffff8ddcb980 R15: ffff88801e743d00
[ 1047.056977][    C0]  ? unwind_next_frame+0xa5/0x23c0
[ 1047.057013][    C0]  unwind_next_frame+0x1aaa/0x23c0
[ 1047.057044][    C0]  ? unwind_next_frame+0xa5/0x23c0
[ 1047.057068][    C0]  ? kfree+0x1c1/0x6c0
[ 1047.057189][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1047.057235][    C0]  arch_stack_walk+0x11b/0x150
[ 1047.057267][    C0]  ? tomoyo_check_open_permission+0x32c/0x470
[ 1047.057363][    C0]  stack_trace_save+0xa9/0x100
[ 1047.057396][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1047.057433][    C0]  ? string+0x279/0x2b0
[ 1047.057517][    C0]  kasan_save_track+0x3e/0x80
[ 1047.057594][    C0]  ? kasan_save_track+0x3e/0x80
[ 1047.057627][    C0]  ? kasan_save_free_info+0x46/0x50
[ 1047.057672][    C0]  ? __kasan_slab_free+0x5c/0x80
[ 1047.057706][    C0]  ? kfree+0x1c1/0x6c0
[ 1047.057803][    C0]  kasan_save_free_info+0x46/0x50
[ 1047.057833][    C0]  __kasan_slab_free+0x5c/0x80
[ 1047.057871][    C0]  kfree+0x1c1/0x6c0
[ 1047.057903][    C0]  ? tomoyo_check_open_permission+0x32c/0x470
[ 1047.057927][    C0]  ? tomoyo_path_permission+0x2a4/0x380
[ 1047.057958][    C0]  tomoyo_check_open_permission+0x32c/0x470
[ 1047.057985][    C0]  ? tomoyo_check_open_permission+0x1d3/0x470
[ 1047.058010][    C0]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1047.058076][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1047.058118][    C0]  ? tomoyo_file_open+0x167/0x220
[ 1047.058196][    C0]  security_file_open+0xa9/0x240
[ 1047.058286][    C0]  do_dentry_open+0x4c0/0x13e0
[ 1047.058371][    C0]  ? vfs_open+0x31/0x350
[ 1047.058406][    C0]  vfs_open+0x3b/0x350
[ 1047.058432][    C0]  ? path_openat+0x2e2b/0x38a0
[ 1047.058514][    C0]  path_openat+0x2e43/0x38a0
[ 1047.058590][    C0]  ? __pfx_path_openat+0x10/0x10
[ 1047.058628][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1047.058654][    C0]  ? kmem_cache_alloc_noprof+0x33b/0x680
[ 1047.058700][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1047.058745][    C0]  do_file_open+0x23e/0x4a0
[ 1047.058788][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1047.058821][    C0]  ? __pfx_do_file_open+0x10/0x10
[ 1047.058855][    C0]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1047.058918][    C0]  ? alloc_fd+0x64e/0x6c0
[ 1047.059015][    C0]  do_sys_openat2+0x113/0x200
[ 1047.059049][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1047.059078][    C0]  ? __x64_sys_utimensat+0x15e/0x240
[ 1047.059160][    C0]  ? __pfx___x64_sys_utimensat+0x10/0x10
[ 1047.059207][    C0]  __x64_sys_openat+0x138/0x170
[ 1047.059243][    C0]  do_syscall_64+0x14d/0xf80
[ 1047.059293][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.059318][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1047.059348][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.059373][    C0] RIP: 0033:0x7f7d109e5c3a
[ 1047.059399][    C0] RSP: 002b:00007ffd655a9e98 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
[ 1047.059422][    C0] RAX: ffffffffffffffda RBX: 00007ffd655a9ed0 RCX: 00007f7d109e5c3a
[ 1047.059440][    C0] RDX: 0000000000090800 RSI: 00007ffd655aa2d0 RDI: 00000000ffffff9c
[ 1047.059456][    C0] RBP: 0000000000000007 R08: 0000556bc9e554a0 R09: 0000000000000000
[ 1047.059471][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000556bc9e4cf10
[ 1047.059486][    C0] R13: 00007ffd655aaad0 R14: 00007ffd655aa6d0 R15: 00007ffd655aa2d0
[ 1047.059540][    C0]  </TASK>
[ 1047.059550][    C0] task:kworker/u8:17   state:R  running task     stack:21280 pid:7735  tgid:7735  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1047.059624][    C0] Workqueue: krds_cp_wq#1/0 rds_connect_worker
[ 1047.059740][    C0] Call Trace:
[ 1047.059748][    C0]  <TASK>
[ 1047.059762][    C0]  __schedule+0x1553/0x5240
[ 1047.059825][    C0]  ? __pfx___schedule+0x10/0x10
[ 1047.059861][    C0]  ? _raw_spin_unlock_irqrestore+0x47/0x80
[ 1047.059888][    C0]  ? preempt_schedule_thunk+0x16/0x30
[ 1047.059938][    C0]  preempt_schedule_common+0x82/0xd0
[ 1047.059965][    C0]  preempt_schedule_thunk+0x16/0x30
[ 1047.060001][    C0]  rt_mutex_slowunlock+0x681/0x8b0
[ 1047.060045][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1047.060085][    C0]  ? rt_spin_unlock+0x14f/0x200
[ 1047.060125][    C0]  ? rt_spin_unlock+0x160/0x200
[ 1047.060164][    C0]  free_frozen_page_commit+0x667/0x1850
[ 1047.060228][    C0]  __free_frozen_pages+0x836/0x1170
[ 1047.060251][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1047.060295][    C0]  ? __pfx___free_frozen_pages+0x10/0x10
[ 1047.060325][    C0]  ? __free_slab+0x18f/0x290
[ 1047.060381][    C0]  __slab_free+0x24f/0x2a0
[ 1047.060419][    C0]  qlist_free_all+0x97/0x100
[ 1047.060457][    C0]  kasan_quarantine_reduce+0x148/0x160
[ 1047.060496][    C0]  __kasan_slab_alloc+0x22/0x80
[ 1047.060535][    C0]  kmem_cache_alloc_lru_noprof+0x33c/0x680
[ 1047.060574][    C0]  ? sock_alloc_inode+0x28/0xc0
[ 1047.060701][    C0]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1047.060734][    C0]  sock_alloc_inode+0x28/0xc0
[ 1047.060767][    C0]  alloc_inode+0x6a/0x1b0
[ 1047.060804][    C0]  __sock_create+0x12d/0x9d0
[ 1047.060860][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1047.060890][    C0]  ? rds_tcp_conn_path_connect+0x1cc/0x930
[ 1047.060950][    C0]  rds_tcp_conn_path_connect+0x2d7/0x930
[ 1047.060993][    C0]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[ 1047.061020][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[ 1047.061077][    C0]  rds_connect_worker+0x1d8/0x290
[ 1047.061113][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[ 1047.061163][    C0]  process_scheduled_works+0xb6e/0x18c0
[ 1047.061232][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1047.061273][    C0]  ? assign_work+0x3d5/0x5e0
[ 1047.061312][    C0]  worker_thread+0xa53/0xfc0
[ 1047.061378][    C0]  kthread+0x388/0x470
[ 1047.061404][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1047.061437][    C0]  ? __pfx_kthread+0x10/0x10
[ 1047.061463][    C0]  ret_from_fork+0x51e/0xb90
[ 1047.061502][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1047.061534][    C0]  ? __switch_to+0xc7d/0x1450
[ 1047.061586][    C0]  ? __pfx_kthread+0x10/0x10
[ 1047.061613][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1047.061655][    C0]  </TASK>
[ 1047.061665][    C0] rcu: rcu_preempt kthread starved for 10491 jiffies! g44525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1047.061691][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1047.061704][    C0] rcu: RCU grace-period kthread stack dump:
[ 1047.061712][    C0] task:rcu_preempt     state:R  running task     stack:27680 pid:18    tgid:18    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1047.061797][    C0] Call Trace:
[ 1047.061805][    C0]  <TASK>
[ 1047.061818][    C0]  __schedule+0x1553/0x5240
[ 1047.061847][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1047.061893][    C0]  ? __pfx___schedule+0x10/0x10
[ 1047.061927][    C0]  ? schedule+0x90/0x360
[ 1047.061953][    C0]  schedule+0x164/0x360
[ 1047.061980][    C0]  schedule_timeout+0x158/0x2c0
[ 1047.062007][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1047.062032][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1047.062068][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1047.062095][    C0]  ? prepare_to_swait_event+0x340/0x370
[ 1047.062139][    C0]  rcu_gp_fqs_loop+0x312/0x11d0
[ 1047.062165][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1047.062194][    C0]  ? rcu_gp_init+0x1313/0x15b0
[ 1047.062220][    C0]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[ 1047.062245][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1047.062265][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1047.062298][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1047.062331][    C0]  rcu_gp_kthread+0x9e/0x2b0
[ 1047.062357][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1047.062377][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1047.062406][    C0]  ? __kthread_parkme+0x7a/0x1f0
[ 1047.062443][    C0]  ? __kthread_parkme+0x19c/0x1f0
[ 1047.062486][    C0]  kthread+0x388/0x470
[ 1047.062510][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1047.062531][    C0]  ? __pfx_kthread+0x10/0x10
[ 1047.062558][    C0]  ret_from_fork+0x51e/0xb90
[ 1047.062595][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1047.062627][    C0]  ? __switch_to+0xc7d/0x1450
[ 1047.062661][    C0]  ? __pfx_kthread+0x10/0x10
[ 1047.062688][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1047.062727][    C0]  </TASK>
[ 1047.062736][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1047.062778][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1047.062809][    C0] Tainted: [L]=SOFTLOCKUP
[ 1047.062818][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1047.062832][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1047.062858][    C0] Code: 5e 5c 02 e9 13 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 3c 25 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1047.062879][    C0] RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000246
[ 1047.062898][    C0] RAX: 00000000023d0bff RBX: ffffffff81996cda RCX: 0000000080000001
[ 1047.062915][    C0] RDX: 0000000000000001 RSI: ffffffff8d565c65 RDI: ffffffff8ba67a80
[ 1047.062931][    C0] RBP: ffffffff8da07eb0 R08: ffff8880b8833e1b R09: 1ffff110171067c3
[ 1047.062949][    C0] R10: dffffc0000000000 R11: ffffed10171067c4 R12: 0000000000000000
[ 1047.062965][    C0] R13: 1ffffffff1b605d8 R14: 0000000000000000 R15: 1ffffffff1b605d8
[ 1047.062982][    C0] FS:  0000000000000000(0000) GS:ffff888126332000(0000) knlGS:0000000000000000
[ 1047.063001][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1047.063017][    C0] CR2: 0000555561fa84e8 CR3: 00000000392fe000 CR4: 00000000003526f0
[ 1047.063038][    C0] Call Trace:
[ 1047.063045][    C0]  <TASK>
[ 1047.063053][    C0]  default_idle+0x9/0x20
[ 1047.063082][    C0]  default_idle_call+0x72/0xb0
[ 1047.063112][    C0]  do_idle+0x36a/0x5f0
[ 1047.063140][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1047.063171][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1047.063211][    C0]  cpu_startup_entry+0x43/0x60
[ 1047.063240][    C0]  rest_init+0x2de/0x300
[ 1047.063275][    C0]  start_kernel+0x385/0x3d0
[ 1047.063439][    C0]  x86_64_start_reservations+0x24/0x30
[ 1047.063495][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1047.063528][    C0]  common_startup_64+0x13e/0x147
[ 1047.063572][    C0]  </TASK>
[ 1102.586831][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 1102.587037][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
[ 1105.655835][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 1105.655918][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
SYZFAIL: failed to send rpc
fd=3 want=840 sent=0 n=-1 (errno 32: Broken pipe)
[ 1107.186301][ T6407] bridge_slave_1: left allmulticast mode
[ 1107.186331][ T6407] bridge_slave_1: left promiscuous mode
[ 1107.186543][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1107.457658][ T6407] bridge_slave_0: left allmulticast mode
[ 1107.457689][ T6407] bridge_slave_0: left promiscuous mode
[ 1107.457966][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.867189][T11973] Bluetooth: hci4: command 0x0406 tx timeout
[ 1107.867219][T11973] Bluetooth: hci0: command 0x0406 tx timeout
[ 1109.570780][ T6407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1109.656821][ T6407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1109.716964][ T6407] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1109.764939][ T6407] bond0 (unregistering): Released all slaves
[ 1111.896213][ T6407] dummy0: left promiscuous mode
[ 1112.046862][ T6407] hsr_slave_0: left promiscuous mode
[ 1112.086256][ T6407] hsr_slave_1: left promiscuous mode
[ 1112.087258][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1112.087278][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1112.126998][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1112.127033][ T6407] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1112.217914][ T6407] veth1_macvtap: left promiscuous mode
[ 1112.217991][ T6407] veth0_macvtap: left promiscuous mode
[ 1112.218168][ T6407] veth1_vlan: left promiscuous mode
[ 1112.218282][ T6407] veth0_vlan: left promiscuous mode