last executing test programs:

27m37.937814644s ago: executing program 32 (id=114):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c)

27m37.354434542s ago: executing program 33 (id=113):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000145c0)={0x2020}, 0x2020)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000012980)={0x3, 0xf, &(0x7f0000012300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, @call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0xe8, &(0x7f0000012400)=""/232, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000012940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x11d5)

18m55.13175354s ago: executing program 34 (id=1035):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x3a92a1fd, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019380)=""/102400, 0x19000)
mount(0x0, 0x0, 0x0, 0x1, 0x0)
get_robust_list(0x0, &(0x7f0000000100)=0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000001bc0)={0x9f0000, 0x400, 0x8bb, 0xffffffffffffffff, 0x0, 0x0})
socket$unix(0x1, 0x5, 0x0)
unshare(0x66000080)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6d3082", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getpid()
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

14m24.417263164s ago: executing program 3 (id=1452):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0)
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080))
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48)
io_uring_enter(r4, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x1d)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
close(0xffffffffffffffff)

14m23.246088885s ago: executing program 3 (id=1454):
socket$kcm(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x36)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05"], 0x1c}}, 0x40)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))

14m21.77466077s ago: executing program 3 (id=1460):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bind(r0, &(0x7f0000000980)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48)
ioctl$SG_IO(r1, 0x2285, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)="f33dfbf5b89f180e3bdb34eb")
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000680)={'\x00', 0xe, 0x2, 0x8, 0x6, 0xe41b})
r6 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)

14m17.285942042s ago: executing program 3 (id=1465):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00')
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0), &(0x7f00000001c0))
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
clock_gettime(0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000003c0)=@multiplanar_mmap={0x3, 0x3, 0x4, 0x4000, 0x3, {r5, r6/1000+60000}, {0x1, 0x2, 0xb, 0xc, 0xee, 0x4, "b4ce2cb7"}, 0x3, 0x1, {&(0x7f0000000340)=[{0x8001, 0x8, {0xc13}}, {0x8, 0x3, {0x9}, 0x200}]}, 0xfffffff9, 0x0, r0})
r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000200)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
io_uring_enter(r7, 0x6e2, 0x600, 0x1, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

14m12.593346849s ago: executing program 3 (id=1470):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000019200)=@newqdisc={0xec, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xfff1}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x8, 0x0, 0x0, 0x0, 0xa, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3], [0x0, 0x8, 0x0, 0x0, 0x5, 0x200, 0xfffc, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x3, 0xd, 0xa, 0xb, 0x2, 0xf, 0xf, 0xb, 0xa, 0x6, 0x10, 0x8, 0xc, 0x0, 0xd], 0x0, [0x7fff, 0x9, 0x6, 0xffff, 0xb599, 0x1, 0x515, 0x2, 0x7, 0x9, 0x8000, 0x6, 0x200, 0x8, 0x80, 0x4], [0xfff, 0xfe01, 0x4, 0x2, 0xfffc, 0xc2, 0x7, 0xfffd, 0x1, 0xfffe, 0x11a7, 0x1, 0xc000, 0x2, 0xfff9, 0x4]}}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
socket$packet(0x11, 0xa, 0x300)
read$FUSE(0xffffffffffffffff, &(0x7f00000193c0)={0x2020}, 0x2020)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000003c0)="ae", 0x1, r5)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r6})

14m10.978709065s ago: executing program 3 (id=1471):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000004400), 0x3ffff6c, 0x40, 0x0)

13m55.051795384s ago: executing program 35 (id=1471):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r2, &(0x7f0000004400), 0x3ffff6c, 0x40, 0x0)

10m21.287306781s ago: executing program 6 (id=135):
socket(0x10, 0x803, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x1f, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5}, 0x38)

10m5.242395456s ago: executing program 36 (id=135):
socket(0x10, 0x803, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x1f, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5}, 0x38)

9m55.501254237s ago: executing program 9 (id=1901):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0x0, 0x28}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180))

9m53.634981139s ago: executing program 9 (id=1906):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = dup3(r0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0})
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x8000, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}})

9m52.481239827s ago: executing program 9 (id=1908):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x1, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4000, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e86, 0xfffffffe, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000296, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfff, 0x0, 0x2, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r3, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0)
recvfrom$rxrpc(r3, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)

9m45.171760343s ago: executing program 9 (id=1919):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='DIGITAL2 \'Master Playback Switch\' 00000000000000000000\nLINE1\nIGAIN \'Mic\' 00000000000000000000\nVOLUME \'MastBr Playbacf\' 000000000000000'], 0xee)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x344)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x6, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x401, 0x200006, 0xf5, 0x9, 0x139, 0x3, 0x8, 0xffffdb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x46239, 0x7, 0x0, 0x1ff, 0x8002, 0x3ff, 0x3, 0x11, 0x4, 0xba55, 0x8da8, 0x2, 0x1fb, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0xffff8000, 0x8, 0x1, 0x80000001, 0x4, 0x200, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x7, 0x7, 0x1], [0x6, 0x1e, 0x2, 0x8000, 0xaf5, 0x400003, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x1, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x80000001, 0x8001, 0x3, 0x9, 0x8, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x2, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x1, 0x0, 0x5, 0x4, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xe47, 0xfffffffa, 0x2, 0x1, 0x1, 0x8, 0x80, 0x89, 0xfffffffb], [0x401, 0x0, 0xffff, 0xcd3, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x200009, 0xe8b, 0x5, 0x7fffffff, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000401, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0xb, 0x28e3, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x1008001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x6, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x40005], [0x108e, 0x100, 0x3, 0x7, 0x1, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xe, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x3, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x5, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0x7f, 0x7, 0xe, 0x4, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

9m43.205325552s ago: executing program 9 (id=1922):
socket$kcm(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05"], 0x1c}}, 0x40)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5], 0x44}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))

9m42.395571351s ago: executing program 9 (id=1925):
socket$caif_stream(0x25, 0x1, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000003a82, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x200000000000000)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
socket$nl_route(0x10, 0x3, 0x0)

9m28.573278202s ago: executing program 7 (id=1941):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='DIGITAL2 \'Master Playback Switch\' 00000000000000000000\nLINE1\nIGAIN \'Mic\' 00000000000000000000\nVOLUME \'MastBr Playbacf\' 000000000000000'], 0xee)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x344)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x6, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x401, 0x200006, 0xf5, 0x9, 0x139, 0x3, 0x8, 0xffffdb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x46239, 0x7, 0x0, 0x1ff, 0x8002, 0x3ff, 0x3, 0x11, 0x4, 0xba55, 0x8da8, 0x2, 0x1fb, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0xffff8000, 0x8, 0x1, 0x80000001, 0x4, 0x200, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x7, 0x7, 0x1], [0x6, 0x1e, 0x2, 0x8000, 0xaf5, 0x400003, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x1, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x80000001, 0x8001, 0x3, 0x9, 0x8, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x2, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x1, 0x0, 0x5, 0x4, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xe47, 0xfffffffa, 0x2, 0x1, 0x1, 0x8, 0x80, 0x89, 0xfffffffb], [0x401, 0x0, 0xffff, 0xcd3, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x200009, 0xe8b, 0x5, 0x7fffffff, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000401, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0xb, 0x28e3, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x1008001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x6, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x40005], [0x108e, 0x100, 0x3, 0x7, 0x1, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xe, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x3, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x5, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0x7f, 0x7, 0xe, 0x4, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

9m26.592864799s ago: executing program 37 (id=1925):
socket$caif_stream(0x25, 0x1, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000003a82, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x200000000000000)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
socket$nl_route(0x10, 0x3, 0x0)

9m26.532780191s ago: executing program 7 (id=1944):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xca, 0x1a, 0x40, 0xbfd, 0x10d, 0xeaea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0xfc, 0xcf, 0x2, 0x9d, 0x71, 0xa6, 0x18, [], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0xa, 0xc, 0xf6}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0xb5, 0x1, 0x1}}]}}]}}]}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x15)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)

9m23.349340286s ago: executing program 7 (id=1950):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

9m22.752730972s ago: executing program 7 (id=1952):
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0)
r0 = openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x70}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
syz_io_uring_setup(0x768, &(0x7f0000001300)={0x0, 0xd3d2, 0x0, 0x0, 0x162}, &(0x7f0000001380)=<r1=>0x0, &(0x7f00000013c0))
r2 = syz_io_uring_setup(0x4586, &(0x7f0000001400)={0x0, 0x61ee, 0x2000, 0x0, 0x41}, &(0x7f0000001480), &(0x7f00000014c0))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000001580)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x1, 0x0, 0x0, 0x1, 0x1, {0x0, r3}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x980900, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"})
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8)

9m20.630027778s ago: executing program 7 (id=1956):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x5)

9m19.584703766s ago: executing program 7 (id=1958):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='xprtrdma_op_set_cto\x00', r1, 0x0, 0x81}, 0x18)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x88000)
ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r7, &(0x7f00000005c0)="e95015e07c5ecb4b1637c768a6b3ffd9e8b2a26c6be65e0f9ee49a09033331929544383e7822e5d6b4f00a97bb9bbb7d253286f29b66856583f5623f18b91aaabfce1fb8fe5d01e09848ff41a7e53cd4cca46881f287898d65ab4de3fd8102ba93427b8d6382febf6de3a5458c97b992efbfc158401891df6da60ba03649d3cb5ed1e0ad3852378943572d058c9ce2d7e154d88857b0c80ca614cc05ae907dad69e99f5dfff1d8e61e57f70566464a9ecfbc3eab3d8e4a3b0a6b05be0e492531b9c488627a5b747a69a7a6ed399b78549782192dcce2722749b5", &(0x7f00000006c0)=""/174}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x22002a, &(0x7f0000000780))
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001201400000010000100000000000000000000840300"], 0xd0}}, 0x20050800)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x990}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m4.085345791s ago: executing program 38 (id=1958):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='xprtrdma_op_set_cto\x00', r1, 0x0, 0x81}, 0x18)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x88000)
ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r7, &(0x7f00000005c0)="e95015e07c5ecb4b1637c768a6b3ffd9e8b2a26c6be65e0f9ee49a09033331929544383e7822e5d6b4f00a97bb9bbb7d253286f29b66856583f5623f18b91aaabfce1fb8fe5d01e09848ff41a7e53cd4cca46881f287898d65ab4de3fd8102ba93427b8d6382febf6de3a5458c97b992efbfc158401891df6da60ba03649d3cb5ed1e0ad3852378943572d058c9ce2d7e154d88857b0c80ca614cc05ae907dad69e99f5dfff1d8e61e57f70566464a9ecfbc3eab3d8e4a3b0a6b05be0e492531b9c488627a5b747a69a7a6ed399b78549782192dcce2722749b5", &(0x7f00000006c0)=""/174}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x22002a, &(0x7f0000000780))
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6)
unshare(0x40000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001201400000010000100000000000000000000840300"], 0xd0}}, 0x20050800)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x990}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.472544073s ago: executing program 5 (id=2853):
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x401c5820, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfff7fffffffffff5}, 0x18)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x3, 0x20a}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080)

17.805435111s ago: executing program 2 (id=2860):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x81}, 0x18)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x7661a000)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x1}, 0x18)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000002c0)=0x19)
read$dsp(r2, &(0x7f0000000200)=""/168, 0xa8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

17.491959024s ago: executing program 5 (id=2862):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000180)=0xfff, 0x4)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x4e22, 0x865, @private2, 0xfffffffe}}}, 0x108)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10)

15.706426163s ago: executing program 4 (id=2865):
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4044000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES8=r1], 0x14)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f7, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz1\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
r4 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r4, &(0x7f0000000f40), 0x0, 0x0)
capset(0x0, &(0x7f0000000280)={0x0, 0x2})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x0, 0x0})

14.94634205s ago: executing program 4 (id=2867):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000002, 0x0, 0x0, 0xfffffffd, 0x9}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x14008004)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f000000000014"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

14.515023896s ago: executing program 4 (id=2868):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

13.490777181s ago: executing program 5 (id=2870):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_usbip_server_init(0x4)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001aaaaaaaaaaaa00000000"], 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

13.437533567s ago: executing program 1 (id=2871):
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f)
ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000011c0)={0x0, 0x0})
mount(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='fuseblk\x00', 0x28db800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80)
set_mempolicy(0x3, &(0x7f0000001200)=0x7, 0x3)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x1000000201005)

13.414860212s ago: executing program 0 (id=2872):
r0 = syz_io_uring_setup(0x417, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r3 = syz_open_dev$sg(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380), 0x0, 0x0, 0x10006, 0x0, 0x0})
r4 = syz_open_dev$dri(0x0, 0x1, 0x101001)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$rds(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]})
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0)

13.110983987s ago: executing program 8 (id=2873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040880)

12.972276829s ago: executing program 0 (id=2874):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}})
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r9 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4)
r10 = socket$kcm(0x2, 0x1000000000000002, 0x0)
writev(r3, &(0x7f0000000700)=[{&(0x7f00000004c0)="cc4eab423e0b5cc1c5a332de6ceaf983109cff683a219016aa0ff39242513fd480cdbe69e1d471a1da30c614a70f25a3ba0c047df1f9ca8c543303eac44546950609a7f0e4fac737d2635f9e13a93480bd9096e6ab133411dc358a15e354e544f85d507178a14a", 0x67}, {&(0x7f0000000200)="574f076866b95e8746d56e13cd9da77c18aea4fdccd47ee1e5e8af3cfc718835602f075000e804ec09d5296cee", 0x2d}, {&(0x7f0000000540)="5c015053fbdd3835c2e55e64852f320cb5d779f5dbc8a1ebd37d3b6fe4e4dad0c54de4ff7d2631e84a67a1fda59e982004ed17a092bed1f1", 0x38}, {&(0x7f0000000580)="60350f18f18b10042287ff8cda922eeec73f3d098972f11f374f2164da4d6748135bb59b334c96465d724476f48271fb4084dbd6cab653f43f499f45806c6ca7d2418042d5493ae991011609f3492427e8a6722118a6550c91eaeceff4a9afdac1d6aed2768b158d2f66a74886542ed3524b3add9a41f0dcb2c28649929cdd2b758f809991cfff5f64e8767fbd60a972f90dfb1ed8c0f76fc2f31a", 0x9b}, {&(0x7f0000000640)="4f6f7237e0645f35bdbd05b4ab3f4fdad95a9e612d844e3ec86f8e5f5e68bc62c3f75cf71f389c0437b088975494dde9eb28f4dda7c17cc6d1effcf1aee2038696184135ce9c46fecd1b976bd7d5b82e1dd2f7c70fb557ac40e987c0b46b2174e5b8bb283e6b70da72dc4ea72fbf3a536e7c", 0x72}, {&(0x7f00000006c0)}], 0x6)
sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0)
unshare(0x42000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0)

12.872108539s ago: executing program 2 (id=2875):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x40100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0)
r2 = syz_open_dev$evdev(0x0, 0x0, 0x2002)
readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1)

12.696813084s ago: executing program 4 (id=2876):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x5, 0x3)
ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600)

11.811877887s ago: executing program 8 (id=2877):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0)
faccessat2(r4, &(0x7f0000001400)='\x00', 0x0, 0x1100)
clock_gettime(0x0, &(0x7f0000000300)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)

11.732756412s ago: executing program 2 (id=2878):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r1 = inotify_init1(0x0)
r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022)
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x69)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

9.959766565s ago: executing program 2 (id=2879):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
dup3(r2, r4, 0x0)

9.580314842s ago: executing program 1 (id=2880):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r1, 0xffffffffffffffff, 0x0)

9.115225311s ago: executing program 1 (id=2881):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000002, 0x0, 0x0, 0xfffffffd, 0x9}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x14008004)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f00000000001400"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

8.281358954s ago: executing program 1 (id=2882):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@empty, 0x4e21, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="02"])
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x922, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000)
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
syz_io_uring_setup(0x39, 0x0, 0x0, &(0x7f0000001880))
msgctl$IPC_INFO(0x0, 0x3, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, 0x0, 0x0)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f00000017c0)}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @loopback}}}], 0x20}, 0xe900)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000)

8.099426465s ago: executing program 0 (id=2883):
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=<r2=>0x0, &(0x7f0000002100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
ioctl$int_in(r6, 0x5421, &(0x7f00000020c0)=0x400)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc)
r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000)
r8 = socket(0x2, 0x2, 0x0)
r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r7, 0xab00, r8)
ioctl$NBD_DO_IT(r9, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x5)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

6.269317614s ago: executing program 5 (id=2884):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000180)=0xfff, 0x4)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x4e22, 0x865, @private2, 0xfffffffe}}}, 0x108)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10)

6.215017777s ago: executing program 0 (id=2885):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000040)='./bus\x00', 0x34)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
io_setup(0x1, &(0x7f00000004c0)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x10)
io_submit(r0, 0x0, &(0x7f00000002c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020000000420002201000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

6.02227105s ago: executing program 4 (id=2886):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x15, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x10001}, 0x0, &(0x7f0000000180)={0x1ff, 0x1000000000, 0x8, 0x2a03, 0x4000400000000000, 0xfffffffffffffffc, 0x6a1}, 0x0, 0x0)

4.863178956s ago: executing program 5 (id=2887):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x81}, 0x18)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x7661a000)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x1}, 0x18)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000002c0)=0x19)
read$dsp(r2, &(0x7f0000000200)=""/168, 0xa8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

4.851383121s ago: executing program 0 (id=2888):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01994b8c77136f557d438a0eb17a5a77d65ec12f4f713c989e39c1d1ec51b1", 0xf2}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859ad07aaea6aa70d32bb13e43d76086fa643a", 0x46}], 0x3, &(0x7f0000000400)}, 0x4000042)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040))
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0)
ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000280)={0x9, 0x0, 0x9, 0x7fffffffffffffff, 0xf, 0x7})
r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000300)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
unshare(0x2c020400)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, 0x0, 0x0)
io_uring_enter(r7, 0x7277, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)

4.850566066s ago: executing program 8 (id=2889):
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x401c5820, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x3, 0x20a}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080)

3.631061838s ago: executing program 8 (id=2890):
mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0)
socket(0x5, 0x800, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1})

3.034825542s ago: executing program 4 (id=2891):
syz_open_dev$ttys(0xc, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000280)={0x1, 0x2, 0x0, "8baadc000000000000001c00ec0000000000000200", 0x43353039})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

2.065257386s ago: executing program 8 (id=2892):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
read(r1, &(0x7f0000000b80)=""/215, 0xd7)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, 0x0)
tkill(r0, 0x7)

2.03236835s ago: executing program 2 (id=2893):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r1, 0xffffffffffffffff, 0x0)

1.972089284s ago: executing program 1 (id=2894):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000002, 0x0, 0x0, 0xfffffffd, 0x9}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x14008004)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f00000000001400"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.722090924s ago: executing program 2 (id=2895):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0)

1.567748684s ago: executing program 1 (id=2896):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, 'syz', 0x3a, 'GPL\x00', 0x3a, './file0', 0x3a, [0x50, 0x43]}, 0x30)
r2 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0xfdef, 0x0, 0x0)

1.513620129s ago: executing program 8 (id=2897):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r1 = syz_usbip_server_init(0x4)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
write$usbip_server(r1, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001aaaaaaaaaaaa00000000"], 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

547.621089ms ago: executing program 5 (id=2898):
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x2461, &(0x7f0000000380)={0x0, 0xddec, 0x10100, 0x3}, &(0x7f0000002080)=<r2=>0x0, &(0x7f0000002100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
ioctl$int_in(r6, 0x5421, &(0x7f00000020c0)=0x400)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc)
r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000)
r8 = socket(0x2, 0x2, 0x0)
r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r7, 0xab00, r8)
ioctl$NBD_DO_IT(r9, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x5)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

0s ago: executing program 0 (id=2899):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r1 = inotify_init1(0x0)
r2 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022)
write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x69)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

descriptor of length 0, skipping remainder of the config
[ 1522.712871][T15995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1522.733789][T12927] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1522.738890][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1522.962657][T12927] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1523.005719][T15995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1523.030718][T12927] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1523.069146][T10604] vhci_hcd: vhci_device speed not set
[ 1523.153988][T15995] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1523.172749][T15995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1523.219514][T12927] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1523.280936][T12927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.339225][T15995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1523.427570][T12927] usb 9-1: config 0 descriptor??
[ 1523.456821][T12927] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1524.043287][T12927] spca561 9-1:0.0: probe with driver spca561 failed with error -22
[ 1524.082835][T12927] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1524.089853][T12927] usb 9-1: MIDIStreaming interface descriptor not found
[ 1524.289499][T12927] usb 1-1: USB disconnect, device number 35
[ 1524.360072][T15973] hsr_slave_0: entered promiscuous mode
[ 1524.403226][T15973] hsr_slave_1: entered promiscuous mode
[ 1524.409671][T15973] debugfs: 'hsr0' already exists in 'hsr'
[ 1524.472370][T15973] Cannot create hsr debugfs directory
[ 1524.600371][T16297] efs: device does not support 512 byte blocks
[ 1524.626790][ T6277] bridge_slave_1: left allmulticast mode
[ 1524.641759][ T6277] bridge_slave_1: left promiscuous mode
[ 1524.652343][T16297] device does not support 512 byte blocks
[ 1524.652343][T16297] 
[ 1524.672028][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1524.734925][ T6277] bridge_slave_0: left allmulticast mode
[ 1524.764202][ T6277] bridge_slave_0: left promiscuous mode
[ 1524.803314][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1524.834114][T16184] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1524.948302][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1524.960323][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1524.969624][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1525.025273][T16184] usb 5-1: Using ep0 maxpacket: 16
[ 1525.132330][T12927] usb 9-1: USB disconnect, device number 10
[ 1525.150465][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1525.158716][T16184] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.227967][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1525.241391][T16184] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1525.485774][T16184] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[ 1525.793996][T16184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.855504][T16184] usb 5-1: config 0 descriptor??
[ 1526.670581][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1526.693215][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1526.716908][ T6277] bond0 (unregistering): Released all slaves
[ 1526.777949][T15995] hsr_slave_0: entered promiscuous mode
[ 1526.796762][T15995] hsr_slave_1: entered promiscuous mode
[ 1526.814295][T15995] debugfs: 'hsr0' already exists in 'hsr'
[ 1526.835758][T15995] Cannot create hsr debugfs directory
[ 1527.280830][ T6277] hsr_slave_0: left promiscuous mode
[ 1527.297781][ T6277] hsr_slave_1: left promiscuous mode
[ 1527.318395][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1527.341364][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1527.584520][T10602] Bluetooth: hci3: command tx timeout
[ 1527.602127][T12927] usb 5-1: USB disconnect, device number 48
[ 1528.276923][T16342] trusted_key: encrypted_key: keyword 'updat`Êfault' not recognized
[ 1528.839233][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1529.044591][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1529.671663][T10602] Bluetooth: hci3: command tx timeout
[ 1530.591176][T16300] lo speed is unknown, defaulting to 1000
[ 1531.014472][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2298'.
[ 1531.024243][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'.
[ 1531.780649][T10602] Bluetooth: hci3: command tx timeout
[ 1532.322742][T16371] overlayfs: missing 'lowerdir'
[ 1533.875952][T10602] Bluetooth: hci3: command tx timeout
[ 1536.581364][T16412] netlink: 'syz.8.2310': attribute type 1 has an invalid length.
[ 1536.601603][T16412] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2310'.
[ 1537.777390][T16426] trusted_key: encrypted_key: keylen parameter is missing
[ 1537.795950][T16300] chnl_net:caif_netlink_parms(): no params data found
[ 1538.031842][T10604] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[ 1538.259632][T10604] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1538.395151][T10604] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1538.803914][T10604] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1538.851720][T10604] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1538.888456][T10604] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1538.958806][T10604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1539.120307][T10604] usb 9-1: config 0 descriptor??
[ 1539.342626][T10604] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1539.857265][T10604] spca561 9-1:0.0: probe with driver spca561 failed with error -22
[ 1539.867200][T10604] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1539.877126][T10604] usb 9-1: MIDIStreaming interface descriptor not found
[ 1540.010328][T16300] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1540.021226][T16300] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1540.178677][T16300] bridge_slave_0: entered allmulticast mode
[ 1540.201226][T16300] bridge_slave_0: entered promiscuous mode
[ 1540.338308][ T5969] usb 9-1: USB disconnect, device number 11
[ 1540.579373][T16300] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1540.591690][T16300] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1540.609199][T16300] bridge_slave_1: entered allmulticast mode
[ 1541.043655][T16300] bridge_slave_1: entered promiscuous mode
[ 1541.259881][ T6277] bridge_slave_1: left allmulticast mode
[ 1541.276568][ T6277] bridge_slave_1: left promiscuous mode
[ 1541.295705][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1541.398179][ T6277] bridge_slave_0: left allmulticast mode
[ 1541.852134][ T6277] bridge_slave_0: left promiscuous mode
[ 1541.892202][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1542.440851][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1542.468980][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1542.500465][ T6277] bond0 (unregistering): Released all slaves
[ 1542.671283][T16300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1542.721460][ T6277] hsr_slave_0: left promiscuous mode
[ 1542.731820][ T6277] hsr_slave_1: left promiscuous mode
[ 1542.737894][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1542.816673][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1542.946583][T16485] netlink: 'syz.0.2322': attribute type 1 has an invalid length.
[ 1542.979461][T16485] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2322'.
[ 1545.502157][ T5884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1545.513417][ T5884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1545.534655][ T5884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1545.555369][ T5884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1545.555399][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1545.576380][ T5884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1545.615440][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1545.797692][T16504] trusted_key: encrypted_key: insufficient parameters specified
[ 1547.654338][T16300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1547.664182][ T5884] Bluetooth: hci6: command tx timeout
[ 1548.271231][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2329'.
[ 1548.280281][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2329'.
[ 1548.879819][T16300] team0: Port device team_slave_0 added
[ 1549.073160][T16300] team0: Port device team_slave_1 added
[ 1549.282929][T16498] lo speed is unknown, defaulting to 1000
[ 1549.318587][T16532] netlink: 'syz.0.2333': attribute type 1 has an invalid length.
[ 1549.344164][T16532] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2333'.
[ 1549.392361][T10602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1549.421648][T12927] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[ 1549.439750][T10602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1549.448398][T10602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1549.458277][T10602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1549.466623][T10602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1549.574242][T12927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1549.589903][T12927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1549.601858][T12927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1549.612377][T12927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1549.626693][T12927] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1549.697090][T12927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.741952][T10602] Bluetooth: hci6: command tx timeout
[ 1549.758825][T16300] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1549.772996][T12927] usb 5-1: config 0 descriptor??
[ 1549.795100][T12927] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1549.801537][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1549.934141][T16300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1550.493251][T12927] spca561 5-1:0.0: probe with driver spca561 failed with error -22
[ 1550.529346][T16300] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1550.530576][T12927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1550.574423][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1550.675303][T12927] usb 5-1: MIDIStreaming interface descriptor not found
[ 1550.731582][T16300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1551.513516][T10602] Bluetooth: hci5: command tx timeout
[ 1551.821724][T10602] Bluetooth: hci6: command tx timeout
[ 1552.139631][T16534] lo speed is unknown, defaulting to 1000
[ 1552.557109][T16300] hsr_slave_0: entered promiscuous mode
[ 1552.812191][T16556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2337'.
[ 1552.842336][T16300] hsr_slave_1: entered promiscuous mode
[ 1553.591850][T10602] Bluetooth: hci5: command tx timeout
[ 1553.911728][T10602] Bluetooth: hci6: command tx timeout
[ 1555.586215][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1555.592715][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1555.663149][T10602] Bluetooth: hci5: command tx timeout
[ 1557.741596][T10602] Bluetooth: hci5: command tx timeout
[ 1557.910139][T16184] usb 5-1: USB disconnect, device number 49
[ 1559.137088][T16592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1560.010844][T16498] chnl_net:caif_netlink_parms(): no params data found
[ 1561.352199][ T5884] Bluetooth: hci5: command 0x0405 tx timeout
[ 1561.998208][T16534] chnl_net:caif_netlink_parms(): no params data found
[ 1562.372350][ T5969] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[ 1563.629353][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.641950][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1563.654001][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1563.667162][ T5969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1563.707788][T16498] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1563.712653][ T5969] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1563.744454][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1563.758451][T16498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1563.786895][ T5969] usb 1-1: config 0 descriptor??
[ 1563.810946][T16498] bridge_slave_0: entered allmulticast mode
[ 1563.815075][ T5969] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1563.870993][T16498] bridge_slave_0: entered promiscuous mode
[ 1564.030625][T16498] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1564.087323][T16498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1564.377637][ T5969] spca561 1-1:0.0: probe with driver spca561 failed with error -22
[ 1564.393785][T16498] bridge_slave_1: entered allmulticast mode
[ 1564.400829][ T5969] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1564.421961][ T5969] usb 1-1: MIDIStreaming interface descriptor not found
[ 1565.074476][T16498] bridge_slave_1: entered promiscuous mode
[ 1565.406743][T16498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1565.476120][T16498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1565.762432][T16498] team0: Port device team_slave_0 added
[ 1565.768636][T16534] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1565.783983][T16534] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1565.791287][T16534] bridge_slave_0: entered allmulticast mode
[ 1565.811662][T16534] bridge_slave_0: entered promiscuous mode
[ 1565.832741][T16498] team0: Port device team_slave_1 added
[ 1565.905475][T16534] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1565.918941][T16534] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1565.939208][T16534] bridge_slave_1: entered allmulticast mode
[ 1565.953112][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'.
[ 1565.962150][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'.
[ 1565.983501][T16534] bridge_slave_1: entered promiscuous mode
[ 1566.328671][T16534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1566.368595][T16498] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1566.380769][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1566.415677][T16498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1566.441317][T16498] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1566.455137][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1566.502981][T16498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1566.556989][T16534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1566.632918][T16300] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1567.049784][T16534] team0: Port device team_slave_0 added
[ 1567.064952][T16300] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1567.219814][T16534] team0: Port device team_slave_1 added
[ 1567.229821][T16300] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1568.690942][T16184] usb 1-1: USB disconnect, device number 36
[ 1568.744674][T16672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1568.880583][T16300] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1569.120660][T16534] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1569.239517][T16534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1569.537324][T16534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1569.576940][T16534] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1569.631704][T16534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1569.715934][T16534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1569.746494][T16683] trusted_key: encrypted_key: insufficient parameters specified
[ 1569.820593][T16498] hsr_slave_0: entered promiscuous mode
[ 1569.843929][T16498] hsr_slave_1: entered promiscuous mode
[ 1569.873850][T16498] debugfs: 'hsr0' already exists in 'hsr'
[ 1569.879583][T16498] Cannot create hsr debugfs directory
[ 1570.801425][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'.
[ 1570.918640][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'.
[ 1571.616961][T16534] hsr_slave_0: entered promiscuous mode
[ 1571.669481][T16534] hsr_slave_1: entered promiscuous mode
[ 1571.698585][T16534] debugfs: 'hsr0' already exists in 'hsr'
[ 1571.751878][T16534] Cannot create hsr debugfs directory
[ 1574.341686][ T5969] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[ 1574.377006][ T6277] bridge_slave_1: left allmulticast mode
[ 1574.392945][ T6277] bridge_slave_1: left promiscuous mode
[ 1574.398946][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1574.458871][ T6277] bridge_slave_0: left allmulticast mode
[ 1574.540136][ T6277] bridge_slave_0: left promiscuous mode
[ 1574.618479][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1574.633043][ T5969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1574.653102][T16730] trusted_key: encrypted_key: insufficient parameters specified
[ 1574.661288][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1575.088746][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1575.094848][ T6277] bridge_slave_1: left allmulticast mode
[ 1575.111673][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1575.141759][ T5969] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1575.161224][ T6277] bridge_slave_1: left promiscuous mode
[ 1575.180758][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1575.188109][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1575.234931][ T6277] bridge_slave_0: left allmulticast mode
[ 1575.255197][ T5969] usb 5-1: config 0 descriptor??
[ 1575.259817][ T6277] bridge_slave_0: left promiscuous mode
[ 1575.309928][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1575.545897][T16734] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1577.009708][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1577.040062][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1577.074028][ T6277] bond0 (unregistering): Released all slaves
[ 1577.408979][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1577.437521][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1577.452722][ T6277] bond0 (unregistering): Released all slaves
[ 1579.203857][ T5969] usb 5-1: can't set config #0, error -71
[ 1579.223307][ T5969] usb 5-1: USB disconnect, device number 50
[ 1579.289160][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2378'.
[ 1579.367317][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2378'.
[ 1579.546976][ T6277] hsr_slave_0: left promiscuous mode
[ 1579.566448][ T6277] hsr_slave_1: left promiscuous mode
[ 1579.576467][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1580.136145][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1580.196906][ T6277] hsr_slave_0: left promiscuous mode
[ 1580.410939][ T6277] hsr_slave_1: left promiscuous mode
[ 1580.427488][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1581.336773][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1581.500105][T16784] trusted_key: encrypted_key: insufficient parameters specified
[ 1582.627985][T16792] overlayfs: missing 'lowerdir'
[ 1583.672405][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1583.733836][T16800] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1584.118988][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1585.366274][ T5884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1585.377939][ T5884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1585.387287][ T5884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1585.404597][ T5884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1585.415562][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1587.515174][ T5884] Bluetooth: hci1: command tx timeout
[ 1588.010201][T16826] netlink: 'syz.0.2393': attribute type 1 has an invalid length.
[ 1588.018318][T16826] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2393'.
[ 1588.187184][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1588.937046][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1589.287719][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2396'.
[ 1589.591950][ T5884] Bluetooth: hci1: command tx timeout
[ 1589.956117][T16837] binder: 16836:16837 unknown command 0
[ 1589.987135][T16837] binder: 16836:16837 ioctl c0306201 200000004a40 returned -22
[ 1591.751909][ T5884] Bluetooth: hci1: command tx timeout
[ 1592.861624][ T5969] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[ 1592.896982][T16803] lo speed is unknown, defaulting to 1000
[ 1593.054529][ T5969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1593.105961][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1593.142468][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1593.185229][T16859] trusted_key: encrypted_key: insufficient parameters specified
[ 1593.198960][ T5969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1593.255604][ T5969] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1593.303213][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1593.367417][ T5969] usb 5-1: config 0 descriptor??
[ 1593.396258][ T5969] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1593.773695][T16865] overlayfs: missing 'lowerdir'
[ 1593.873067][ T5884] Bluetooth: hci1: command tx timeout
[ 1594.416523][ T5969] spca561 5-1:0.0: probe with driver spca561 failed with error -22
[ 1594.451227][ T5969] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1594.462947][ T5969] usb 5-1: MIDIStreaming interface descriptor not found
[ 1594.520178][T16803] chnl_net:caif_netlink_parms(): no params data found
[ 1594.859501][T16184] usb 5-1: USB disconnect, device number 51
[ 1597.230469][T16803] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1597.301657][T16803] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1597.344580][T16803] bridge_slave_0: entered allmulticast mode
[ 1597.362979][T16803] bridge_slave_0: entered promiscuous mode
[ 1597.501310][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'.
[ 1598.341347][T16803] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1598.395400][T16803] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1598.559706][T16803] bridge_slave_1: entered allmulticast mode
[ 1598.825972][T16803] bridge_slave_1: entered promiscuous mode
[ 1598.951856][T16902] trusted_key: encrypted_key: master key parameter 't' is invalid
[ 1601.783270][T16921] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1601.983131][T16921] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1602.646397][T16803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1602.663682][T16803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1603.295430][T16803] team0: Port device team_slave_0 added
[ 1603.320883][T16803] team0: Port device team_slave_1 added
[ 1603.602016][T16803] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1603.644738][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1603.791560][T16803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1603.882875][T16803] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1603.904766][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1604.027334][T16803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1605.158339][T16534] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1605.202485][T10602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1605.226053][T10602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1605.270956][T10602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1605.303207][T10602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1605.312380][T10602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1605.373957][T16803] hsr_slave_0: entered promiscuous mode
[ 1605.381169][T16803] hsr_slave_1: entered promiscuous mode
[ 1605.388493][T16803] debugfs: 'hsr0' already exists in 'hsr'
[ 1605.394588][T16803] Cannot create hsr debugfs directory
[ 1605.402784][T16534] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1606.365530][T16534] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1607.341606][T10602] Bluetooth: hci3: command tx timeout
[ 1607.635568][ T6277] bridge_slave_1: left allmulticast mode
[ 1607.670622][ T6277] bridge_slave_1: left promiscuous mode
[ 1609.212104][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1609.292969][ T6277] bridge_slave_0: left allmulticast mode
[ 1609.298660][ T6277] bridge_slave_0: left promiscuous mode
[ 1609.367090][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1609.435336][T10602] Bluetooth: hci3: command tx timeout
[ 1611.522502][T10602] Bluetooth: hci3: command tx timeout
[ 1611.662025][ T5884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1611.678640][ T5884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1611.709666][ T5884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1611.729408][ T5884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1611.738058][ T5884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1611.790695][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1611.816523][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1611.842784][ T6277] bond0 (unregistering): Released all slaves
[ 1612.297246][T16954] lo speed is unknown, defaulting to 1000
[ 1612.358743][ T6277] hsr_slave_0: left promiscuous mode
[ 1612.386536][ T6277] hsr_slave_1: left promiscuous mode
[ 1612.605078][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1613.527320][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1613.581558][ T5884] Bluetooth: hci3: command tx timeout
[ 1613.863334][ T5884] Bluetooth: hci5: command tx timeout
[ 1614.773524][T17024] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1615.416391][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1615.548639][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1615.901565][ T5884] Bluetooth: hci5: command tx timeout
[ 1617.027586][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1617.034526][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1617.477589][T17001] lo speed is unknown, defaulting to 1000
[ 1618.098381][ T5884] Bluetooth: hci5: command tx timeout
[ 1619.405179][T17076] dlm: non-version read from control device 121
[ 1619.698530][T17082] tc_dump_action: action bad kind
[ 1620.141650][ T5884] Bluetooth: hci5: command tx timeout
[ 1620.979273][T16954] chnl_net:caif_netlink_parms(): no params data found
[ 1621.030618][T17107] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1622.485797][T16803] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1622.565019][T16803] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1622.634325][T17001] chnl_net:caif_netlink_parms(): no params data found
[ 1622.696760][T16803] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1622.743381][T16803] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1622.886360][T16954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1622.893814][T16954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1622.901082][T16954] bridge_slave_0: entered allmulticast mode
[ 1622.909409][T16954] bridge_slave_0: entered promiscuous mode
[ 1622.918690][T16954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1622.926925][T16954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1622.935814][T16954] bridge_slave_1: entered allmulticast mode
[ 1622.945465][T16954] bridge_slave_1: entered promiscuous mode
[ 1623.054725][T17127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1623.164897][T16954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1623.211156][T16954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1623.228714][T17142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1623.235262][T17142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1623.281807][T17142] vhci_hcd vhci_hcd.0: Device attached
[ 1623.448325][T16954] team0: Port device team_slave_0 added
[ 1623.451656][ T5969] vhci_hcd: vhci_device speed not set
[ 1623.510908][T17001] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1623.512552][ T5969] usb 41-1: new full-speed USB device number 9 using vhci_hcd
[ 1623.523094][T17001] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1623.540421][T17001] bridge_slave_0: entered allmulticast mode
[ 1623.546746][T16184] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[ 1623.567590][T17001] bridge_slave_0: entered promiscuous mode
[ 1623.614936][T16954] team0: Port device team_slave_1 added
[ 1623.673188][T17001] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1623.704552][T17001] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1623.716893][T16184] usb 5-1: config 0 has no interfaces?
[ 1623.734528][T16184] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1623.750108][T17001] bridge_slave_1: entered allmulticast mode
[ 1623.777485][T16184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1623.787155][T17001] bridge_slave_1: entered promiscuous mode
[ 1623.825994][T16184] usb 5-1: config 0 descriptor??
[ 1623.966381][T17001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1624.095465][T17148] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 7
[ 1624.142815][ T1150] vhci_hcd: stop threads
[ 1624.182330][ T1150] vhci_hcd: release socket
[ 1624.248269][ T1150] vhci_hcd: disconnect device
[ 1624.334213][T16954] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1624.341184][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1624.504843][T16954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1624.709861][T17001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1625.182323][T17150] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1625.231116][T16954] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1625.246673][T16954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1625.458281][T16954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1626.341980][T17001] team0: Port device team_slave_0 added
[ 1626.386849][T17001] team0: Port device team_slave_1 added
[ 1627.429230][T16954] hsr_slave_0: entered promiscuous mode
[ 1627.453195][T16954] hsr_slave_1: entered promiscuous mode
[ 1627.756943][T17001] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1627.795199][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1627.853242][T10604] usb 5-1: USB disconnect, device number 52
[ 1627.882320][T17001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1627.931816][T17001] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1627.943198][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1628.036866][T17001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1628.631651][ T5969] vhci_hcd: vhci_device speed not set
[ 1628.870357][T17001] hsr_slave_0: entered promiscuous mode
[ 1628.896158][T17001] hsr_slave_1: entered promiscuous mode
[ 1628.987805][T17001] debugfs: 'hsr0' already exists in 'hsr'
[ 1629.542872][T17001] Cannot create hsr debugfs directory
[ 1629.839235][T17224] trusted_key: encrypted_key: keyword 'updat`Êfault' not recognized
[ 1630.203811][T17227] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1631.197260][ T6277] bridge_slave_1: left allmulticast mode
[ 1631.218365][ T6277] bridge_slave_1: left promiscuous mode
[ 1631.236725][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1631.285884][ T6277] bridge_slave_0: left allmulticast mode
[ 1631.299193][ T6277] bridge_slave_0: left promiscuous mode
[ 1631.314656][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1631.382708][ T6277] bridge_slave_1: left allmulticast mode
[ 1631.437837][ T6277] bridge_slave_1: left promiscuous mode
[ 1631.462818][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1631.498820][ T6277] bridge_slave_0: left allmulticast mode
[ 1631.508548][ T6277] bridge_slave_0: left promiscuous mode
[ 1631.520803][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1632.649289][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1632.747810][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1633.424550][ T6277] bond0 (unregistering): Released all slaves
[ 1633.530850][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2475'.
[ 1633.541714][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2475'.
[ 1633.852052][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1633.893628][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1633.939358][ T6277] bond0 (unregistering): Released all slaves
[ 1634.163690][T16803] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1635.226696][ T6277] hsr_slave_0: left promiscuous mode
[ 1635.255048][T17273] trusted_key: encrypted_key: keyword 'updat`Êfault' not recognized
[ 1635.264749][ T6277] hsr_slave_1: left promiscuous mode
[ 1635.270921][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1635.460653][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1635.788827][T17281] syz.0.2479: attempt to access beyond end of device
[ 1635.788827][T17281] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1635.829967][ T6277] hsr_slave_0: left promiscuous mode
[ 1635.842358][T17281] syz.0.2479: attempt to access beyond end of device
[ 1635.842358][T17281] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1635.888564][T17281] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1635.891539][ T6277] hsr_slave_1: left promiscuous mode
[ 1635.912227][T17281] syz.0.2479: attempt to access beyond end of device
[ 1635.912227][T17281] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1635.947343][T17281] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1635.969690][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1635.983223][T17281] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1635.990820][T17281] UDF-fs: Scanning with blocksize 1024 failed
[ 1636.031316][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1636.087473][T17281] syz.0.2479: attempt to access beyond end of device
[ 1636.087473][T17281] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[ 1636.113512][T17281] syz.0.2479: attempt to access beyond end of device
[ 1636.113512][T17281] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 1636.250428][T17281] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1636.292445][T17281] syz.0.2479: attempt to access beyond end of device
[ 1636.292445][T17281] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 1636.319055][T17281] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1636.330897][T17281] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1636.340807][T17281] UDF-fs: Scanning with blocksize 2048 failed
[ 1636.355321][T17281] syz.0.2479: attempt to access beyond end of device
[ 1636.355321][T17281] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1636.389183][T17281] syz.0.2479: attempt to access beyond end of device
[ 1636.389183][T17281] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0
[ 1636.392547][T17282] block nbd0: shutting down sockets
[ 1636.445777][T17281] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1636.590874][T17281] syz.0.2479: attempt to access beyond end of device
[ 1636.590874][T17281] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0
[ 1636.667076][T17281] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1636.709864][T17281] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1636.749742][T17281] UDF-fs: Scanning with blocksize 4096 failed
[ 1636.793537][T17281] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[ 1637.217522][T17302] netlink: 'syz.0.2481': attribute type 1 has an invalid length.
[ 1637.226038][T17302] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2481'.
[ 1637.259247][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1637.415256][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1639.214522][T17322] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1641.867230][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1642.532001][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1643.496725][T16803] 8021q: adding VLAN 0 to HW filter on device team0
[ 1643.505323][T10602] Bluetooth: hci5: command 0x0405 tx timeout
[ 1643.669896][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1643.677102][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1647.175491][T10602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1647.188367][T10602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1647.199114][T10602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1647.225234][T10602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1647.234355][T10602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1647.367407][T17377] lo speed is unknown, defaulting to 1000
[ 1649.154320][T17001] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1649.200227][T17001] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1649.253512][T17001] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1649.412429][T10602] Bluetooth: hci1: command tx timeout
[ 1649.452201][T17001] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1651.188966][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.188966][T17428] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0
[ 1651.267133][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.267133][T17428] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0
[ 1651.291672][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 1651.324214][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.324214][T17428] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0
[ 1651.374437][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 1651.380231][T17377] chnl_net:caif_netlink_parms(): no params data found
[ 1651.394905][T17428] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[ 1651.412047][T17428] UDF-fs: Scanning with blocksize 512 failed
[ 1651.432939][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.432939][T17428] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1651.448652][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.448652][T17428] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1651.465124][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 1651.481688][T10602] Bluetooth: hci1: command 0x041b tx timeout
[ 1651.503577][T16954] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1651.553170][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.553170][T17428] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1651.562659][T16954] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1651.574487][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 1651.611744][T17428] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[ 1651.634382][T17428] UDF-fs: Scanning with blocksize 1024 failed
[ 1651.652883][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.652883][T17428] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0
[ 1651.717755][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.717755][T17428] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 1651.737785][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 1651.748691][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.748691][T17428] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 1651.764304][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 1651.774770][T17428] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[ 1651.783779][T17428] UDF-fs: Scanning with blocksize 2048 failed
[ 1651.798229][T17428] syz.8.2503: attempt to access beyond end of device
[ 1651.798229][T17428] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1651.815409][T16954] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1651.825068][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 1651.843769][T17428] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 1651.867049][T16954] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1651.889853][T17428] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found
[ 1651.949541][T17428] UDF-fs: Scanning with blocksize 4096 failed
[ 1651.986268][T17428] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1)
[ 1652.026352][T17428] block nbd8: shutting down sockets
[ 1652.468063][T17377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1652.486610][T17377] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1652.496711][T17377] bridge_slave_0: entered allmulticast mode
[ 1652.530064][T17377] bridge_slave_0: entered promiscuous mode
[ 1652.560747][ T6277] bridge_slave_1: left allmulticast mode
[ 1652.570767][ T6277] bridge_slave_1: left promiscuous mode
[ 1652.580548][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1652.605444][ T6277] bridge_slave_0: left allmulticast mode
[ 1652.620873][ T6277] bridge_slave_0: left promiscuous mode
[ 1652.632970][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1653.532519][ T5884] Bluetooth: hci1: command 0x041b tx timeout
[ 1654.481930][ T5969] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1654.682364][ T5969] usb 9-1: Using ep0 maxpacket: 16
[ 1654.723158][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2508'.
[ 1654.839157][T17482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1654.858621][T17482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1655.577842][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1655.591625][ T5884] Bluetooth: hci1: command 0x041b tx timeout
[ 1655.599570][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1655.617208][ T6277] bond0 (unregistering): Released all slaves
[ 1655.696119][T17377] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1655.894016][T17377] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1655.901875][T17377] bridge_slave_1: entered allmulticast mode
[ 1655.913774][T17377] bridge_slave_1: entered promiscuous mode
[ 1656.070751][ T6277] hsr_slave_0: left promiscuous mode
[ 1656.173855][ T6277] hsr_slave_1: left promiscuous mode
[ 1656.187651][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1656.210860][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1657.350689][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1657.633292][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1657.671900][ T5884] Bluetooth: hci1: command 0x041b tx timeout
[ 1658.703995][T17496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.795173][ T5969] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1658.824193][ T5969] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1658.837743][ T5969] usb 9-1: can't read configurations, error -71
[ 1659.200456][T17377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1659.273464][T17377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1659.441363][   T30] audit: type=1326 audit(1754359255.579:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.4.2514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1c4b8eb69 code=0x0
[ 1659.510347][T17001] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1659.553582][T17001] 8021q: adding VLAN 0 to HW filter on device team0
[ 1659.611964][T17377] team0: Port device team_slave_0 added
[ 1659.653062][T12273] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1659.660340][T12273] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1659.706681][T12273] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1659.713925][T12273] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1659.844235][T17377] team0: Port device team_slave_1 added
[ 1659.879785][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2515'.
[ 1659.924617][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2515'.
[ 1660.696505][T17377] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1660.723172][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1660.749115][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1660.809489][T17377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1660.903527][T17377] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1660.932138][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1661.019347][T17377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1661.489660][T17377] hsr_slave_0: entered promiscuous mode
[ 1661.585379][T17377] hsr_slave_1: entered promiscuous mode
[ 1661.639086][T17377] debugfs: 'hsr0' already exists in 'hsr'
[ 1661.701539][T17377] Cannot create hsr debugfs directory
[ 1661.737841][T16954] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1661.969581][T16954] 8021q: adding VLAN 0 to HW filter on device team0
[ 1662.195600][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1662.202849][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1662.295414][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1662.302632][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1662.475725][T17001] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1662.744436][T17531] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1664.012040][T17001] veth0_vlan: entered promiscuous mode
[ 1664.181564][T10604] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1664.223330][T17001] veth1_vlan: entered promiscuous mode
[ 1664.374551][T10604] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[ 1664.437545][T10604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.518069][T10604] usb 1-1: Product: syz
[ 1664.520465][T17001] veth0_macvtap: entered promiscuous mode
[ 1664.556133][T10604] usb 1-1: Manufacturer: syz
[ 1664.595321][T10604] usb 1-1: SerialNumber: syz
[ 1664.641885][T10604] usb 1-1: config 0 descriptor??
[ 1664.666277][T10604] usb 1-1: Waiting for MOTU Microbook II to boot up...
[ 1664.726335][T10604] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22
[ 1664.789975][T17001] veth1_macvtap: entered promiscuous mode
[ 1664.797567][T10604] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1664.882097][T10604] usb 1-1: USB disconnect, device number 37
[ 1665.026974][T17377] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1665.073744][T17377] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1665.098491][T17001] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1665.139163][T17377] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1665.176823][T17001] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1665.208615][T17377] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1665.390179][ T8617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.422528][ T8617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.494642][T17549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1665.524769][ T8617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.547125][ T8617] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.856330][T13457] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1666.044259][T13457] usb 1-1: Using ep0 maxpacket: 8
[ 1666.099778][T13457] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1666.103259][T10778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1666.127306][T10778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1666.132469][T13457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1666.171854][T13457] usb 1-1: Product: syz
[ 1666.182831][T13457] usb 1-1: Manufacturer: syz
[ 1666.197691][T13457] usb 1-1: SerialNumber: syz
[ 1666.218245][T13457] usb 1-1: config 0 descriptor??
[ 1666.244934][T13457] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1666.265924][T10602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1666.276579][T10602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1666.288472][T10602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1666.297963][T10602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1666.307494][T10602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1666.357892][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2526'.
[ 1666.369541][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2526'.
[ 1666.518247][ T6048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1667.042767][T13457] gspca_sq905: sq905_command: usb_control_msg failed (-110)
[ 1667.050196][T13457] sq905 1-1:0.0: probe with driver sq905 failed with error -110
[ 1667.057902][ T6048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1667.409630][T17562] lo speed is unknown, defaulting to 1000
[ 1668.382003][T10602] Bluetooth: hci3: command tx timeout
[ 1668.456121][T17377] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1669.355179][T17377] 8021q: adding VLAN 0 to HW filter on device team0
[ 1669.767835][T10778] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1669.775036][T10778] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1670.811832][T10602] Bluetooth: hci3: command 0x041b tx timeout
[ 1671.199817][ T6277] bridge_slave_1: left allmulticast mode
[ 1671.261620][ T6277] bridge_slave_1: left promiscuous mode
[ 1671.267439][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1671.369787][ T6277] bridge_slave_0: left allmulticast mode
[ 1671.463044][T10602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1671.474867][T10602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1671.483411][T10602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1671.492224][T10602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1671.500829][T10602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1671.608690][ T6277] bridge_slave_0: left promiscuous mode
[ 1671.619646][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1671.639515][T17600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1671.881636][ T5969] usb 1-1: USB disconnect, device number 38
[ 1672.267246][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2538'.
[ 1672.280885][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2538'.
[ 1672.862532][T10602] Bluetooth: hci3: command 0x041b tx timeout
[ 1673.000255][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1673.030500][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1673.070055][ T6277] bond0 (unregistering): Released all slaves
[ 1673.102044][T12927] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1673.157420][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1673.164640][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1673.220336][T17562] chnl_net:caif_netlink_parms(): no params data found
[ 1673.411828][T12927] usb 5-1: Using ep0 maxpacket: 16
[ 1673.469726][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2541'.
[ 1673.552817][T17625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1673.563798][T17625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1673.601670][T10602] Bluetooth: hci5: command tx timeout
[ 1673.661561][ T6277] hsr_slave_0: left promiscuous mode
[ 1673.701612][ T6277] hsr_slave_1: left promiscuous mode
[ 1673.707933][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1673.761150][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1674.942677][T10602] Bluetooth: hci3: command 0x041b tx timeout
[ 1675.492228][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1675.661629][T10602] Bluetooth: hci5: command 0x041b tx timeout
[ 1675.707627][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1676.528634][   T30] audit: type=1326 audit(1754359272.669:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17641 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8258d8eb69 code=0x7ffc0000
[ 1676.597542][   T30] audit: type=1326 audit(1754359272.709:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17641 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8258d8eb69 code=0x7ffc0000
[ 1676.632691][   T30] audit: type=1326 audit(1754359272.709:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17641 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8258d8eb69 code=0x7ffc0000
[ 1676.663041][   T30] audit: type=1326 audit(1754359272.709:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17641 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8258d8eb69 code=0x7ffc0000
[ 1676.696476][   T30] audit: type=1326 audit(1754359272.709:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17641 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8258d8eb69 code=0x7ffc0000
[ 1677.022568][ T5884] Bluetooth: hci3: command 0x041b tx timeout
[ 1677.488957][T12927] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1677.608878][T12927] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1677.644285][T12927] usb 5-1: can't read configurations, error -71
[ 1677.701950][T17648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.741590][ T5884] Bluetooth: hci5: command 0x041b tx timeout
[ 1677.767277][T17601] lo speed is unknown, defaulting to 1000
[ 1677.774540][T17377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1677.907566][T17377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1677.947014][T17562] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1677.971645][T17562] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1677.978854][T17562] bridge_slave_0: entered allmulticast mode
[ 1678.060054][T17562] bridge_slave_0: entered promiscuous mode
[ 1678.121705][T17562] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1678.142986][T17562] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1678.150214][T17562] bridge_slave_1: entered allmulticast mode
[ 1678.173793][T17562] bridge_slave_1: entered promiscuous mode
[ 1678.467630][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1678.478572][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1678.602823][T17562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1678.646397][T17562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1678.887352][T17562] team0: Port device team_slave_0 added
[ 1678.911972][ T5969] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[ 1678.919149][T17562] team0: Port device team_slave_1 added
[ 1679.083980][ T5969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.126435][ T5969] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 1679.145347][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1679.156217][ T5969] usb 5-1: SerialNumber: syz
[ 1679.181020][ T5969] usb-storage 5-1:1.0: USB Mass Storage device detected
[ 1679.188821][T17562] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1679.207938][T17562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1679.219633][ T5969] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 1679.252289][T17562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1679.313322][T17562] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1679.323651][T17562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1679.349991][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1679.357556][T17562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1679.502653][ T6277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1679.827798][ T5884] Bluetooth: hci5: command 0x041b tx timeout
[ 1679.938910][ T6277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1680.026645][T17562] hsr_slave_0: entered promiscuous mode
[ 1680.033741][T17562] hsr_slave_1: entered promiscuous mode
[ 1680.118057][ T6277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1680.233060][T17377] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1680.408463][ T5969] usb 5-1: USB disconnect, device number 55
[ 1680.655690][ T6277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1681.168816][T17601] chnl_net:caif_netlink_parms(): no params data found
[ 1681.951919][ T5884] Bluetooth: hci5: command 0x041b tx timeout
[ 1683.070744][T17698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1683.282629][ T6277] bridge_slave_1: left allmulticast mode
[ 1683.288292][ T6277] bridge_slave_1: left promiscuous mode
[ 1683.301867][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1683.337032][ T6277] bridge_slave_0: left allmulticast mode
[ 1683.382077][ T6277] bridge_slave_0: left promiscuous mode
[ 1683.408646][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1684.680954][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2565'.
[ 1684.690195][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2565'.
[ 1686.036121][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1686.048237][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1686.058796][ T6277] bond0 (unregistering): Released all slaves
[ 1686.333581][T17601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1686.371698][T17601] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1686.411863][T17601] bridge_slave_0: entered allmulticast mode
[ 1686.419870][T17601] bridge_slave_0: entered promiscuous mode
[ 1686.623589][T17601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1686.630872][T17601] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1686.701853][T17601] bridge_slave_1: entered allmulticast mode
[ 1686.709901][T17601] bridge_slave_1: entered promiscuous mode
[ 1687.291856][ T6277] hsr_slave_0: left promiscuous mode
[ 1687.332662][ T6277] hsr_slave_1: left promiscuous mode
[ 1687.371919][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1687.389528][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1687.422613][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1687.440209][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1687.549021][ T6277] veth1_macvtap: left promiscuous mode
[ 1687.578839][ T6277] veth0_macvtap: left promiscuous mode
[ 1687.606911][ T6277] veth1_vlan: left promiscuous mode
[ 1687.632209][ T6277] veth0_vlan: left promiscuous mode
[ 1687.956723][T17727] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2568'.
[ 1688.568621][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'.
[ 1688.678371][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'.
[ 1688.688163][T17733] netlink: 'syz.0.2569': attribute type 5 has an invalid length.
[ 1688.688291][T17733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2569'.
[ 1690.187677][ T6277] team0 (unregistering): Port device team_slave_1 removed
[ 1690.487526][ T6277] team0 (unregistering): Port device team_slave_0 removed
[ 1691.548432][T17745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1691.673265][T17601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1691.808586][T17733] geneve2: entered promiscuous mode
[ 1691.837118][T17733] geneve2: entered allmulticast mode
[ 1691.901849][T14638] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 1691.963090][T14638] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 1692.003012][T17601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1692.675908][T17377] veth0_vlan: entered promiscuous mode
[ 1692.689852][T14638] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 1692.760949][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'.
[ 1692.770127][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'.
[ 1693.041320][T14638] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 1693.380576][T17601] team0: Port device team_slave_0 added
[ 1693.423140][T17601] team0: Port device team_slave_1 added
[ 1693.947076][T17377] veth1_vlan: entered promiscuous mode
[ 1693.963693][T17766] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1693.970238][T17766] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1693.977868][T17766] vhci_hcd vhci_hcd.0: Device attached
[ 1694.071099][T17601] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1694.108142][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1694.201116][T17601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1694.221936][T10604] vhci_hcd: vhci_device speed not set
[ 1694.262250][T17601] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1694.291522][ T5947] usb 5-1: new low-speed USB device number 56 using dummy_hcd
[ 1694.299158][T10604] usb 41-1: new full-speed USB device number 10 using vhci_hcd
[ 1694.309995][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1694.365786][T17601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1694.494402][ T5947] usb 5-1: config 0 has no interfaces?
[ 1694.510166][ T5947] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1694.566163][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1694.630986][ T5947] usb 5-1: config 0 descriptor??
[ 1694.807909][T17601] hsr_slave_0: entered promiscuous mode
[ 1694.815078][T17601] hsr_slave_1: entered promiscuous mode
[ 1694.852101][T17770] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 8
[ 1695.721063][T17601] debugfs: 'hsr0' already exists in 'hsr'
[ 1695.744171][   T13] vhci_hcd: stop threads
[ 1695.768590][   T13] vhci_hcd: release socket
[ 1695.777066][T17601] Cannot create hsr debugfs directory
[ 1695.782572][   T13] vhci_hcd: disconnect device
[ 1695.924756][T17786] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1695.959183][T17562] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1696.015025][T17562] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1696.224464][T17562] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1697.126609][T12927] usb 5-1: USB disconnect, device number 56
[ 1697.222831][T17562] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1697.601202][T17799] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2584'.
[ 1697.701139][T17377] veth0_macvtap: entered promiscuous mode
[ 1697.965126][T17377] veth1_macvtap: entered promiscuous mode
[ 1698.130002][T17377] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1698.368823][T17813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1698.742842][T17377] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1698.892185][T17562] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1699.146377][ T8617] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1699.175892][ T8617] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1699.278698][ T8617] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1699.306382][ T8617] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1699.415901][T10604] vhci_hcd: vhci_device speed not set
[ 1699.451985][T17562] 8021q: adding VLAN 0 to HW filter on device team0
[ 1699.524139][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1699.531359][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1699.560204][T17832] loop6: detected capacity change from 0 to 524287999
[ 1699.644441][T17833] vlan2: entered allmulticast mode
[ 1699.649939][T17833] dummy0: entered allmulticast mode
[ 1699.844333][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2592'.
[ 1699.913064][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2592'.
[ 1700.038589][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1700.045869][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1700.769692][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1700.819053][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1701.247934][ T6048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1701.305495][ T6048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1701.515449][T17601] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1701.862850][T17601] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1702.050240][T17601] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1703.488016][T17601] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1703.961820][T10604] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1704.132521][T17562] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1704.261862][T10604] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1704.324496][T10604] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1704.357541][T10604] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1704.415390][T10604] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1704.473782][T17874] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1704.494482][T10604] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1704.745369][T17874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1704.796690][T17874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1704.907320][T17874] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1704.943554][T17562] veth0_vlan: entered promiscuous mode
[ 1704.966257][   T30] audit: type=1326 audit(1754359301.069:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1705.030356][T17601] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1705.058111][   T30] audit: type=1326 audit(1754359301.069:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1705.086197][   T30] audit: type=1326 audit(1754359301.069:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1705.204106][   T30] audit: type=1326 audit(1754359301.069:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1705.233993][   T30] audit: type=1326 audit(1754359301.069:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1705.267423][   T43] usb 6-1: USB disconnect, device number 3
[ 1705.283333][T17562] veth1_vlan: entered promiscuous mode
[ 1705.317084][   T30] audit: type=1326 audit(1754359301.069:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1705.364437][   T30] audit: type=1326 audit(1754359301.069:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1705.379602][T17601] 8021q: adding VLAN 0 to HW filter on device team0
[ 1706.065198][T14638] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1706.072610][T14638] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1706.098554][T14638] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1706.105789][T14638] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1706.165262][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2595'.
[ 1706.177834][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2595'.
[ 1706.219211][   T30] audit: type=1326 audit(1754359301.069:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1706.333649][T17601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1706.367983][   T30] audit: type=1326 audit(1754359301.189:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1706.428453][T17562] veth0_macvtap: entered promiscuous mode
[ 1706.519113][T17562] veth1_macvtap: entered promiscuous mode
[ 1706.521673][   T30] audit: type=1326 audit(1754359301.189:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17868 comm="syz.5.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1706.690838][T17562] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1706.783247][T17562] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1706.791628][T17899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1706.878211][T14638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1706.897670][T14638] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1707.568848][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1707.639115][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1708.025846][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'.
[ 1708.382172][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'.
[ 1708.720536][T17601] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1708.965965][T14638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1708.981641][ T5947] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1709.020547][T14638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1709.301676][ T5947] usb 9-1: Using ep0 maxpacket: 16
[ 1709.397481][T17925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1709.416354][T17925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1709.430576][T14638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1709.449201][T14638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1709.821185][T17601] veth0_vlan: entered promiscuous mode
[ 1710.093323][T17601] veth1_vlan: entered promiscuous mode
[ 1710.262572][ T5884] Bluetooth: unknown link type 128
[ 1710.446216][T17935] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1710.524902][T17601] veth0_macvtap: entered promiscuous mode
[ 1710.542041][T17935] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1710.638586][T17935] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1710.655318][T17601] veth1_macvtap: entered promiscuous mode
[ 1710.739221][T17935] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1710.749673][T17935] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1710.808447][T17935] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1710.982425][T17935] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1710.988790][T17935] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1711.030596][T17601] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1711.043930][T17935] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1711.164723][T17601] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1711.204557][T12273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1711.236430][T12273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1711.320064][T12273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1711.365349][T12273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1711.870668][T12273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1711.905959][T12273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1712.462757][ T5884] Bluetooth: hci1: command 0x041b tx timeout
[ 1712.758055][T12273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1712.784298][ T5884] Bluetooth: hci3: command 0x041b tx timeout
[ 1712.835796][T12273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1713.051471][ T5884] Bluetooth: hci5: command 0x041b tx timeout
[ 1714.552751][ T5884] Bluetooth: hci1: command 0x041b tx timeout
[ 1714.875330][ T5947] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1714.875417][ T5884] Bluetooth: hci3: command 0x041b tx timeout
[ 1714.930179][ T5947] usb 9-1: unable to read config index 0 descriptor/start: -32
[ 1715.065884][ T5947] usb 9-1: chopping to 0 config(s)
[ 1715.071156][ T5947] usb 9-1: can't read configurations, error -32
[ 1715.111929][ T5884] Bluetooth: hci5: command 0x041b tx timeout
[ 1715.271556][ T5947] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1715.643459][ T5947] usb 9-1: device descriptor read/64, error -32
[ 1715.734318][T17980] lo speed is unknown, defaulting to 1000
[ 1715.843418][ T5947] usb usb9-port1: attempt power cycle
[ 1716.701821][ T5884] Bluetooth: hci1: command 0x041b tx timeout
[ 1716.947466][ T5884] Bluetooth: hci3: command 0x041b tx timeout
[ 1717.181709][ T5884] Bluetooth: hci5: command 0x041b tx timeout
[ 1718.137890][T18000] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1718.144585][T18000] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1718.153347][T18000] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1718.159254][T18000] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1718.168407][T18000] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1718.174351][T18000] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1718.368052][T17998] binder: 17997:17998 ioctl c0306201 200000004a40 returned -22
[ 1719.289339][T10602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1719.313471][T10602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1719.321279][T10602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1719.344742][T10602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1719.353039][T10602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1719.388463][ T5884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1719.398670][ T5884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1719.412100][ T5884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1719.421071][ T5884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1719.443414][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1719.784506][T18014] lo speed is unknown, defaulting to 1000
[ 1721.501706][T10602] Bluetooth: hci0: command tx timeout
[ 1722.709614][T18014] chnl_net:caif_netlink_parms(): no params data found
[ 1722.740602][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'.
[ 1722.860118][T18049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1723.070795][T18049] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1723.306028][T18054] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2632'.
[ 1723.523880][T18058] bio_check_eod: 2 callbacks suppressed
[ 1723.523901][T18058] syz.2.2633: attempt to access beyond end of device
[ 1723.523901][T18058] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1723.625056][T10602] Bluetooth: hci0: command tx timeout
[ 1723.671805][T18058] syz.2.2633: attempt to access beyond end of device
[ 1723.671805][T18058] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1723.710507][T18058] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[ 1723.720380][T18058] syz.2.2633: attempt to access beyond end of device
[ 1723.720380][T18058] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1723.824450][T18058] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[ 1723.846706][T18058] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[ 1723.855514][T18058] UDF-fs: Scanning with blocksize 1024 failed
[ 1723.871273][T18058] syz.2.2633: attempt to access beyond end of device
[ 1723.871273][T18058] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[ 1723.980113][T18014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1723.990105][T18058] syz.2.2633: attempt to access beyond end of device
[ 1723.990105][T18058] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 1724.051661][T18014] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1724.058950][T18014] bridge_slave_0: entered allmulticast mode
[ 1724.065060][T18058] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[ 1724.126212][T18058] syz.2.2633: attempt to access beyond end of device
[ 1724.126212][T18058] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 1724.152062][T18014] bridge_slave_0: entered promiscuous mode
[ 1724.182998][T18058] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[ 1724.213203][T18014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1724.230609][T18058] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[ 1724.271904][T18014] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1724.279185][T18014] bridge_slave_1: entered allmulticast mode
[ 1724.315734][T18014] bridge_slave_1: entered promiscuous mode
[ 1724.384564][T18080] trusted_key: encrypted_key: keylen parameter is missing
[ 1724.454320][T18058] UDF-fs: Scanning with blocksize 2048 failed
[ 1724.976179][T18058] syz.2.2633: attempt to access beyond end of device
[ 1724.976179][T18058] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1725.088245][T18058] syz.2.2633: attempt to access beyond end of device
[ 1725.088245][T18058] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0
[ 1725.200704][T18058] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[ 1725.268275][T18058] syz.2.2633: attempt to access beyond end of device
[ 1725.268275][T18058] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0
[ 1725.391525][T18058] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[ 1725.600809][T18058] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[ 1725.661546][T10602] Bluetooth: hci0: command tx timeout
[ 1725.676806][T18058] UDF-fs: Scanning with blocksize 4096 failed
[ 1725.737186][T18058] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[ 1725.820981][T18058] block nbd2: shutting down sockets
[ 1727.760387][T10602] Bluetooth: hci0: command tx timeout
[ 1728.961330][T18014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1729.105564][T18014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1731.803923][T18014] team0: Port device team_slave_0 added
[ 1731.901040][T18115] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1732.138746][T18014] team0: Port device team_slave_1 added
[ 1732.172896][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2648'.
[ 1732.183250][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2648'.
[ 1732.354175][T18014] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1732.391456][T18014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1732.500923][T18014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1732.541253][T18014] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1732.557125][T18014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1732.757388][T18014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1733.999525][T18014] hsr_slave_0: entered promiscuous mode
[ 1734.106769][T18014] hsr_slave_1: entered promiscuous mode
[ 1734.219936][T18014] debugfs: 'hsr0' already exists in 'hsr'
[ 1734.226113][T18014] Cannot create hsr debugfs directory
[ 1738.478274][T18014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1738.495770][T18173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2664'.
[ 1738.520988][T18014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1739.091545][T10604] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[ 1739.215076][T18183] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1739.546036][T10604] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1739.558920][T18014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1739.593965][T10604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1739.609531][T18014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1739.634468][T10604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1739.666311][T10604] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1739.691632][T18192] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1739.697465][T10604] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1739.734658][T10604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1739.769379][T10604] usb 3-1: config 0 descriptor??
[ 1739.804027][T10604] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1739.825579][T18014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1739.843008][T18014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1739.913777][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1739.920112][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1740.627843][T10604] spca561 3-1:0.0: probe with driver spca561 failed with error -22
[ 1740.667016][T10604] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1740.728781][T10604] usb 3-1: MIDIStreaming interface descriptor not found
[ 1740.815603][T18014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1740.858155][T10604] usb 3-1: USB disconnect, device number 18
[ 1740.865235][T18014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1741.147982][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2669'.
[ 1741.157050][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'.
[ 1741.632022][T18014] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1741.767330][T18014] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1743.678758][T18221] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1743.684794][T18221] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1743.806552][T18014] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1747.372102][T18014] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1749.138021][T18014] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1749.811076][T18014] 8021q: adding VLAN 0 to HW filter on device team0
[ 1750.464472][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1750.471675][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1750.547647][T18012] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1750.554804][T18012] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1750.732671][T18276] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000060x000000000000000500000000000000000000'
[ 1751.049423][T18014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1751.060063][T18014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1751.274587][   T10] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[ 1751.764958][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1751.784681][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1751.844017][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1751.896013][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1751.964601][   T10] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1751.999644][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1752.062552][   T10] usb 5-1: config 0 descriptor??
[ 1752.096331][   T10] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1752.292422][   T10] spca561 5-1:0.0: probe with driver spca561 failed with error -22
[ 1752.326462][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1752.352136][   T10] usb 5-1: MIDIStreaming interface descriptor not found
[ 1752.453252][   T10] usb 5-1: USB disconnect, device number 57
[ 1752.913849][T18014] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1753.160933][T18310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2696'.
[ 1753.192232][T18310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2696'.
[ 1753.237771][T18310] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[ 1753.354896][T18014] veth0_vlan: entered promiscuous mode
[ 1753.486001][T18014] veth1_vlan: entered promiscuous mode
[ 1753.687300][T18014] veth0_macvtap: entered promiscuous mode
[ 1753.846814][T18014] veth1_macvtap: entered promiscuous mode
[ 1753.886331][T18014] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1753.968860][T18014] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1754.112240][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2695'.
[ 1754.121948][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2695'.
[ 1754.570218][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.598853][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.638856][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1754.669095][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1755.063323][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1755.121901][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1755.891021][T18012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1755.951501][T18012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1756.618325][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'.
[ 1756.859062][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'.
[ 1760.565752][T18393] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.2717'.
[ 1760.698568][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1760.714293][ T5884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1760.724019][ T5884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1760.731858][ T5884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1760.740821][ T5884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1760.750584][ T5884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1763.712274][ T5884] Bluetooth: hci2: command tx timeout
[ 1763.779218][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1763.833179][T18397] lo speed is unknown, defaulting to 1000
[ 1764.176621][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1764.296149][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1765.072024][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2721'.
[ 1765.083641][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2721'.
[ 1765.752451][ T5884] Bluetooth: hci2: command tx timeout
[ 1765.863064][   T13] bridge_slave_1: left allmulticast mode
[ 1765.899218][   T13] bridge_slave_1: left promiscuous mode
[ 1766.131706][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1767.252169][   T13] bridge_slave_0: left allmulticast mode
[ 1767.257856][   T13] bridge_slave_0: left promiscuous mode
[ 1767.321763][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1767.821962][ T5884] Bluetooth: hci2: command tx timeout
[ 1769.901537][ T5884] Bluetooth: hci2: command tx timeout
[ 1770.652291][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1770.711085][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1770.725925][   T13] bond0 (unregistering): Released all slaves
[ 1771.090000][   T13] bond1 (unregistering): Released all slaves
[ 1771.465178][   T13] bond2 (unregistering): Released all slaves
[ 1771.813863][   T13] bond3 (unregistering): Released all slaves
[ 1772.093221][   T13] bond4 (unregistering): Released all slaves
[ 1772.509346][   T13] bond5 (unregistering): Released all slaves
[ 1772.778228][   T13] bond6 (unregistering): Released all slaves
[ 1772.882232][T18446] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1772.889495][T18446] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1772.898323][T18446] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1772.904021][T18397] chnl_net:caif_netlink_parms(): no params data found
[ 1773.135292][T18473] lo speed is unknown, defaulting to 1000
[ 1773.246037][T18463] lo speed is unknown, defaulting to 1000
[ 1773.681225][T18495] binder: 18491:18495 ioctl c0306201 200000004a40 returned -22
[ 1773.986884][T18498] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1773.999781][T18397] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1774.012561][T18397] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1774.030847][T18397] bridge_slave_0: entered allmulticast mode
[ 1774.049219][T18397] bridge_slave_0: entered promiscuous mode
[ 1774.238628][T18397] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1774.258363][T18397] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1774.279265][T18397] bridge_slave_1: entered allmulticast mode
[ 1774.308242][T18397] bridge_slave_1: entered promiscuous mode
[ 1775.021609][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1776.100014][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2741'.
[ 1776.121614][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2741'.
[ 1776.199544][T18397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1776.249236][T18397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1776.616654][T18397] team0: Port device team_slave_0 added
[ 1776.655335][T18397] team0: Port device team_slave_1 added
[ 1777.103650][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1777.649134][T18397] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1777.729387][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1777.810946][T18397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1777.924545][T18397] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1777.975532][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2744'.
[ 1777.987417][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2744'.
[ 1777.987872][T18397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1777.987925][T18397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1778.842863][   T13] hsr_slave_0: left promiscuous mode
[ 1779.102052][   T13] hsr_slave_1: left promiscuous mode
[ 1779.190142][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1779.223836][   T13] veth1_macvtap: left promiscuous mode
[ 1779.248271][   T13] veth0_macvtap: left promiscuous mode
[ 1779.256487][   T13] veth1_vlan: left promiscuous mode
[ 1779.263881][   T13] veth0_vlan: left promiscuous mode
[ 1781.069588][T18571] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2750'.
[ 1782.439194][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1782.510311][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1783.760513][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2756'.
[ 1784.333385][T18554] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1785.273832][T18397] hsr_slave_0: entered promiscuous mode
[ 1785.280636][T18397] hsr_slave_1: entered promiscuous mode
[ 1785.342450][T18397] debugfs: 'hsr0' already exists in 'hsr'
[ 1785.389341][T18397] Cannot create hsr debugfs directory
[ 1786.393946][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1786.788714][   T13] IPVS: stop unused estimator thread 0...
[ 1787.846440][T18627] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2762'.
[ 1788.197598][ T5969] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1788.352250][ T5969] usb 2-1: Using ep0 maxpacket: 8
[ 1788.396689][ T5969] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1788.420028][ T5969] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1788.478478][ T5969] usb 2-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1788.537721][ T5969] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1788.570441][ T5969] usb 2-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[ 1788.600917][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1788.649676][ T5969] usb 2-1: Product: syz
[ 1788.684861][ T5969] usb 2-1: Manufacturer: syz
[ 1788.711187][ T5969] usb 2-1: SerialNumber: syz
[ 1788.848250][T18397] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1789.402744][ T5969] usb 2-1: USB disconnect, device number 4
[ 1789.406870][T18397] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1789.553496][T18397] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1789.610227][T18397] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1789.922502][T18649] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1789.997295][T18397] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1790.028785][T18397] 8021q: adding VLAN 0 to HW filter on device team0
[ 1790.038637][T18661] nbd8: detected capacity change from 0 to 10
[ 1790.058755][T18013] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1790.065882][T18013] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1790.145651][T18013] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1790.152888][T18013] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1790.747020][T18656] block nbd8: shutting down sockets
[ 1790.751496][   T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[ 1790.866709][T18397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1791.001558][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1791.037902][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1791.102251][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1791.130184][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1791.188203][   T10] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1791.231495][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1791.257928][T18681] trusted_key: encrypted_key: master key parameter 'tted:syz' is invalid
[ 1791.272773][   T10] usb 3-1: config 0 descriptor??
[ 1791.307258][   T10] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1791.484813][   T10] spca561 3-1:0.0: probe with driver spca561 failed with error -22
[ 1791.524125][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1791.531121][   T10] usb 3-1: MIDIStreaming interface descriptor not found
[ 1791.592686][T18693] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2776'.
[ 1791.660945][   T10] usb 3-1: USB disconnect, device number 19
[ 1791.913598][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'.
[ 1791.991155][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'.
[ 1792.001182][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1792.341702][T18397] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1793.207448][T18718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'.
[ 1793.252797][T18718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'.
[ 1794.588219][T18733] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[ 1794.594791][T18733] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1794.665743][T18733] vhci_hcd vhci_hcd.0: Device attached
[ 1794.863210][T12927] vhci_hcd: vhci_device speed not set
[ 1795.251759][T12927] usb 49-1: new full-speed USB device number 2 using vhci_hcd
[ 1795.347043][T16185] usb 9-1: new low-speed USB device number 17 using dummy_hcd
[ 1795.693018][T16185] usb 9-1: config 0 has no interfaces?
[ 1795.709198][T16185] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1795.786215][T16185] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1796.092645][T16185] usb 9-1: config 0 descriptor??
[ 1797.103624][T18734] vhci_hcd: unknown pdu 2
[ 1797.115120][ T6576] vhci_hcd: stop threads
[ 1797.119437][ T6576] vhci_hcd: release socket
[ 1797.156191][T18397] veth0_vlan: entered promiscuous mode
[ 1797.181517][T12927] vhci_hcd: vhci_device speed not set
[ 1797.212123][ T6576] vhci_hcd: disconnect device
[ 1797.214821][T18397] veth1_vlan: entered promiscuous mode
[ 1797.341544][T12927] usb 49-1: device descriptor read/64, error -71
[ 1797.532808][T12927] vhci_hcd: vhci_device speed not set
[ 1797.678704][T18736] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1797.917487][T18764] trusted_key: encrypted_key: master key parameter 'tted:syz' is invalid
[ 1797.930159][T18397] veth0_macvtap: entered promiscuous mode
[ 1798.078044][T18397] veth1_macvtap: entered promiscuous mode
[ 1798.116116][T18770] binder_alloc: 18769: binder_alloc_buf, no vma
[ 1798.153995][T18770] binder: 18769:18770 ioctl c0306201 200000004a40 returned -22
[ 1798.216144][T18397] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1798.292941][T18397] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1798.325871][T18772] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2791'.
[ 1798.365765][ T6277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1798.407627][ T6277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1798.466272][ T6277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1798.490529][ T6277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1799.633863][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1799.893281][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1800.261207][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1800.270426][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1801.347947][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1801.354454][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1802.519161][T18803] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.2708'.
[ 1804.050110][T18827] trusted_key: encrypted_key: master key parameter 'tted:syz' is invalid
[ 1804.153676][T18828] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2802'.
[ 1804.169068][T18828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1804.994176][T12954] usb 9-1: USB disconnect, device number 17
[ 1805.896844][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1805.896870][   T30] audit: type=1326 audit(1754359402.039:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1806.183852][   T30] audit: type=1326 audit(1754359402.109:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1806.347840][   T30] audit: type=1326 audit(1754359402.109:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1806.505488][   T30] audit: type=1326 audit(1754359402.119:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1806.711158][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'.
[ 1806.740184][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'.
[ 1807.121674][   T30] audit: type=1326 audit(1754359402.119:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1807.282853][   T30] audit: type=1326 audit(1754359402.129:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1807.587154][   T30] audit: type=1326 audit(1754359402.129:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.5.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad38d8eb69 code=0x7ffc0000
[ 1812.471706][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'.
[ 1812.606121][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2818'.
[ 1812.671713][T18892] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2818'.
[ 1812.809644][T18892] geneve2: entered promiscuous mode
[ 1812.818206][T18892] geneve2: entered allmulticast mode
[ 1815.222126][T18915] tipc: Started in network mode
[ 1815.227389][T18915] tipc: Node identity 56ad5463138e, cluster identity 4711
[ 1815.269800][T18915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1815.384749][T18915] syzkaller0: entered promiscuous mode
[ 1815.390264][T18915] syzkaller0: entered allmulticast mode
[ 1815.743550][T18931] tipc: Resetting bearer <eth:syzkaller0>
[ 1815.884192][T18911] tipc: Resetting bearer <eth:syzkaller0>
[ 1815.998943][T18911] tipc: Disabling bearer <eth:syzkaller0>
[ 1816.128722][T18943] nbd4: detected capacity change from 0 to 10
[ 1816.207120][T18946] block nbd4: Send control failed (result -89)
[ 1816.590657][T18946] block nbd4: Request send failed, requeueing
[ 1816.643705][ T5884] block nbd4: Receive control failed (result -32)
[ 1816.643928][ T8620] block nbd4: Dead connection, failed to find a fallback
[ 1816.658689][ T8620] block nbd4: shutting down sockets
[ 1816.667924][ T8620] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1816.677056][ T8620] buffer_io_error: 6 callbacks suppressed
[ 1816.677078][ T8620] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1816.711502][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1816.866580][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1816.961944][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1817.211995][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1817.467113][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1817.492391][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1818.185197][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1818.516432][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1818.525095][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1818.545526][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1818.652747][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1818.702430][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1818.803492][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1818.870233][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1818.927991][T18946] ldm_validate_partition_table(): Disk read failed.
[ 1818.976402][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1819.055103][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1819.151886][T18946] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1819.151946][T18946] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1819.152283][T18946] Dev nbd4: unable to read RDB block 0
[ 1819.152668][T18946]  nbd4: unable to read partition table
[ 1819.152892][T18946] nbd4: partition table beyond EOD, truncated
[ 1819.158195][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 1819.168421][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=4, location=4
[ 1819.168665][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=3, location=3
[ 1819.168799][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=2, location=2
[ 1819.168948][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 1819.168974][T18946] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[ 1819.168994][T18946] UDF-fs: Scanning with blocksize 1024 failed
[ 1819.169802][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 1819.170007][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1
[ 1819.170139][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0
[ 1819.170240][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 1819.170265][T18946] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[ 1819.170285][T18946] UDF-fs: Scanning with blocksize 2048 failed
[ 1819.209090][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[ 1819.209309][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0
[ 1819.209399][T18946] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[ 1819.209425][T18946] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found
[ 1819.209443][T18946] UDF-fs: Scanning with blocksize 4096 failed
[ 1819.209458][T18946] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[ 1822.862213][T19002] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1824.898949][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1825.981518][   T10] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[ 1826.133659][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1826.164377][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1826.216034][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1826.271419][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1826.341510][   T10] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1826.367551][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1826.406437][   T10] usb 5-1: config 0 descriptor??
[ 1826.454560][   T10] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1826.487539][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'.
[ 1826.582374][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'.
[ 1826.654870][   T10] spca561 5-1:0.0: probe with driver spca561 failed with error -22
[ 1826.684546][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1826.713638][   T10] usb 5-1: MIDIStreaming interface descriptor not found
[ 1826.813982][   T10] usb 5-1: USB disconnect, device number 58
[ 1827.588409][ T5884] Bluetooth: unknown link type 128
[ 1827.733278][T19064] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1829.742477][ T5884] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1830.291758][T19091] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2867'.
[ 1831.952059][T19105] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[ 1831.958639][T19105] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1832.108184][T19105] vhci_hcd vhci_hcd.0: Device attached
[ 1832.291533][T12927] vhci_hcd: vhci_device speed not set
[ 1832.411576][   T43] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[ 1832.421983][T12927] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[ 1832.616059][   T43] usb 6-1: config 0 has no interfaces?
[ 1832.731996][   T43] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1832.774613][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1833.129550][   T43] usb 6-1: config 0 descriptor??
[ 1833.531474][T19106] vhci_hcd: unknown pdu 2
[ 1833.568870][T18012] vhci_hcd: stop threads
[ 1833.601533][T12927] vhci_hcd: vhci_device speed not set
[ 1833.601629][T18012] vhci_hcd: release socket
[ 1833.663187][T12927] usb 43-1: device descriptor read/64, error -71
[ 1833.667028][T18012] vhci_hcd: disconnect device
[ 1834.775850][T19129] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1834.811594][T10604] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1834.891541][T12927] vhci_hcd: vhci_device speed not set
[ 1835.082258][T10604] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1835.159000][T10604] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1835.236662][T10604] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1835.292855][T10604] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1835.362533][T19134] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1835.417450][T10604] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1835.632195][T19134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1835.769804][T19134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1835.789954][T19134] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1835.814509][   T30] audit: type=1326 audit(1754359431.949:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1835.975021][   T30] audit: type=1326 audit(1754359431.949:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1836.071464][   T30] audit: type=1326 audit(1754359431.949:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1836.273232][   T30] audit: type=1326 audit(1754359431.949:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1836.396162][T19149] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2881'.
[ 1836.419253][   T30] audit: type=1326 audit(1754359431.949:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1836.843951][   T30] audit: type=1326 audit(1754359431.949:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1837.021610][   T30] audit: type=1326 audit(1754359431.949:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1837.208305][   T30] audit: type=1326 audit(1754359431.949:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1837.309209][T19161] syz.0.2883: attempt to access beyond end of device
[ 1837.309209][T19161] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1837.350309][   T30] audit: type=1326 audit(1754359431.949:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1837.422495][T19161] syz.0.2883: attempt to access beyond end of device
[ 1837.422495][T19161] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1837.441502][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1837.451283][T19161] syz.0.2883: attempt to access beyond end of device
[ 1837.451283][T19161] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1837.464468][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1837.469266][   T30] audit: type=1326 audit(1754359431.949:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.8.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598338eb69 code=0x7ffc0000
[ 1837.497387][T19159] nbd0: detected capacity change from 0 to 10
[ 1837.497731][T19161] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1837.521498][T19161] UDF-fs: Scanning with blocksize 1024 failed
[ 1837.567342][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1837.601508][T19161] block nbd0: Send control failed (result -89)
[ 1837.611816][T19161] block nbd0: Request send failed, requeueing
[ 1837.645796][ T8620] block nbd0: Dead connection, failed to find a fallback
[ 1837.653490][ T5884] block nbd0: Receive control failed (result -32)
[ 1837.664405][ T8620] block nbd0: shutting down sockets
[ 1837.669764][ T8620] blk_print_req_error: 11 callbacks suppressed
[ 1837.669787][ T8620] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1837.841237][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1
[ 1837.934904][T19161] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1838.041634][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0
[ 1838.051028][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1838.113836][T12927] usb 6-1: USB disconnect, device number 4
[ 1838.164488][T19161] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1838.172604][T19161] UDF-fs: Scanning with blocksize 2048 failed
[ 1838.254313][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 1838.304625][T19161] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1838.345064][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0
[ 1838.411662][T19161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[ 1838.449688][T19161] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[ 1838.498582][T19161] UDF-fs: Scanning with blocksize 4096 failed
[ 1838.541801][T19161] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[ 1840.118224][T12954] usb 9-1: USB disconnect, device number 18
[ 1843.245086][T19224] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2894'.
[ 1843.907159][T19238] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[ 1843.913714][T19238] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1844.018024][T19238] vhci_hcd vhci_hcd.0: Device attached
[ 1844.175083][T19209] delete_channel: no stack
[ 1844.271510][   T10] vhci_hcd: vhci_device speed not set
[ 1844.335864][   T10] usb 49-1: new full-speed USB device number 4 using vhci_hcd
[ 1844.980817][T19248] syz.5.2898: attempt to access beyond end of device
[ 1844.980817][T19248] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[ 1845.024792][T19248] syz.5.2898: attempt to access beyond end of device
[ 1845.024792][T19248] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[ 1845.183928][T19248] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[ 1845.235449][T19248] ------------[ cut here ]------------
[ 1845.240962][T19248] WARNING: CPU: 0 PID: 19248 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560
[ 1845.249651][T19248] Modules linked in:
[ 1845.255958][T19248] CPU: 0 UID: 0 PID: 19248 Comm: syz.5.2898 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) 
[ 1845.269161][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1845.279340][T19248] RIP: 0010:__getblk_slow+0x4cc/0x560
[ 1845.284823][T19248] Code: c0 8b 48 89 df e8 f4 e3 bb ff 90 0f 0b e8 4c 2f 74 ff 48 c7 c6 60 55 c0 8b 48 89 df e8 dd e3 bb ff 90 0f 0b e8 35 2f 74 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 56 c0 8b 31 db e8 2d db 52
[ 1845.304518][T19248] RSP: 0018:ffffc9000d0477f0 EFLAGS: 00010287
[ 1845.310641][T19248] RAX: 00000000000195f6 RBX: 0000000000000200 RCX: ffffc9001ea50000
[ 1845.318655][T19248] RDX: 0000000000080000 RSI: ffffffff8247628b RDI: 0000000000000005
[ 1845.326697][T19248] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000
[ 1845.334716][T19248] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148c99700
[ 1845.342783][T19248] R13: 0000000000000200 R14: 0000000000000200 R15: ffff888148c99700
[ 1845.350775][T19248] FS:  00007fad39b616c0(0000) GS:ffff8881246cd000(0000) knlGS:0000000000000000
[ 1845.361841][T19248] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1845.368445][T19248] CR2: 00007f3ae8c2ea10 CR3: 000000005af61000 CR4: 0000000000350ef0
[ 1845.377903][T19248] Call Trace:
[ 1845.381197][T19248]  <TASK>
[ 1845.384165][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.389842][T19248]  ? __pfx___might_resched+0x10/0x10
[ 1845.395235][T19248]  bdev_getblk+0xd4/0xe0
[ 1845.399525][T19248]  __bread_gfp+0x86/0x3c0
[ 1845.403962][T19248]  udf_read_tagged+0xae/0x740
[ 1845.408720][T19248]  udf_check_anchor_block+0x89/0x4b0
[ 1845.414087][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.419756][T19248]  ? udf_get_last_block+0x1ce/0x2a0
[ 1845.425048][T19248]  ? __pfx_udf_check_anchor_block+0x10/0x10
[ 1845.430964][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.436656][T19248]  udf_load_vrs+0x682/0x1070
[ 1845.441280][T19248]  ? __pfx_udf_load_vrs+0x10/0x10
[ 1845.446332][T19248]  ? __pfx_udf_get_last_session+0x10/0x10
[ 1845.452104][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.457819][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.465059][T19248]  ? lockdep_init_map_type+0x5c/0x280
[ 1845.470463][T19248]  udf_fill_super+0x791/0x1df0
[ 1845.476385][T19248]  ? __pfx_udf_fill_super+0x10/0x10
[ 1845.481623][T19248]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1845.486653][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.492341][T19248]  ? find_held_lock+0x2b/0x80
[ 1845.497027][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.503389][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.509077][T19248]  ? sb_set_blocksize+0x176/0x1d0
[ 1845.514172][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.519813][T19248]  ? setup_bdev_super+0x369/0x730
[ 1845.524919][T19248]  get_tree_bdev_flags+0x38c/0x620
[ 1845.530051][T19248]  ? __pfx_udf_fill_super+0x10/0x10
[ 1845.535283][T19248]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1845.540954][T19248]  ? apparmor_capable+0x114/0x1d0
[ 1845.546030][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.551709][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.557370][T19248]  ? security_capable+0x7e/0x260
[ 1845.563800][T19248]  vfs_get_tree+0x8e/0x340
[ 1845.568230][T19248]  path_mount+0x1482/0x1fd0
[ 1845.573729][T19248]  ? __pfx_path_mount+0x10/0x10
[ 1845.578608][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.584318][T19248]  ? kmem_cache_free+0x2d1/0x4d0
[ 1845.589276][T19248]  ? putname+0x154/0x1a0
[ 1845.593598][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.599237][T19248]  ? putname+0x154/0x1a0
[ 1845.603558][T19248]  ? __x64_sys_mount+0x28d/0x310
[ 1845.608555][T19248]  __x64_sys_mount+0x28d/0x310
[ 1845.613432][T19248]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1845.618723][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.624413][T19248]  do_syscall_64+0xcd/0x4c0
[ 1845.628922][T19248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1845.635487][T19248] RIP: 0033:0x7fad38d8eb69
[ 1845.639916][T19248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1845.659527][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1845.667234][T19248] RSP: 002b:00007fad39b61038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1845.676680][T19248] RAX: ffffffffffffffda RBX: 00007fad38fb6160 RCX: 00007fad38d8eb69
[ 1845.684671][T19248] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[ 1845.692772][T19248] RBP: 00007fad38e11df1 R08: 0000000000000000 R09: 0000000000000000
[ 1845.700756][T19248] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000
[ 1845.709010][T19248] R13: 0000000000000001 R14: 00007fad38fb6160 R15: 00007ffef30d1488
[ 1845.717040][T19248]  </TASK>
[ 1845.720054][T19248] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1845.727323][T19248] CPU: 0 UID: 0 PID: 19248 Comm: syz.5.2898 Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(full) 
[ 1845.739036][T19248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1845.749091][T19248] Call Trace:
[ 1845.752360][T19248]  <TASK>
[ 1845.755279][T19248]  dump_stack_lvl+0x3d/0x1f0
[ 1845.759887][T19248]  vpanic+0x6e8/0x7a0
[ 1845.763886][T19248]  ? __pfx_vpanic+0x10/0x10
[ 1845.768431][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.774078][T19248]  ? __getblk_slow+0x4cc/0x560
[ 1845.778846][T19248]  panic+0xca/0xd0
[ 1845.782583][T19248]  ? __pfx_panic+0x10/0x10
[ 1845.787034][T19248]  check_panic_on_warn+0xab/0xb0
[ 1845.791988][T19248]  __warn+0xf6/0x3c0
[ 1845.795876][T19248]  ? __getblk_slow+0x4cc/0x560
[ 1845.800646][T19248]  report_bug+0x3c3/0x580
[ 1845.804988][T19248]  ? __getblk_slow+0x4cc/0x560
[ 1845.809759][T19248]  handle_bug+0x184/0x210
[ 1845.814087][T19248]  exc_invalid_op+0x17/0x50
[ 1845.818593][T19248]  asm_exc_invalid_op+0x1a/0x20
[ 1845.823439][T19248] RIP: 0010:__getblk_slow+0x4cc/0x560
[ 1845.828834][T19248] Code: c0 8b 48 89 df e8 f4 e3 bb ff 90 0f 0b e8 4c 2f 74 ff 48 c7 c6 60 55 c0 8b 48 89 df e8 dd e3 bb ff 90 0f 0b e8 35 2f 74 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 56 c0 8b 31 db e8 2d db 52
[ 1845.848786][T19248] RSP: 0018:ffffc9000d0477f0 EFLAGS: 00010287
[ 1845.854849][T19248] RAX: 00000000000195f6 RBX: 0000000000000200 RCX: ffffc9001ea50000
[ 1845.862813][T19248] RDX: 0000000000080000 RSI: ffffffff8247628b RDI: 0000000000000005
[ 1845.870777][T19248] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000
[ 1845.878743][T19248] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148c99700
[ 1845.886724][T19248] R13: 0000000000000200 R14: 0000000000000200 R15: ffff888148c99700
[ 1845.894703][T19248]  ? __getblk_slow+0x4cb/0x560
[ 1845.899477][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.905115][T19248]  ? __pfx___might_resched+0x10/0x10
[ 1845.910416][T19248]  bdev_getblk+0xd4/0xe0
[ 1845.914667][T19248]  __bread_gfp+0x86/0x3c0
[ 1845.919004][T19248]  udf_read_tagged+0xae/0x740
[ 1845.923718][T19248]  udf_check_anchor_block+0x89/0x4b0
[ 1845.929027][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.934672][T19248]  ? udf_get_last_block+0x1ce/0x2a0
[ 1845.939889][T19248]  ? __pfx_udf_check_anchor_block+0x10/0x10
[ 1845.945814][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.951473][T19248]  udf_load_vrs+0x682/0x1070
[ 1845.956086][T19248]  ? __pfx_udf_load_vrs+0x10/0x10
[ 1845.961119][T19248]  ? __pfx_udf_get_last_session+0x10/0x10
[ 1845.966846][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.972486][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1845.978124][T19248]  ? lockdep_init_map_type+0x5c/0x280
[ 1845.983521][T19248]  udf_fill_super+0x791/0x1df0
[ 1845.988288][T19248]  ? __pfx_udf_fill_super+0x10/0x10
[ 1845.993484][T19248]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1845.998514][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.004151][T19248]  ? find_held_lock+0x2b/0x80
[ 1846.008832][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.014474][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.020109][T19248]  ? sb_set_blocksize+0x176/0x1d0
[ 1846.025141][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.030776][T19248]  ? setup_bdev_super+0x369/0x730
[ 1846.035814][T19248]  get_tree_bdev_flags+0x38c/0x620
[ 1846.040938][T19248]  ? __pfx_udf_fill_super+0x10/0x10
[ 1846.046133][T19248]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1846.051782][T19248]  ? apparmor_capable+0x114/0x1d0
[ 1846.056823][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.062458][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.068091][T19248]  ? security_capable+0x7e/0x260
[ 1846.073051][T19248]  vfs_get_tree+0x8e/0x340
[ 1846.077481][T19248]  path_mount+0x1482/0x1fd0
[ 1846.082000][T19248]  ? __pfx_path_mount+0x10/0x10
[ 1846.086859][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.092506][T19248]  ? kmem_cache_free+0x2d1/0x4d0
[ 1846.097474][T19248]  ? putname+0x154/0x1a0
[ 1846.101731][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.107368][T19248]  ? putname+0x154/0x1a0
[ 1846.111625][T19248]  ? __x64_sys_mount+0x28d/0x310
[ 1846.116584][T19248]  __x64_sys_mount+0x28d/0x310
[ 1846.121363][T19248]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1846.126670][T19248]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1846.132347][T19248]  do_syscall_64+0xcd/0x4c0
[ 1846.136853][T19248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1846.142743][T19248] RIP: 0033:0x7fad38d8eb69
[ 1846.147154][T19248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1846.166756][T19248] RSP: 002b:00007fad39b61038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1846.175175][T19248] RAX: ffffffffffffffda RBX: 00007fad38fb6160 RCX: 00007fad38d8eb69
[ 1846.183156][T19248] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[ 1846.191121][T19248] RBP: 00007fad38e11df1 R08: 0000000000000000 R09: 0000000000000000
[ 1846.199083][T19248] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000
[ 1846.207047][T19248] R13: 0000000000000001 R14: 00007fad38fb6160 R15: 00007ffef30d1488
[ 1846.215030][T19248]  </TASK>
[ 1846.218262][T19248] Kernel Offset: disabled
[ 1846.222584][T19248] Rebooting in 86400 seconds..