last executing test programs:

15m55.885337285s ago: executing program 32 (id=2328):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$can_bcm(r3, 0x0, 0x0)

15m52.801982894s ago: executing program 33 (id=2331):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
fcntl$lock(r3, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0x46}], 0x1, 0x0, 0x1})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x36)
r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r7, &(0x7f00000000c0), 0x26)
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)

12m41.835434553s ago: executing program 3 (id=2657):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0xc70ba000)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0)
syz_usb_connect(0x5, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x68, 0x2d, 0xf1, 0x10, 0xb8c, 0x2303, 0x2963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0xd, 0x88, 0xe0, 0x7, [{{0x9, 0x4, 0xb8, 0x6, 0x0, 0x4a, 0xd9, 0xbf, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "3016"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x81, 0xc}, {0x6, 0x24, 0x1a, 0x6a, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xc4b}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0xff, 0x39}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x6, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x81}, @country_functional={0x6, 0x24, 0x7, 0xfe, 0x5}, @obex={0x5, 0x24, 0x15, 0xffff}]}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xe, 0x2, 0x28, 0x8}, 0x2e, &(0x7f0000000040)={0x5, 0xf, 0x2e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x7, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xf, 0xa2ab}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x7, 0x44}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x97, 0xc0, 0x6}]}})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
timer_create(0x0, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000000c00)=""/4088, 0xff8}], 0x1)

12m41.424140548s ago: executing program 4 (id=2659):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0xc70ba000)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0)
syz_usb_connect(0x5, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x68, 0x2d, 0xf1, 0x10, 0xb8c, 0x2303, 0x2963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0xd, 0x88, 0xe0, 0x7, [{{0x9, 0x4, 0xb8, 0x6, 0x0, 0x4a, 0xd9, 0xbf, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "3016"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x81, 0xc}, {0x6, 0x24, 0x1a, 0x6a, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xc4b}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0xff, 0x39}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x6, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x81}, @country_functional={0x6, 0x24, 0x7, 0xfe, 0x5}, @obex={0x5, 0x24, 0x15, 0xffff}]}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xe, 0x2, 0x28, 0x8}, 0x2e, &(0x7f0000000040)={0x5, 0xf, 0x2e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x7, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xf, 0xa2ab}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x7, 0x44}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x97, 0xc0, 0x6}]}})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r2, 0x81, 0x0, &(0x7f0000000080))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
timer_create(0x0, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000000c00)=""/4088, 0xff8}], 0x1)

12m41.163769658s ago: executing program 3 (id=2660):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x80000b, &(0x7f0000000040)=ANY=[], 0x1, 0x301, &(0x7f0000000ac0)="$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")
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
unshare(0x62040200)
readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

12m40.818862117s ago: executing program 3 (id=2662):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000f07000/0x7000)=nil, 0x7000, 0x2, 0x4c831, r1, 0xc21000)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0x98f900})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r6, 0x0, 0xf, 0x8)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './file0'}, 0xb)

12m38.601278394s ago: executing program 3 (id=2667):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x4, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$radio(0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100))

12m37.903711189s ago: executing program 3 (id=2668):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0xc70ba000)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0)
syz_usb_connect(0x5, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x68, 0x2d, 0xf1, 0x10, 0xb8c, 0x2303, 0x2963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0xd, 0x88, 0xe0, 0x7, [{{0x9, 0x4, 0xb8, 0x6, 0x0, 0x4a, 0xd9, 0xbf, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "3016"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x81, 0xc}, {0x6, 0x24, 0x1a, 0x6a, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xc4b}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x8, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0xff, 0x39}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x6, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x81}, @country_functional={0x6, 0x24, 0x7, 0xfe, 0x5}, @obex={0x5, 0x24, 0x15, 0xffff}]}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xe, 0x2, 0x28, 0x8}, 0x2e, &(0x7f0000000040)={0x5, 0xf, 0x2e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x7, 0xe}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xf, 0xa2ab}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x7, 0x44}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x97, 0xc0, 0x6}]}})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r2, 0x81, 0x4, &(0x7f0000000080)="00012c61")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
timer_create(0x0, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r4, &(0x7f0000000340)=[{&(0x7f0000000c00)=""/4088, 0xff8}], 0x1)

12m37.048369322s ago: executing program 3 (id=2673):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
fcntl$lock(r3, 0x5, &(0x7f0000000240)={0x1, 0x1, 0xfffffffffffffff8, 0x6})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, 0x0, 0x1})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)

12m36.12019305s ago: executing program 4 (id=2675):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r5})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r7}, 0x18)
close_range(0xffffffffffffffff, r7, 0xe8cf8bbcb975f794)
socket$nl_route(0x10, 0x3, 0x0)

12m32.440598979s ago: executing program 4 (id=2678):
openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregs(0xe, r0, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32)

12m31.876658782s ago: executing program 4 (id=2681):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x4, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$radio(0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100))

12m24.449191776s ago: executing program 4 (id=2692):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x0, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x16, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0xd0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000180)={r6, 0x10, "d74bcebdfc4e5945d901eaca87b556a1"}, &(0x7f0000000100)=0x18)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x8, &(0x7f0000000200)=0x371, 0x4)
r7 = openat$ptp0(0xffffff9c, &(0x7f0000000300), 0x400100, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000380))
ppoll(&(0x7f0000000340)=[{r5, 0x1000}, {r4, 0xe200}, {r1, 0x88}, {0xffffffffffffffff, 0x201}, {r4, 0x2000}, {r7, 0x40}, {r3, 0x247a}, {r8, 0x2000}], 0x8, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

12m22.629168422s ago: executing program 4 (id=2693):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r5})
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18)
close_range(0xffffffffffffffff, r6, 0xe8cf8bbcb975f794)
socket$nl_route(0x10, 0x3, 0x0)

12m21.847177586s ago: executing program 34 (id=2673):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
fcntl$lock(r3, 0x5, &(0x7f0000000240)={0x1, 0x1, 0xfffffffffffffff8, 0x6})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1, 0x0, 0x1})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)

12m6.036250558s ago: executing program 35 (id=2693):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r5})
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18)
close_range(0xffffffffffffffff, r6, 0xe8cf8bbcb975f794)
socket$nl_route(0x10, 0x3, 0x0)

9m36.978275272s ago: executing program 0 (id=2941):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce)
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000380)=[{0x3, 0x4, 0x3000}, {0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1000}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff])
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
r2 = syz_open_dev$sg(0x0, 0x0, 0x5)
writev(r2, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863", 0x0, 0x0, 0x0}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r4, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

9m35.559358867s ago: executing program 0 (id=2944):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

9m35.226230853s ago: executing program 0 (id=2946):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x800)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x2400, 0x0)
syz_socket_connect_nvme_tcp()
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00')
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

9m31.01131603s ago: executing program 0 (id=2954):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce)
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000380)=[{0x3, 0x4, 0x3000}, {0x1, 0xbbdd, 0x1000}, {0x1, 0x2, 0x1000}], 0x3)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff])
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
r2 = syz_open_dev$sg(0x0, 0x0, 0x5)
writev(r2, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863", 0x0, 0x0, 0x0}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r4, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

9m29.38559434s ago: executing program 0 (id=2959):
socket(0x11, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

9m27.711010594s ago: executing program 0 (id=2962):
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f00000270c0)=""/102400, 0x19000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0)

9m11.349544775s ago: executing program 36 (id=2962):
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f00000270c0)=""/102400, 0x19000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0)

8m39.652079915s ago: executing program 6 (id=3028):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000000c001900360f00", @ANYRES32=r6, @ANYBLOB="cb400f941e866fca010740953a8e3170a207f9c1be6126f790"], 0x28}, 0x1, 0x0, 0x0, 0x42814}, 0xc004)
ioprio_set$uid(0x0, r6, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0xffffffffffffff58)
syz_fuse_handle_req(r7, 0x0, 0x0, 0x0)

8m38.465000679s ago: executing program 6 (id=3031):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x4, "07000f00007eaba9a208000000706de400000000000000000000008000"})
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
pselect6(0x40, &(0x7f0000000340)={0x3, 0xa00, 0x200100000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001003, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x3, 0xfffffffffffffffb, 0x3, 0x0, 0xb, 0x80000006, 0xfffffffffffffffe}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8m35.243673608s ago: executing program 6 (id=3034):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r3, 0x0, 0x0)
write$vhost_msg_v2(r3, &(0x7f0000000800)={0x2, 0x0, {&(0x7f0000000b80)=""/239, 0xef, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f0000000880)={0x1, {&(0x7f0000000700)=""/15, 0xf, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)

8m33.870107086s ago: executing program 6 (id=3036):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$l2tp(0x2, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0)

8m32.240929313s ago: executing program 6 (id=3042):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r0, 0x0, 0x8002)

8m31.811462165s ago: executing program 6 (id=3044):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = msgget$private(0x0, 0x2)
msgctl$IPC_RMID(r1, 0x0)

8m16.712674415s ago: executing program 37 (id=3044):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = msgget$private(0x0, 0x2)
msgctl$IPC_RMID(r1, 0x0)

4m56.799516266s ago: executing program 5 (id=3290):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00000000000061118c00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x3000005, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, 0x0)

4m55.159757277s ago: executing program 5 (id=3292):
bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000190c0)={'full', 0x20, 0xd, 0x20, 0x6}, 0x2f)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0xa, {0x5, 0x1, 0x0, 0x4000000000008, 0xfffffff9, 0x6e, {0x3, 0xfffffffffffffffb, 0x0, 0x9, 0x7, 0x81, 0x8, 0xfff, 0x8, 0x2000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
ioctl$FS_IOC_SETFLAGS(r4, 0xc0606610, &(0x7f0000000040)=0x60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="1055bb5eab7828f4787e661b51a84ba13b77c6441f478b73959ece90d617f69633d0fb0c966b010377158b6e5f0bf0bd7295e3e8c5182debf3126edc187a960ed88bae864436ab050f2c3aaa933cff9a515f1b8d1520666697d3c68ed24dcca1d6d98c7901840822c21a37f9ad089a41cdc28b928e0f690d1cdc8bfa74584f92c64758c06a144c7e590374418b7322e52ac414fd28aa228192cb85c136ea80e6b2c54ee32797c5cee54e41c21c3ff48d", 0xb0}], 0x1}, 0x44041)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
socket(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

4m53.970413552s ago: executing program 5 (id=3294):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0)

4m45.661583362s ago: executing program 5 (id=3303):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x10a5840, 0x0)
move_mount(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000340)='./file0\x00', 0x272)

4m38.273114967s ago: executing program 5 (id=3316):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2})
r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f00000001c0))
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000)

4m37.41588617s ago: executing program 5 (id=3320):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getrusage(0xffffffffffffffff, 0x0)

4m36.642936257s ago: executing program 38 (id=3320):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getrusage(0xffffffffffffffff, 0x0)

2m44.933300807s ago: executing program 1 (id=3463):
openat(0xffffffffffffff9c, 0x0, 0x2240, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m41.228906918s ago: executing program 1 (id=3466):
openat$tun(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendfile(r1, r0, 0x0, 0x7ffffffd)
ioctl$TIOCMBIS(r0, 0x5416, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x6, 0x3)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0xfdef)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x20000023896)

2m38.700650151s ago: executing program 1 (id=3467):
r0 = syz_open_dev$sndctrl(0x0, 0x3, 0x340)
futex_waitv(&(0x7f00000031c0)=[{0x6, 0xfffffffffffffffc, 0x2}], 0x1, 0x0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202)
write$sndseq(r1, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x989680}}, &(0x7f0000000540))
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
r2 = getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000)

2m37.264672802s ago: executing program 1 (id=3469):
syz_open_dev$ptys(0xc, 0x3, 0x0)
openat$cachefiles(0xffffff9c, 0x0, 0x90200, 0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000240))
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

2m30.614663795s ago: executing program 1 (id=3476):
openat$tun(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendfile(r1, r0, 0x0, 0x7ffffffd)
ioctl$TIOCMBIS(r0, 0x5416, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x6, 0x3)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0xfdef)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r7, r8, 0x0, 0x20000023896)

2m27.184429673s ago: executing program 1 (id=3477):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}})
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)

2m10.524949132s ago: executing program 39 (id=3477):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}})
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)

19.29158256s ago: executing program 2 (id=3636):
iopl(0x3)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0)

16.978473221s ago: executing program 2 (id=3637):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

12.372187993s ago: executing program 9 (id=3644):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x20, 0x0, 0x8040}, 0x0)

12.121870486s ago: executing program 9 (id=3645):
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x4, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x5, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x10001}, 0x8)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725f696e6e6465733d322c739a15697a613d34"])
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="980000086b0000000400000049a5ffff9500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0)
r4 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x1000007, 0x428b}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f0000001480)="2b010ed9a2708e87eed9561f", 0xc})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f00001f0000/0x2000)=nil, 0x2000, 0x3000008, 0x35a4, 0x20000)
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x7, {0x7, 0xe, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)

11.987576279s ago: executing program 2 (id=3646):
iopl(0x3)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0)

9.176636337s ago: executing program 2 (id=3648):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

8.555201368s ago: executing program 9 (id=3649):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xd8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x98, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfd12, 0x7f, 0xe, 0x6}, {0x800, 0xc0, 0x7, 0x6}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

7.933968672s ago: executing program 7 (id=3650):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0xdaa8}, {0xeed, 0x9, 0x4, 0xb}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

7.267531101s ago: executing program 7 (id=3651):
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc345e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xceb57e39b1822153, 0x7}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0)

7.091520776s ago: executing program 7 (id=3652):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(0xffffffffffffffff)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200))
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00')
pipe(&(0x7f0000000040))

5.260078221s ago: executing program 7 (id=3653):
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)

3.972633295s ago: executing program 2 (id=3654):
syz_open_dev$ptys(0xc, 0x3, 0x0)
r0 = openat$cachefiles(0xffffff9c, 0x0, 0x90200, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000000090500000000000000003734d6a91d1b7509d715c7"], 0x24}, 0x1, 0x0, 0x0, 0x401c800}, 0x24000000)
ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000240))
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

3.970290995s ago: executing program 9 (id=3655):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)

3.223074092s ago: executing program 9 (id=3656):
syz_open_dev$sndctrl(0x0, 0x3, 0x340)
futex_waitv(&(0x7f00000031c0)=[{0x6, 0xfffffffffffffffc, 0x2}], 0x1, 0x0, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2})
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000)

2.970836374s ago: executing program 7 (id=3657):
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40910}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

166.925019ms ago: executing program 9 (id=3658):
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)

65.559656ms ago: executing program 2 (id=3659):
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 7 (id=3660):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
syz_open_dev$sndpcmp(0x0, 0x6, 0x50100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180))
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)

kernel console output (not intermixed with test programs):

T17814] hsr_slave_1: entered promiscuous mode
[ 1551.538520][T17814] debugfs: 'hsr0' already exists in 'hsr'
[ 1551.550817][T17814] Cannot create hsr debugfs directory
[ 1551.719607][  T788] usb 8-1: Firmware: major: 0, minor: 255, hardware type: UNKNOWN (145)
[ 1551.752153][T17778] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1551.849918][T17854] hsr_slave_0: entered promiscuous mode
[ 1551.857014][T17854] hsr_slave_1: entered promiscuous mode
[ 1551.865342][T17854] debugfs: 'hsr0' already exists in 'hsr'
[ 1551.873266][T17854] Cannot create hsr debugfs directory
[ 1551.948598][T17778] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1551.974395][T17778] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1552.003744][  T788] usb 8-1: failed to fetch extended address, random address set
[ 1552.011448][  T788] usb 8-1: atusb_probe: initialization failed, error = -524
[ 1552.019191][  T788] atusb 8-1:0.128: probe with driver atusb failed with error -524
[ 1552.161251][T17778] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1552.240295][  T788] usb 8-1: USB disconnect, device number 8
[ 1552.775396][ T1160] hsr_slave_0: left promiscuous mode
[ 1552.807212][ T1160] hsr_slave_1: left promiscuous mode
[ 1552.838503][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1552.858860][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1552.930939][ T1160] hsr_slave_0: left promiscuous mode
[ 1552.944432][ T1160] hsr_slave_1: left promiscuous mode
[ 1552.961073][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1552.971620][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1553.070265][ T1160] hsr_slave_0: left promiscuous mode
[ 1553.128146][ T1160] hsr_slave_1: left promiscuous mode
[ 1553.143364][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1553.150764][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1553.436068][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1553.449905][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1554.208433][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1554.254343][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1554.373196][ T1160] veth1_macvtap: left promiscuous mode
[ 1554.398675][ T1160] veth0_macvtap: left promiscuous mode
[ 1554.456366][ T1160] veth1_vlan: left promiscuous mode
[ 1554.462153][ T1160] veth0_vlan: left promiscuous mode
[ 1559.763272][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 1559.810946][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 1560.252286][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 1560.323186][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 1560.641396][T18093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3128'.
[ 1563.248403][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1563.273900][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1563.285290][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1563.302243][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1563.310496][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1563.405033][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1563.415386][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1563.425035][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1563.439879][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1563.448383][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 1563.456335][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1563.555528][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 1564.741168][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 1564.798862][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 1565.374469][T15473] Bluetooth: hci0: command tx timeout
[ 1565.515349][T17778] kthread_run failed with err -4
[ 1565.542595][T15473] Bluetooth: hci5: command tx timeout
[ 1567.452519][T15473] Bluetooth: hci0: command tx timeout
[ 1567.636664][T15473] Bluetooth: hci5: command tx timeout
[ 1569.612465][T15473] Bluetooth: hci0: command tx timeout
[ 1569.682613][T15473] Bluetooth: hci5: command tx timeout
[ 1571.702917][T15473] Bluetooth: hci0: command tx timeout
[ 1571.725058][T15473] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1571.736212][T15473] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1571.754881][T15473] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1571.762456][T15473] Bluetooth: hci5: command tx timeout
[ 1571.768355][T15473] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1571.776542][T15473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1573.842908][T15473] Bluetooth: hci2: command tx timeout
[ 1574.658123][T18100] chnl_net:caif_netlink_parms(): no params data found
[ 1577.230067][T15473] Bluetooth: hci2: command tx timeout
[ 1578.416089][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1578.428055][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1578.435857][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1578.445782][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1578.454696][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1578.455447][T18102] chnl_net:caif_netlink_parms(): no params data found
[ 1578.600582][T18100] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1578.682676][T18100] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1578.692154][T18100] bridge_slave_0: entered allmulticast mode
[ 1578.773360][T18100] bridge_slave_0: entered promiscuous mode
[ 1578.782929][T18100] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1578.790193][T18100] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1578.802678][T18100] bridge_slave_1: entered allmulticast mode
[ 1578.811030][T18100] bridge_slave_1: entered promiscuous mode
[ 1579.277613][T18100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1579.292506][T15473] Bluetooth: hci2: command tx timeout
[ 1579.457166][T18100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1581.097113][T15473] Bluetooth: hci1: command tx timeout
[ 1582.669619][T15473] Bluetooth: hci2: command tx timeout
[ 1582.704290][T18102] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1582.723268][T18102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1582.730543][T18102] bridge_slave_0: entered allmulticast mode
[ 1582.753530][T18102] bridge_slave_0: entered promiscuous mode
[ 1583.051627][T18100] team0: Port device team_slave_0 added
[ 1583.086948][T18100] team0: Port device team_slave_1 added
[ 1583.122639][T15473] Bluetooth: hci1: command tx timeout
[ 1583.135086][T18102] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1583.142230][T18102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1583.173162][T18102] bridge_slave_1: entered allmulticast mode
[ 1583.192887][T18102] bridge_slave_1: entered promiscuous mode
[ 1583.401615][T18100] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1583.422469][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1583.472475][T18100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1583.496869][T18102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1583.527337][T18137] chnl_net:caif_netlink_parms(): no params data found
[ 1583.576879][T18100] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1583.592435][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1583.642865][T18100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1583.676159][T18102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1585.283176][ T5846] Bluetooth: hci1: command tx timeout
[ 1585.401480][T18102] team0: Port device team_slave_0 added
[ 1585.461250][T18102] team0: Port device team_slave_1 added
[ 1585.652053][T18100] hsr_slave_0: entered promiscuous mode
[ 1585.661466][T18100] hsr_slave_1: entered promiscuous mode
[ 1585.669153][T18100] debugfs: 'hsr0' already exists in 'hsr'
[ 1585.675661][T18100] Cannot create hsr debugfs directory
[ 1585.703399][T18102] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1585.710425][T18102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1585.743030][T18102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1585.800414][T18102] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1585.809367][T18102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1585.847063][T18102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1585.860527][T18137] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1585.869857][T18137] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1585.877297][T18137] bridge_slave_0: entered allmulticast mode
[ 1585.885936][T18137] bridge_slave_0: entered promiscuous mode
[ 1585.943101][T18137] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1585.950441][T18137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1585.959925][T18137] bridge_slave_1: entered allmulticast mode
[ 1585.969641][T18137] bridge_slave_1: entered promiscuous mode
[ 1587.762654][T15473] Bluetooth: hci1: command tx timeout
[ 1587.978704][T18137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1589.677715][T18102] hsr_slave_0: entered promiscuous mode
[ 1589.704866][T18102] hsr_slave_1: entered promiscuous mode
[ 1589.711159][T18102] debugfs: 'hsr0' already exists in 'hsr'
[ 1589.735756][T18102] Cannot create hsr debugfs directory
[ 1589.746027][T18137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1589.956253][T18171] chnl_net:caif_netlink_parms(): no params data found
[ 1590.107550][T18137] team0: Port device team_slave_0 added
[ 1590.135941][T18137] team0: Port device team_slave_1 added
[ 1590.433508][T18137] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1590.440580][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1590.481419][T18137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1590.567262][T18137] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1590.585314][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1590.619282][T18137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1594.299472][T18171] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1594.307700][T18171] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1594.315067][T18171] bridge_slave_0: entered allmulticast mode
[ 1594.324815][T18171] bridge_slave_0: entered promiscuous mode
[ 1594.469070][T18171] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1594.485047][T18171] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1594.502814][T18171] bridge_slave_1: entered allmulticast mode
[ 1594.522847][T18171] bridge_slave_1: entered promiscuous mode
[ 1594.546591][T18137] hsr_slave_0: entered promiscuous mode
[ 1594.564859][T18137] hsr_slave_1: entered promiscuous mode
[ 1594.583677][T18137] debugfs: 'hsr0' already exists in 'hsr'
[ 1594.589528][T18137] Cannot create hsr debugfs directory
[ 1594.824824][T18171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1594.889374][T18171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1594.997811][T18100] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1595.118637][T18240] gfs2: path_lookup on c::: returned error -2
[ 1595.130869][T18100] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1595.200441][T18100] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1595.229203][T18171] team0: Port device team_slave_0 added
[ 1595.246573][T18100] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1595.274921][T18171] team0: Port device team_slave_1 added
[ 1595.483188][ T7169] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[ 1595.534625][T18171] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1595.544449][T18171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1595.571817][T18171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1595.585773][T18171] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1595.594786][T18171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1595.621495][T18171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1596.314595][ T7169] usb 8-1: config 0 has an invalid interface number: 128 but max is 0
[ 1596.373149][T18171] hsr_slave_0: entered promiscuous mode
[ 1596.380178][T18171] hsr_slave_1: entered promiscuous mode
[ 1596.387526][T18171] debugfs: 'hsr0' already exists in 'hsr'
[ 1596.393497][T18171] Cannot create hsr debugfs directory
[ 1596.440692][ T7169] usb 8-1: config 0 has no interface number 0
[ 1596.454672][ T7169] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1596.464118][ T7169] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.472138][ T7169] usb 8-1: Product: syz
[ 1596.479969][ T7169] usb 8-1: Manufacturer: syz
[ 1596.486455][ T7169] usb 8-1: SerialNumber: syz
[ 1596.494744][ T7169] usb 8-1: config 0 descriptor??
[ 1596.534381][ T1160] bridge_slave_1: left allmulticast mode
[ 1596.541101][ T1160] bridge_slave_1: left promiscuous mode
[ 1596.548081][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1596.559480][ T1160] bridge_slave_0: left allmulticast mode
[ 1596.569780][ T1160] bridge_slave_0: left promiscuous mode
[ 1596.578817][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1596.612251][ T1160] bridge_slave_1: left allmulticast mode
[ 1596.629699][ T1160] bridge_slave_1: left promiscuous mode
[ 1596.638218][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1596.659574][ T1160] bridge_slave_0: left allmulticast mode
[ 1596.672519][ T1160] bridge_slave_0: left promiscuous mode
[ 1596.688464][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1596.714809][ T1160] bridge_slave_1: left allmulticast mode
[ 1596.738139][ T1160] bridge_slave_1: left promiscuous mode
[ 1598.574807][ T7169] usb 8-1: Firmware version (0.0) predates our first public release.
[ 1598.602115][ T7169] usb 8-1: Please update to version 0.2 or newer
[ 1598.632610][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1598.654547][ T1160] bridge_slave_0: left allmulticast mode
[ 1598.682435][ T1160] bridge_slave_0: left promiscuous mode
[ 1598.688232][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1598.774723][ T1160] bridge_slave_1: left allmulticast mode
[ 1598.780411][ T1160] bridge_slave_1: left promiscuous mode
[ 1600.596356][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1600.624927][ T1160] bridge_slave_0: left allmulticast mode
[ 1600.630680][ T1160] bridge_slave_0: left promiscuous mode
[ 1600.662660][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1600.933508][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1600.956625][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1600.984623][ T1160] bond0 (unregistering): Released all slaves
[ 1601.212992][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1601.236496][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1601.255176][ T1160] bond0 (unregistering): Released all slaves
[ 1601.334690][T18268] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1601.906934][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1602.017787][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1602.096342][ T1160] bond0 (unregistering): Released all slaves
[ 1602.715313][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1602.734178][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1602.794388][ T1160] bond0 (unregistering): Released all slaves
[ 1603.235862][ T7169] usb 8-1: USB disconnect, device number 9
[ 1604.357138][ T1160] hsr_slave_0: left promiscuous mode
[ 1604.389026][ T1160] hsr_slave_1: left promiscuous mode
[ 1604.401301][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1604.451953][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1604.527442][ T1160] hsr_slave_0: left promiscuous mode
[ 1604.537500][ T1160] hsr_slave_1: left promiscuous mode
[ 1604.548909][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1604.588896][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1604.624545][ T1160] hsr_slave_0: left promiscuous mode
[ 1604.645723][ T1160] hsr_slave_1: left promiscuous mode
[ 1604.666703][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1604.734588][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1604.892545][ T1160] hsr_slave_0: left promiscuous mode
[ 1604.951748][ T1160] hsr_slave_1: left promiscuous mode
[ 1605.101028][   T31] kauditd_printk_skb: 15 callbacks suppressed
[ 1605.101059][   T31] audit: type=1800 audit(1765977312.229:1360): pid=18292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3171" name="bus" dev="overlay" ino=1029 res=0 errno=0
[ 1605.152517][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1605.868176][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1608.074478][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 1608.173408][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 1609.365817][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 1609.519180][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 1610.138599][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 1610.190336][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 1611.258835][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 1611.286620][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 1611.382423][T11955] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[ 1611.553551][T11955] usb 8-1: config 0 has an invalid interface number: 128 but max is 0
[ 1611.561786][T11955] usb 8-1: config 0 has no interface number 0
[ 1611.657608][T11955] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1611.683976][T11955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1611.711944][T11955] usb 8-1: Product: syz
[ 1611.721725][   T31] audit: type=1800 audit(1765977318.839:1361): pid=18311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3177" name="bus" dev="overlay" ino=3161 res=0 errno=0
[ 1611.749622][T11955] usb 8-1: Manufacturer: syz
[ 1611.771293][T11955] usb 8-1: SerialNumber: syz
[ 1611.842272][T11955] usb 8-1: config 0 descriptor??
[ 1611.854409][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1611.854505][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1612.643602][T18100] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1612.659803][T18102] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1612.704705][T11955] usb 8-1: Firmware: major: 0, minor: 255, hardware type: UNKNOWN (145)
[ 1612.734087][T18102] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1612.811270][T18102] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1612.850250][T18100] 8021q: adding VLAN 0 to HW filter on device team0
[ 1612.879279][T18102] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1613.049887][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1613.057108][ T7933] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1613.093269][T11955] usb 8-1: failed to fetch extended address, random address set
[ 1613.102034][T11955] usb 8-1: atusb_probe: initialization failed, error = -524
[ 1613.110397][T11955] atusb 8-1:0.128: probe with driver atusb failed with error -524
[ 1613.148785][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1613.156000][ T7933] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1613.263858][T18137] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1613.311012][T18137] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1613.341658][ T7169] usb 8-1: USB disconnect, device number 10
[ 1613.355934][T18137] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1613.421460][T18137] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1613.698394][T18102] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1613.871422][T18102] 8021q: adding VLAN 0 to HW filter on device team0
[ 1613.934524][T15853] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1613.941815][T15853] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1614.001061][T11914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1614.008243][T11914] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1614.276678][T18171] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1614.365485][T18171] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1614.382905][T18171] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1614.397674][T18171] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1614.646730][T18137] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1614.783319][T18137] 8021q: adding VLAN 0 to HW filter on device team0
[ 1614.809246][T18100] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1614.871252][ T7170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1614.878479][ T7170] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1614.931497][T15853] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1614.938808][T15853] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1615.613750][T18102] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1618.058797][T18171] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1618.304872][T18171] 8021q: adding VLAN 0 to HW filter on device team0
[ 1618.471938][T15212] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1618.479163][T15212] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1618.506285][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1618.513476][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1618.677730][T18102] veth0_vlan: entered promiscuous mode
[ 1618.721174][T18137] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1618.739626][T18100] veth0_vlan: entered promiscuous mode
[ 1618.823948][T18102] veth1_vlan: entered promiscuous mode
[ 1618.881157][T18100] veth1_vlan: entered promiscuous mode
[ 1619.082277][T18137] veth0_vlan: entered promiscuous mode
[ 1619.171530][T18102] veth0_macvtap: entered promiscuous mode
[ 1619.198037][T18100] veth0_macvtap: entered promiscuous mode
[ 1619.243819][T18137] veth1_vlan: entered promiscuous mode
[ 1619.273484][T18102] veth1_macvtap: entered promiscuous mode
[ 1619.307742][T18100] veth1_macvtap: entered promiscuous mode
[ 1619.455132][T18102] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1619.507380][T18102] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1619.568588][T18100] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1619.592833][T18137] veth0_macvtap: entered promiscuous mode
[ 1619.675493][T18137] veth1_macvtap: entered promiscuous mode
[ 1619.714344][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1619.764767][T18100] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1619.937696][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1621.560314][ T1160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1621.609801][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1621.742121][ T1160] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1621.779546][ T1160] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1621.815532][T18137] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1621.844275][ T1160] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1621.924670][ T1160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1621.959542][T18137] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1622.011372][T18171] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1622.035674][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.069436][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.266436][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.343253][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.767794][T12659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1622.799316][T12659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1622.842010][T12601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1622.888103][T12601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1623.041195][ T6209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1623.076390][ T6209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1623.663219][T18171] veth0_vlan: entered promiscuous mode
[ 1624.482541][T16138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1624.490377][T16138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1624.690945][ T6069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1624.741254][T18171] veth1_vlan: entered promiscuous mode
[ 1624.991169][ T7170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1625.023496][ T7170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1625.092449][ T6069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1625.171865][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1625.191659][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1625.228660][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1625.252175][T18171] veth0_macvtap: entered promiscuous mode
[ 1625.262554][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1625.270122][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1625.319913][T18171] veth1_macvtap: entered promiscuous mode
[ 1625.412319][T18171] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1625.460248][T18171] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1625.570235][ T3488] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.613411][ T3488] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.829401][ T3488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.881764][ T3488] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1627.072966][T15473] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1627.115361][T15473] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1627.123827][T15473] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1627.373064][T17921] Bluetooth: hci4: command tx timeout
[ 1627.380483][T15473] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1627.464237][T15473] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1629.474403][T15473] Bluetooth: hci4: command tx timeout
[ 1629.481325][ T6209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1629.524662][T15473] Bluetooth: hci6: command tx timeout
[ 1630.218521][ T6209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1631.526640][T15473] Bluetooth: hci4: command tx timeout
[ 1631.602926][T15473] Bluetooth: hci6: command tx timeout
[ 1634.232464][T15473] Bluetooth: hci4: command tx timeout
[ 1634.232477][ T5846] Bluetooth: hci6: command tx timeout
[ 1635.898349][T15212] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.987216][T12659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1636.032651][T12659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1636.248431][T15473] Bluetooth: hci6: command tx timeout
[ 1636.302284][T15212] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.421846][T18418] chnl_net:caif_netlink_parms(): no params data found
[ 1636.659849][T18492] loop9: detected capacity change from 0 to 128
[ 1636.680769][T15212] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.695694][T18492] FAT-fs (loop9): bogus logical sector size 65535
[ 1636.702139][T18492] FAT-fs (loop9): Can't find a valid FAT filesystem
[ 1636.999295][T15212] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1640.154488][T18418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1640.216336][T18418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1640.241283][T18418] bridge_slave_0: entered allmulticast mode
[ 1640.266967][T18418] bridge_slave_0: entered promiscuous mode
[ 1640.448146][T15212] bridge_slave_1: left allmulticast mode
[ 1641.200671][T15212] bridge_slave_1: left promiscuous mode
[ 1641.209590][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1641.290435][T15212] bridge_slave_0: left allmulticast mode
[ 1643.016215][T15212] bridge_slave_0: left promiscuous mode
[ 1643.022052][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1647.992497][T17926] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1648.492461][T17926] usb 6-1: Using ep0 maxpacket: 32
[ 1648.625126][T17926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1648.643738][T17926] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1648.662931][T17926] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1648.682213][T17926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.767330][T17926] usb 6-1: config 0 descriptor??
[ 1651.111984][T15118] usb 6-1: USB disconnect, device number 49
[ 1653.693033][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1653.725143][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1653.748014][T15212] bond0 (unregistering): Released all slaves
[ 1654.357201][T18418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1654.455250][T18418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1654.618118][T18418] bridge_slave_1: entered allmulticast mode
[ 1654.708574][T18418] bridge_slave_1: entered promiscuous mode
[ 1656.532468][ T5846] Bluetooth: hci6: command 0x0405 tx timeout
[ 1656.807482][T18432] chnl_net:caif_netlink_parms(): no params data found
[ 1658.015114][T18418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1660.034485][T18418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1662.845979][T15212] hsr_slave_0: left promiscuous mode
[ 1662.966732][T15212] hsr_slave_1: left promiscuous mode
[ 1663.153453][T15212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1663.314859][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1663.463395][T15212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1663.470836][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1663.554490][   T31] audit: type=1800 audit(1765977370.689:1362): pid=18639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3229" name="bus" dev="overlay" ino=3279 res=0 errno=0
[ 1664.536267][T15212] veth1_macvtap: left promiscuous mode
[ 1664.541817][T15212] veth0_macvtap: left promiscuous mode
[ 1664.565856][T15212] veth1_vlan: left promiscuous mode
[ 1664.575834][T15212] veth0_vlan: left promiscuous mode
[ 1665.478089][T18660] /dev/nullb0: Can't open blockdev
[ 1672.436106][   T31] audit: type=1800 audit(1765977379.529:1363): pid=18686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3242" name="bus" dev="overlay" ino=96 res=0 errno=0
[ 1673.354588][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1673.360948][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1681.588158][   T31] audit: type=1800 audit(1765977388.719:1364): pid=18736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3254" name="bus" dev="overlay" ino=130 res=0 errno=0
[ 1682.984766][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1683.288433][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1686.987950][T15473] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1686.997891][T15473] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1687.268753][T15473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1687.332987][T15473] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1687.405663][T15473] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1687.612419][T11955] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1687.772805][T11955] usb 8-1: Using ep0 maxpacket: 16
[ 1687.787605][T11955] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1687.804369][T11955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1687.836324][T11955] usb 8-1: Product: syz
[ 1687.840677][T11955] usb 8-1: Manufacturer: syz
[ 1687.846118][T11955] usb 8-1: SerialNumber: syz
[ 1689.581151][T11955] r8152-cfgselector 8-1: Unknown version 0x0000
[ 1689.603594][T15473] Bluetooth: hci0: command tx timeout
[ 1689.632896][T11955] r8152-cfgselector 8-1: config 0 descriptor??
[ 1689.648574][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1689.666416][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1689.913187][T11955] r8152-cfgselector 8-1: Unknown version 0x0000
[ 1689.919797][T11955] r8152-cfgselector 8-1: bad CDC descriptors
[ 1689.943055][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1690.197378][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1690.221001][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1690.537514][T11955] r8152-cfgselector 8-1: USB disconnect, device number 11
[ 1691.734139][ T5846] Bluetooth: hci0: command tx timeout
[ 1692.414873][ T5846] Bluetooth: hci5: command tx timeout
[ 1693.054042][T18418] team0: Port device team_slave_0 added
[ 1693.083476][T18432] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR
[ 1693.764747][T15473] Bluetooth: hci0: command tx timeout
[ 1695.042485][T17921] Bluetooth: hci5: command tx timeout
[ 1695.675662][T18838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3278'.
[ 1695.727430][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'.
[ 1695.804612][T18841] overlayfs: failed to resolve './file1': -2
[ 1695.842622][T15473] Bluetooth: hci2: command 0x0406 tx timeout
[ 1695.851172][T17921] Bluetooth: hci0: command tx timeout
[ 1697.124555][ T5846] Bluetooth: hci5: command tx timeout
[ 1699.580788][T17921] Bluetooth: hci5: command tx timeout
[ 1700.029109][T18874] gfs2: path_lookup on c::: returned error -2
[ 1700.406377][T18776] chnl_net:caif_netlink_parms(): no params data found
[ 1701.420627][T18883] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1701.545466][T18786] chnl_net:caif_netlink_parms(): no params data found
[ 1701.607345][T17921] Bluetooth: hci1: command 0x0406 tx timeout
[ 1703.014528][T18900] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3291'.
[ 1703.109047][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3291'.
[ 1704.417228][T18786] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1704.438070][T18786] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1704.473276][T18786] bridge_slave_0: entered allmulticast mode
[ 1704.480860][T18786] bridge_slave_0: entered promiscuous mode
[ 1704.576691][T18786] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1704.584196][T18786] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1704.870589][T18786] bridge_slave_1: entered allmulticast mode
[ 1705.969297][T18786] bridge_slave_1: entered promiscuous mode
[ 1707.263445][T18776] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1707.270707][T18776] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1707.345715][T18776] bridge_slave_0: entered allmulticast mode
[ 1707.614883][T18776] bridge_slave_0: entered promiscuous mode
[ 1711.252428][T18776] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1711.466105][T18776] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1711.618078][T18776] bridge_slave_1: entered allmulticast mode
[ 1711.798259][T18776] bridge_slave_1: entered promiscuous mode
[ 1714.492725][T15212] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1714.537642][T18786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1714.638131][T18786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1715.181159][T15212] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1715.371438][T18973] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[ 1715.377993][T18973] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1715.405835][T18973] vhci_hcd vhci_hcd.0: Device attached
[ 1715.536433][T15212] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1715.583071][T18786] team0: Port device team_slave_0 added
[ 1715.592148][T18786] team0: Port device team_slave_1 added
[ 1715.668089][ T6027] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[ 1715.690155][T18776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1715.877526][ T5836] usb 2-1: new low-speed USB device number 34 using dummy_hcd
[ 1716.177795][ T5836] usb 2-1: config 0 has no interfaces?
[ 1716.286116][T18776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1716.321174][ T5836] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1716.343260][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1716.364323][ T5836] usb 2-1: config 0 descriptor??
[ 1717.025524][T18974] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1
[ 1717.078923][ T6069] vhci_hcd vhci_hcd.1: stop threads
[ 1717.087889][ T5836] usb 2-1: USB disconnect, device number 34
[ 1717.105326][ T6069] vhci_hcd vhci_hcd.1: release socket
[ 1717.136733][ T6069] vhci_hcd vhci_hcd.1: disconnect device
[ 1717.164677][T15212] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1717.307527][T18786] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1717.323877][T18786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1718.297113][T18786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1718.413604][T18776] team0: Port device team_slave_0 added
[ 1718.433591][T18786] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1718.440566][T18786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1718.508569][T18786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1718.526377][T18776] team0: Port device team_slave_1 added
[ 1720.822524][ T6027] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1720.991703][T18786] hsr_slave_0: entered promiscuous mode
[ 1721.023385][T18786] hsr_slave_1: entered promiscuous mode
[ 1721.058673][T18786] debugfs: 'hsr0' already exists in 'hsr'
[ 1721.066998][T18786] Cannot create hsr debugfs directory
[ 1721.127449][T18776] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1721.142075][T18776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1721.183736][T18776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1721.354984][T18776] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1721.804310][T18776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1721.872546][T18776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1722.796726][T15212] bridge_slave_1: left allmulticast mode
[ 1722.809460][T15212] bridge_slave_1: left promiscuous mode
[ 1722.823580][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1722.843950][T15212] bridge_slave_0: left allmulticast mode
[ 1722.857447][T15212] bridge_slave_0: left promiscuous mode
[ 1722.870252][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1722.895543][T15212] bridge_slave_1: left allmulticast mode
[ 1722.911388][T15212] bridge_slave_1: left promiscuous mode
[ 1722.921693][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1722.937743][T15212] bridge_slave_0: left allmulticast mode
[ 1722.952407][T15212] bridge_slave_0: left promiscuous mode
[ 1722.962841][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1724.234962][T17921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1724.248427][T17921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1724.260064][T17921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1724.292861][T17921] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1724.300565][T17921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1724.371894][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1724.387430][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1724.655685][T15212] bond0 (unregistering): Released all slaves
[ 1724.657907][  T787] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1724.978671][  T787] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1724.991053][  T787] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1725.017841][  T787] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1725.047815][  T787] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1725.071710][  T787] usb 10-1: Manufacturer: syz
[ 1725.149614][  T787] usb 10-1: config 0 descriptor??
[ 1725.409043][  T787] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1725.445022][T15212] bond0 (unregistering): Released all slaves
[ 1726.403159][ T5846] Bluetooth: hci3: command tx timeout
[ 1726.852509][ T5836] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1726.912645][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1726.936590][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1726.965036][T15212] bond0 (unregistering): Released all slaves
[ 1727.013919][ T5836] usb 2-1: Using ep0 maxpacket: 32
[ 1727.021192][ T5836] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1727.030337][ T5836] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1727.057243][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1727.069097][ T5836] usb 2-1: config 1 has no interface number 0
[ 1727.076620][T18776] hsr_slave_0: entered promiscuous mode
[ 1727.080232][ T5836] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1727.112697][T18776] hsr_slave_1: entered promiscuous mode
[ 1727.116418][ T5836] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1727.134744][ T5836] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1727.147628][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1727.163758][T18776] debugfs: 'hsr0' already exists in 'hsr'
[ 1727.201418][T14961] usb 10-1: USB disconnect, device number 2
[ 1727.229214][T18776] Cannot create hsr debugfs directory
[ 1727.338076][ T5836] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[ 1728.482501][ T5846] Bluetooth: hci3: command tx timeout
[ 1728.511255][ T5836] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[ 1728.603262][T15118] usb 2-1: USB disconnect, device number 35
[ 1728.660763][T15118] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[ 1730.592457][ T5846] Bluetooth: hci3: command tx timeout
[ 1732.389709][T15212] hsr_slave_0: left promiscuous mode
[ 1734.066302][ T5846] Bluetooth: hci3: command tx timeout
[ 1734.152487][T15212] hsr_slave_1: left promiscuous mode
[ 1734.158818][T15212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1734.166942][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1734.223281][T15212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1734.230680][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1734.353605][T15212] veth1_macvtap: left promiscuous mode
[ 1734.392485][T15212] veth0_macvtap: left promiscuous mode
[ 1734.398144][T15212] veth1_vlan: left promiscuous mode
[ 1734.412957][T15212] veth0_vlan: left promiscuous mode
[ 1734.737936][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1734.744623][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1734.921082][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1740.013923][T17921] Bluetooth: hci3: command 0x0405 tx timeout
[ 1747.294429][T15473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1747.316047][T15473] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1747.325174][T15473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1747.406792][T15473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1747.414598][T15473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1747.994292][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1748.163684][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1749.522498][T15473] Bluetooth: hci4: command tx timeout
[ 1749.965800][T17921] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1749.977241][T17921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1749.985730][T17921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1750.055823][T17921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1750.063693][T17921] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1751.624085][T15473] Bluetooth: hci4: command tx timeout
[ 1752.269640][T15473] Bluetooth: hci6: command tx timeout
[ 1754.319529][T15473] Bluetooth: hci4: command tx timeout
[ 1754.322472][T17921] Bluetooth: hci6: command tx timeout
[ 1756.414805][T15473] Bluetooth: hci4: command tx timeout
[ 1756.420464][T17921] Bluetooth: hci6: command tx timeout
[ 1757.730327][T19217] ubi31: attaching mtd0
[ 1757.737572][T19217] ubi31: scanning is finished
[ 1757.742259][T19217] ubi31: empty MTD device detected
[ 1758.106651][T19217] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1758.114294][T19217] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1758.121565][T19217] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1758.128748][T19217] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1758.136251][T19217] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1758.143149][T19217] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1758.151215][T19217] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 609298653
[ 1758.161229][T19217] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1758.174233][T19225] ubi31: background thread "ubi_bgt31d" started, PID 19225
[ 1758.483694][T17921] Bluetooth: hci6: command tx timeout
[ 1758.552934][T19156] chnl_net:caif_netlink_parms(): no params data found
[ 1759.346291][   T31] audit: type=1800 audit(1765977466.259:1365): pid=19234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3362" name="bus" dev="overlay" ino=223 res=0 errno=0
[ 1759.460988][T19167] chnl_net:caif_netlink_parms(): no params data found
[ 1759.733691][T19037] chnl_net:caif_netlink_parms(): no params data found
[ 1762.868719][T19156] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1762.898596][T19156] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1762.935063][T19156] bridge_slave_0: entered allmulticast mode
[ 1762.970598][T19156] bridge_slave_0: entered promiscuous mode
[ 1764.009014][T19156] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1764.032734][T19156] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1764.043217][T19156] bridge_slave_1: entered allmulticast mode
[ 1764.051297][T19156] bridge_slave_1: entered promiscuous mode
[ 1764.453719][T19037] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1764.461048][T19037] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1764.475602][T19037] bridge_slave_0: entered allmulticast mode
[ 1764.494656][T19037] bridge_slave_0: entered promiscuous mode
[ 1764.588979][T19167] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1764.601477][T19167] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1766.352692][T19167] bridge_slave_0: entered allmulticast mode
[ 1766.360963][T19167] bridge_slave_0: entered promiscuous mode
[ 1766.390476][T19037] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1766.421542][T19037] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1766.443078][T19037] bridge_slave_1: entered allmulticast mode
[ 1766.454888][T19037] bridge_slave_1: entered promiscuous mode
[ 1766.492208][T19156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1766.515961][T19167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1766.523894][T19167] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1766.531187][T19167] bridge_slave_1: entered allmulticast mode
[ 1766.540308][T19167] bridge_slave_1: entered promiscuous mode
[ 1766.655607][T19037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1766.685703][T19156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1766.808988][T19037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1766.825149][ T6027] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1767.273149][ T6027] usb 10-1: Using ep0 maxpacket: 32
[ 1767.579976][ T6027] usb 10-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1767.588630][ T6027] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1767.597377][ T6027] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1767.607019][ T6027] usb 10-1: config 1 has no interface number 0
[ 1767.613299][ T6027] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1767.625731][ T6027] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1767.638772][ T6027] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1767.647967][ T6027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1767.688629][ T6027] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found
[ 1767.726468][T19167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1767.852257][T19156] team0: Port device team_slave_0 added
[ 1767.881987][T19167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1767.931266][T19037] team0: Port device team_slave_0 added
[ 1767.974289][T19156] team0: Port device team_slave_1 added
[ 1767.990400][ T6027] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached
[ 1768.193698][T19037] team0: Port device team_slave_1 added
[ 1768.674408][T15212] bridge_slave_1: left allmulticast mode
[ 1768.680094][T15212] bridge_slave_1: left promiscuous mode
[ 1768.706639][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1768.727389][T18591] usb 10-1: USB disconnect, device number 3
[ 1768.759189][T15212] bridge_slave_0: left allmulticast mode
[ 1768.775957][T18591] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected
[ 1768.792347][T15212] bridge_slave_0: left promiscuous mode
[ 1768.815173][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1768.920563][T15212] bridge_slave_1: left allmulticast mode
[ 1768.937361][T15212] bridge_slave_1: left promiscuous mode
[ 1768.950196][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1769.065766][T15212] bridge_slave_0: left allmulticast mode
[ 1769.071501][T15212] bridge_slave_0: left promiscuous mode
[ 1769.092590][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1771.859756][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1771.894952][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1771.959790][T15212] bond0 (unregistering): Released all slaves
[ 1773.153626][T19347] ubi: mtd0 is already attached to ubi31
[ 1774.165996][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1775.064177][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1775.202767][T15212] bond0 (unregistering): Released all slaves
[ 1776.783002][T19156] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1776.789992][T19156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1776.827261][T19156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1777.691925][T15212] hsr_slave_0: left promiscuous mode
[ 1777.721589][T15212] hsr_slave_1: left promiscuous mode
[ 1777.728177][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1777.762891][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1777.788096][T15212] hsr_slave_0: left promiscuous mode
[ 1777.795612][T15212] hsr_slave_1: left promiscuous mode
[ 1777.807694][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1777.845275][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1778.042236][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1778.078002][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1778.384082][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1778.418727][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1778.606815][T19167] team0: Port device team_slave_0 added
[ 1778.725415][T19156] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1778.762667][T19156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1778.791529][T19156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1778.825467][T19167] team0: Port device team_slave_1 added
[ 1778.946796][T19037] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1778.959959][T19037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1779.034935][T19037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1779.381979][T19167] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1779.406318][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1779.433358][T19167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1779.611544][T19037] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1779.637109][T19037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1779.693045][T19037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1779.731088][T19167] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1779.770890][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1780.081596][T19167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1780.834218][T19156] hsr_slave_0: entered promiscuous mode
[ 1782.609477][T19156] hsr_slave_1: entered promiscuous mode
[ 1782.655077][T19156] debugfs: 'hsr0' already exists in 'hsr'
[ 1782.674880][T19156] Cannot create hsr debugfs directory
[ 1783.130880][T19412] ubi: mtd0 is already attached to ubi31
[ 1784.308922][T19167] hsr_slave_0: entered promiscuous mode
[ 1784.359650][T19167] hsr_slave_1: entered promiscuous mode
[ 1784.400682][T19167] debugfs: 'hsr0' already exists in 'hsr'
[ 1784.412749][T17921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1784.424743][T17921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1784.473026][T19167] Cannot create hsr debugfs directory
[ 1784.496610][T17921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1784.514665][T17921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1784.523665][T17921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1786.644711][T15473] Bluetooth: hci0: command tx timeout
[ 1787.321288][   T31] audit: type=1800 audit(1765977494.449:1366): pid=19448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3401" name="bus" dev="overlay" ino=1431 res=0 errno=0
[ 1789.727080][T15473] Bluetooth: hci0: command tx timeout
[ 1789.782384][T18590] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1789.955016][T18590] usb 10-1: Using ep0 maxpacket: 32
[ 1789.973736][T18590] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1789.993912][T18590] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1790.004334][T18590] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1790.018368][T18590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1790.043394][T18590] usb 10-1: config 0 descriptor??
[ 1790.069234][T15212] bridge_slave_1: left allmulticast mode
[ 1790.076976][T18590] hub 10-1:0.0: USB hub found
[ 1790.095738][T15212] bridge_slave_1: left promiscuous mode
[ 1790.111824][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1790.140757][T15212] bridge_slave_0: left allmulticast mode
[ 1790.147569][T15212] bridge_slave_0: left promiscuous mode
[ 1790.163862][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1790.262166][T18590] hub 10-1:0.0: config failed, can't read hub descriptor (err -90)
[ 1790.351836][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1790.367495][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1790.378973][T15212] bond0 (unregistering): Released all slaves
[ 1790.666811][T18590] usbhid 10-1:0.0: can't add hid device: -71
[ 1790.692484][T18590] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1790.719464][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1790.733144][T18590] usb 10-1: USB disconnect, device number 4
[ 1790.761155][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1791.179317][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1792.860314][T15473] Bluetooth: hci0: command tx timeout
[ 1793.094709][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1793.222097][   T31] audit: type=1800 audit(1765977500.349:1367): pid=19486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3408" name="bus" dev="overlay" ino=422 res=0 errno=0
[ 1795.282631][T15473] Bluetooth: hci0: command tx timeout
[ 1796.168541][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1796.175257][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1798.835662][T19510] ubi: mtd0 is already attached to ubi31
[ 1799.634381][T19421] chnl_net:caif_netlink_parms(): no params data found
[ 1800.977735][T19421] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1801.085223][T19421] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1801.184061][T19421] bridge_slave_0: entered allmulticast mode
[ 1801.221910][T19421] bridge_slave_0: entered promiscuous mode
[ 1801.268702][T19421] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1801.292458][T19421] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1801.299871][T19421] bridge_slave_1: entered allmulticast mode
[ 1801.345320][T19421] bridge_slave_1: entered promiscuous mode
[ 1801.646391][T19421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1801.690885][T19421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1801.712384][T19167] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1802.055518][T19167] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1802.135678][T19167] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1802.220018][T19421] team0: Port device team_slave_0 added
[ 1802.243112][T19167] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1802.280523][T19421] team0: Port device team_slave_1 added
[ 1803.349457][T19561] ubi: mtd0 is already attached to ubi31
[ 1804.103195][T19421] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1804.110179][T19421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1804.172435][T19421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1804.246771][T19421] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1804.262605][T19421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1805.322336][T19421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1806.254883][T19156] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1806.420758][T19156] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1806.774128][T19421] hsr_slave_0: entered promiscuous mode
[ 1806.780917][T19421] hsr_slave_1: entered promiscuous mode
[ 1806.813436][T19421] debugfs: 'hsr0' already exists in 'hsr'
[ 1806.819205][T19421] Cannot create hsr debugfs directory
[ 1807.743345][T17921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1807.758819][T17921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1807.963678][T17921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1808.028090][T17921] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1808.044226][T17921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1810.612382][T17921] Bluetooth: hci3: command tx timeout
[ 1811.324706][T15473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1811.338505][T15473] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1811.352148][T15473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1811.361001][T15473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1811.367588][T19598] chnl_net:caif_netlink_parms(): no params data found
[ 1811.382872][T15473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1812.882517][T15473] Bluetooth: hci3: command tx timeout
[ 1813.226131][T19421] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1813.344891][T15212] bridge_slave_1: left allmulticast mode
[ 1813.350584][T15212] bridge_slave_1: left promiscuous mode
[ 1813.368309][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1813.400919][T15212] bridge_slave_0: left allmulticast mode
[ 1813.413032][T15212] bridge_slave_0: left promiscuous mode
[ 1813.432574][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1813.444672][T15473] Bluetooth: hci4: command tx timeout
[ 1814.972383][T15473] Bluetooth: hci3: command tx timeout
[ 1815.522374][T15473] Bluetooth: hci4: command tx timeout
[ 1817.062453][T15473] Bluetooth: hci3: command tx timeout
[ 1817.079294][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1817.094633][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1817.115805][T15212] bond0 (unregistering): Released all slaves
[ 1818.178334][T15473] Bluetooth: hci4: command tx timeout
[ 1818.187775][T19421] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1819.352476][   T31] audit: type=1800 audit(1765977526.469:1368): pid=19698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3445" name="bus" dev="overlay" ino=501 res=0 errno=0
[ 1819.718092][T19598] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1819.747669][T19598] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1820.151829][T19598] bridge_slave_0: entered allmulticast mode
[ 1820.241296][   T31] audit: type=1800 audit(1765977527.369:1369): pid=19709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3447" name="bus" dev="overlay" ino=1506 res=0 errno=0
[ 1820.242715][T15473] Bluetooth: hci4: command tx timeout
[ 1820.311490][T19598] bridge_slave_0: entered promiscuous mode
[ 1820.852229][T19421] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1820.929675][T19598] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1820.937105][T19598] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1820.945742][T19598] bridge_slave_1: entered allmulticast mode
[ 1821.680917][T19598] bridge_slave_1: entered promiscuous mode
[ 1821.722107][T19421] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1826.586724][T15212] hsr_slave_0: left promiscuous mode
[ 1826.824383][T15212] hsr_slave_1: left promiscuous mode
[ 1826.963515][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1827.139216][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1827.556782][   T31] audit: type=1800 audit(1765977534.689:1370): pid=19748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3456" name="bus" dev="overlay" ino=1535 res=0 errno=0
[ 1830.401712][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1830.643322][T19755] ubi: mtd0 is already attached to ubi31
[ 1830.757169][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1831.810587][   T31] audit: type=1800 audit(1765977538.919:1371): pid=19763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3460" name="bus" dev="overlay" ino=1554 res=0 errno=0
[ 1834.666563][T19598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1834.738081][T19598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1840.906955][T19598] team0: Port device team_slave_0 added
[ 1841.020274][T19598] team0: Port device team_slave_1 added
[ 1842.630942][T19598] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1842.649814][T19598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1842.722454][T19598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1842.864998][T19598] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1842.878949][T19598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1842.978060][T19598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1844.857621][T19598] hsr_slave_0: entered promiscuous mode
[ 1844.874883][T19598] hsr_slave_1: entered promiscuous mode
[ 1844.884960][T19598] debugfs: 'hsr0' already exists in 'hsr'
[ 1844.890703][T19598] Cannot create hsr debugfs directory
[ 1844.952421][   T31] audit: type=1800 audit(1765977552.079:1372): pid=19825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3469" name="bus" dev="overlay" ino=448 res=0 errno=0
[ 1848.936182][T19647] chnl_net:caif_netlink_parms(): no params data found
[ 1849.248187][T17921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1849.270746][T17921] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1849.280984][T17921] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1849.308202][T17921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1849.317084][T17921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1851.372589][T17921] Bluetooth: hci5: command tx timeout
[ 1851.798609][T19840] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3475'.
[ 1853.901423][T17921] Bluetooth: hci5: command tx timeout
[ 1855.922399][T17921] Bluetooth: hci5: command tx timeout
[ 1856.064335][T19647] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1856.133766][T19647] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1856.227089][T19647] bridge_slave_0: entered allmulticast mode
[ 1856.337391][T19647] bridge_slave_0: entered promiscuous mode
[ 1856.452496][T19647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1856.459632][T19647] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1856.483167][T19647] bridge_slave_1: entered allmulticast mode
[ 1856.490708][T19647] bridge_slave_1: entered promiscuous mode
[ 1858.908037][T15473] Bluetooth: hci5: command tx timeout
[ 1858.914404][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1858.920829][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1859.233500][T19647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1859.292124][T19647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1860.474713][T19647] team0: Port device team_slave_0 added
[ 1860.655261][T19647] team0: Port device team_slave_1 added
[ 1860.812800][T15212] bridge_slave_1: left allmulticast mode
[ 1860.822067][T15212] bridge_slave_1: left promiscuous mode
[ 1861.068370][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1861.085734][T15212] bridge_slave_0: left allmulticast mode
[ 1861.091382][T15212] bridge_slave_0: left promiscuous mode
[ 1861.128063][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1861.708865][T19888] ubi: mtd0 is already attached to ubi31
[ 1861.910832][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1862.148322][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1862.175377][T15212] bond0 (unregistering): Released all slaves
[ 1865.672703][T18590] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[ 1865.808362][T15212] hsr_slave_0: left promiscuous mode
[ 1865.843041][T15212] hsr_slave_1: left promiscuous mode
[ 1865.849440][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1865.849971][T18590] usb 10-1: config 0 has an invalid interface number: 128 but max is 0
[ 1865.873394][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1865.892821][T18590] usb 10-1: config 0 has no interface number 0
[ 1865.923063][T18590] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1865.968999][T18590] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1865.999074][T18590] usb 10-1: Product: syz
[ 1866.009109][T18590] usb 10-1: Manufacturer: syz
[ 1866.036097][T18590] usb 10-1: SerialNumber: syz
[ 1866.075233][T18590] usb 10-1: config 0 descriptor??
[ 1867.430817][T18590] usb 10-1: Firmware version (0.0) predates our first public release.
[ 1867.900123][T18590] usb 10-1: Please update to version 0.2 or newer
[ 1868.873029][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1868.944353][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1871.675134][T17921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1871.692486][T17921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1871.702091][T17921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1871.713665][T17921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1871.721550][T17921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1871.806100][T17921] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1871.829697][T17921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1871.840398][T17921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1871.849113][T17921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1871.864337][T17921] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1872.024971][T19647] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1872.031970][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1872.103688][T19647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1872.248402][T18590] usb 10-1: USB disconnect, device number 5
[ 1873.467084][T19837] chnl_net:caif_netlink_parms(): no params data found
[ 1873.593572][T17921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1873.604889][T17921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1873.629098][T17921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1873.637686][T17921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1873.645666][T17921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1873.776105][T17921] Bluetooth: hci0: command tx timeout
[ 1873.944217][T17921] Bluetooth: hci6: command tx timeout
[ 1875.542644][T14445] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 1875.762403][T17921] Bluetooth: hci2: command tx timeout
[ 1875.842687][T17921] Bluetooth: hci0: command tx timeout
[ 1875.885515][T14445] usb 10-1: config 0 has an invalid interface number: 128 but max is 0
[ 1875.910795][T14445] usb 10-1: config 0 has no interface number 0
[ 1875.923099][T14445] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1875.973466][T14445] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1875.996249][T14445] usb 10-1: Product: syz
[ 1876.000534][T14445] usb 10-1: Manufacturer: syz
[ 1876.012435][T17921] Bluetooth: hci6: command tx timeout
[ 1876.020631][T14445] usb 10-1: SerialNumber: syz
[ 1876.050952][T14445] usb 10-1: config 0 descriptor??
[ 1876.443312][T19837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1876.461461][T19837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1876.476162][T19837] bridge_slave_0: entered allmulticast mode
[ 1876.492569][T19837] bridge_slave_0: entered promiscuous mode
[ 1876.518010][T19837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1876.537245][T19837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1876.545723][T19837] bridge_slave_1: entered allmulticast mode
[ 1876.556216][T19837] bridge_slave_1: entered promiscuous mode
[ 1876.581500][T19923] chnl_net:caif_netlink_parms(): no params data found
[ 1876.633744][T14445] usb 10-1: Firmware: major: 0, minor: 255, hardware type: UNKNOWN (145)
[ 1876.751692][T19837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1876.822050][T15212] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1876.841181][T14445] usb 10-1: failed to fetch extended address, random address set
[ 1876.862435][T14445] usb 10-1: atusb_probe: initialization failed, error = -524
[ 1876.870052][T14445] atusb 10-1:0.128: probe with driver atusb failed with error -524
[ 1876.896854][T19837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1876.970615][T15212] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1877.060315][T10472] usb 10-1: USB disconnect, device number 6
[ 1877.117230][T19837] team0: Port device team_slave_0 added
[ 1877.205602][T15212] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1878.358605][ T5846] Bluetooth: hci6: command tx timeout
[ 1878.364071][T17921] Bluetooth: hci2: command tx timeout
[ 1878.365030][T15473] Bluetooth: hci0: command tx timeout
[ 1878.525503][T19921] chnl_net:caif_netlink_parms(): no params data found
[ 1878.549140][T19837] team0: Port device team_slave_1 added
[ 1878.580888][T19923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1878.590949][T19923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1878.600980][T19923] bridge_slave_0: entered allmulticast mode
[ 1878.616277][T19923] bridge_slave_0: entered promiscuous mode
[ 1878.724677][T15212] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1878.745795][T19923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1878.753539][T19923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1878.760815][T19923] bridge_slave_1: entered allmulticast mode
[ 1878.769095][T19923] bridge_slave_1: entered promiscuous mode
[ 1878.790505][T19837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1878.802778][T19837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1878.830263][T19837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1878.968884][T19837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1878.982703][T19837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1879.035910][T19837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1879.110060][T19923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1879.253205][T19923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1879.419094][T19923] team0: Port device team_slave_0 added
[ 1879.519136][T19923] team0: Port device team_slave_1 added
[ 1879.798125][T19932] chnl_net:caif_netlink_parms(): no params data found
[ 1879.987136][T19837] hsr_slave_0: entered promiscuous mode
[ 1880.005107][T19837] hsr_slave_1: entered promiscuous mode
[ 1880.016378][T19837] debugfs: 'hsr0' already exists in 'hsr'
[ 1880.024780][T19837] Cannot create hsr debugfs directory
[ 1880.192048][T19921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1880.238780][T19921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1880.283841][T19921] bridge_slave_0: entered allmulticast mode
[ 1880.354022][T19921] bridge_slave_0: entered promiscuous mode
[ 1880.406690][ T5833] Bluetooth: hci2: command tx timeout
[ 1880.418619][ T5833] Bluetooth: hci0: command tx timeout
[ 1880.424676][T19966] Bluetooth: hci6: command tx timeout
[ 1880.624743][T19923] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1880.711357][T19923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1880.822365][T19923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1880.837239][T19923] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1880.844328][T19923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1880.870759][T19923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1880.887669][T19921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1880.902868][T19921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1880.910783][T19921] bridge_slave_1: entered allmulticast mode
[ 1880.920807][T19921] bridge_slave_1: entered promiscuous mode
[ 1882.212620][   T31] audit: type=1800 audit(1765977588.919:1373): pid=19991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3506" name="bus" dev="overlay" ino=1676 res=0 errno=0
[ 1882.508329][T19966] Bluetooth: hci2: command tx timeout
[ 1882.803806][   T31] audit: type=1800 audit(1765977589.939:1374): pid=19994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3507" name="bus" dev="overlay" ino=627 res=0 errno=0
[ 1884.187638][T19921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1884.271470][T19923] hsr_slave_0: entered promiscuous mode
[ 1884.374619][T19923] hsr_slave_1: entered promiscuous mode
[ 1884.381088][T19923] debugfs: 'hsr0' already exists in 'hsr'
[ 1884.390352][T19923] Cannot create hsr debugfs directory
[ 1884.414900][T19921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1884.621428][   T31] audit: type=1800 audit(1765977591.719:1375): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3511" name="bus" dev="overlay" ino=1700 res=0 errno=0
[ 1884.814880][T19921] team0: Port device team_slave_0 added
[ 1884.913191][T19921] team0: Port device team_slave_1 added
[ 1884.933984][T19932] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1884.941244][T19932] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1884.953621][T19932] bridge_slave_0: entered allmulticast mode
[ 1884.961356][T19932] bridge_slave_0: entered promiscuous mode
[ 1885.062111][T19932] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1885.069728][T19932] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1885.081309][T19932] bridge_slave_1: entered allmulticast mode
[ 1885.091342][T19932] bridge_slave_1: entered promiscuous mode
[ 1885.265355][T19921] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1885.275658][T19921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1885.304278][T19921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1885.341904][T19932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1885.370249][T19921] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1885.384705][T19921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1885.412165][T19921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1885.435376][T19932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1885.725683][T19932] team0: Port device team_slave_0 added
[ 1885.770381][T19932] team0: Port device team_slave_1 added
[ 1885.801989][T19921] hsr_slave_0: entered promiscuous mode
[ 1885.811030][T19921] hsr_slave_1: entered promiscuous mode
[ 1885.819141][T19921] debugfs: 'hsr0' already exists in 'hsr'
[ 1885.830356][T19921] Cannot create hsr debugfs directory
[ 1886.802185][T19932] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1886.825125][T19932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1886.927654][T19932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1887.057089][T15212] bridge_slave_1: left allmulticast mode
[ 1887.751757][T15212] bridge_slave_1: left promiscuous mode
[ 1887.770091][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1887.815406][T15212] bridge_slave_0: left allmulticast mode
[ 1887.852094][T15212] bridge_slave_0: left promiscuous mode
[ 1887.906134][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1887.983751][T15212] bridge_slave_1: left allmulticast mode
[ 1887.990171][T15212] bridge_slave_1: left promiscuous mode
[ 1888.009986][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1888.124906][T15212] bridge_slave_0: left allmulticast mode
[ 1888.135963][T15212] bridge_slave_0: left promiscuous mode
[ 1888.163417][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1888.323157][T15212] bridge_slave_1: left allmulticast mode
[ 1888.364436][T15212] bridge_slave_1: left promiscuous mode
[ 1888.391855][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1888.484875][T15212] bridge_slave_0: left allmulticast mode
[ 1888.506922][T15212] bridge_slave_0: left promiscuous mode
[ 1888.536669][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1890.450603][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1890.577376][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1890.619981][T15212] bond0 (unregistering): Released all slaves
[ 1890.681611][   T31] audit: type=1800 audit(1765977597.789:1376): pid=20033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3520" name="bus" dev="overlay" ino=1734 res=0 errno=0
[ 1891.194964][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1891.212815][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1891.226986][T15212] bond0 (unregistering): Released all slaves
[ 1891.410995][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1891.422022][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1891.433916][T15212] bond0 (unregistering): Released all slaves
[ 1891.468069][T19932] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1891.475319][T19932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1891.514288][T19932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1891.877595][T19932] hsr_slave_0: entered promiscuous mode
[ 1891.884562][T19932] hsr_slave_1: entered promiscuous mode
[ 1891.890997][T19932] debugfs: 'hsr0' already exists in 'hsr'
[ 1891.896844][T19932] Cannot create hsr debugfs directory
[ 1892.012020][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1892.049256][T15212] hsr_slave_0: left promiscuous mode
[ 1892.056973][T15212] hsr_slave_1: left promiscuous mode
[ 1892.063172][T15212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1892.070611][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1892.080362][T15212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1892.088050][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1892.106209][T15212] hsr_slave_0: left promiscuous mode
[ 1892.114952][T15212] hsr_slave_1: left promiscuous mode
[ 1892.129130][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1892.146180][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1892.174967][T15212] veth1_macvtap: left promiscuous mode
[ 1892.180710][T15212] veth0_macvtap: left promiscuous mode
[ 1892.187282][T15212] veth1_vlan: left promiscuous mode
[ 1892.192898][T15212] veth0_vlan: left promiscuous mode
[ 1892.422692][T20049] ubi: mtd0 is already attached to ubi31
[ 1892.435648][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1892.481581][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1894.351932][   T31] audit: type=1800 audit(1765977601.309:1377): pid=20056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3529" name="bus" dev="overlay" ino=690 res=0 errno=0
[ 1897.035445][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1897.145688][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1897.157483][T20070] ubi: mtd0 is already attached to ubi31
[ 1898.751486][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1898.786017][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1901.045690][T19837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1901.088873][T19837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1901.183217][T19837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1901.209527][T19837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1902.547681][T19921] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1902.596880][T19921] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1902.616302][T19837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1902.628857][T19921] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1902.674804][T19921] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1902.796841][T19837] 8021q: adding VLAN 0 to HW filter on device team0
[ 1902.857949][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1902.865208][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1902.889967][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1902.897145][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1902.969498][ T7987] bridge_slave_1: left allmulticast mode
[ 1902.988850][ T7987] bridge_slave_1: left promiscuous mode
[ 1902.997353][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1903.008819][ T7987] bridge_slave_0: left allmulticast mode
[ 1903.015726][ T7987] bridge_slave_0: left promiscuous mode
[ 1903.021545][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1903.184803][ T7987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1903.198623][ T7987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1903.211234][ T7987] bond0 (unregistering): Released all slaves
[ 1903.408957][ T7987] hsr_slave_0: left promiscuous mode
[ 1903.419265][ T7987] hsr_slave_1: left promiscuous mode
[ 1903.433843][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1903.453194][ T7987] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1903.834096][ T7987] team0 (unregistering): Port device team_slave_1 removed
[ 1903.874485][ T7987] team0 (unregistering): Port device team_slave_0 removed
[ 1906.556143][T19921] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1907.833032][T19923] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1907.947681][T19923] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1908.005532][T19923] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1908.123922][T19923] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1908.176876][T19921] 8021q: adding VLAN 0 to HW filter on device team0
[ 1908.215562][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1908.236120][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1908.244201][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1908.252166][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1908.259930][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1908.453183][T19932] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1908.478232][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1908.485424][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1908.554731][T19932] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1908.680254][T12601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1908.687443][T12601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1908.713788][T19932] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1908.772710][T19932] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1909.647923][T19923] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1909.844320][T20131] chnl_net:caif_netlink_parms(): no params data found
[ 1909.891605][T19932] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1909.921909][T19923] 8021q: adding VLAN 0 to HW filter on device team0
[ 1910.094565][T19921] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1910.266702][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1910.273935][ T6119] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1910.301567][T20176] overlayfs: failed to resolve './file0': -2
[ 1910.322807][T19966] Bluetooth: hci3: command tx timeout
[ 1910.341029][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1910.348247][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1910.618475][T19932] 8021q: adding VLAN 0 to HW filter on device team0
[ 1910.639999][T20131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1910.673655][T20131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1910.682112][T20131] bridge_slave_0: entered allmulticast mode
[ 1910.714764][T20131] bridge_slave_0: entered promiscuous mode
[ 1912.445839][T19966] Bluetooth: hci3: command tx timeout
[ 1912.502534][T20131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1912.509798][T20131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1912.535102][T20131] bridge_slave_1: entered allmulticast mode
[ 1912.566849][T20131] bridge_slave_1: entered promiscuous mode
[ 1912.677489][T15212] bridge_slave_1: left allmulticast mode
[ 1912.692400][T15212] bridge_slave_1: left promiscuous mode
[ 1912.698181][T15212] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1912.729420][T15212] bridge_slave_0: left allmulticast mode
[ 1912.742311][T15212] bridge_slave_0: left promiscuous mode
[ 1912.748166][T15212] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1914.522357][T19966] Bluetooth: hci3: command tx timeout
[ 1916.038588][T15212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1916.056427][T15212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1916.077023][T15212] bond0 (unregistering): Released all slaves
[ 1916.153633][T14972] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1916.160903][T14972] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1916.228133][T20131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1916.285885][T20131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1916.366459][T15212] hsr_slave_0: left promiscuous mode
[ 1916.374285][T15212] hsr_slave_1: left promiscuous mode
[ 1916.381684][T15212] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1916.397379][T15212] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1916.573354][T19966] Bluetooth: hci3: command tx timeout
[ 1917.376259][T20237] loop6: detected capacity change from 0 to 7
[ 1917.405805][T20237] Dev loop6: unable to read RDB block 7
[ 1917.411473][T20237]  loop6: AHDI p1 p2 p3
[ 1917.416049][T20237] loop6: partition table partially beyond EOD, truncated
[ 1917.423623][T20237] loop6: p3 start 335544320 is beyond EOD, truncated
[ 1917.444478][T20105] udevd[20105]: symlink '../../loop6' '/dev/disk/by-diskseq/614.tmp-b7:6' failed: Read-only file system
[ 1917.507268][T20105] udevd[20105]: symlink '../../loop6' '/dev/disk/by-diskseq/614.tmp-b7:6' failed: Read-only file system
[ 1917.541903][T15212] team0 (unregistering): Port device team_slave_1 removed
[ 1917.567389][T20105] udevd[20105]: symlink '../../loop6' '/dev/disk/by-diskseq/614.tmp-b7:6' failed: Read-only file system
[ 1917.611577][T20105] udevd[20105]: symlink '../../loop6' '/dev/disk/by-diskseq/614.tmp-b7:6' failed: Read-only file system
[ 1917.611674][T15212] team0 (unregistering): Port device team_slave_0 removed
[ 1918.719961][T14972] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1918.727193][T14972] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1918.794377][T20131] team0: Port device team_slave_0 added
[ 1918.874682][T20131] team0: Port device team_slave_1 added
[ 1919.051837][T19923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1919.063284][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1919.069756][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1919.135129][T14445] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1919.151218][T19921] veth0_vlan: entered promiscuous mode
[ 1919.799555][T20131] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1919.852971][T20131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1919.918537][T20131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1919.983857][T20131] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1919.990866][T20131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1920.025231][T14445] usb 10-1: Using ep0 maxpacket: 8
[ 1920.240471][T20131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1920.265882][T14445] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1920.275127][T14445] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1920.283329][T14445] usb 10-1: Product: syz
[ 1920.287590][T14445] usb 10-1: Manufacturer: syz
[ 1920.302313][T14445] usb 10-1: SerialNumber: syz
[ 1921.053126][T14445] usb 10-1: config 0 descriptor??
[ 1921.081890][T14445] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1921.185896][T19921] veth1_vlan: entered promiscuous mode
[ 1921.224841][T20131] hsr_slave_0: entered promiscuous mode
[ 1921.327634][T20131] hsr_slave_1: entered promiscuous mode
[ 1921.367467][   T31] audit: type=1800 audit(1765977628.499:1378): pid=20277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3564" name="bus" dev="overlay" ino=1845 res=0 errno=0
[ 1921.394634][T20131] debugfs: 'hsr0' already exists in 'hsr'
[ 1921.400418][T20131] Cannot create hsr debugfs directory
[ 1922.439849][T19921] veth0_macvtap: entered promiscuous mode
[ 1922.683531][T19923] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1922.691379][T19921] veth1_macvtap: entered promiscuous mode
[ 1922.947031][T19921] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1923.008051][T19921] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1923.148309][ T7933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.165959][ T7933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.217632][ T7933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.269900][T14445] gspca_sonixj: reg_w1 err -71
[ 1923.276280][T14445] sonixj 10-1:0.0: probe with driver sonixj failed with error -71
[ 1923.286940][ T7933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1923.296503][T14445] usb 10-1: USB disconnect, device number 7
[ 1923.494187][T19932] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1923.606696][ T7933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1923.636590][ T7933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1923.738913][T12601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1923.784257][T12601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1923.889590][T19923] veth0_vlan: entered promiscuous mode
[ 1923.922917][T20131] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1923.990495][T20131] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1924.057946][T20131] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1926.073738][T20131] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1926.718908][T19923] veth1_vlan: entered promiscuous mode
[ 1927.700730][T19923] veth0_macvtap: entered promiscuous mode
[ 1927.739431][T19923] veth1_macvtap: entered promiscuous mode
[ 1928.004022][T19932] veth0_vlan: entered promiscuous mode
[ 1928.024094][T19923] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1928.129193][T19923] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1930.966752][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1930.979097][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1930.986996][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1931.003242][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1931.004267][T19932] veth1_vlan: entered promiscuous mode
[ 1931.012666][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1932.772365][T20131] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1932.990511][T20131] 8021q: adding VLAN 0 to HW filter on device team0
[ 1933.116435][T12601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1933.123679][T12601] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1933.141443][ T5833] Bluetooth: hci4: command tx timeout
[ 1933.282882][ T3789] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1933.290046][ T3789] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1933.635156][T20131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1935.202369][ T5833] Bluetooth: hci4: command tx timeout
[ 1935.769439][T19966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1935.780240][T19966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1935.788874][T19966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1935.798224][T19966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1935.806964][T19966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1936.076368][T20366] chnl_net:caif_netlink_parms(): no params data found
[ 1936.456956][T20410] binder: 20409:20410 ioctl 4018620d 0 returned -22
[ 1937.292490][T19966] Bluetooth: hci4: command tx timeout
[ 1937.769420][T20131] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1937.782472][T20429] overlayfs: failed to resolve './file1': -2
[ 1937.818048][T20366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1937.912126][T20366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1937.923591][T19966] Bluetooth: hci2: command tx timeout
[ 1937.929211][T20366] bridge_slave_0: entered allmulticast mode
[ 1937.944824][T20366] bridge_slave_0: entered promiscuous mode
[ 1937.993616][T20366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1939.596941][T19966] Bluetooth: hci4: command tx timeout
[ 1939.642661][T20366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1939.650247][T20366] bridge_slave_1: entered allmulticast mode
[ 1939.685322][T20366] bridge_slave_1: entered promiscuous mode
[ 1940.021308][T19966] Bluetooth: hci2: command tx timeout
[ 1942.420269][ T5833] Bluetooth: hci2: command tx timeout
[ 1942.485440][T20366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1942.629041][T20366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1943.627053][T20366] team0: Port device team_slave_0 added
[ 1943.670123][T20366] team0: Port device team_slave_1 added
[ 1943.915607][T20131] veth0_vlan: entered promiscuous mode
[ 1943.937977][T20366] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1943.953104][T20366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1944.013387][T20366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1944.088512][T20366] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1944.102711][T20366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1944.163899][T20366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1944.184518][ T1142] bridge_slave_1: left allmulticast mode
[ 1944.190208][ T1142] bridge_slave_1: left promiscuous mode
[ 1944.222630][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1944.233444][ T1142] bridge_slave_0: left allmulticast mode
[ 1944.239183][ T1142] bridge_slave_0: left promiscuous mode
[ 1944.253810][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1944.492395][T19966] Bluetooth: hci2: command tx timeout
[ 1945.235622][T20477] loop6: detected capacity change from 0 to 7
[ 1945.359437][T20479] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3589'.
[ 1945.359722][T20477] Dev loop6: unable to read RDB block 7
[ 1945.429412][T20477]  loop6: AHDI p1 p2 p3
[ 1945.434089][T20477] loop6: partition table partially beyond EOD, truncated
[ 1945.441522][T20477] loop6: p3 start 335544320 is beyond EOD, truncated
[ 1945.518354][T20105] udevd[20105]: symlink '../../loop6' '/dev/disk/by-diskseq/616.tmp-b7:6' failed: Read-only file system
[ 1945.632644][T20105] udevd[20105]: symlink '../../loop6' '/dev/disk/by-diskseq/616.tmp-b7:6' failed: Read-only file system
[ 1945.679741][T20105] udevd[20105]: symlink '../../loop6' '/dev/disk/by-diskseq/616.tmp-b7:6' failed: Read-only file system
[ 1945.774537][T20105] udevd[20105]: symlink '../../loop6' '/dev/disk/by-diskseq/616.tmp-b7:6' failed: Read-only file system
[ 1948.577118][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1948.612095][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1948.634559][ T1142] bond0 (unregistering): Released all slaves
[ 1950.079905][   T31] audit: type=1800 audit(1765977656.499:1379): pid=20511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3596" name="bus" dev="overlay" ino=86 res=0 errno=0
[ 1950.463964][ T1142] hsr_slave_0: left promiscuous mode
[ 1950.490923][ T1142] hsr_slave_1: left promiscuous mode
[ 1951.124886][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1951.172515][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1951.253666][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1951.261080][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1951.409457][ T1142] veth1_macvtap: left promiscuous mode
[ 1951.426837][ T1142] veth0_macvtap: left promiscuous mode
[ 1951.441507][ T1142] veth1_vlan: left promiscuous mode
[ 1951.455991][ T1142] veth0_vlan: left promiscuous mode
[ 1952.982320][T18481] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[ 1953.190279][T18481] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1953.239428][T18481] usb 8-1: not running at top speed; connect to a high speed hub
[ 1953.269005][T18481] usb 8-1: config 8 has an invalid interface number: 138 but max is 0
[ 1953.326038][T18481] usb 8-1: config 8 has no interface number 0
[ 1953.375427][T18481] usb 8-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=c1.2e
[ 1953.436508][T18481] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1953.463567][T18481] usb 8-1: Product: syz
[ 1953.492335][T18481] usb 8-1: Manufacturer: syz
[ 1953.496982][T18481] usb 8-1: SerialNumber: syz
[ 1953.935428][T18481] gspca_main: ov519-2.14.0 probing 0b62:0059
[ 1953.946489][T18481] ov519 8-1:8.138: reg_w 00 failed -71
[ 1954.626836][T20554] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3604'.
[ 1955.443359][ T1142] team0 (unregistering): Port device team_slave_1 removed
[ 1955.588321][ T1142] team0 (unregistering): Port device team_slave_0 removed
[ 1957.733033][T20131] veth1_vlan: entered promiscuous mode
[ 1957.748758][T20366] hsr_slave_0: entered promiscuous mode
[ 1957.773612][T20366] hsr_slave_1: entered promiscuous mode
[ 1957.781563][T20366] debugfs: 'hsr0' already exists in 'hsr'
[ 1957.788049][T20366] Cannot create hsr debugfs directory
[ 1957.819210][T20397] chnl_net:caif_netlink_parms(): no params data found
[ 1961.388851][T20131] veth0_macvtap: entered promiscuous mode
[ 1961.441966][T20397] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1961.453850][T20397] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1961.461192][T20397] bridge_slave_0: entered allmulticast mode
[ 1961.474067][T20397] bridge_slave_0: entered promiscuous mode
[ 1961.496655][T20397] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1961.505069][T20397] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1961.512414][T20397] bridge_slave_1: entered allmulticast mode
[ 1961.524278][T20397] bridge_slave_1: entered promiscuous mode
[ 1961.533246][T20131] veth1_macvtap: entered promiscuous mode
[ 1962.112312][T17440] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1962.476463][T20397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1963.292612][T17440] usb 10-1: Using ep0 maxpacket: 32
[ 1963.343770][T17440] usb 10-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1963.355734][T20397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1963.408317][T17440] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1963.460411][T17440] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1963.491819][T17440] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1963.518864][T17440] usb 10-1: config 1 has no interface number 0
[ 1963.544057][T17440] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[ 1963.572513][T17440] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1963.582607][T17440] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1963.630035][T17440] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found
[ 1963.687879][T20397] team0: Port device team_slave_0 added
[ 1963.700485][T20131] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1963.807606][T20397] team0: Port device team_slave_1 added
[ 1963.818747][T17440] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values
[ 1963.842749][T17440] snd_usb_pod 10-1:1.1: invalid control EP
[ 1963.865612][T17440] snd_usb_pod 10-1:1.1: cannot start listening: -22
[ 1965.538602][T17440] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected
[ 1965.565974][T17440] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1965.623503][T17440] usb 10-1: USB disconnect, device number 8
[ 1965.679889][T20131] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1965.742021][T20397] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1965.772992][T20397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1965.822509][T20397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1965.845734][T20397] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1965.872481][T20397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1965.922639][T20397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1965.952446][T18481] ov519 8-1:8.138: Can't determine sensor slave IDs
[ 1965.965488][T18481] ov519 8-1:8.138: OV519 Config failed
[ 1965.981421][T18481] ov519 8-1:8.138: probe with driver ov519 failed with error -22
[ 1966.005072][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.034908][T18481] usb 8-1: USB disconnect, device number 12
[ 1966.124991][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.147261][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.166954][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1966.343079][T18481] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1966.391894][ T1142] bridge_slave_1: left allmulticast mode
[ 1966.398710][ T1142] bridge_slave_1: left promiscuous mode
[ 1966.413440][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1966.648607][ T1142] bridge_slave_0: left allmulticast mode
[ 1966.668768][ T1142] bridge_slave_0: left promiscuous mode
[ 1967.505632][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1967.965553][T20657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3616'.
[ 1970.714117][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1970.731307][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1970.741687][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1970.766297][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1970.774156][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1971.511594][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1971.634140][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1971.935250][ T1142] bond0 (unregistering): Released all slaves
[ 1973.737771][T19966] Bluetooth: hci5: command tx timeout
[ 1973.774106][T20397] hsr_slave_0: entered promiscuous mode
[ 1973.780970][T20397] hsr_slave_1: entered promiscuous mode
[ 1973.813569][T20397] debugfs: 'hsr0' already exists in 'hsr'
[ 1973.819348][T20397] Cannot create hsr debugfs directory
[ 1974.122004][T20695] fuse: Unknown parameter 'fd0x0000000000000004'
[ 1975.312612][ T1142] hsr_slave_0: left promiscuous mode
[ 1975.342313][ T1142] hsr_slave_1: left promiscuous mode
[ 1975.348411][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1976.042594][T19966] Bluetooth: hci5: command tx timeout
[ 1976.077669][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1976.181310][ T1142] veth1_vlan: left promiscuous mode
[ 1976.210498][ T1142] veth0_vlan: left promiscuous mode
[ 1978.438968][T19966] Bluetooth: hci5: command tx timeout
[ 1980.551647][T18590] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1980.560920][T19966] Bluetooth: hci5: command tx timeout
[ 1980.568190][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1980.574652][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1981.781639][T18590] usb 8-1: Using ep0 maxpacket: 32
[ 1981.805687][T18590] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1981.846815][T18590] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1981.913432][T18590] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1981.960425][T18590] usb 8-1: config 1 has no interface number 0
[ 1982.433871][T18590] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1982.446573][T18590] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1982.460265][T18590] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1982.469957][T18590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1982.494655][T18590] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[ 1982.525627][ T1142] team0 (unregistering): Port device team_slave_1 removed
[ 1982.682115][T20732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3637'.
[ 1982.697549][T18590] snd_usb_pod 8-1:1.1: invalid control EP
[ 1982.706738][T18590] snd_usb_pod 8-1:1.1: cannot start listening: -22
[ 1982.727138][T18590] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[ 1982.742680][T18590] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1982.757898][ T1142] team0 (unregistering): Port device team_slave_0 removed
[ 1983.439650][T19097] usb 8-1: USB disconnect, device number 14
[ 1985.469591][   T31] audit: type=1800 audit(1765977692.599:1380): pid=20739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3640" name="bus" dev="overlay" ino=2017 res=0 errno=0
[ 1986.055250][   T31] audit: type=1800 audit(1765977693.189:1381): pid=20744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3638" name="bus" dev="overlay" ino=964 res=0 errno=0
[ 1987.551970][T20366] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1987.616026][T20366] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1987.693353][T20759] tmpfs: Unknown parameter 'nr_inndes'
[ 1987.702948][T20366] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1987.719838][T20759] netlink: 'syz.9.3645': attribute type 1 has an invalid length.
[ 1987.821907][T20366] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1988.249650][ T7169] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[ 1989.299357][ T7169] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1989.404550][ T7169] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1989.433578][ T7169] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1989.468016][ T7169] usb 10-1: config 0 descriptor??
[ 1989.514536][T20759] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1989.526943][T20779] tmpfs: Unknown parameter 'nr_inndes'
[ 1989.549161][T20779] netlink: 'syz.7.3647': attribute type 1 has an invalid length.
[ 1989.912605][T19097] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[ 1990.050759][ T7169] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0
[ 1990.116185][T19097] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1990.133264][T19097] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1990.170375][T19097] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1990.225356][T17440] usb 10-1: USB disconnect, device number 9
[ 1990.234490][T19097] usb 8-1: config 0 descriptor??
[ 1990.262479][T20777] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1990.341787][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1990.420260][T20785] fido_id[20785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1990.792873][T19097] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0
[ 1990.903766][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1990.988823][ T7169] usb 8-1: USB disconnect, device number 15
[ 1991.066388][T20791] fido_id[20791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[ 1991.471718][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1991.510862][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1991.520635][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1991.528587][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1991.540004][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1991.555853][T20672] chnl_net:caif_netlink_parms(): no params data found
[ 1991.565722][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1992.036245][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1993.735930][ T5833] Bluetooth: hci3: command tx timeout
[ 1994.043149][T20672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1994.058631][T20672] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1994.089242][T20672] bridge_slave_0: entered allmulticast mode
[ 1994.122577][T20672] bridge_slave_0: entered promiscuous mode
[ 1994.210072][T20672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1994.224620][T20672] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1994.243430][T20672] bridge_slave_1: entered allmulticast mode
[ 1994.268862][T20672] bridge_slave_1: entered promiscuous mode
[ 1994.325055][T20832] binder: 20830:20832 ioctl c0306201 0 returned -14
[ 1994.408754][T20672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1994.494702][T20672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1994.639718][ T1142] bridge_slave_1: left allmulticast mode
[ 1994.654993][ T1142] bridge_slave_1: left promiscuous mode
[ 1994.660769][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1994.685369][ T1142] bridge_slave_0: left allmulticast mode
[ 1994.691041][ T1142] bridge_slave_0: left promiscuous mode
[ 1994.712498][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1995.427670][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1995.450344][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1995.474939][ T1142] bond0 (unregistering): Released all slaves
[ 1995.547194][T20672] team0: Port device team_slave_0 added
[ 1995.773178][ T5833] Bluetooth: hci3: command tx timeout
[ 1996.142566][T20672] team0: Port device team_slave_1 added
[ 1996.312643][   T31] audit: type=1800 audit(1765977703.419:1382): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3654" name="bus" dev="overlay" ino=182 res=0 errno=0
[ 1996.606323][T15473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1996.616730][T15473] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1996.628384][T15473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1996.646225][T15473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1996.653975][T15473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1996.847976][T20672] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1997.692307][T20672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1999.412260][T15473] Bluetooth: hci3: command tx timeout
[ 1999.412341][ T5846] Bluetooth: hci4: command tx timeout
[ 1999.424119][ T5833] Bluetooth: hci0: command 0x0406 tx timeout
[ 1999.467696][T20672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1999.607787][ T1142] hsr_slave_0: left promiscuous mode
[ 1999.673848][ T1142] hsr_slave_1: left promiscuous mode
[ 1999.680371][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1999.701183][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2000.858349][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2000.872210][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2001.842936][ T5846] Bluetooth: hci4: command tx timeout
[ 2001.849534][ T5833] Bluetooth: hci3: command tx timeout
[ 2105.932139][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 2105.939134][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P20397/1:b..l
[ 2105.947966][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=135421, q=256 ncpus=2)
[ 2105.955774][    C0] task:syz-executor    state:R  running task     stack:20928 pid:20397 tgid:20397 ppid:1      task_flags:0x40054c flags:0x00080003
[ 2105.971014][    C0] Call Trace:
[ 2105.974304][    C0]  <TASK>
[ 2105.977244][    C0]  __schedule+0x14bc/0x5000
[ 2105.981763][    C0]  ? preempt_schedule_common+0x83/0xd0
[ 2105.987247][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2105.992891][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[ 2105.997840][    C0]  ? __pfx___schedule+0x10/0x10
[ 2106.002692][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.008335][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[ 2106.013288][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.018938][    C0]  ? preempt_schedule_irq+0xaa/0x150
[ 2106.024233][    C0]  preempt_schedule_irq+0xb5/0x150
[ 2106.029352][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 2106.035084][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.040722][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 2106.046539][    C0]  irqentry_exit+0x5d8/0x660
[ 2106.051141][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2106.057127][    C0] RIP: 0010:lock_acquire+0xd1/0x340
[ 2106.062340][    C0] Code: 7e 92 83 b8 2c 0b 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 <fa> 48 c7 c7 38 6e 7a 8d e8 c2 58 bd 09 65 ff 05 eb 7e e0 10 45 31
[ 2106.081952][    C0] RSP: 0018:ffffc900052df478 EFLAGS: 00000246
[ 2106.088031][    C0] RAX: ffff88802a5adb80 RBX: 0000000000000000 RCX: d50cd44b60e29800
[ 2106.096013][    C0] RDX: 0000000000000000 RSI: ffffffff81743fa2 RDI: 1ffffffff1be8344
[ 2106.103993][    C0] RBP: ffffffff81743f85 R08: 0000000000000000 R09: 0000000000000000
[ 2106.111967][    C0] R10: dffffc0000000000 R11: ffffffff81ada120 R12: 0000000000000002
[ 2106.119942][    C0] R13: ffffffff8df41a20 R14: 0000000000000000 R15: 0000000000000246
[ 2106.127928][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 2106.133058][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2106.139232][    C0]  ? unwind_next_frame+0xc2/0x23d0
[ 2106.144362][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.150010][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 2106.155125][    C0]  ? __fput+0x44c/0xa70
[ 2106.159307][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 2106.164426][    C0]  unwind_next_frame+0xc2/0x23d0
[ 2106.169386][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 2106.174517][    C0]  ? unwind_next_frame+0xa5/0x23d0
[ 2106.179645][    C0]  ? kcov_close+0x28/0x50
[ 2106.183985][    C0]  ? __fput+0x44c/0xa70
[ 2106.188160][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2106.194331][    C0]  arch_stack_walk+0x11c/0x150
[ 2106.199112][    C0]  ? __fput+0x44c/0xa70
[ 2106.203285][    C0]  stack_trace_save+0x9c/0xe0
[ 2106.207981][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 2106.213375][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.219015][    C0]  save_stack+0xf5/0x1f0
[ 2106.223263][    C0]  ? __pfx_save_stack+0x10/0x10
[ 2106.228115][    C0]  ? __free_frozen_pages+0xbc8/0xd30
[ 2106.233398][    C0]  ? vfree+0x25a/0x400
[ 2106.237476][    C0]  ? kcov_close+0x28/0x50
[ 2106.241811][    C0]  ? __fput+0x44c/0xa70
[ 2106.246020][    C0]  __reset_page_owner+0x71/0x1f0
[ 2106.250974][    C0]  __free_frozen_pages+0xbc8/0xd30
[ 2106.256104][    C0]  vfree+0x25a/0x400
[ 2106.260020][    C0]  ? __pfx_kcov_close+0x10/0x10
[ 2106.264884][    C0]  kcov_close+0x28/0x50
[ 2106.269056][    C0]  __fput+0x44c/0xa70
[ 2106.273080][    C0]  task_work_run+0x1d4/0x260
[ 2106.277689][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 2106.282814][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.288453][    C0]  ? kmem_cache_free+0x197/0x620
[ 2106.293393][    C0]  ? do_exit+0x6c0/0x2310
[ 2106.297737][    C0]  do_exit+0x6c5/0x2310
[ 2106.301921][    C0]  ? irqentry_exit+0x5dd/0x660
[ 2106.306951][    C0]  ? __pfx_do_exit+0x10/0x10
[ 2106.311548][    C0]  ? preempt_schedule_common+0x83/0xd0
[ 2106.317007][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.322646][    C0]  ? preempt_schedule+0xae/0xc0
[ 2106.327501][    C0]  ? __pfx_preempt_schedule+0x10/0x10
[ 2106.332886][    C0]  do_group_exit+0x21c/0x2d0
[ 2106.337509][    C0]  get_signal+0x1285/0x1340
[ 2106.342037][    C0]  arch_do_signal_or_restart+0x9a/0x7a0
[ 2106.347605][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2106.353780][    C0]  ? do_sys_openat2+0x15a/0x200
[ 2106.358679][    C0]  ? exit_to_user_mode_loop+0x55/0x4f0
[ 2106.364188][    C0]  exit_to_user_mode_loop+0x87/0x4f0
[ 2106.369511][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.375161][    C0]  ? rcu_is_watching+0x15/0xb0
[ 2106.379950][    C0]  do_syscall_64+0x2d0/0xf80
[ 2106.384553][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.390206][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2106.396283][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2106.402183][    C0] RIP: 0033:0x7fc25158e1ff
[ 2106.406598][    C0] RSP: 002b:00007ffe04f64d80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2106.415017][    C0] RAX: 0000000000000003 RBX: 0000000000000005 RCX: 00007fc25158e1ff
[ 2106.422989][    C0] RDX: 0000000000000003 RSI: 00007ffe04f64dd0 RDI: 0000000000000005
[ 2106.430958][    C0] RBP: 00007fc2516152ef R08: 0000000000000000 R09: 00007ffe04f64bd7
[ 2106.438936][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 2106.446910][    C0] R13: 00007ffe04f64dd0 R14: 00007fc252314620 R15: 0000000000000003
[ 2106.454906][    C0]  </TASK>
[ 2106.457924][    C0] rcu: rcu_preempt kthread starved for 10554 jiffies! g135421 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 2106.469206][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 2106.479178][    C0] rcu: RCU grace-period kthread stack dump:
[ 2106.485061][    C0] task:rcu_preempt     state:R  running task     stack:27104 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 2106.498585][    C0] Call Trace:
[ 2106.501866][    C0]  <TASK>
[ 2106.504805][    C0]  __schedule+0x14bc/0x5000
[ 2106.509343][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[ 2106.514553][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.520280][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 2106.526202][    C0]  ? __pfx___schedule+0x10/0x10
[ 2106.531161][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.536808][    C0]  ? schedule+0x91/0x360
[ 2106.541082][    C0]  schedule+0x165/0x360
[ 2106.545248][    C0]  schedule_timeout+0x12b/0x270
[ 2106.550150][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 2106.555540][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 2106.560846][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.566487][    C0]  ? prepare_to_swait_event+0x341/0x380
[ 2106.572058][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[ 2106.576929][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[ 2106.581872][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[ 2106.587164][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 2106.592452][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 2106.597699][    C0]  ? finish_swait+0xcd/0x1f0
[ 2106.602310][    C0]  rcu_gp_kthread+0x99/0x390
[ 2106.606913][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 2106.612118][    C0]  ? __kthread_parkme+0x7b/0x200
[ 2106.617074][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.622718][    C0]  ? __kthread_parkme+0x1a1/0x200
[ 2106.627759][    C0]  kthread+0x711/0x8a0
[ 2106.631844][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 2106.637076][    C0]  ? __pfx_kthread+0x10/0x10
[ 2106.641684][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.647333][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2106.652565][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.658208][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[ 2106.663414][    C0]  ? __pfx_kthread+0x10/0x10
[ 2106.668018][    C0]  ret_from_fork+0x599/0xb30
[ 2106.672623][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 2106.677753][    C0]  ? __switch_to_asm+0x39/0x70
[ 2106.682533][    C0]  ? __switch_to_asm+0x33/0x70
[ 2106.687309][    C0]  ? __pfx_kthread+0x10/0x10
[ 2106.691999][    C0]  ret_from_fork_asm+0x1a/0x30
[ 2106.696795][    C0]  </TASK>
[ 2106.699897][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 2106.706219][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2106.716724][    C0] Tainted: [L]=SOFTLOCKUP
[ 2106.721044][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2106.731102][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 2106.736838][    C0] Code: 5e 93 b4 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a0 0c 00 f3 0f 1e fa fb f4 <e9> 33 93 b4 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 2106.756547][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[ 2106.762635][    C0] RAX: c798c2f45fe42200 RBX: ffffffff81978fda RCX: c798c2f45fe42200
[ 2106.770622][    C0] RDX: 0000000000000001 RSI: ffffffff8d7922ac RDI: ffffffff8bc08360
[ 2106.778609][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db
[ 2106.786596][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f821f70
[ 2106.794574][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[ 2106.802551][    C0] FS:  0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000
[ 2106.811483][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2106.818065][    C0] CR2: 0000200000001000 CR3: 0000000077d5c000 CR4: 0000000000350ef0
[ 2106.826043][    C0] Call Trace:
[ 2106.829359][    C0]  <TASK>
[ 2106.832288][    C0]  default_idle+0x13/0x20
[ 2106.836627][    C0]  default_idle_call+0x73/0xb0
[ 2106.841405][    C0]  do_idle+0x1ea/0x520
[ 2106.845481][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2106.851117][    C0]  ? irqentry_exit+0x5ba/0x660
[ 2106.855900][    C0]  ? __pfx_do_idle+0x10/0x10
[ 2106.860511][    C0]  cpu_startup_entry+0x44/0x60
[ 2106.865279][    C0]  rest_init+0x2de/0x300
[ 2106.869534][    C0]  start_kernel+0x3a7/0x400
[ 2106.874061][    C0]  x86_64_start_reservations+0x24/0x30
[ 2106.879533][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 2106.884658][    C0]  common_startup_64+0x13e/0x147
[ 2106.889625][    C0]  </TASK>