last executing test programs:

6m45.704308335s ago: executing program 32 (id=191):
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd)

6m38.916383696s ago: executing program 33 (id=225):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200000004000000"], 0x48)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close(r2)

5m56.013577412s ago: executing program 34 (id=319):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)

5m6.20345254s ago: executing program 1 (id=405):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x408100)
connect$inet6(r3, 0x0, 0x0)
sendmmsg$inet6(r3, 0x0, 0x0, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x801, 0x84)

5m4.77375374s ago: executing program 1 (id=409):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

5m2.023714737s ago: executing program 1 (id=412):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'})
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r1, 0x0, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00')
r6 = fanotify_init(0x10, 0x181000)
fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, 0x0, &(0x7f0000000b40)=""/31}, 0x20)

4m45.507968345s ago: executing program 35 (id=412):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'})
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r1, 0x0, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00')
r6 = fanotify_init(0x10, 0x181000)
fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, 0x0, &(0x7f0000000b40)=""/31}, 0x20)

3m51.70821563s ago: executing program 36 (id=483):
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
bind$bt_hci(r0, &(0x7f00000001c0)={0x27}, 0x6)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r2, 0xffffffffffffffff, 0x0)

3m42.216423305s ago: executing program 37 (id=497):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
socket$kcm(0x2d, 0x2, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

1m57.689635135s ago: executing program 4 (id=669):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090106000000000001d76eeb360000000fad413ec40000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}})

1m55.849347802s ago: executing program 6 (id=672):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)

1m53.84412675s ago: executing program 6 (id=676):
pipe(&(0x7f0000000080))
pipe(&(0x7f0000000000))
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2)
preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)
r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r5)
r6 = inotify_init1(0x800)
fcntl$setown(r5, 0x8, 0x0)
inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

1m53.698732971s ago: executing program 4 (id=677):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)

1m52.335276689s ago: executing program 6 (id=680):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m45.138551041s ago: executing program 4 (id=687):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x2c, 0x4, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x141)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000)
vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESOCT=r4])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00')
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r5, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

1m43.172917862s ago: executing program 6 (id=692):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="2006010000009e"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1m38.022451198s ago: executing program 6 (id=699):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

1m34.706365833s ago: executing program 6 (id=703):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m32.02848051s ago: executing program 4 (id=709):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_setup(0x8, &(0x7f0000000000))
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

1m29.157249969s ago: executing program 0 (id=712):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m27.035654868s ago: executing program 4 (id=716):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

1m23.952685995s ago: executing program 4 (id=720):
socket$kcm(0x29, 0x0, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r1, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r3, &(0x7f00000007c0)=ANY=[], 0x1e0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, 0x0, 0x0)
sendmsg$rds(r5, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

1m23.913285631s ago: executing program 0 (id=721):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_setup(0x8, &(0x7f0000000000))
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

1m21.424935384s ago: executing program 0 (id=725):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m18.524390112s ago: executing program 0 (id=731):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x141)
vmsplice(r2, &(0x7f0000000780), 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x28)
removexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.impure\x00')
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r3, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

1m17.275332419s ago: executing program 38 (id=703):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m16.26848704s ago: executing program 0 (id=733):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

1m15.056793223s ago: executing program 0 (id=737):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m11.610235384s ago: executing program 5 (id=741):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x2c, 0x4, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x141)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000)
vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESOCT=r5])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r6, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

1m10.59846755s ago: executing program 5 (id=742):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x6, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m10.088617749s ago: executing program 5 (id=744):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)

1m8.953594466s ago: executing program 5 (id=746):
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r2, 0xffffffffffffffff, 0x0)

1m7.741468311s ago: executing program 39 (id=720):
socket$kcm(0x29, 0x0, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r1, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r3, &(0x7f00000007c0)=ANY=[], 0x1e0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, 0x0, 0x0)
sendmsg$rds(r5, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

1m7.667434007s ago: executing program 5 (id=749):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

1m7.624118784s ago: executing program 8 (id=750):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'})
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r1, 0x0, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00')
r6 = fanotify_init(0x10, 0x181000)
fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0)
preadv(r5, &(0x7f0000001600), 0x0, 0x7, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r7}, 0x38)

1m6.175040003s ago: executing program 5 (id=751):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)

1m5.868969485s ago: executing program 8 (id=752):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m1.621075353s ago: executing program 8 (id=757):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x2c, 0x4, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000)
vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdc", 0x54}], 0x1, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESOCT=r5])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00')
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)

1m0.363778746s ago: executing program 8 (id=759):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x141)
vmsplice(r2, &(0x7f0000000780), 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x28)
removexattr(0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r3, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

58.421305672s ago: executing program 40 (id=737):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

58.39056828s ago: executing program 8 (id=761):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec00000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

57.329211676s ago: executing program 8 (id=762):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)

54.473020274s ago: executing program 9 (id=767):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

53.821936057s ago: executing program 9 (id=768):
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
bind$bt_hci(r1, &(0x7f00000001c0)={0x27}, 0x6)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

52.654160048s ago: executing program 9 (id=769):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x6, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

52.401838088s ago: executing program 9 (id=770):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)

51.125186349s ago: executing program 9 (id=771):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec00000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

50.085378357s ago: executing program 9 (id=772):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)

50.045308424s ago: executing program 41 (id=751):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)

40.889262204s ago: executing program 42 (id=762):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)

33.504782005s ago: executing program 43 (id=772):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)

32.178172547s ago: executing program 1 (id=748):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b40000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021240000140012800b000100625069646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80001}, 0x20000800)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x16408b, &(0x7f0000000300)={[], [{@audit}]}, 0x1, 0x7b2, &(0x7f0000000640)="$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")
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)
mmap(&(0x7f00000c1000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0xfffff000)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0, 0x160)
fanotify_init(0x81, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x3f, 0x0, 0x4)
read$FUSE(r2, &(0x7f00000057c0)={0x2020}, 0x2020)
mbind(&(0x7f00008f6000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x2)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x5, 0x4b3, {0x3, 0x7}, {0x5, 0x9c8}, @rumble={0x5c, 0x80}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macvlan1\x00'})
rename(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00')
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$negate(0xc, 0x0, 0xffffffffffffffff, r5)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_route(0x10, 0x3, 0x0)

31.445096703s ago: executing program 1 (id=781):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec00000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

30.448727633s ago: executing program 1 (id=782):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
io_setup(0x8, &(0x7f0000000000)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

17.120127283s ago: executing program 3 (id=799):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f0000000080))

16.84695249s ago: executing program 3 (id=800):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
io_setup(0x8, &(0x7f0000000000)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

15.543354801s ago: executing program 3 (id=801):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_submit(0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

13.770357868s ago: executing program 3 (id=803):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {0x20, '\xa7!'}]}, 0x1e9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0)
close(r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]})
fspick(r0, 0x0, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r2, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

13.68760818s ago: executing program 44 (id=782):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
io_setup(0x8, &(0x7f0000000000)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

12.118130257s ago: executing program 3 (id=806):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

10.844229685s ago: executing program 3 (id=807):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)

10.233141517s ago: executing program 7 (id=810):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
io_setup(0x8, &(0x7f0000000000)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

9.357639065s ago: executing program 2 (id=811):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)

7.456117673s ago: executing program 2 (id=812):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

6.327083238s ago: executing program 2 (id=813):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)

6.229677172s ago: executing program 7 (id=814):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)

4.738325824s ago: executing program 2 (id=815):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)

3.344102877s ago: executing program 2 (id=816):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

3.199289122s ago: executing program 7 (id=817):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x6, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.385123386s ago: executing program 7 (id=818):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000140)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000340)=""/81, 0x51}], 0x2}, 0x40000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xb971, 0x10100, 0x3, 0x370, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000)
ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205)
io_setup(0x8, &(0x7f0000000680)=<r8=>0x0)
r9 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r9, 0x0, 0x0)
r10 = syz_io_uring_setup(0x4001e21, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x0, 0x61}, &(0x7f0000000100)=<r11=>0x0, &(0x7f0000000000)=<r12=>0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="4400000010000304040000000200000000000000", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0xba01}, 0x810)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r10, 0x48e9, 0x0, 0x2, 0x0, 0x0)
io_pgetevents(r8, 0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000700)={0x0, 0x989680}, 0x0)

2.246151024s ago: executing program 2 (id=819):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090106000000000001d76eeb360000000fad413ec40000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='i2c_write\x00', r0, 0x0, 0x1}, 0x18)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}})

1.156695335s ago: executing program 7 (id=820):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000009})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
capset(0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffd}}, './file0\x00'})
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440), 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

0s ago: executing program 7 (id=821):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

 EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.384: iget: bad i_size value: 2533274857506816
[  239.294458][ T7193] chnl_net:caif_netlink_parms(): no params data found
[  239.334865][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.154712][ T7464] netlink: 5364 bytes leftover after parsing attributes in process `syz.7.392'.
[  242.127402][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.968770][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.990842][ T7193] bridge_slave_0: entered allmulticast mode
[  243.009771][ T7193] bridge_slave_0: entered promiscuous mode
[  244.011763][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.018943][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.026362][ T7193] bridge_slave_1: entered allmulticast mode
[  244.034383][ T7193] bridge_slave_1: entered promiscuous mode
[  244.266591][ T7489] random: crng reseeded on system resumption
[  245.541850][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.680140][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.386198][ T7193] team0: Port device team_slave_0 added
[  246.396974][ T7193] team0: Port device team_slave_1 added
[  250.360138][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.389398][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.480236][ T7544] random: crng reseeded on system resumption
[  250.938650][   T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  251.288565][   T24] usb 7-1: Using ep0 maxpacket: 32
[  251.348641][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.361659][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.368675][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.396145][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.440518][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.501910][   T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  251.589929][   T24] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  251.653972][   T24] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  251.662008][   T24] usb 7-1: Product: syz
[  251.682073][   T24] usb 7-1: config 0 descriptor??
[  251.715138][ T7193] hsr_slave_0: entered promiscuous mode
[  251.722162][ T7193] hsr_slave_1: entered promiscuous mode
[  251.739209][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.767567][ T7193] Cannot create hsr debugfs directory
[  253.870450][ T7193] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  253.975602][ T7193] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  254.020136][ T7193] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  254.102281][ T7193] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  254.927391][ T7573] can0: slcan on ttyS3.
[  255.620821][ T7574] can0 (unregistered): slcan off ttyS3.
[  255.798160][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.895073][ T7193] 8021q: adding VLAN 0 to HW filter on device team0
[  255.979216][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.986375][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.178482][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.185728][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.344327][   T24] usb 7-1: can't set config #0, error -71
[  256.390047][   T24] usb 7-1: USB disconnect, device number 3
[  256.416776][ T7193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.304086][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.210390][ T5912] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  263.377111][ T5912] usb 8-1: Using ep0 maxpacket: 32
[  263.401329][ T5912] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.433333][ T5912] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  263.480523][ T5912] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  263.489300][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  263.493334][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  263.508106][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  263.516629][ T5912] usb 8-1: Product: syz
[  263.516900][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  263.533175][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  263.541178][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  263.579124][ T5912] usb 8-1: config 0 descriptor??
[  265.590837][ T7677] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.432'.
[  265.745542][ T5861] Bluetooth: hci6: command tx timeout
[  267.978678][ T5861] Bluetooth: hci6: command tx timeout
[  268.313086][ T7688] random: crng reseeded on system resumption
[  269.270923][   T24] usb 8-1: USB disconnect, device number 2
[  269.522914][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'.
[  269.560564][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  269.570535][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  269.582753][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  269.598593][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  269.607402][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  270.289583][ T5861] Bluetooth: hci6: command tx timeout
[  271.527451][ T7662] chnl_net:caif_netlink_parms(): no params data found
[  271.549550][ T7715] random: crng reseeded on system resumption
[  271.816378][ T5861] Bluetooth: hci4: command tx timeout
[  272.500856][ T5861] Bluetooth: hci6: command tx timeout
[  272.858227][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.932684][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.975639][ T7662] bridge_slave_0: entered allmulticast mode
[  272.983870][ T7662] bridge_slave_0: entered promiscuous mode
[  273.009190][ T1147] bridge_slave_1: left allmulticast mode
[  273.308207][ T1147] bridge_slave_1: left promiscuous mode
[  273.350268][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.110911][ T5861] Bluetooth: hci4: command tx timeout
[  274.379511][ T1147] bridge_slave_0: left allmulticast mode
[  274.391749][ T1147] bridge_slave_0: left promiscuous mode
[  274.398632][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  274.405084][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  274.415962][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.492429][ T7742] random: crng reseeded on system resumption
[  275.835365][ T7748] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.446'.
[  276.435423][ T5861] Bluetooth: hci4: command tx timeout
[  278.438759][ T7757] slcan: can't register candev
[  278.443910][ T7757] Falling back ldisc for ttyS3.
[  278.632412][ T7761] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.449'.
[  278.658417][ T5861] Bluetooth: hci4: command tx timeout
[  279.360363][ T7763] loop7: detected capacity change from 0 to 2048
[  280.391243][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'.
[  280.760087][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.783652][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.642241][ T1147] bond0 (unregistering): Released all slaves
[  281.695222][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.721431][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.746445][ T7662] bridge_slave_1: entered allmulticast mode
[  281.779427][ T7662] bridge_slave_1: entered promiscuous mode
[  281.855239][ T1147] hsr_slave_0: left promiscuous mode
[  281.866327][ T1147] hsr_slave_1: left promiscuous mode
[  281.881542][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.919666][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.082289][ T5861] Bluetooth: hci0: command 0x041b tx timeout
[  283.619863][ T7788] slcan: can't register candev
[  283.624917][ T7788] Falling back ldisc for ttyS3.
[  283.739347][ T1147] team0 (unregistering): Port device team_slave_1 removed
[  285.377930][ T1147] team0 (unregistering): Port device team_slave_0 removed
[  287.553057][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  291.374039][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[  292.519234][ T7662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.580097][ T7662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.055942][ T7662] team0: Port device team_slave_0 added
[  293.485995][ T7662] team0: Port device team_slave_1 added
[  293.604589][ T7850] random: crng reseeded on system resumption
[  295.754251][ T7662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.779642][ T7662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.878965][ T7662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.165455][ T7873] can0: slcan on ttyS3.
[  296.415282][ T7873] can0 (unregistered): slcan off ttyS3.
[  296.860354][ T7696] chnl_net:caif_netlink_parms(): no params data found
[  296.956213][ T7874] can0: slcan on ttyS3.
[  296.958522][ T7662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.983797][ T7662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.083514][ T7662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.116786][ T7879] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.472'.
[  298.373672][ T7882] random: crng reseeded on system resumption
[  298.737899][ T7842] can0 (unregistered): slcan off ttyS3.
[  298.773023][ T7662] hsr_slave_0: entered promiscuous mode
[  298.814404][ T7662] hsr_slave_1: entered promiscuous mode
[  298.856937][ T7662] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.895662][ T7662] Cannot create hsr debugfs directory
[  300.137458][ T7895] slcan: can't register candev
[  300.142516][ T7895] Falling back ldisc for ttyS3.
[  300.574195][  T971] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  302.006649][  T971] usb 4-1: Using ep0 maxpacket: 32
[  302.024239][  T971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.070908][  T971] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  302.122360][  T971] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  302.158778][  T971] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  302.648473][  T971] usb 4-1: Product: syz
[  302.678777][  T971] usb 4-1: config 0 descriptor??
[  302.785784][  T971] usb 4-1: can't set config #0, error -71
[  302.842884][  T971] usb 4-1: USB disconnect, device number 10
[  302.844290][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.877113][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.887727][ T7696] bridge_slave_0: entered allmulticast mode
[  302.916499][ T7696] bridge_slave_0: entered promiscuous mode
[  302.965749][ T7925] random: crng reseeded on system resumption
[  303.120735][ T1147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.155893][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.174896][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.392537][ T7696] bridge_slave_1: entered allmulticast mode
[  303.406929][ T7696] bridge_slave_1: entered promiscuous mode
[  304.265041][ T1147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.501829][ T7696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.924974][ T7935] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.485'.
[  305.011459][ T1147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.316179][ T7696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.477332][ T1147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.724707][ T7696] team0: Port device team_slave_0 added
[  306.756932][ T7696] team0: Port device team_slave_1 added
[  307.152028][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.159097][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.239639][ T7696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.420808][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.454768][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.541832][ T7696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.902830][ T7696] hsr_slave_0: entered promiscuous mode
[  308.139854][ T7696] hsr_slave_1: entered promiscuous mode
[  308.156686][ T7696] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  308.169083][ T7696] Cannot create hsr debugfs directory
[  308.175888][ T1147] bridge_slave_1: left allmulticast mode
[  308.181553][ T1147] bridge_slave_1: left promiscuous mode
[  308.392871][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.527143][ T1147] bridge_slave_0: left allmulticast mode
[  309.598150][ T1147] bridge_slave_0: left promiscuous mode
[  309.683104][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.227991][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  310.551509][   T24] usb 1-1: Using ep0 maxpacket: 32
[  310.576793][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.594069][   T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  310.638598][   T24] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  310.687390][   T24] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  310.703561][   T24] usb 1-1: Product: syz
[  310.722257][   T24] usb 1-1: config 0 descriptor??
[  310.890014][ T7981] random: crng reseeded on system resumption
[  311.020615][ T5932] usb 1-1: USB disconnect, device number 8
[  311.129947][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.321647][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.335878][ T1147] bond0 (unregistering): Released all slaves
[  312.179961][ T7985] slcan: can't register candev
[  312.185260][ T7985] Falling back ldisc for ttyS3.
[  314.403000][ T7662] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  314.456367][ T8004] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.498'.
[  315.333556][ T7662] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  315.392743][ T7662] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  315.496779][ T1147] hsr_slave_0: left promiscuous mode
[  315.503737][ T1147] hsr_slave_1: left promiscuous mode
[  315.552418][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.574535][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.604806][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.629871][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.709997][ T1147] veth1_macvtap: left promiscuous mode
[  315.721541][ T1147] veth0_macvtap: left promiscuous mode
[  315.728101][ T1147] veth1_vlan: left promiscuous mode
[  315.733616][ T1147] veth0_vlan: left promiscuous mode
[  316.814836][ T1147] team0 (unregistering): Port device team_slave_1 removed
[  316.859984][ T1147] team0 (unregistering): Port device team_slave_0 removed
[  317.235386][ T7662] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  317.847024][ T7696] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  317.921073][ T7696] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  317.973650][ T7696] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  318.053958][ T7696] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  318.061638][ T8044] random: crng reseeded on system resumption
[  319.234688][ T8056] can0: slcan on ttyS3.
[  320.299845][ T8056] can0 (unregistered): slcan off ttyS3.
[  320.508337][ T7662] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.879145][ T7696] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.912507][ T7662] 8021q: adding VLAN 0 to HW filter on device team0
[  321.756270][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.763482][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.851139][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.858311][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.958786][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  321.968515][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.980710][ T7696] 8021q: adding VLAN 0 to HW filter on device team0
[  321.998423][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  322.032413][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  322.055906][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  322.154367][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.161656][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.209950][ T8093] random: crng reseeded on system resumption
[  322.272182][ T5964] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  323.161255][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.168472][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.227685][ T5964] usb 1-1: Using ep0 maxpacket: 32
[  323.247223][ T5964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.247927][ T8096] loop6: detected capacity change from 0 to 512
[  323.262302][ T5964] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  323.310571][ T5964] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  323.344592][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  323.351469][ T8096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.378038][ T5964] usb 1-1: Product: syz
[  323.380389][ T8096] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  323.445175][ T5964] usb 1-1: config 0 descriptor??
[  323.651873][ T8107] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.510: iget: bad i_size value: 2533274857506816
[  323.681360][ T8107] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.510: iget: bad i_size value: 2533274857506816
[  323.698491][  T990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.818162][ T5951] usb 1-1: USB disconnect, device number 9
[  323.908381][  T990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.146446][  T990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.239544][ T7662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.245593][ T5861] Bluetooth: hci2: command tx timeout
[  324.482645][  T990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.874881][ T7696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  324.929515][ T7696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  325.082951][ T6574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.567071][ T5861] Bluetooth: hci2: command tx timeout
[  326.775317][ T8140] can0: slcan on ttyS3.
[  328.777043][ T5861] Bluetooth: hci2: command tx timeout
[  329.113810][ T8084] chnl_net:caif_netlink_parms(): no params data found
[  329.150576][ T8140] can0 (unregistered): slcan off ttyS3.
[  329.233132][  T990] bridge_slave_1: left allmulticast mode
[  329.492185][  T990] bridge_slave_1: left promiscuous mode
[  329.513924][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.572724][  T990] bridge_slave_0: left allmulticast mode
[  329.588757][  T990] bridge_slave_0: left promiscuous mode
[  329.614427][ T8152] random: crng reseeded on system resumption
[  329.636992][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.491343][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  330.519710][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  330.529369][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  330.537826][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  330.551280][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  331.020997][ T5860] Bluetooth: hci2: command tx timeout
[  332.326631][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  332.335731][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  332.358660][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  332.377218][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  332.384699][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  332.386235][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.394384][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  332.410138][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  332.415786][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  332.429379][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  332.438076][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  332.441547][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.466003][  T990] bond0 (unregistering): Released all slaves
[  332.718041][   T51] Bluetooth: hci5: command tx timeout
[  333.062080][ T8189] loop6: detected capacity change from 0 to 2048
[  333.228173][   T51] Bluetooth: hci2: command 0x0405 tx timeout
[  333.600161][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.607407][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.615106][ T8084] bridge_slave_0: entered allmulticast mode
[  333.627066][ T8084] bridge_slave_0: entered promiscuous mode
[  334.600336][ T5861] Bluetooth: hci3: command tx timeout
[  334.606035][   T51] Bluetooth: hci6: command tx timeout
[  334.627680][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.639891][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.653553][ T8084] bridge_slave_1: entered allmulticast mode
[  334.662982][ T8084] bridge_slave_1: entered promiscuous mode
[  334.871696][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.900519][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.933859][   T51] Bluetooth: hci5: command tx timeout
[  335.189698][ T8084] team0: Port device team_slave_0 added
[  335.220530][ T8084] team0: Port device team_slave_1 added
[  335.458805][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.465978][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.494344][ T8084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.519681][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.529172][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.596733][ T8084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.170085][  T990] hsr_slave_0: left promiscuous mode
[  336.188848][ T5986] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  336.290615][  T990] hsr_slave_1: left promiscuous mode
[  336.338686][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.363324][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.408167][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.416034][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.421903][ T5986] usb 7-1: Using ep0 maxpacket: 32
[  336.454058][ T5986] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  336.471149][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.474009][  T990] veth1_macvtap: left promiscuous mode
[  336.484963][  T990] veth0_macvtap: left promiscuous mode
[  336.486039][ T5986] usb 7-1: config 0 descriptor??
[  336.490625][  T990] veth1_vlan: left promiscuous mode
[  336.502007][  T990] veth0_vlan: left promiscuous mode
[  336.737749][ T5986] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  336.762523][ T5986] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  336.779427][ T5986] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  336.798112][ T5986] usb 7-1: media controller created
[  336.818065][   T51] Bluetooth: hci6: command tx timeout
[  336.823832][ T5861] Bluetooth: hci3: command tx timeout
[  336.824606][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  336.953550][ T5986] az6027: usb out operation failed. (-71)
[  336.973948][ T5986] az6027: usb out operation failed. (-71)
[  336.981951][ T5986] stb0899_attach: Driver disabled by Kconfig
[  336.990207][ T5986] az6027: no front-end attached
[  336.990207][ T5986] 
[  337.000052][ T5986] az6027: usb out operation failed. (-71)
[  337.005793][ T5986] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  337.028957][ T5986] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8
[  337.055589][ T5986] dvb-usb: schedule remote query interval to 400 msecs.
[  337.064812][  T990] team0 (unregistering): Port device team_slave_1 removed
[  337.069272][ T5986] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  337.120780][ T5986] usb 7-1: USB disconnect, device number 4
[  337.133872][ T6528] udevd[6528]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  337.155057][  T990] team0 (unregistering): Port device team_slave_0 removed
[  337.162651][   T51] Bluetooth: hci5: command tx timeout
[  337.284454][ T5986] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  337.531603][ T5912] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  337.801554][ T5912] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  337.872215][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.914081][ T5912] usb 1-1: Product: syz
[  337.992301][ T5912] usb 1-1: Manufacturer: syz
[  338.033268][ T5912] usb 1-1: SerialNumber: syz
[  338.249078][ T5912] usb 1-1: config 0 descriptor??
[  338.273698][ T5912] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  338.353086][ T8084] hsr_slave_0: entered promiscuous mode
[  338.360480][ T8084] hsr_slave_1: entered promiscuous mode
[  338.372410][ T8084] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.380113][ T8084] Cannot create hsr debugfs directory
[  338.790629][ T8178] chnl_net:caif_netlink_parms(): no params data found
[  338.908077][ T8176] chnl_net:caif_netlink_parms(): no params data found
[  339.050231][ T5861] Bluetooth: hci3: command tx timeout
[  339.055763][   T51] Bluetooth: hci6: command tx timeout
[  339.165162][ T8225] random: crng reseeded on system resumption
[  339.392537][ T5912] gspca_sunplus: reg_r err -32
[  339.414376][   T51] Bluetooth: hci5: command tx timeout
[  339.899393][ T8163] chnl_net:caif_netlink_parms(): no params data found
[  340.081560][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  340.088122][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  340.721848][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.804624][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.919550][ T8178] bridge_slave_0: entered allmulticast mode
[  341.134593][ T8178] bridge_slave_0: entered promiscuous mode
[  341.172432][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.183679][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.191185][ T8178] bridge_slave_1: entered allmulticast mode
[  341.199772][ T8178] bridge_slave_1: entered promiscuous mode
[  341.295834][   T51] Bluetooth: hci6: command tx timeout
[  341.301285][   T51] Bluetooth: hci3: command tx timeout
[  341.649341][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.657470][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.665569][ T8176] bridge_slave_0: entered allmulticast mode
[  341.678311][ T8176] bridge_slave_0: entered promiscuous mode
[  341.709707][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.720462][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.742100][ T8176] bridge_slave_1: entered allmulticast mode
[  341.767154][ T8176] bridge_slave_1: entered promiscuous mode
[  341.905303][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.920642][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.927963][ T8163] bridge_slave_0: entered allmulticast mode
[  341.936090][ T8163] bridge_slave_0: entered promiscuous mode
[  341.954125][ T8178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.986154][ T8178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.119814][ T8256] random: crng reseeded on system resumption
[  343.725884][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.738938][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.959013][ T8163] bridge_slave_1: entered allmulticast mode
[  343.967555][ T8163] bridge_slave_1: entered promiscuous mode
[  345.229701][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.261324][ T5912] sunplus 1-1:0.0: probe with driver sunplus failed with error -32
[  345.295694][ T5912] usb 1-1: USB disconnect, device number 10
[  345.446794][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.478087][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.498642][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.512419][ T8178] team0: Port device team_slave_0 added
[  345.591311][ T8178] team0: Port device team_slave_1 added
[  345.637537][ T8176] team0: Port device team_slave_0 added
[  345.647597][ T8176] team0: Port device team_slave_1 added
[  345.676005][ T8163] team0: Port device team_slave_0 added
[  345.699448][ T5912] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  345.777122][ T8163] team0: Port device team_slave_1 added
[  345.890889][ T5912] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  345.900217][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.909023][ T5912] usb 1-1: Product: syz
[  345.921306][ T5912] usb 1-1: Manufacturer: syz
[  345.926549][ T5912] usb 1-1: SerialNumber: syz
[  345.946869][ T5912] usb 1-1: config 0 descriptor??
[  345.964314][ T8178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.977816][ T8178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.980494][ T5912] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  346.004271][ T8178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.006722][ T8178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.043268][ T8178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.101376][ T8178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.135827][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.159057][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.198086][ T8176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.247450][ T8163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.254430][ T8163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.284547][ T8163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.381133][ T8176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.388359][ T8176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.420545][ T8176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.440150][ T8163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.457360][ T8163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.490557][ T8163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.571187][ T8084] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  346.694180][ T8178] hsr_slave_0: entered promiscuous mode
[  346.711657][ T8178] hsr_slave_1: entered promiscuous mode
[  346.723201][ T8178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.744872][ T8178] Cannot create hsr debugfs directory
[  346.788439][ T8084] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  346.840458][ T8163] hsr_slave_0: entered promiscuous mode
[  346.849063][ T8163] hsr_slave_1: entered promiscuous mode
[  346.856662][ T8163] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.864302][ T8163] Cannot create hsr debugfs directory
[  347.062425][ T5912] gspca_sunplus: reg_r err -32
[  347.192407][ T8084] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  347.223488][ T8084] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  347.312139][ T8176] hsr_slave_0: entered promiscuous mode
[  347.319609][ T8176] hsr_slave_1: entered promiscuous mode
[  347.326288][ T8176] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.333862][ T8176] Cannot create hsr debugfs directory
[  348.226609][  T990] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.752005][ T8290] random: crng reseeded on system resumption
[  349.812129][  T990] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.832255][ T8294] random: crng reseeded on system resumption
[  349.977325][  T990] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.391215][  T990] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.423760][ T8296] bridge0: port 3(team0) entered blocking state
[  350.430469][ T8296] bridge0: port 3(team0) entered disabled state
[  350.437101][ T8296] team0: entered allmulticast mode
[  350.442246][ T8296] team_slave_0: entered allmulticast mode
[  350.448040][ T8296] team_slave_1: entered allmulticast mode
[  350.457117][ T8296] team0: entered promiscuous mode
[  350.462160][ T8296] team_slave_0: entered promiscuous mode
[  350.470098][ T8296] team_slave_1: entered promiscuous mode
[  350.476557][ T8296] bridge0: port 3(team0) entered blocking state
[  350.482950][ T8296] bridge0: port 3(team0) entered forwarding state
[  350.673774][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.177754][ T8084] 8021q: adding VLAN 0 to HW filter on device team0
[  352.650418][   T51] Bluetooth: hci6: command 0x0405 tx timeout
[  352.905519][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.912671][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.992041][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.999239][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.034641][ T8312] slcan: can't register candev
[  354.042243][ T8312] Falling back ldisc for ttyS3.
[  354.245548][ T5912] sunplus 1-1:0.0: probe with driver sunplus failed with error -32
[  354.461017][ T5912] usb 1-1: USB disconnect, device number 11
[  355.077884][ T8176] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  355.132193][ T8176] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  355.159647][ T8176] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  355.187711][ T8176] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  355.248980][  T990] bridge_slave_1: left allmulticast mode
[  355.255040][  T990] bridge_slave_1: left promiscuous mode
[  355.264629][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.281588][  T990] bridge_slave_0: left allmulticast mode
[  355.287250][  T990] bridge_slave_0: left promiscuous mode
[  355.293568][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.299567][ T5912] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  355.313444][  T990] team0: left allmulticast mode
[  355.318348][  T990] team_slave_0: left allmulticast mode
[  355.324709][  T990] team_slave_1: left allmulticast mode
[  355.330209][  T990] team0: left promiscuous mode
[  355.336345][  T990] team_slave_0: left promiscuous mode
[  355.342228][  T990] team_slave_1: left promiscuous mode
[  355.348087][  T990] bridge0: port 3(team0) entered disabled state
[  355.358684][  T990] bridge_slave_1: left allmulticast mode
[  355.364493][  T990] bridge_slave_1: left promiscuous mode
[  355.370248][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.381088][  T990] bridge_slave_0: left allmulticast mode
[  355.387237][  T990] bridge_slave_0: left promiscuous mode
[  355.392937][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.405081][  T990] bridge_slave_1: left allmulticast mode
[  355.411109][  T990] bridge_slave_1: left promiscuous mode
[  355.418492][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.428561][  T990] bridge_slave_0: left allmulticast mode
[  355.434235][  T990] bridge_slave_0: left promiscuous mode
[  355.441383][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.467473][ T5912] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  355.479681][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.489448][ T5912] usb 1-1: Product: syz
[  355.494183][ T5912] usb 1-1: Manufacturer: syz
[  355.498816][ T5912] usb 1-1: SerialNumber: syz
[  355.514294][ T5912] usb 1-1: config 0 descriptor??
[  355.523365][ T5912] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  355.826972][ T8326] random: crng reseeded on system resumption
[  356.677167][ T5912] gspca_sunplus: reg_r err -32
[  357.039529][ T8328] random: crng reseeded on system resumption
[  357.212070][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.241608][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.323749][ T8331] netlink: 5364 bytes leftover after parsing attributes in process `syz.6.553'.
[  358.458565][  T990] bond0 (unregistering): Released all slaves
[  359.272817][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.304556][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.343606][  T990] bond0 (unregistering): Released all slaves
[  359.813545][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.835172][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.849868][  T990] bond0 (unregistering): Released all slaves
[  360.062440][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.340166][ T8352] random: crng reseeded on system resumption
[  361.371841][ T5912] sunplus 1-1:0.0: probe with driver sunplus failed with error -32
[  361.414649][ T5912] usb 1-1: USB disconnect, device number 12
[  361.879950][  T990] hsr_slave_0: left promiscuous mode
[  361.916312][  T990] hsr_slave_1: left promiscuous mode
[  361.928362][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.951382][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.983041][  T990] hsr_slave_0: left promiscuous mode
[  361.993608][  T990] hsr_slave_1: left promiscuous mode
[  362.008435][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.024933][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.039397][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.049906][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.073746][  T990] hsr_slave_0: left promiscuous mode
[  362.087088][  T990] hsr_slave_1: left promiscuous mode
[  362.096651][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.112651][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.120523][   T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  362.204145][  T990] veth1_macvtap: left promiscuous mode
[  362.212642][  T990] veth0_macvtap: left promiscuous mode
[  362.225159][  T990] veth1_vlan: left promiscuous mode
[  362.236409][  T990] veth0_vlan: left promiscuous mode
[  362.291893][   T24] usb 1-1: no configurations
[  362.305249][   T24] usb 1-1: can't read configurations, error -22
[  362.451421][   T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  362.828138][   T24] usb 1-1: no configurations
[  362.832791][   T24] usb 1-1: can't read configurations, error -22
[  362.845714][   T24] usb usb1-port1: attempt power cycle
[  363.334133][   T24] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  363.585562][  T990] team0 (unregistering): Port device team_slave_1 removed
[  363.596217][ T8372] slcan: can't register candev
[  363.601281][ T8372] Falling back ldisc for ttyS3.
[  363.655886][  T990] team0 (unregistering): Port device team_slave_0 removed
[  363.775486][   T24] usb 1-1: no configurations
[  363.787379][   T24] usb 1-1: can't read configurations, error -22
[  363.928294][   T24] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  363.965478][   T24] usb 1-1: no configurations
[  363.974605][   T24] usb 1-1: can't read configurations, error -22
[  363.985957][   T24] usb usb1-port1: unable to enumerate USB device
[  364.115665][ T5986] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  364.298391][ T5986] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  364.308824][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.317453][ T5986] usb 7-1: Product: syz
[  364.321639][ T5986] usb 7-1: Manufacturer: syz
[  364.328303][ T5986] usb 7-1: SerialNumber: syz
[  364.336467][ T5986] usb 7-1: config 0 descriptor??
[  364.362303][ T5986] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  364.392452][  T990] team0 (unregistering): Port device team_slave_1 removed
[  364.430481][  T990] team0 (unregistering): Port device team_slave_0 removed
[  364.967453][  T990] team0 (unregistering): Port device team_slave_1 removed
[  365.001517][  T990] team0 (unregistering): Port device team_slave_0 removed
[  365.448896][ T5986] gspca_sunplus: reg_r err -32
[  365.564640][ T8176] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.775707][ T8176] 8021q: adding VLAN 0 to HW filter on device team0
[  365.827225][ T8178] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  365.882421][ T8178] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  365.915989][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.923182][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.978857][ T8084] veth0_vlan: entered promiscuous mode
[  365.999588][ T8084] veth1_vlan: entered promiscuous mode
[  366.087160][ T8084] veth0_macvtap: entered promiscuous mode
[  366.133047][ T8084] veth1_macvtap: entered promiscuous mode
[  366.149156][ T8178] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  366.169352][ T8178] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  366.212640][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.219879][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.420879][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.511752][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.519248][ T8163] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  366.543576][ T8163] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  366.569300][ T8163] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  366.600319][ T8163] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  366.637682][ T8084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.650799][ T8084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.660821][ T8084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.670253][ T8084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.922105][ T8396] random: crng reseeded on system resumption
[  368.030193][ T8399] random: crng reseeded on system resumption
[  369.739868][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.758721][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.769561][ T8163] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.926103][   T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  369.929185][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.975695][ T8176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.005417][ T8178] 8021q: adding VLAN 0 to HW filter on device team0
[  370.021675][ T6566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.035950][ T8163] 8021q: adding VLAN 0 to HW filter on device team0
[  370.043254][ T6566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.080719][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.087964][ T6566] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.095560][   T43] usb 1-1: Using ep0 maxpacket: 16
[  370.110633][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  370.142735][   T43] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  370.147803][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.160732][ T6566] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.190742][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.192521][   T43] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  370.197930][ T6566] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.224914][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.232153][ T6566] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.239744][   T43] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  370.275348][   T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  370.319749][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.327771][   T43] usb 1-1: Product: syz
[  370.362709][   T43] usb 1-1: Manufacturer: syz
[  370.367355][   T43] usb 1-1: SerialNumber: syz
[  370.475184][ T8163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  370.490551][ T8163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  371.871609][ T5986] sunplus 7-1:0.0: probe with driver sunplus failed with error -32
[  371.903620][ T8163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.903698][ T5986] usb 7-1: USB disconnect, device number 5
[  372.482175][ T8176] veth0_vlan: entered promiscuous mode
[  372.615501][ T8176] veth1_vlan: entered promiscuous mode
[  372.735632][ T8445] random: crng reseeded on system resumption
[  372.931571][ T8176] veth0_macvtap: entered promiscuous mode
[  372.961621][ T8176] veth1_macvtap: entered promiscuous mode
[  373.061080][ T5986] usb 1-1: USB disconnect, device number 17
[  373.101451][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.205119][ T8178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.289548][ T8176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.343218][ T8454] loop0: detected capacity change from 0 to 512
[  373.371008][ T8176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.445095][ T8454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.447307][ T8176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.474070][ T8454] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  373.505904][   T24] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  373.594519][ T8176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.655106][ T8176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.680317][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.755995][   T24] usb 7-1: config 0 has no interfaces?
[  373.798728][   T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  373.829149][ T8472] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.572: iget: bad i_size value: 2533274857506816
[  373.864052][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.007780][   T24] usb 7-1: Product: syz
[  374.092558][   T24] usb 7-1: Manufacturer: syz
[  374.179611][   T24] usb 7-1: SerialNumber: syz
[  374.209569][ T6552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.229869][   T24] usb 7-1: config 0 descriptor??
[  374.243288][ T6552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.399651][ T7184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.442616][ T7184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.564891][ T8163] veth0_vlan: entered promiscuous mode
[  374.616335][ T8163] veth1_vlan: entered promiscuous mode
[  374.786442][ T8163] veth0_macvtap: entered promiscuous mode
[  374.855172][ T8163] veth1_macvtap: entered promiscuous mode
[  376.040479][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.127702][ T8163] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.228462][ T8163] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.288913][ T8163] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.980128][ T8163] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.988986][ T8163] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.998131][ T8163] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.094375][ T8499] random: crng reseeded on system resumption
[  377.347229][   T24] usb 7-1: USB disconnect, device number 6
[  377.597034][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.666672][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.528429][ T8178] veth0_vlan: entered promiscuous mode
[  378.593147][ T8520] random: crng reseeded on system resumption
[  378.779175][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.786778][  T971] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  378.824119][ T8178] veth1_vlan: entered promiscuous mode
[  378.827016][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.091136][ T8178] veth0_macvtap: entered promiscuous mode
[  379.899210][  T971] usb 1-1: Using ep0 maxpacket: 16
[  379.920284][  T971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  379.965838][  T971] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  379.983991][ T8528] can0: slcan on ttyS3.
[  380.038357][ T8178] veth1_macvtap: entered promiscuous mode
[  380.046959][  T971] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  380.061721][ T8529] can0 (unregistered): slcan off ttyS3.
[  380.065282][  T971] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  380.094051][  T971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  380.114667][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.239010][  T971] usb 1-1: Product: syz
[  380.254857][ T8178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.283427][  T971] usb 1-1: Manufacturer: syz
[  380.295460][ T8178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.301594][  T971] usb 1-1: SerialNumber: syz
[  380.346081][ T8178] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.382828][ T8178] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.422247][ T8178] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.454383][ T8178] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.022807][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'.
[  382.258751][ T7184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.389503][ T7184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.628998][ T6552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.775448][ T8555] can0: slcan on ttyS3.
[  383.629478][ T6552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.778504][ T5939] usb 1-1: USB disconnect, device number 18
[  383.909743][ T8555] can0 (unregistered): slcan off ttyS3.
[  384.527505][ T5939] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  384.930876][ T5939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  384.930919][ T5939] usb 7-1: config 0 has no interfaces?
[  384.945025][ T5939] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  384.945071][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.945107][ T5939] usb 7-1: Product: syz
[  384.945135][ T5939] usb 7-1: Manufacturer: syz
[  384.945163][ T5939] usb 7-1: SerialNumber: syz
[  384.948398][ T5939] usb 7-1: config 0 descriptor??
[  386.583095][ T8572] tty tty28: ldisc open failed (-12), clearing slot 27
[  387.304781][ T8595] can0: slcan on ttyS3.
[  388.121685][ T8595] can0 (unregistered): slcan off ttyS3.
[  388.364592][ T8603] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.596'.
[  388.611269][ T5939] usb 7-1: USB disconnect, device number 7
[  389.332710][ T8607] random: crng reseeded on system resumption
[  391.308752][ T8616] netlink: 5364 bytes leftover after parsing attributes in process `syz.6.598'.
[  391.701346][ T5986] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  392.298838][ T8624] loop9: detected capacity change from 0 to 2048
[  392.384223][ T5986] usb 9-1: Using ep0 maxpacket: 16
[  392.396139][ T5986] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  392.427861][ T5986] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  392.459348][ T5986] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  392.492048][ T5986] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  392.531442][ T5986] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  392.559423][ T5986] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.588008][ T5986] usb 9-1: Product: syz
[  392.602375][ T5986] usb 9-1: Manufacturer: syz
[  392.624131][ T5986] usb 9-1: SerialNumber: syz
[  392.753324][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.604'.
[  393.192455][ T8637] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.605'.
[  394.365612][ T8653] loop5: detected capacity change from 0 to 512
[  394.729002][ T8653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.742095][ T5986] usb 9-1: USB disconnect, device number 2
[  394.822764][ T8653] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  395.034730][ T5951] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  395.525562][ T8677] can0: slcan on ttyS3.
[  395.613711][ T5951] usb 10-1: Using ep0 maxpacket: 32
[  396.169978][ T5939] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  396.196734][ T5951] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.207163][ T8678] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.610: iget: bad i_size value: 2533274857506816
[  396.330042][ T5951] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  396.364743][ T8670] can0 (unregistered): slcan off ttyS3.
[  396.426532][ T5939] usb 5-1: Using ep0 maxpacket: 16
[  396.445256][ T5939] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  396.454913][ T5939] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  396.473592][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  396.505746][ T5939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  396.523813][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.558619][ T5931] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  396.567151][ T5939] usb 5-1: Product: syz
[  396.571354][ T5939] usb 5-1: Manufacturer: syz
[  396.621348][ T5951] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  396.637288][ T5951] usb 10-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  396.645539][ T5951] usb 10-1: Product: syz
[  396.710019][ T5939] usb 5-1: SerialNumber: syz
[  396.880957][ T5951] usb 10-1: config 0 descriptor??
[  396.992921][ T5931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  397.076251][ T5931] usb 7-1: config 0 has no interfaces?
[  397.983113][ T5931] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  398.011305][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.042491][ T5939] usb 5-1: can't set config #1, error -71
[  398.062955][ T5931] usb 7-1: Product: syz
[  398.117075][ T5931] usb 7-1: Manufacturer: syz
[  398.126813][ T5939] usb 5-1: USB disconnect, device number 4
[  398.142122][ T5931] usb 7-1: SerialNumber: syz
[  398.225519][ T8689] random: crng reseeded on system resumption
[  398.965800][ T5931] usb 7-1: config 0 descriptor??
[  399.276227][ T5931] usb 7-1: can't set config #0, error -71
[  399.310520][ T5931] usb 7-1: USB disconnect, device number 8
[  399.624335][ T8691] loop4: detected capacity change from 0 to 2048
[  399.794526][ T8702] random: crng reseeded on system resumption
[  400.465963][ T8176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.361841][ T8728] can0: slcan on ttyS3.
[  405.753902][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  405.761122][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  406.081201][ T8728] can0 (unregistered): slcan off ttyS3.
[  406.322794][ T8752] can0: slcan on ttyS3.
[  407.099278][ T8753] can0 (unregistered): slcan off ttyS3.
[  407.772267][ T5986] usb 10-1: USB disconnect, device number 2
[  408.036335][ T5964] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  408.256566][ T8770] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.630'.
[  408.324624][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  408.335169][ T5964] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  408.464999][ T5964] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  408.488229][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.516880][ T5964] usb 5-1: Product: syz
[  409.282043][ T5964] usb 5-1: Manufacturer: syz
[  409.286732][ T5964] usb 5-1: SerialNumber: syz
[  409.666833][ T5964] usb 5-1: config 0 descriptor??
[  411.037143][ T8784] loop5: detected capacity change from 0 to 512
[  411.217353][ T8784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.286603][ T8784] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  411.742045][ T5931] usb 5-1: USB disconnect, device number 5
[  411.779148][ T8794] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.633: iget: bad i_size value: 2533274857506816
[  414.523440][ T8176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.097254][ T8824] random: crng reseeded on system resumption
[  416.903918][ T8840] netlink: 5364 bytes leftover after parsing attributes in process `syz.6.644'.
[  417.315795][ T5931] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  417.569101][ T5931] usb 6-1: Using ep0 maxpacket: 32
[  417.615374][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  417.647352][ T5931] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  417.668454][ T5931] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  417.677532][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  417.700639][ T5931] usb 6-1: Product: syz
[  417.760608][ T5931] usb 6-1: config 0 descriptor??
[  417.933211][ T8856] random: crng reseeded on system resumption
[  419.753080][ T5932] usb 6-1: USB disconnect, device number 6
[  421.003848][ T5964] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  421.181053][ T8869] bridge0: port 3(team0) entered blocking state
[  421.188229][ T8869] bridge0: port 3(team0) entered disabled state
[  421.195700][ T8869] team0: entered allmulticast mode
[  421.200946][ T8869] team_slave_0: entered allmulticast mode
[  421.206774][ T8869] team_slave_1: entered allmulticast mode
[  421.235718][ T8869] team0: entered promiscuous mode
[  421.240873][ T8869] team_slave_0: entered promiscuous mode
[  421.248358][ T8869] team_slave_1: entered promiscuous mode
[  421.259376][ T8869] bridge0: port 3(team0) entered blocking state
[  421.265770][ T8869] bridge0: port 3(team0) entered forwarding state
[  421.442146][ T5964] usb 6-1: Using ep0 maxpacket: 32
[  421.960510][ T5964] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  422.012991][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.064395][ T5964] usb 6-1: config 0 descriptor??
[  422.332342][ T5964] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  422.362454][ T5964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  422.430506][ T5964] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  422.457929][ T5964] usb 6-1: media controller created
[  422.839379][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  422.889210][ T5964] az6027: usb out operation failed. (-71)
[  422.904732][ T5964] az6027: usb out operation failed. (-71)
[  422.940657][ T5964] stb0899_attach: Driver disabled by Kconfig
[  422.946813][ T5964] az6027: no front-end attached
[  422.946813][ T5964] 
[  423.025115][   T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  423.228579][ T5964] az6027: usb out operation failed. (-71)
[  423.313459][   T24] usb 7-1: Using ep0 maxpacket: 16
[  423.367394][ T5964] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  423.530479][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  423.549853][ T5964] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9
[  423.602691][   T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  423.659935][ T5964] dvb-usb: schedule remote query interval to 400 msecs.
[  423.676506][   T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  423.740764][ T5964] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  423.815553][   T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  423.850878][   T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  423.860799][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.868824][   T24] usb 7-1: Product: syz
[  423.890989][ T8889] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.655'.
[  423.938232][   T24] usb 7-1: Manufacturer: syz
[  423.944571][ T5964] usb 6-1: USB disconnect, device number 7
[  424.009770][   T24] usb 7-1: SerialNumber: syz
[  424.394986][ T8896] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.657'.
[  427.754626][ T5964] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  428.275703][ T8900] random: crng reseeded on system resumption
[  428.430940][   T24] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  428.466132][   T24] usb 7-1: 2:1 : format type 0 is detected, processed as PCM
[  428.850965][   T24] usb 7-1: USB disconnect, device number 9
[  430.203356][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  430.234233][ T8908] loop6: detected capacity change from 0 to 2048
[  435.062757][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  435.211690][ T5964] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  435.902060][   T24] usb 5-1: Using ep0 maxpacket: 32
[  435.982228][   T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  435.991308][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.035962][   T24] usb 5-1: config 0 descriptor??
[  436.246168][ T5964] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  436.270106][ T5964] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.322171][ T5964] usb 10-1: Product: syz
[  436.387548][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  436.408851][ T5964] usb 10-1: Manufacturer: syz
[  436.468140][ T5964] usb 10-1: SerialNumber: syz
[  436.510704][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  436.548567][ T5964] usb 10-1: config 0 descriptor??
[  436.578848][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  436.619150][ T5964] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  436.633596][   T24] usb 5-1: media controller created
[  436.735417][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  437.134113][   T24] az6027: usb out operation failed. (-71)
[  437.150226][   T24] az6027: usb out operation failed. (-71)
[  437.756021][ T5964] gspca_sunplus: reg_r err -110
[  437.761753][ T5964] sunplus 10-1:0.0: probe with driver sunplus failed with error -110
[  437.903156][ T5932] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  437.934936][ T8976] random: crng reseeded on system resumption
[  438.401856][   T24] stb0899_attach: Driver disabled by Kconfig
[  438.407920][   T24] az6027: no front-end attached
[  438.407920][   T24] 
[  438.415753][   T24] az6027: usb out operation failed. (-71)
[  438.421628][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  438.432486][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10
[  438.443737][ T5932] usb 1-1: Using ep0 maxpacket: 16
[  438.474008][ T5932] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  438.503749][ T8974] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.674'.
[  438.528075][ T5932] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  438.573435][ T5932] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  438.832209][ T5932] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  438.846638][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.854751][ T5932] usb 1-1: Product: syz
[  438.859652][ T5932] usb 1-1: Manufacturer: syz
[  438.864332][ T5932] usb 1-1: SerialNumber: syz
[  439.099758][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  439.132460][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  439.230460][   T43] usb 10-1: USB disconnect, device number 3
[  439.749375][   T24] usb 5-1: USB disconnect, device number 6
[  440.082086][ T8990] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.678'.
[  440.165085][ T5932] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  440.406306][ T5932] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  441.172732][ T8998] netlink: 5364 bytes leftover after parsing attributes in process `syz.6.680'.
[  441.581847][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  443.259659][   T43] usb 1-1: USB disconnect, device number 19
[  443.329739][ T9017] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.682'.
[  446.297824][ T9025] can0: slcan on ttyS3.
[  448.336843][ T9014] can0 (unregistered): slcan off ttyS3.
[  449.304609][ T5912] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  450.106990][ T9054] can0: slcan on ttyS3.
[  450.452325][ T5912] usb 10-1: Using ep0 maxpacket: 32
[  450.468136][ T5912] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  450.477316][ T5912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.529694][ T5912] usb 10-1: config 0 descriptor??
[  450.585548][ T9054] can0 (unregistered): slcan off ttyS3.
[  450.804447][ T5931] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  450.818029][ T5912] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  450.908092][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  451.953576][ T5912] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  451.960806][ T5912] usb 10-1: media controller created
[  452.005903][ T5931] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  452.103502][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.111546][ T5931] usb 7-1: Product: syz
[  452.173710][ T5931] usb 7-1: Manufacturer: syz
[  452.195731][ T5931] usb 7-1: SerialNumber: syz
[  452.225412][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  452.330639][ T5931] usb 7-1: config 0 descriptor??
[  452.776374][ T5931] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  452.798722][ T5912] az6027: usb out operation failed. (-71)
[  452.840602][ T5912] az6027: usb out operation failed. (-71)
[  452.882198][ T5912] stb0899_attach: Driver disabled by Kconfig
[  453.161858][ T5912] az6027: no front-end attached
[  453.161858][ T5912] 
[  453.172067][ T5912] az6027: usb out operation failed. (-71)
[  453.193275][ T5912] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  453.213024][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input11
[  453.228176][ T5912] dvb-usb: schedule remote query interval to 400 msecs.
[  453.343883][ T5931] gspca_sunplus: reg_r err -110
[  454.059671][ T5912] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  454.143757][ T5931] usb 7-1: USB disconnect, device number 10
[  454.163324][ T5912] usb 10-1: USB disconnect, device number 4
[  454.365126][ T9087] random: crng reseeded on system resumption
[  455.582702][ T5912] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  455.951721][ T5912] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  456.112101][ T5912] usb 10-1: Using ep0 maxpacket: 16
[  456.617293][ T9101] can0: slcan on ttyS3.
[  457.264366][ T5912] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  457.281015][ T5861] Bluetooth: hci2: command 0x0405 tx timeout
[  457.333849][ T5912] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  457.480242][ T5912] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  457.625045][ T9096] can0 (unregistered): slcan off ttyS3.
[  457.789290][ T5912] usb 10-1: string descriptor 0 read error: -71
[  457.832137][ T5912] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  457.879299][ T5912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.966673][ T5912] usb 10-1: can't set config #1, error -71
[  459.725950][ T5912] usb 10-1: USB disconnect, device number 5
[  463.000127][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  464.077865][ T9147] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.712'.
[  465.339700][ T9157] can0: slcan on ttyS3.
[  466.803429][ T9157] can0 (unregistered): slcan off ttyS3.
[  468.198512][ T5845] Bluetooth: hci3: command 0x0406 tx timeout
[  468.198541][ T5860] Bluetooth: hci6: command 0x0405 tx timeout
[  468.471283][ T5912] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  468.760738][ T5912] usb 10-1: Using ep0 maxpacket: 16
[  468.958061][ T5912] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  468.991396][ T5912] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  469.007282][ T9181] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.719'.
[  469.116734][ T5912] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  469.197815][ T5912] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  469.243270][ T5912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.304087][ T5912] usb 10-1: Product: syz
[  469.316477][ T5912] usb 10-1: Manufacturer: syz
[  469.335766][ T5912] usb 10-1: SerialNumber: syz
[  469.459337][ T9188] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.723'.
[  470.356755][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.722'.
[  470.560107][ T5912] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor
[  470.576359][ T5912] usb 10-1: 2:1 : format type 0 is detected, processed as PCM
[  471.595464][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  471.611877][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  471.676564][ T9207] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.725'.
[  472.756752][   T24] usb 10-1: USB disconnect, device number 6
[  473.608548][ T9214] random: crng reseeded on system resumption
[  473.837024][ T9220] random: crng reseeded on system resumption
[  477.019255][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  477.030624][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  477.038960][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  477.054517][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  477.063019][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  477.401288][ T9246] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.736'.
[  478.544792][ T9256] random: crng reseeded on system resumption
[  479.310863][   T51] Bluetooth: hci4: command tx timeout
[  479.647069][ T3005] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.611770][ T9112] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  480.717689][ T3005] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.796823][ T9112] usb 9-1: Using ep0 maxpacket: 16
[  480.840068][ T9112] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  480.914178][ T9112] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  480.965259][ T9112] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  481.045628][ T3005] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.093030][ T9112] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  481.113022][ T9112] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.150427][ T9112] usb 9-1: Product: syz
[  481.176253][ T9112] usb 9-1: Manufacturer: syz
[  481.207452][ T9112] usb 9-1: SerialNumber: syz
[  481.400830][ T3005] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.599813][   T51] Bluetooth: hci4: command tx timeout
[  481.759411][ T9112] usb 9-1: 2:1 : format type 0 is detected, processed as PCM
[  481.823246][ T9242] chnl_net:caif_netlink_parms(): no params data found
[  482.069227][ T3005] team0: left allmulticast mode
[  482.079594][ T3005] team_slave_0: left allmulticast mode
[  482.106347][ T3005] team_slave_1: left allmulticast mode
[  482.153838][ T3005] team0: left promiscuous mode
[  482.172582][ T3005] team_slave_0: left promiscuous mode
[  482.192469][ T3005] team_slave_1: left promiscuous mode
[  482.213270][ T3005] bridge0: port 3(team0) entered disabled state
[  482.239255][ T3005] bridge_slave_1: left allmulticast mode
[  482.248560][ T3005] bridge_slave_1: left promiscuous mode
[  482.259372][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.270308][ T3005] bridge_slave_0: left allmulticast mode
[  482.287685][ T3005] bridge_slave_0: left promiscuous mode
[  482.296291][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.583603][ T9299] random: crng reseeded on system resumption
[  483.789886][   T51] Bluetooth: hci4: command tx timeout
[  484.574238][ T5951] usb 9-1: USB disconnect, device number 3
[  486.038022][   T51] Bluetooth: hci4: command tx timeout
[  486.229918][ T9312] slcan: can't register candev
[  486.235011][ T9312] Falling back ldisc for ttyS3.
[  486.536374][ T9318] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.752'.
[  487.856801][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  487.873160][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  487.885980][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  487.924404][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  487.958080][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  489.445696][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.304205][ T5861] Bluetooth: hci0: command tx timeout
[  490.571402][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.627516][ T3005] bond0 (unregistering): Released all slaves
[  491.465406][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.498852][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.509027][ T9242] bridge_slave_0: entered allmulticast mode
[  491.528683][ T9242] bridge_slave_0: entered promiscuous mode
[  491.552246][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.630470][ T9360] netlink: 5364 bytes leftover after parsing attributes in process `syz.9.758'.
[  491.670406][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.677795][ T9242] bridge_slave_1: entered allmulticast mode
[  491.685973][ T9242] bridge_slave_1: entered promiscuous mode
[  492.512506][ T5861] Bluetooth: hci0: command tx timeout
[  494.021520][ T3005] hsr_slave_0: left promiscuous mode
[  494.039404][ T3005] hsr_slave_1: left promiscuous mode
[  494.062802][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.088918][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.337855][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.401710][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.483002][ T3005] veth1_macvtap: left promiscuous mode
[  494.488535][ T3005] veth0_macvtap: left promiscuous mode
[  494.521990][ T3005] veth1_vlan: left promiscuous mode
[  494.543114][ T3005] veth0_vlan: left promiscuous mode
[  494.707664][ T5861] Bluetooth: hci0: command tx timeout
[  495.296541][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  495.319337][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  495.338013][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  495.352249][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  495.360108][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  495.827247][ T3005] team0 (unregistering): Port device team_slave_1 removed
[  496.369877][ T3005] team0 (unregistering): Port device team_slave_0 removed
[  496.918141][   T51] Bluetooth: hci0: command tx timeout
[  497.273443][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.294932][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.602785][   T51] Bluetooth: hci1: command tx timeout
[  497.625527][ T9242] team0: Port device team_slave_0 added
[  497.712686][ T9242] team0: Port device team_slave_1 added
[  498.057422][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.078212][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.172360][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.287209][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.305026][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.339342][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.596151][ T9408] random: crng reseeded on system resumption
[  499.595101][ T9242] hsr_slave_0: entered promiscuous mode
[  499.632218][ T9242] hsr_slave_1: entered promiscuous mode
[  499.687094][ T9324] chnl_net:caif_netlink_parms(): no params data found
[  499.826149][   T51] Bluetooth: hci1: command tx timeout
[  500.613990][ T6552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.667594][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.689978][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.705000][ T9324] bridge_slave_0: entered allmulticast mode
[  500.719079][ T9324] bridge_slave_0: entered promiscuous mode
[  500.797423][ T6552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.819697][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.827325][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.835583][ T9324] bridge_slave_1: entered allmulticast mode
[  500.844351][ T9324] bridge_slave_1: entered promiscuous mode
[  501.035745][ T6552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.221664][ T9324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.266184][ T9324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.332805][ T6552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.544212][ T9324] team0: Port device team_slave_0 added
[  501.557161][ T9375] chnl_net:caif_netlink_parms(): no params data found
[  501.583779][ T9324] team0: Port device team_slave_1 added
[  501.806079][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.813240][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.849588][ T9324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.022459][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.033702][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.065951][   T51] Bluetooth: hci1: command tx timeout
[  502.074700][ T9324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.415233][ T9324] hsr_slave_0: entered promiscuous mode
[  502.421929][ T9324] hsr_slave_1: entered promiscuous mode
[  502.446705][ T9324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  502.454293][ T9324] Cannot create hsr debugfs directory
[  502.567329][ T9375] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.594730][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.601937][ T9375] bridge_slave_0: entered allmulticast mode
[  502.620245][ T9375] bridge_slave_0: entered promiscuous mode
[  502.672218][ T9375] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.679444][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.705127][ T9375] bridge_slave_1: entered allmulticast mode
[  502.729212][ T9375] bridge_slave_1: entered promiscuous mode
[  502.977134][ T9375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.021708][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  503.040314][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  503.050842][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  503.092634][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  503.104871][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  503.227850][ T9375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.297227][ T6552] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.424572][ T9375] team0: Port device team_slave_0 added
[  503.523884][ T6552] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.550192][ T9375] team0: Port device team_slave_1 added
[  503.673953][ T6552] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.723056][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.737502][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.780626][ T9375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.854181][ T6552] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.881664][ T9375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.894878][ T9375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.933931][ T9375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.283231][   T51] Bluetooth: hci1: command tx timeout
[  504.388399][ T9375] hsr_slave_0: entered promiscuous mode
[  504.399280][ T9375] hsr_slave_1: entered promiscuous mode
[  504.405842][ T9375] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  504.413537][ T9375] Cannot create hsr debugfs directory
[  504.542746][ T9242] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  504.596800][ T9242] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  504.625694][ T9242] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  504.828861][ T9242] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  504.892497][ T6552] team0: left allmulticast mode
[  504.898987][ T6552] team_slave_0: left allmulticast mode
[  504.906862][ T6552] team_slave_1: left allmulticast mode
[  504.912353][ T6552] team0: left promiscuous mode
[  504.921263][ T6552] team_slave_0: left promiscuous mode
[  504.927347][ T6552] team_slave_1: left promiscuous mode
[  504.933651][ T6552] bridge0: port 3(team0) entered disabled state
[  504.943270][ T6552] bridge_slave_1: left allmulticast mode
[  504.949420][ T6552] bridge_slave_1: left promiscuous mode
[  504.956054][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.969182][ T6552] bridge_slave_0: left allmulticast mode
[  504.974849][ T6552] bridge_slave_0: left promiscuous mode
[  504.981203][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.994517][ T6552] team0: left allmulticast mode
[  504.999475][ T6552] team_slave_0: left allmulticast mode
[  505.006324][ T6552] team_slave_1: left allmulticast mode
[  505.012146][ T6552] team0: left promiscuous mode
[  505.017026][ T6552] team_slave_0: left promiscuous mode
[  505.026341][ T6552] team_slave_1: left promiscuous mode
[  505.032349][ T6552] bridge0: port 3(team0) entered disabled state
[  505.042228][ T6552] bridge_slave_1: left allmulticast mode
[  505.048336][ T6552] bridge_slave_1: left promiscuous mode
[  505.054365][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.071867][ T6552] bridge_slave_0: left allmulticast mode
[  505.077595][ T6552] bridge_slave_0: left promiscuous mode
[  505.083349][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.299800][   T51] Bluetooth: hci2: command tx timeout
[  505.565207][ T6552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  505.580024][ T6552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  505.590295][ T6552] bond0 (unregistering): Released all slaves
[  505.852777][ T6552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  505.863831][ T6552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  505.874670][ T6552] bond0 (unregistering): Released all slaves
[  506.696469][ T9462] chnl_net:caif_netlink_parms(): no params data found
[  506.935080][ T9324] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  507.156104][ T9324] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  507.177377][ T6552] hsr_slave_0: left promiscuous mode
[  507.191417][ T6552] hsr_slave_1: left promiscuous mode
[  507.197447][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  507.205084][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  507.220566][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  507.228120][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  507.240729][ T6552] hsr_slave_0: left promiscuous mode
[  507.252657][ T6552] hsr_slave_1: left promiscuous mode
[  507.258691][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  507.266089][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  507.275026][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  507.282693][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  507.315159][ T6552] veth1_macvtap: left promiscuous mode
[  507.320834][ T6552] veth0_macvtap: left promiscuous mode
[  507.327709][ T6552] veth1_vlan: left promiscuous mode
[  507.333147][ T6552] veth0_vlan: left promiscuous mode
[  507.339697][ T6552] veth1_macvtap: left promiscuous mode
[  507.345375][ T6552] veth0_macvtap: left promiscuous mode
[  507.351588][ T6552] veth1_vlan: left promiscuous mode
[  507.357823][ T6552] veth0_vlan: left promiscuous mode
[  507.523326][   T51] Bluetooth: hci2: command tx timeout
[  507.839401][ T6552] team0 (unregistering): Port device team_slave_1 removed
[  507.874584][ T6552] team0 (unregistering): Port device team_slave_0 removed
[  508.459825][ T6552] team0 (unregistering): Port device team_slave_1 removed
[  508.492929][ T6552] team0 (unregistering): Port device team_slave_0 removed
[  508.861073][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.868525][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.881450][ T9462] bridge_slave_0: entered allmulticast mode
[  508.888901][ T9462] bridge_slave_0: entered promiscuous mode
[  508.896388][ T9324] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  508.978067][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.985291][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.996261][ T9462] bridge_slave_1: entered allmulticast mode
[  509.022538][ T9462] bridge_slave_1: entered promiscuous mode
[  509.029390][ T9324] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  509.050698][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.151023][ T9462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.222708][ T9462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.290931][ T9462] team0: Port device team_slave_0 added
[  509.325849][ T9242] 8021q: adding VLAN 0 to HW filter on device team0
[  509.336635][ T9462] team0: Port device team_slave_1 added
[  509.431592][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.441250][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.470744][ T9462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.497319][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.504513][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.518268][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.527524][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.555844][ T9462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.603520][  T990] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.610684][  T990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.709490][ T9462] hsr_slave_0: entered promiscuous mode
[  509.716748][ T9462] hsr_slave_1: entered promiscuous mode
[  509.723038][ T9462] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  509.731075][ T9462] Cannot create hsr debugfs directory
[  509.748199][   T51] Bluetooth: hci2: command tx timeout
[  509.837746][ T9375] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  509.870157][ T9375] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  509.896087][ T9375] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  509.917079][ T9375] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  509.983836][ T9324] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.097891][ T9242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  510.153597][ T9324] 8021q: adding VLAN 0 to HW filter on device team0
[  510.202590][ T6552] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.320665][ T6552] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.348428][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.355589][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.413542][ T6552] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.443635][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.450794][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.545711][ T6552] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.619791][ T9324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  510.701575][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.833155][ T9375] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.968897][ T9375] 8021q: adding VLAN 0 to HW filter on device team0
[  511.080876][  T990] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.088120][  T990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.105503][ T6552] bridge_slave_1: left allmulticast mode
[  511.111173][ T6552] bridge_slave_1: left promiscuous mode
[  511.119081][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.132078][ T6552] bridge_slave_0: left allmulticast mode
[  511.138000][ T6552] bridge_slave_0: left promiscuous mode
[  511.143714][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.585989][ T6552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  511.628794][ T6552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.641135][ T6552] bond0 (unregistering): Released all slaves
[  511.703766][ T9242] veth0_vlan: entered promiscuous mode
[  511.730689][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.737880][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.914551][ T9324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.914773][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  511.936225][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  511.939416][ T9462] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  511.955052][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  511.956317][ T9462] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  511.970585][ T5860] Bluetooth: hci2: command tx timeout
[  511.981348][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  511.990230][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  512.033140][ T9242] veth1_vlan: entered promiscuous mode
[  512.044906][ T9462] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  512.056778][ T9462] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  512.212072][ T6552] hsr_slave_0: left promiscuous mode
[  512.221245][ T6552] hsr_slave_1: left promiscuous mode
[  512.228863][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.236276][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  512.245386][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.253287][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  512.274223][ T6552] veth1_macvtap: left promiscuous mode
[  512.279811][ T6552] veth0_macvtap: left promiscuous mode
[  512.286439][ T6552] veth1_vlan: left promiscuous mode
[  512.291913][ T6552] veth0_vlan: left promiscuous mode
[  512.662947][ T6552] team0 (unregistering): Port device team_slave_1 removed
[  512.695944][ T6552] team0 (unregistering): Port device team_slave_0 removed
[  513.059007][ T9242] veth0_macvtap: entered promiscuous mode
[  513.165991][ T9242] veth1_macvtap: entered promiscuous mode
[  513.191217][ T9324] veth0_vlan: entered promiscuous mode
[  513.283804][ T9324] veth1_vlan: entered promiscuous mode
[  513.359260][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.400301][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.458652][ T9242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.470467][ T9242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.479991][ T9242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.489094][ T9242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.661533][ T9462] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.668733][ T9555] chnl_net:caif_netlink_parms(): no params data found
[  513.688708][ T9324] veth0_macvtap: entered promiscuous mode
[  513.710603][ T9375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.730458][ T9324] veth1_macvtap: entered promiscuous mode
[  513.880298][ T6552] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.924345][ T9462] 8021q: adding VLAN 0 to HW filter on device team0
[  513.987708][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.996139][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.004383][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.011555][ T9555] bridge_slave_0: entered allmulticast mode
[  514.020713][ T9555] bridge_slave_0: entered promiscuous mode
[  514.031005][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.038195][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.070119][ T6552] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.116147][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.125826][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.133758][ T9555] bridge_slave_1: entered allmulticast mode
[  514.141616][ T9555] bridge_slave_1: entered promiscuous mode
[  514.153729][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.160865][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.176510][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.194612][   T51] Bluetooth: hci3: command tx timeout
[  514.199007][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.212426][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.251783][ T6552] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.300656][ T9375] veth0_vlan: entered promiscuous mode
[  514.311099][ T9324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.321401][ T9324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.331081][ T9324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.342951][ T9324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.379679][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.385223][ T9375] veth1_vlan: entered promiscuous mode
[  514.393118][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.416257][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.430403][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.456698][ T6552] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.523325][ T9555] team0: Port device team_slave_0 added
[  514.533348][ T9555] team0: Port device team_slave_1 added
[  514.850860][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.868472][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.908876][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.981690][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.993228][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.027137][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.462768][  T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.591152][  T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.625943][ T9375] veth0_macvtap: entered promiscuous mode
[  515.816722][ T9555] hsr_slave_0: entered promiscuous mode
[  515.824828][ T9555] hsr_slave_1: entered promiscuous mode
[  515.831620][ T9555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  515.839195][ T9555] Cannot create hsr debugfs directory
[  515.864793][ T6552] bridge_slave_1: left allmulticast mode
[  515.870471][ T6552] bridge_slave_1: left promiscuous mode
[  515.892848][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.916572][ T6552] bridge_slave_0: left allmulticast mode
[  515.922241][ T6552] bridge_slave_0: left promiscuous mode
[  515.936773][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.103634][ T9584] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.776'.
[  516.423860][   T51] Bluetooth: hci3: command tx timeout
[  517.621804][ T6552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  517.648269][ T6552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  517.660052][ T6552] bond0 (unregistering): Released all slaves
[  517.742522][ T9375] veth1_macvtap: entered promiscuous mode
[  517.835190][ T9590] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.777'.
[  518.026568][ T9375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.320013][ T9375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.417930][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.446940][ T9375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.458105][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.478385][ T9375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.498852][ T9375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.508790][ T9375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.598179][ T6552] hsr_slave_0: left promiscuous mode
[  518.617890][ T6552] hsr_slave_1: left promiscuous mode
[  518.636371][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.647968][   T51] Bluetooth: hci3: command tx timeout
[  518.653560][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  518.662025][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  518.669505][ T6552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  518.727325][ T6552] veth1_macvtap: left promiscuous mode
[  518.732916][ T6552] veth0_macvtap: left promiscuous mode
[  518.748636][ T6552] veth1_vlan: left promiscuous mode
[  518.754011][ T6552] veth0_vlan: left promiscuous mode
[  519.461854][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  519.476033][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  519.483952][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  519.501088][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  519.511134][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  519.632615][ T6552] team0 (unregistering): Port device team_slave_1 removed
[  519.666086][ T6552] team0 (unregistering): Port device team_slave_0 removed
[  520.080904][ T9462] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.201153][ T9607] loop1: detected capacity change from 0 to 2048
[  520.576654][ T9613] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.780'.
[  520.867244][   T51] Bluetooth: hci3: command tx timeout
[  521.730906][   T51] Bluetooth: hci5: command tx timeout
[  521.904400][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.912276][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.251743][ T9603] chnl_net:caif_netlink_parms(): no params data found
[  522.324264][   T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.440884][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.483289][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.585780][   T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.403637][ T9628] random: crng reseeded on system resumption
[  523.474151][ T9629] slcan: can't register candev
[  523.479188][ T9629] Falling back ldisc for ttyS3.
[  523.675213][   T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.787854][ T9555] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  523.944067][   T51] Bluetooth: hci5: command tx timeout
[  524.008003][   T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.200539][ T9555] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  524.886265][ T9555] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  524.921408][ T9555] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  524.994676][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.077224][ T9646] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.786'.
[  525.122890][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.130907][ T9603] bridge_slave_0: entered allmulticast mode
[  525.537694][ T9603] bridge_slave_0: entered promiscuous mode
[  525.597638][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.640933][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.677824][ T9603] bridge_slave_1: entered allmulticast mode
[  525.752657][ T9603] bridge_slave_1: entered promiscuous mode
[  526.199102][   T51] Bluetooth: hci5: command tx timeout
[  526.382935][ T9462] veth0_vlan: entered promiscuous mode
[  526.442004][ T9462] veth1_vlan: entered promiscuous mode
[  526.485640][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.684598][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.837319][ T9603] team0: Port device team_slave_0 added
[  527.861562][ T9603] team0: Port device team_slave_1 added
[  527.996565][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.019959][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.066627][ T9603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.361386][ T9668] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.791'.
[  528.401798][   T51] Bluetooth: hci5: command tx timeout
[  528.420947][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.438110][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.374982][ T9603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.589146][ T9671] slcan: can't register candev
[  529.594370][ T9671] Falling back ldisc for ttyS3.
[  529.785007][   T13] bridge_slave_1: left allmulticast mode
[  529.790780][   T13] bridge_slave_1: left promiscuous mode
[  529.813013][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.560441][   T13] bridge_slave_0: left allmulticast mode
[  530.570560][   T13] bridge_slave_0: left promiscuous mode
[  530.576889][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.650414][ T9679] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.792'.
[  531.347693][ T9682] random: crng reseeded on system resumption
[  532.201393][ T9688] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.795'.
[  533.054985][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.103031][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.123022][   T13] bond0 (unregistering): Released all slaves
[  533.383082][ T9462] veth0_macvtap: entered promiscuous mode
[  533.453301][ T9462] veth1_macvtap: entered promiscuous mode
[  533.565760][ T9693] loop3: detected capacity change from 0 to 2048
[  533.766622][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.819048][ T9603] hsr_slave_0: entered promiscuous mode
[  533.837939][ T9603] hsr_slave_1: entered promiscuous mode
[  533.845173][ T9603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  533.852791][ T9603] Cannot create hsr debugfs directory
[  533.876348][ T9555] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.893275][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_1
[  534.085642][ T9462] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.095469][ T9462] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.106505][ T9462] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.115503][ T9462] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.292732][ T5967] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  534.323439][   T13] hsr_slave_0: left promiscuous mode
[  534.332863][   T13] hsr_slave_1: left promiscuous mode
[  534.339932][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  534.350821][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  534.371723][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  534.383255][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  534.402841][   T13] veth1_macvtap: left promiscuous mode
[  534.408459][   T13] veth0_macvtap: left promiscuous mode
[  534.414710][   T13] veth1_vlan: left promiscuous mode
[  534.422332][   T13] veth0_vlan: left promiscuous mode
[  534.516881][ T5967] usb 3-1: Using ep0 maxpacket: 32
[  534.526568][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  534.537949][ T5967] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  534.843859][ T5967] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  534.859367][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  534.875177][ T5967] usb 3-1: Product: syz
[  534.893430][ T5967] usb 3-1: config 0 descriptor??
[  536.395447][   T13] team0 (unregistering): Port device team_slave_1 removed
[  536.453730][   T13] team0 (unregistering): Port device team_slave_0 removed
[  537.170348][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  537.177461][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  537.717358][ T9112] usb 3-1: USB disconnect, device number 8
[  537.730561][ T9555] 8021q: adding VLAN 0 to HW filter on device team0
[  537.881492][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.888677][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.507720][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.514907][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.619924][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.639169][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.822912][ T9555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  539.858061][ T9555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  540.123020][  T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.166627][  T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.340150][ T5860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  540.350311][ T5860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  540.369529][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  540.653032][ T5860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  540.661208][ T5860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  541.298555][ T9736] loop7: detected capacity change from 0 to 2048
[  541.328830][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.816318][  T990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.212821][  T990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.855653][ T5860] Bluetooth: hci6: command tx timeout
[  543.439695][  T990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.597270][ T9756] slcan: can't register candev
[  544.603056][ T9756] Falling back ldisc for ttyS3.
[  544.658987][ T9603] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  544.795785][ T9603] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  544.885077][  T990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.992984][ T9767] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.812'.
[  545.073578][ T5860] Bluetooth: hci6: command tx timeout
[  545.511432][ T9603] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  545.909047][ T9603] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  546.189475][ T9555] veth0_vlan: entered promiscuous mode
[  546.203344][ T9555] veth1_vlan: entered promiscuous mode
[  546.257530][ T9555] veth0_macvtap: entered promiscuous mode
[  546.288187][ T9555] veth1_macvtap: entered promiscuous mode
[  546.328879][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.359379][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.390706][ T9555] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.406911][ T9555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.426211][ T9555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.450750][ T9555] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.462470][ T9728] chnl_net:caif_netlink_parms(): no params data found
[  547.292215][ T5860] Bluetooth: hci6: command tx timeout
[  548.695443][ T9796] slcan: can't register candev
[  548.700600][ T9796] Falling back ldisc for ttyS3.
[  548.757870][  T990] bridge_slave_1: left allmulticast mode
[  548.763580][  T990] bridge_slave_1: left promiscuous mode
[  548.816517][  T990] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.871836][  T990] bridge_slave_0: left allmulticast mode
[  548.901323][  T990] bridge_slave_0: left promiscuous mode
[  548.918938][  T990] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.517784][ T5860] Bluetooth: hci6: command tx timeout
[  549.567333][  T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.584047][  T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.597125][  T990] bond0 (unregistering): Released all slaves
[  550.046364][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.072457][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.818'.
[  550.086438][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.095484][ T9728] bridge_slave_0: entered allmulticast mode
[  550.125418][ T9728] bridge_slave_0: entered promiscuous mode
[  550.148318][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.176467][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.196428][ T9728] bridge_slave_1: entered allmulticast mode
[  550.218858][ T9728] bridge_slave_1: entered promiscuous mode
[  550.679154][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.696249][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.721257][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.833829][  T990] hsr_slave_0: left promiscuous mode
[  550.848118][  T990] hsr_slave_1: left promiscuous mode
[  550.870544][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.902445][  T990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.921339][  T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.928955][  T990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.954361][  T990] veth1_macvtap: left promiscuous mode
[  550.963345][  T990] veth0_macvtap: left promiscuous mode
[  550.969041][  T990] veth1_vlan: left promiscuous mode
[  550.976736][  T990] veth0_vlan: left promiscuous mode
[  552.100116][  T990] team0 (unregistering): Port device team_slave_1 removed
[  552.182505][  T990] team0 (unregistering): Port device team_slave_0 removed
[  552.397886][ T9858] netlink: 5364 bytes leftover after parsing attributes in process `syz.7.821'.
[  552.493882][ T9856] page: refcount:2 mapcount:0 mapping:ffff88802408fb78 index:0x2 pfn:0x27bc2
[  552.502802][ T9856] memcg:ffff888030821a00
[  552.507087][ T9856] aops:def_blk_aops ino:fa00000
[  552.512429][ T9856] flags: 0xfff680000000bd(locked|waiters|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff)
[  552.523599][ T9856] raw: 00fff680000000bd ffffea00009ef0c8 ffffea0001946008 ffff88802408fb78
[  552.532399][ T9856] raw: 0000000000000002 0000000000000000 00000002ffffffff ffff888030821a00
[  552.541741][ T9856] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index))
[  552.550455][ T9856] page_owner tracks the page as allocated
[  552.556270][ T9856] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9856, tgid 9855 (syz.7.821), ts 552426931305, free_ts 551796444866
[  552.576866][ T9856]  post_alloc_hook+0x1c0/0x230
[  552.581680][ T9856]  get_page_from_freelist+0x1321/0x3890
[  552.587333][ T9856]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  552.593286][ T9856]  alloc_pages_mpol+0x1fb/0x550
[  552.598420][ T9856]  folio_alloc_noprof+0x20/0x2d0
[  552.603428][ T9856]  filemap_alloc_folio_noprof+0x3a1/0x470
[  552.609248][ T9856]  page_cache_ra_order+0x4c0/0xd00
[  552.614460][ T9856]  filemap_fault+0x1465/0x26c0
[  552.619335][ T9856]  __do_fault+0x10d/0x490
[  552.623723][ T9856]  __handle_mm_fault+0x3c2a/0x5490
[  552.628912][ T9856]  handle_mm_fault+0x589/0xd10
[  552.633743][ T9856]  do_user_addr_fault+0x7a6/0x1370
[  552.638958][ T9856]  exc_page_fault+0x5c/0xb0
[  552.643527][ T9856]  asm_exc_page_fault+0x26/0x30
[  552.649626][ T9856] page last free pid 990 tgid 990 stack trace:
[  552.655858][ T9856]  __free_frozen_pages+0x7fe/0x1180
[  552.661149][ T9856]  qlist_free_all+0x4d/0x120
[  552.665786][ T9856]  kasan_quarantine_reduce+0x195/0x1e0
[  552.671335][ T9856]  __kasan_slab_alloc+0x69/0x90
[  552.676246][ T9856]  __kmalloc_cache_noprof+0x1f1/0x3e0
[  552.681687][ T9856]  netdevice_event+0x365/0x9d0
[  552.686516][ T9856]  notifier_call_chain+0xbc/0x410
[  552.691623][ T9856]  call_netdevice_notifiers_info+0xbe/0x140
[  552.697583][ T9856]  unregister_netdevice_many_notify+0xf9d/0x2700
[  552.704022][ T9856]  default_device_exit_batch+0x853/0xaf0
[  552.709709][ T9856]  ops_undo_list+0x363/0xab0
[  552.714389][ T9856]  cleanup_net+0x408/0x890
[  552.718861][ T9856]  process_one_work+0x9cf/0x1b70
[  552.723869][ T9856]  worker_thread+0x6c8/0xf10
[  552.728520][ T9856]  kthread+0x3c5/0x780
[  552.732640][ T9856]  ret_from_fork+0x5d7/0x6f0
[  552.737563][ T9856] ------------[ cut here ]------------
[  552.743089][ T9856] kernel BUG at mm/filemap.c:3442!
[  552.748278][ T9856] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  552.754704][ T9856] CPU: 1 UID: 0 PID: 9856 Comm: syz.7.821 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  552.766599][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  552.776658][ T9856] RIP: 0010:filemap_fault+0x1847/0x26c0
[  552.782218][ T9856] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 b3 36 2e 00 e9 79 f3 ff ff e8 79 52 c8 ff 48 c7 c6 e0 20 b9 8b 48 89 df e8 3a a0 10 00 90 <0f> 0b e8 62 52 c8 ff 48 c7 c6 e0 16 b9 8b 48 89 df e8 23 a0 10 00
[  552.801829][ T9856] RSP: 0018:ffffc90002e875b8 EFLAGS: 00010246
[  552.807896][ T9856] RAX: 0000000000080000 RBX: ffffea00009ef080 RCX: ffffc9000e8a4000
[  552.815868][ T9856] RDX: 0000000000080000 RSI: ffffffff81f39f66 RDI: ffff88802cbb8444
[  552.823839][ T9856] RBP: ffffc90002e877e8 R08: 0000000000000001 R09: 0000000000000000
[  552.831808][ T9856] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802408fb78
[  552.839785][ T9856] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[  552.847757][ T9856] FS:  00007f35ba96e6c0(0000) GS:ffff88812481a000(0000) knlGS:0000000000000000
[  552.856691][ T9856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  552.863276][ T9856] CR2: 0000200000001d59 CR3: 0000000064e00000 CR4: 0000000000350ef0
[  552.871247][ T9856] Call Trace:
[  552.874521][ T9856]  <TASK>
[  552.877448][ T9856]  ? __pfx_filemap_fault+0x10/0x10
[  552.882595][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.888243][ T9856]  __do_fault+0x10d/0x490
[  552.892580][ T9856]  __handle_mm_fault+0x3c2a/0x5490
[  552.897701][ T9856]  ? __pfx___handle_mm_fault+0x10/0x10
[  552.903166][ T9856]  ? __pfx_mt_find+0x10/0x10
[  552.907773][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.913436][ T9856]  ? find_vma+0xbf/0x140
[  552.917692][ T9856]  ? __pfx_find_vma+0x10/0x10
[  552.922381][ T9856]  handle_mm_fault+0x589/0xd10
[  552.927146][ T9856]  ? __pkru_allows_pkey+0x51/0xb0
[  552.932189][ T9856]  do_user_addr_fault+0x7a6/0x1370
[  552.937320][ T9856]  ? rcu_is_watching+0x12/0xc0
[  552.942104][ T9856]  exc_page_fault+0x5c/0xb0
[  552.946621][ T9856]  asm_exc_page_fault+0x26/0x30
[  552.951484][ T9856] RIP: 0010:_copy_from_user+0x93/0xd0
[  552.956876][ T9856] Code: 02 e2 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 79 ee 47 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 <f3> a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 95 fd
[  552.976505][ T9856] RSP: 0018:ffffc90002e87a80 EFLAGS: 00050246
[  552.982576][ T9856] RAX: 0000000000000001 RBX: 0000200000001d59 RCX: 0000000000000001
[  552.990546][ T9856] RDX: ffffed1005397d54 RSI: 0000200000001d59 RDI: ffff888029cbea99
[  552.998515][ T9856] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed1005397d53
[  553.006502][ T9856] R10: ffff888029cbea99 R11: 0000000000000001 R12: 0000000000000000
[  553.014493][ T9856] R13: ffff888029cbea99 R14: dffffc0000000000 R15: 0000200000001d59
[  553.022478][ T9856]  snd_rawmidi_kernel_write1+0x50a/0x8a0
[  553.028128][ T9856]  snd_rawmidi_write+0x26e/0xc10
[  553.033082][ T9856]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  553.038550][ T9856]  ? __pfx_default_wake_function+0x10/0x10
[  553.044370][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  553.050025][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  553.055667][ T9856]  ? security_file_permission+0x71/0x210
[  553.061309][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  553.066951][ T9856]  ? rw_verify_area+0xcf/0x680
[  553.071730][ T9856]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  553.077195][ T9856]  vfs_writev+0x5df/0xde0
[  553.081531][ T9856]  ? __pfx_vfs_writev+0x10/0x10
[  553.086386][ T9856]  ? kmem_cache_free+0x2d1/0x4d0
[  553.091355][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  553.097012][ T9856]  ? __fget_files+0x20e/0x3c0
[  553.101716][ T9856]  ? do_writev+0x28c/0x340
[  553.106133][ T9856]  do_writev+0x28c/0x340
[  553.110380][ T9856]  ? __pfx_do_writev+0x10/0x10
[  553.115145][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  553.120793][ T9856]  do_syscall_64+0xcd/0x4c0
[  553.125315][ T9856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.131215][ T9856] RIP: 0033:0x7f35b9b8e929
[  553.135635][ T9856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.155244][ T9856] RSP: 002b:00007f35ba96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  553.163660][ T9856] RAX: ffffffffffffffda RBX: 00007f35b9db5fa0 RCX: 00007f35b9b8e929
[  553.171629][ T9856] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005
[  553.179616][ T9856] RBP: 00007f35b9c10b39 R08: 0000000000000000 R09: 0000000000000000
[  553.187590][ T9856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  553.195560][ T9856] R13: 0000000000000000 R14: 00007f35b9db5fa0 R15: 00007ffdbc7568d8
[  553.203539][ T9856]  </TASK>
[  553.206554][ T9856] Modules linked in:
[  553.215133][ T9856] ---[ end trace 0000000000000000 ]---
[  553.220636][ T9856] RIP: 0010:filemap_fault+0x1847/0x26c0
[  553.226248][ T9856] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 b3 36 2e 00 e9 79 f3 ff ff e8 79 52 c8 ff 48 c7 c6 e0 20 b9 8b 48 89 df e8 3a a0 10 00 90 <0f> 0b e8 62 52 c8 ff 48 c7 c6 e0 16 b9 8b 48 89 df e8 23 a0 10 00
[  553.245982][ T9856] RSP: 0018:ffffc90002e875b8 EFLAGS: 00010246
[  553.252118][ T9856] RAX: 0000000000080000 RBX: ffffea00009ef080 RCX: ffffc9000e8a4000
[  553.260161][ T9856] RDX: 0000000000080000 RSI: ffffffff81f39f66 RDI: ffff88802cbb8444
[  553.268192][ T9856] RBP: ffffc90002e877e8 R08: 0000000000000001 R09: 0000000000000000
[  553.276220][ T9856] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802408fb78
[  553.284280][ T9856] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[  553.292311][ T9856] FS:  00007f35ba96e6c0(0000) GS:ffff88812481a000(0000) knlGS:0000000000000000
[  553.301302][ T9856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  553.308595][ T9856] CR2: 0000200000001d59 CR3: 0000000064e00000 CR4: 0000000000350ef0
[  553.316633][ T9856] Kernel panic - not syncing: Fatal exception
[  553.322888][ T9856] Kernel Offset: disabled
[  553.327216][ T9856] Rebooting in 86400 seconds..