last executing test programs:

20m10.923019751s ago: executing program 3 (id=10):
r0 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))
setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="13f7033d81f474c385ec2f6d99834849e9db53d2a6db88451f9a18b84f855de7246ba9cfc0a937310f400533c19daf465f985b220bebbf774ad5a9746782aa58321cf349a906f950ab33675ef0061349dc450fcc20612f19fb83922e4e37d6326ff05106d4da0695edb81f80f650344d16fcd16bca9eac2ef193db107bda8e223037bd79ea7ffdc65cb9d9e82ec8112a745a912993d52391cb8f7a8e", @ANYRES8=r0, @ANYRES8=r0], 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, &(0x7f0000000480))
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffefd}, 0x1c)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)
bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x63)

20m8.64839689s ago: executing program 3 (id=13):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r1, 0x0, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x401, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r6 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f0000000500))

20m6.685472762s ago: executing program 3 (id=15):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x21, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x48, 0x6000, @fd, 0x3, 0x0, 0x0, 0x2, 0x0, {0x1}})
io_uring_enter(r1, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
readv(0xffffffffffffffff, &(0x7f0000003400), 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x1, 0x9}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)

19m56.447386696s ago: executing program 3 (id=24):
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(0x0, 0x1, 0x402)
pread64(r0, &(0x7f0000000080)=""/120, 0x78, 0x11a9)

19m50.985039843s ago: executing program 3 (id=31):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = getpgrp(0x0)
syz_open_procfs(r1, &(0x7f0000000080)='net/stat\x00')
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1000000)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='group_id=', @ANYRESDEC=0x0])
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r2, 0x2285, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
read$snapshot(r3, 0x0, 0xffffffbf)
write$uinput_user_dev(r3, &(0x7f0000000300)={'syz0\x00', {0xe, 0x8, 0xc, 0xffff}, 0x51, [0xff, 0xc, 0x10, 0x9, 0x0, 0xfffffffc, 0x8, 0x6, 0xdf, 0x0, 0x80000001, 0x7f, 0x1, 0x4, 0x7, 0x1, 0x71, 0x101, 0x93f1, 0x9, 0x1, 0x6, 0xa, 0x397, 0x1, 0x8, 0xff, 0x3, 0xb, 0x48000, 0x0, 0xfffffff8, 0x1, 0x296, 0x1, 0x3, 0xffffffff, 0x8b, 0x8, 0x3, 0x100, 0x0, 0x3, 0x4, 0x7, 0x2000000, 0xfffffff6, 0x39c, 0x2, 0x3ff, 0x8, 0x7fff, 0x68800, 0x1000, 0x4, 0x6, 0x0, 0x3, 0xff, 0xfffff9df, 0x6, 0x2, 0x500000, 0x7], [0xfffff615, 0xf9, 0x10000000, 0xfffffff7, 0x3, 0x1, 0x5, 0x8d26, 0x7ff, 0x2, 0x1, 0x2, 0x1, 0x4, 0x2, 0x3, 0x3, 0x1, 0xb65, 0x8000, 0xe, 0xbb16, 0x2, 0x2, 0xf, 0x1, 0x401, 0x9f5, 0xa, 0x9cc5, 0x800, 0x6, 0x0, 0x10001, 0x4, 0x9, 0x7fff, 0x7, 0x23bc, 0x8, 0xd, 0x1fb1, 0x802, 0x100, 0xdf, 0x1000, 0x1, 0x7, 0x4, 0xe71, 0x9, 0x5, 0x4, 0xd, 0x5, 0x0, 0x3d, 0x1, 0x4db0, 0x0, 0x4, 0xfffffffb, 0x8b, 0x7f], [0x9, 0x2f6b, 0x4, 0xd, 0x5, 0x1, 0x2478, 0x6, 0x6, 0xe, 0x78aa, 0x5, 0xd97, 0x397, 0x100, 0x7, 0x2, 0x6, 0x80007fd, 0x101, 0xffffffff, 0x27a, 0x5ee, 0x7f, 0x6, 0xe663, 0x6, 0xd, 0xffffffff, 0x5, 0x1, 0x2, 0x7, 0x5, 0x0, 0x1, 0x1, 0x6, 0x82, 0x8, 0x7, 0x101, 0x5, 0x80, 0x9, 0x0, 0xfffffffa, 0x0, 0xff, 0x6, 0x1, 0x9, 0x8, 0x61d, 0x10001, 0x6, 0x4, 0xffffffa6, 0x9, 0xffff, 0x8, 0x4, 0xa], [0x5, 0xf915, 0x7, 0x20ade648, 0x10001, 0x6, 0x85, 0xe7, 0x4, 0x2b67, 0x7, 0x1, 0x1, 0x7b9, 0x6, 0x2, 0x10, 0x4, 0x8, 0xfffffffb, 0x7, 0x6, 0xc4, 0x4, 0x2, 0x4, 0x5b1, 0x6, 0x7, 0x6, 0x6, 0x4, 0x9, 0x10000, 0x4, 0x8, 0x7604, 0x6, 0x4, 0x7, 0x2b101a82, 0x1, 0x3, 0x5a5, 0x4, 0x2, 0xf, 0x0, 0xc, 0x6, 0x6, 0x8, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff24, 0xf75, 0xe8, 0xffff, 0x5, 0x6, 0x1, 0x7f]}, 0x45c)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)

19m49.22030857s ago: executing program 3 (id=34):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x21, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x48, 0x6000, @fd, 0x3, 0x0, 0x0, 0x2, 0x0, {0x1}})
io_uring_enter(r1, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
readv(0xffffffffffffffff, &(0x7f0000003400), 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x1, 0x9}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)

19m33.118816715s ago: executing program 32 (id=34):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x21, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x48, 0x6000, @fd, 0x3, 0x0, 0x0, 0x2, 0x0, {0x1}})
io_uring_enter(r1, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
readv(0xffffffffffffffff, &(0x7f0000003400), 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x1, 0x9}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)

19m5.583009014s ago: executing program 2 (id=85):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x1d, 0x2, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000040000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r7, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x6, &(0x7f00000006c0), 0x0)
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8}, {0x7, 0xf}, {0xf, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4018)
r11 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

19m3.842944664s ago: executing program 2 (id=89):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB="0500030001"], 0x28}}, 0x80)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x5e}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
close(r4)

18m59.599956743s ago: executing program 2 (id=94):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]})
r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newtaction={0x158, 0x30, 0x1, 0x0, 0x0, {}, [{0x144, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xfc, 0x14, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xdffd}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffff9a1c, 0x5, 0x2, 0x401, 0x8}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2a}]}, {0x85, 0x6, "835242d117f8663af30986dc7ee5c6ef1f841b36b54051e30b5ef4c2650482b539edea75fa0390db9a2e83be900bd3ef1672510f670b7d01e2d2d7d27caa0233eb3bd3e065aa1495b19a02872df5b63e78c499011fe2b32fc74bc0f5f727f805ab91d3334b3aa811041d11211afda0275c1a8ed96f1d3c5e5ae84fd5130d359d05"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
creat(&(0x7f0000000440)='./file0\x00', 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}})

18m58.947712947s ago: executing program 2 (id=97):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x1d, 0x2, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000040000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r7, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x6, &(0x7f00000006c0), 0x0)
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8}, {0x7, 0xf}, {0xf, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4018)
r11 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

18m51.773621858s ago: executing program 2 (id=101):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0)
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
keyctl$read(0x2, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000040000000000", @ANYRES32=r2, @ANYBLOB="000000000072ce4c8380562ab8ea1c9f21948f605e58a692997bec77d9b3b40e8bd57ac19eff6902d15c42fdcf2a4e8e3d2b087b98ff6617ee13cf608700ca2d69b9b14f979fb9a1e75e94238bc7b421a25bf13302e93590cae9bca2b8b9ab7e70f469d26b1d846dd03da15542472647277669f11a292062ad7d96025ea6087c0009a4a7e502002b65c6cbd0e5eb98b4abfc1447cc33dfc01cbccbbfd09164a471e6601fbfd8bae0f2bf747332d2c036"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020)
syz_open_dev$video(&(0x7f0000000640), 0x3ec8, 0x2000)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r5, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/234, 0xea}, 0x4}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000003c0)=""/80, 0x50}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000840)=""/99, 0x63}, {&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000d00)=""/194, 0xc2}, {&(0x7f0000000c00)=""/166, 0xa6}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000001000)=""/171, 0xab}, {&(0x7f0000001980)=""/213, 0xd5}], 0xa, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x40000000000013c, 0x60010000, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

18m49.480816723s ago: executing program 2 (id=103):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x21, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x48, 0x6000, @fd, 0x3, &(0x7f0000002680)=[{0x0}, {&(0x7f0000002400)}, {&(0x7f0000002500)}, {0x0}, {&(0x7f0000002600)="b349a29e0ece54e1703e8fa255bedb194a5ff321c3d2878c3cd08c63728eb53b3724bdc1ce834a0be46f9bf367", 0x2d}], 0x5, 0x2, 0x0, {0x1}})
io_uring_enter(r2, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
readv(0xffffffffffffffff, &(0x7f0000003400), 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x1, 0x9}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)
syz_emit_vhci(&(0x7f0000002000)=ANY=[@ANYBLOB="04300300c900f8f207625d17bab84f17caa050e4b0ba24a5615d16ca6b080c71d39522a34a6ce4842ac929248c"], 0x6)

18m34.279114525s ago: executing program 33 (id=103):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x21, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x48, 0x6000, @fd, 0x3, &(0x7f0000002680)=[{0x0}, {&(0x7f0000002400)}, {&(0x7f0000002500)}, {0x0}, {&(0x7f0000002600)="b349a29e0ece54e1703e8fa255bedb194a5ff321c3d2878c3cd08c63728eb53b3724bdc1ce834a0be46f9bf367", 0x2d}], 0x5, 0x2, 0x0, {0x1}})
io_uring_enter(r2, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
readv(0xffffffffffffffff, &(0x7f0000003400), 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x1, 0x9}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)
syz_emit_vhci(&(0x7f0000002000)=ANY=[@ANYBLOB="04300300c900f8f207625d17bab84f17caa050e4b0ba24a5615d16ca6b080c71d39522a34a6ce4842ac929248c"], 0x6)

16m33.827784338s ago: executing program 0 (id=281):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)='T', 0x1}], 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

16m30.467315935s ago: executing program 0 (id=284):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)

16m29.775913933s ago: executing program 0 (id=286):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
writev(r1, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {0x0}], 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

16m27.285130691s ago: executing program 0 (id=289):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]})
r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newtaction={0x158, 0x30, 0x1, 0x0, 0x0, {}, [{0x144, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xfc, 0x14, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xdffd}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffff9a1c, 0x5, 0x2, 0x401, 0x8}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2a}]}, {0x85, 0x6, "835242d117f8663af30986dc7ee5c6ef1f841b36b54051e30b5ef4c2650482b539edea75fa0390db9a2e83be900bd3ef1672510f670b7d01e2d2d7d27caa0233eb3bd3e065aa1495b19a02872df5b63e78c499011fe2b32fc74bc0f5f727f805ab91d3334b3aa811041d11211afda0275c1a8ed96f1d3c5e5ae84fd5130d359d05"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000440)='./file0\x00', 0x0)
syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202)

16m26.338438046s ago: executing program 0 (id=290):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
modify_ldt$write2(0x11, &(0x7f0000000040), 0x10)
modify_ldt$read(0x0, &(0x7f0000000280)=""/66, 0x42)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f00006dbffc), 0x4)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0040d07, &(0x7f0000000040)=0x121)
openat$comedi(0xffffffffffffff9c, &(0x7f0000004400)='/dev/comedi4\x00', 0x40000, 0x0)
openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r3=>0x0})
io_setup(0x81, &(0x7f0000000180)=<r4=>0x0)
r5 = open(&(0x7f0000000780)='./bus\x00', 0x1152fe, 0x0)
io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000340)='p', 0x300}])
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

16m24.141507536s ago: executing program 0 (id=293):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r1, 0x0, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x401, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r7 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000500))

16m3.986263607s ago: executing program 34 (id=293):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r1, 0x0, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x401, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r7 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000500))

1m16.470428688s ago: executing program 4 (id=2121):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0)

1m15.383274795s ago: executing program 4 (id=2124):
madvise(&(0x7f00003d6000/0x2000)=nil, 0x2000, 0xb)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000700)={0xe, 0x1, &(0x7f00000000c0)=[0x5], &(0x7f0000000040), &(0x7f0000000240)=[0x7], 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xc3609000)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000640)=""/4096)
get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3)

1m15.170042572s ago: executing program 4 (id=2126):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = getpgrp(0x0)
syz_open_procfs(r1, &(0x7f0000000080)='net/stat\x00')
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='group_id=', @ANYRESDEC=0x0])
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r3, 0x0, 0x0, 0x800, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r4, 0x2285, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38)
read$snapshot(r5, 0x0, 0xffffffbf)
write$uinput_user_dev(r5, &(0x7f0000000300)={'syz0\x00', {0xe, 0x8, 0xc, 0xffff}, 0x51, [0xff, 0xc, 0x10, 0x9, 0x0, 0xfffffffc, 0x8, 0x6, 0xdf, 0x0, 0x80000001, 0x7f, 0x1, 0x4, 0x7, 0x1, 0x71, 0x101, 0x93f1, 0x9, 0x1, 0x6, 0xa, 0x397, 0x1, 0x8, 0xff, 0x3, 0xb, 0x48000, 0x0, 0xfffffff8, 0x1, 0x296, 0x1, 0x3, 0xffffffff, 0x8b, 0x8, 0x3, 0x100, 0x0, 0x3, 0x4, 0x7, 0x2000000, 0xfffffff6, 0x39c, 0x2, 0x3ff, 0x8, 0x7fff, 0x68800, 0x1000, 0x4, 0x6, 0x0, 0x3, 0xff, 0xfffff9df, 0x6, 0x2, 0x500000, 0x7], [0xfffff615, 0xf9, 0x10000000, 0xfffffff7, 0x3, 0x1, 0x5, 0x8d26, 0x7ff, 0x2, 0x1, 0x2, 0x1, 0x4, 0x2, 0x3, 0x3, 0x1, 0xb65, 0x8000, 0xe, 0xbb16, 0x2, 0x2, 0xf, 0x1, 0x401, 0x9f5, 0xa, 0x9cc5, 0x800, 0x6, 0x0, 0x10001, 0x4, 0x9, 0x7fff, 0x7, 0x23bc, 0x8, 0xd, 0x1fb1, 0x802, 0x100, 0xdf, 0x1000, 0x1, 0x7, 0x4, 0xe71, 0x9, 0x5, 0x4, 0xd, 0x5, 0x0, 0x3d, 0x1, 0x4db0, 0x0, 0x4, 0xfffffffb, 0x8b, 0x7f], [0x9, 0x2f6b, 0x4, 0xd, 0x5, 0x1, 0x2478, 0x6, 0x6, 0xe, 0x78aa, 0x5, 0xd97, 0x397, 0x100, 0x7, 0x2, 0x6, 0x80007fd, 0x101, 0xffffffff, 0x27a, 0x5ee, 0x7f, 0x6, 0xe663, 0x6, 0xd, 0xffffffff, 0x5, 0x1, 0x2, 0x7, 0x5, 0x0, 0x1, 0x1, 0x6, 0x82, 0x8, 0x7, 0x101, 0x5, 0x80, 0x9, 0x0, 0xfffffffa, 0x0, 0xff, 0x6, 0x1, 0x9, 0x8, 0x61d, 0x10001, 0x6, 0x4, 0xffffffa6, 0x9, 0xffff, 0x8, 0x4, 0xa], [0x5, 0xf915, 0x7, 0x20ade648, 0x10001, 0x6, 0x85, 0xe7, 0x4, 0x2b67, 0x7, 0x1, 0x1, 0x7b9, 0x6, 0x2, 0x10, 0x4, 0x8, 0xfffffffb, 0x7, 0x6, 0xc4, 0x4, 0x2, 0x4, 0x5b1, 0x6, 0x7, 0x6, 0x6, 0x4, 0x9, 0x10000, 0x4, 0x8, 0x7604, 0x6, 0x4, 0x7, 0x2b101a82, 0x1, 0x3, 0x5a5, 0x4, 0x2, 0xf, 0x0, 0xc, 0x6, 0x6, 0x8, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff24, 0xf75, 0xe8, 0xffff, 0x5, 0x6, 0x1, 0x7f]}, 0x45c)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)

1m14.09320101s ago: executing program 4 (id=2129):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYBLOB="05000300"], 0x28}}, 0x80)

1m12.811718518s ago: executing program 4 (id=2130):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x5, 0x0, @auto=[0x2f, 0x35, 0x39]}, 0xb, 0xfffffffffffffffa)
keyctl$instantiate_iov(0x14, r1, &(0x7f0000001880), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, 0x0, 0x200002e6)
fcntl$setpipe(r4, 0x407, 0x7000000)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001a80)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB="6ce0fbdebd2f940f17123b00ba30d64eb5592d4bbbce45e069a8b6bb3067b0b6a67b9d8e0d926685c051750d967d3b73d37e7c962f07b8224ef2c2cfe995463598577d6465923b7b06fe9b4b4da4f5e363d404b8a77dea5d87a63f691ee9c97e3111aa00", @ANYRESHEX=0x0, @ANYRES8=r3, @ANYBLOB, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)

1m7.697550114s ago: executing program 4 (id=2132):
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0)
mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00'})

23.675131129s ago: executing program 7 (id=2219):
madvise(&(0x7f00003d6000/0x2000)=nil, 0x2000, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000700)={0xe, 0x1, &(0x7f00000000c0)=[0x5], &(0x7f0000000040), &(0x7f0000000240)=[0x7], 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xc3609000)
ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000640)=""/4096)
get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3)

23.485620476s ago: executing program 7 (id=2221):
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setfsuid(0xee00)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
setresuid(r2, 0x0, r2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000e00)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r5}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xc4}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)

23.244966267s ago: executing program 7 (id=2222):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, 0x0, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000))
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)

21.883547477s ago: executing program 7 (id=2224):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x7fff, 0x8, 0x8000005, 0x20, 0x99, 0xee}, &(0x7f0000000000)=0x9c)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xca43, 0x80, 0x1, 0x3b3}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000380))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000000)=0x6, 0x0, 0x4)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x3, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0x9, 0xe69, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]})

19.881078236s ago: executing program 7 (id=2228):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f102030109021200"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0x12)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
mmap$binder(&(0x7f00004d2000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0xdc3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f00000000c0), 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r7, 0x0, 0x4040000)
syz_usb_control_io$printer(r0, 0x0, 0x0)

15.556497686s ago: executing program 7 (id=2236):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

14.045995786s ago: executing program 5 (id=2242):
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)='T', 0x1}], 0x2)

11.971354662s ago: executing program 5 (id=2248):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ec0)={0x9, 0x0, [{0x8000000, 0xc4, &(0x7f0000000400)=""/196}, {0xd000, 0x42, &(0x7f0000000700)=""/66}, {0x2, 0xda, &(0x7f0000000500)=""/218}, {0x8000000, 0xfd, &(0x7f0000000d40)=""/253}, {0x2, 0xfe, &(0x7f0000000600)=""/254}, {0xf000, 0x64, &(0x7f00000002c0)=""/100}, {0xaaaba000, 0x0, 0x0}, {0xeeee8000, 0xaf, &(0x7f0000000c80)=""/175}, {0xeeef0000, 0xbf, &(0x7f00000008c0)=""/191}]})

10.984261724s ago: executing program 5 (id=2251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000))
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)

9.307814836s ago: executing program 5 (id=2252):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

9.123328935s ago: executing program 6 (id=2253):
socket$kcm(0x29, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r1)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}]}}}]}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r5 = socket$packet(0x11, 0x2, 0x300)
syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3d, 0x7ff, 0xf83, 0x3}, 0x1c)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r6)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0)

8.310209381s ago: executing program 5 (id=2259):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, 0x0, 0x0)
lsm_set_self_attr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000000000000001000000000000200000000000000000f3a4e7645d0000"], 0x20, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000140001800d0001bcda64703a73797a3200000000"], 0x28}}, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x802, 0x6b929545a606890f)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc1205531, &(0x7f00000010c0)=""/4111)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0)
getpid()
r5 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r5, 0x110, 0x3, 0x0, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000010)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xfac, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefce)

7.06667113s ago: executing program 5 (id=2261):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = getpid()
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r8, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10)
connect$phonet_pipe(r9, &(0x7f0000000400)={0x23, 0x0, 0x7f, 0x4}, 0x10)

6.949655066s ago: executing program 6 (id=2263):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.141592389s ago: executing program 6 (id=2267):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.960406462s ago: executing program 1 (id=2268):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close(0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
read$FUSE(r1, &(0x7f0000001780)={0x2020}, 0x2020)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c0}, 0x200001c4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

4.705233103s ago: executing program 6 (id=2269):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x7fff, 0x8, 0x8000005, 0x20, 0x99, 0xee}, &(0x7f0000000000)=0x9c)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xca43, 0x80, 0x1, 0x3b3}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000380))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000000)=0x6, 0x0, 0x4)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x3, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0x9, 0xe69, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]})

3.444717012s ago: executing program 6 (id=2270):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

2.417274249s ago: executing program 1 (id=2271):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ec0)={0x8, 0x0, [{0x8000000, 0xc4, &(0x7f0000000400)=""/196}, {0xd000, 0x42, &(0x7f0000000700)=""/66}, {0x2, 0xda, &(0x7f0000000500)=""/218}, {0x8000000, 0xfd, &(0x7f0000000d40)=""/253}, {0x2, 0xfe, &(0x7f0000000600)=""/254}, {0xaaaba000, 0x6a, &(0x7f0000000ac0)=""/106}, {0xeeee8000, 0xaf, &(0x7f0000000c80)=""/175}, {0xeeef0000, 0xbf, &(0x7f00000008c0)=""/191}]})

2.274400829s ago: executing program 6 (id=2272):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close(0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
read$FUSE(r1, &(0x7f0000001780)={0x2020}, 0x2020)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c0}, 0x200001c4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

2.077231109s ago: executing program 1 (id=2273):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, 0x0, 0x0)
lsm_set_self_attr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000000000000001000000000000200000000000000000f3a4e7645d0000"], 0x20, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000140001800d0001bcda64703a73797a3200000000"], 0x28}}, 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x802, 0x6b929545a606890f)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc1205531, &(0x7f00000010c0)=""/4111)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0)
getpid()
r5 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r5, 0x110, 0x3, 0x0, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000010)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xfac, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefce)

1.50658316s ago: executing program 1 (id=2274):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x854}, 0x0)
openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

923.450944ms ago: executing program 1 (id=2275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000700)="0a1398f8668babb9862aa1c9ea0380d18dafd06547dd62179ba79df1971b787788d854fbec0fe18f84085926de2d9ab0b6f1512c6dbc8a704453c6de009e89414d8518e3dcdd32ecd952f78f6c58a9fd"})

829.639872ms ago: executing program 1 (id=2276):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
syz_io_uring_setup(0x499, 0x0, 0x0, 0x0)
io_uring_setup(0x79bf, &(0x7f0000000180)={0x0, 0x8000000, 0x10, 0x1})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000001fc0)={0x2020}, 0x2020)

0s ago: executing program 35 (id=2236):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

Number=3
[ 1002.889614][ T5917] usb 2-1: Product: syz
[ 1002.889628][ T5917] usb 2-1: Manufacturer: syz
[ 1002.889642][ T5917] usb 2-1: SerialNumber: syz
[ 1002.944600][ T5917] usb 2-1: config 0 descriptor??
[ 1002.990394][ T5917] smsc75xx v1.0.0
[ 1004.407578][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1004.407610][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1004.407862][ T5801] Bluetooth: hci2: command tx timeout
[ 1004.415365][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1004.415392][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1004.415409][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1004.415427][ T5917] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1004.415690][ T5917] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61
[ 1004.587475][ T5801] Bluetooth: hci5: command tx timeout
[ 1004.689865][ T5917] usb 2-1: USB disconnect, device number 83
[ 1006.669881][ T5801] Bluetooth: hci5: command tx timeout
[ 1007.091164][T12459] chnl_net:caif_netlink_parms(): no params data found
[ 1009.401364][T12479] chnl_net:caif_netlink_parms(): no params data found
[ 1011.256952][T12459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1011.257166][T12459] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1011.266439][T12459] bridge_slave_0: entered allmulticast mode
[ 1011.269275][T12459] bridge_slave_0: entered promiscuous mode
[ 1011.288083][T12459] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1011.288256][T12459] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1011.288479][T12459] bridge_slave_1: entered allmulticast mode
[ 1011.291125][T12459] bridge_slave_1: entered promiscuous mode
[ 1011.306627][T10364] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[ 1011.447545][T11640] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1011.492772][T10364] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1011.492798][T10364] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1011.492816][T10364] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1011.530699][T10364] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1011.530717][T10364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.530727][T10364] usb 5-1: Product: syz
[ 1011.530734][T10364] usb 5-1: Manufacturer: syz
[ 1011.530742][T10364] usb 5-1: SerialNumber: syz
[ 1011.601741][T11640] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1011.604663][T11640] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1011.604708][T11640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.604726][T11640] usb 2-1: Product: syz
[ 1011.604739][T11640] usb 2-1: Manufacturer: syz
[ 1011.604751][T11640] usb 2-1: SerialNumber: syz
[ 1011.613896][T11640] usb 2-1: config 0 descriptor??
[ 1011.813744][T12479] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1011.814058][T12479] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1011.814598][T12479] bridge_slave_0: entered allmulticast mode
[ 1011.841111][T12479] bridge_slave_0: entered promiscuous mode
[ 1011.936498][T12459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1012.010977][T12479] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1012.011210][T12479] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.012126][T12479] bridge_slave_1: entered allmulticast mode
[ 1012.014295][T12479] bridge_slave_1: entered promiscuous mode
[ 1012.023172][T12459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.405000][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.411357][T12459] team0: Port device team_slave_0 added
[ 1013.765358][T10364] usb 5-1: 0:2 : does not exist
[ 1013.827556][T10364] usb 5-1: USB disconnect, device number 59
[ 1014.780111][T11640] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1014.783741][T11640] usb 2-1: USB disconnect, device number 84
[ 1015.818337][T12637] udevd[12637]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1016.620394][T12462] udevd[12462]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1016.633627][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1021.555082][T12459] team0: Port device team_slave_1 added
[ 1022.201860][T12479] team0: Port device team_slave_0 added
[ 1022.205434][T12459] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1022.205448][T12459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1022.205472][T12459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1022.470998][T12479] team0: Port device team_slave_1 added
[ 1022.472112][T12459] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1022.472121][T12459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1022.472135][T12459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1023.324758][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1023.336588][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1023.349344][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1023.352357][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1023.353171][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1023.413373][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1023.413389][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1023.413415][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1023.865722][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1023.865738][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1023.865757][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1024.529137][T12693] binder: 12692:12693 ioctl c0306201 200000000300 returned -11
[ 1024.715081][T12459] hsr_slave_0: entered promiscuous mode
[ 1024.716535][T12459] hsr_slave_1: entered promiscuous mode
[ 1024.717928][T12459] debugfs: 'hsr0' already exists in 'hsr'
[ 1024.717950][T12459] Cannot create hsr debugfs directory
[ 1025.549254][ T5801] Bluetooth: hci0: command tx timeout
[ 1026.599517][T12479] hsr_slave_0: entered promiscuous mode
[ 1026.613140][T12479] hsr_slave_1: entered promiscuous mode
[ 1026.631567][T12479] debugfs: 'hsr0' already exists in 'hsr'
[ 1026.631593][T12479] Cannot create hsr debugfs directory
[ 1026.632360][T10364] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1026.807446][T10364] usb 2-1: Using ep0 maxpacket: 32
[ 1026.845799][T10364] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 1026.845853][T10364] usb 2-1: config 0 has no interface number 0
[ 1026.845998][T10364] usb 2-1: config 0 interface 184 has no altsetting 0
[ 1026.999323][T10364] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1026.999354][T10364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.999374][T10364] usb 2-1: Product: syz
[ 1026.999430][T10364] usb 2-1: Manufacturer: syz
[ 1026.999485][T10364] usb 2-1: SerialNumber: syz
[ 1027.302732][T10364] usb 2-1: config 0 descriptor??
[ 1027.597258][T10364] smsc75xx v1.0.0
[ 1027.627453][ T5801] Bluetooth: hci0: command tx timeout
[ 1027.756655][T12669] lo speed is unknown, defaulting to 1000
[ 1027.934932][T12736] binder: 12735:12736 ioctl c0306201 200000000300 returned -11
[ 1028.158701][T10364] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61
[ 1028.158730][T10364] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1029.172308][T10364] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1029.172340][T10364] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1029.172360][T10364] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1029.172378][T10364] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1029.172679][T10364] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[ 1029.247978][T10364] usb 2-1: USB disconnect, device number 85
[ 1029.707677][ T5801] Bluetooth: hci0: command tx timeout
[ 1029.846566][T12747] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1031.787510][ T5801] Bluetooth: hci0: command tx timeout
[ 1031.877612][T10364] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1032.028927][T10364] usb 2-1: Using ep0 maxpacket: 32
[ 1032.031565][T10364] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1032.031590][T10364] usb 2-1: config 0 has no interface number 0
[ 1032.035744][T10364] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1032.036200][T10364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.036221][T10364] usb 2-1: Product: syz
[ 1032.036235][T10364] usb 2-1: Manufacturer: syz
[ 1032.036248][T10364] usb 2-1: SerialNumber: syz
[ 1032.097600][T10364] usb 2-1: config 0 descriptor??
[ 1032.109101][T10364] smsc95xx v2.0.0
[ 1032.109125][T10364] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1032.109393][T10364] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[ 1032.899081][   T31] usb 2-1: USB disconnect, device number 86
[ 1032.977703][T12764] binder: 12763:12764 ioctl c0306201 200000000300 returned -11
[ 1034.367988][T12669] chnl_net:caif_netlink_parms(): no params data found
[ 1035.872889][   T44] bridge_slave_1: left allmulticast mode
[ 1035.872916][   T44] bridge_slave_1: left promiscuous mode
[ 1035.873082][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1035.959131][   T44] bridge_slave_0: left allmulticast mode
[ 1035.959158][   T44] bridge_slave_0: left promiscuous mode
[ 1035.969206][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1036.172682][   T44] bridge_slave_1: left allmulticast mode
[ 1036.172720][   T44] bridge_slave_1: left promiscuous mode
[ 1036.172985][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1036.272616][   T44] bridge_slave_0: left allmulticast mode
[ 1036.272636][   T44] bridge_slave_0: left promiscuous mode
[ 1036.272791][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1038.258455][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1038.599387][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1038.860623][   T44] bond0 (unregistering): Released all slaves
[ 1039.479577][T12852] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1039.698109][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1039.778055][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1039.868887][   T44] bond0 (unregistering): Released all slaves
[ 1039.935997][T12669] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1039.936072][T12669] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1039.936244][T12669] bridge_slave_0: entered allmulticast mode
[ 1039.958464][T12669] bridge_slave_0: entered promiscuous mode
[ 1039.976740][T12669] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1039.981228][T12669] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1039.981476][T12669] bridge_slave_1: entered allmulticast mode
[ 1040.015965][T12669] bridge_slave_1: entered promiscuous mode
[ 1042.403666][T12669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1042.655338][T12669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1046.128275][   T44] hsr_slave_0: left promiscuous mode
[ 1046.565360][   T44] hsr_slave_1: left promiscuous mode
[ 1046.565974][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1046.618574][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1048.113478][   T44] hsr_slave_0: left promiscuous mode
[ 1048.314427][   T44] hsr_slave_1: left promiscuous mode
[ 1048.315030][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1048.810006][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1049.197582][ T7985] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1049.419603][ T7985] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1
[ 1049.419623][ T7985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64
[ 1049.421623][ T7985] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1049.421640][ T7985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.421650][ T7985] usb 2-1: Product: syz
[ 1049.421657][ T7985] usb 2-1: Manufacturer: syz
[ 1049.421664][ T7985] usb 2-1: SerialNumber: syz
[ 1049.425118][ T7985] usb 2-1: config 0 descriptor??
[ 1049.536219][T12921] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1050.383547][T10364] usb 2-1: USB disconnect, device number 87
[ 1050.469665][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1052.562026][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1054.688066][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.688110][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.958353][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1056.078016][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1056.606835][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1056.623971][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1056.625211][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1056.626924][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1056.650036][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1058.601380][T12669] team0: Port device team_slave_0 added
[ 1058.747780][ T5801] Bluetooth: hci3: command tx timeout
[ 1058.861349][T12669] team0: Port device team_slave_1 added
[ 1059.040116][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1700'.
[ 1059.040145][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1700'.
[ 1059.042564][T12986] binder: 12984:12986 unknown command 0
[ 1059.042590][T12986] binder: 12984:12986 ioctl c0306201 200000000080 returned -22
[ 1059.082344][T12986] binder: 12984:12986 ioctl c0306201 200000000300 returned -11
[ 1059.134246][T12669] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1059.134263][T12669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1059.134287][T12669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1059.142746][T12669] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1059.142761][T12669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1059.142785][T12669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1059.703659][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1059.734175][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1059.736792][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1059.762253][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1059.777734][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1060.328899][T12967] lo speed is unknown, defaulting to 1000
[ 1060.345001][T12669] hsr_slave_0: entered promiscuous mode
[ 1060.345788][T12669] hsr_slave_1: entered promiscuous mode
[ 1060.346290][T12669] debugfs: 'hsr0' already exists in 'hsr'
[ 1060.346304][T12669] Cannot create hsr debugfs directory
[ 1060.847280][ T5814] Bluetooth: hci3: command tx timeout
[ 1061.869511][ T5814] Bluetooth: hci6: command tx timeout
[ 1062.526661][T12995] lo speed is unknown, defaulting to 1000
[ 1063.007573][ T5814] Bluetooth: hci3: command tx timeout
[ 1063.947484][ T5814] Bluetooth: hci6: command tx timeout
[ 1064.555070][T12967] chnl_net:caif_netlink_parms(): no params data found
[ 1064.577544][    T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1064.727515][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1064.730994][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1064.731022][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1064.731047][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1064.731069][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1064.731110][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1064.731131][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.977551][    T9] usb 2-1: GET_CAPABILITIES returned 0
[ 1064.977600][    T9] usbtmc 2-1:16.0: can't read capabilities
[ 1065.067528][ T5814] Bluetooth: hci3: command tx timeout
[ 1065.172791][    C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1065.207618][    T9] usb 2-1: USB disconnect, device number 88
[ 1065.587985][T12995] chnl_net:caif_netlink_parms(): no params data found
[ 1066.100389][ T5814] Bluetooth: hci6: command tx timeout
[ 1068.374539][T12967] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.374865][T12967] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.375107][T12967] bridge_slave_0: entered allmulticast mode
[ 1068.378858][T12967] bridge_slave_0: entered promiscuous mode
[ 1068.435583][T12967] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1068.435742][T12967] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.435981][T12967] bridge_slave_1: entered allmulticast mode
[ 1068.460057][T12967] bridge_slave_1: entered promiscuous mode
[ 1068.486061][ T5814] Bluetooth: hci6: command tx timeout
[ 1068.890197][T13092] siw: device registration error -23
[ 1070.175141][T12967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1070.343860][T12967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1070.344408][T12995] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1070.344537][T12995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1070.344668][T12995] bridge_slave_0: entered allmulticast mode
[ 1070.346285][T12995] bridge_slave_0: entered promiscuous mode
[ 1070.418707][T12995] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1070.418909][T12995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1070.419121][T12995] bridge_slave_1: entered allmulticast mode
[ 1070.420802][T12995] bridge_slave_1: entered promiscuous mode
[ 1070.437520][    T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1070.587693][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1070.590744][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1070.590772][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1070.590795][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1070.590819][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1070.590860][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1070.590881][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.816163][    T9] usb 2-1: GET_CAPABILITIES returned 0
[ 1070.816211][    T9] usbtmc 2-1:16.0: can't read capabilities
[ 1070.842937][T12967] team0: Port device team_slave_0 added
[ 1070.939675][T12669] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1070.965420][T12967] team0: Port device team_slave_1 added
[ 1070.975454][T12995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1070.976796][T12669] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1071.026693][T11640] usb 2-1: USB disconnect, device number 89
[ 1071.121503][T12995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1071.122371][T12669] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1071.308870][T12669] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1071.675046][T12967] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1071.675063][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1071.675100][T12967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1072.548003][T12967] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.548019][T12967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1072.548045][T12967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.556021][T12995] team0: Port device team_slave_0 added
[ 1072.631983][T12995] team0: Port device team_slave_1 added
[ 1073.004636][T12995] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1073.004646][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1073.004660][T12995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1073.079101][T12995] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1073.079111][T12995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1073.079125][T12995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1073.250083][T12967] hsr_slave_0: entered promiscuous mode
[ 1073.253526][T12967] hsr_slave_1: entered promiscuous mode
[ 1073.276734][T12967] debugfs: 'hsr0' already exists in 'hsr'
[ 1073.276751][T12967] Cannot create hsr debugfs directory
[ 1074.123333][   T44] bridge_slave_1: left allmulticast mode
[ 1074.123361][   T44] bridge_slave_1: left promiscuous mode
[ 1074.123594][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.644865][   T44] bridge_slave_0: left allmulticast mode
[ 1074.644887][   T44] bridge_slave_0: left promiscuous mode
[ 1074.645059][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1075.196015][   T44] bridge_slave_1: left allmulticast mode
[ 1075.196047][   T44] bridge_slave_1: left promiscuous mode
[ 1075.196302][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.428600][   T44] bridge_slave_0: left allmulticast mode
[ 1075.428621][   T44] bridge_slave_0: left promiscuous mode
[ 1075.428805][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1075.512023][   T44] bridge_slave_1: left allmulticast mode
[ 1075.512061][   T44] bridge_slave_1: left promiscuous mode
[ 1075.512329][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.749111][   T44] bridge_slave_0: left allmulticast mode
[ 1075.749142][   T44] bridge_slave_0: left promiscuous mode
[ 1075.749390][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.298245][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1076.398782][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1076.516072][T13172] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1076.665092][   T44] bond0 (unregistering): Released all slaves
[ 1077.758151][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1077.899244][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1078.490012][   T44] bond0 (unregistering): Released all slaves
[ 1079.313850][T13195] overlayfs: missing 'lowerdir'
[ 1079.448139][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1079.568359][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1079.631056][   T44] bond0 (unregistering): Released all slaves
[ 1081.006935][T12995] hsr_slave_0: entered promiscuous mode
[ 1081.013177][T12995] hsr_slave_1: entered promiscuous mode
[ 1081.019537][T12995] debugfs: 'hsr0' already exists in 'hsr'
[ 1081.019561][T12995] Cannot create hsr debugfs directory
[ 1083.257494][   T44] hsr_slave_0: left promiscuous mode
[ 1083.297505][   T44] hsr_slave_1: left promiscuous mode
[ 1083.298476][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1083.350567][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1083.547463][   T44] hsr_slave_0: left promiscuous mode
[ 1083.568138][   T44] hsr_slave_1: left promiscuous mode
[ 1083.569156][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1083.594323][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1083.787694][   T44] hsr_slave_0: left promiscuous mode
[ 1083.832410][   T44] hsr_slave_1: left promiscuous mode
[ 1083.835056][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1083.851235][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1084.698216][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1085.115686][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1085.569976][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1085.616135][T13235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1085.630923][T13235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1085.632290][T13235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1085.633899][T13235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1085.634766][T13235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1085.859734][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1086.124531][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1086.440692][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1086.555158][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1086.645350][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1086.962513][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1087.052552][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1087.091517][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1087.198086][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1087.227820][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1087.370598][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1087.793700][T13235] Bluetooth: hci0: command tx timeout
[ 1088.338264][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1088.459793][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1088.589286][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1088.633822][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1088.872359][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1089.034072][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1089.519383][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1089.618279][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1089.753067][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1090.154358][T13235] Bluetooth: hci0: command tx timeout
[ 1091.453090][T13242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1092.204166][T13235] Bluetooth: hci0: command tx timeout
[ 1092.546020][T13234] lo speed is unknown, defaulting to 1000
[ 1093.167511][    T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1093.339230][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1093.341621][    T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1093.341646][    T9] usb 2-1: config 0 has no interface number 0
[ 1093.344474][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1093.344501][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1093.344521][    T9] usb 2-1: Product: syz
[ 1093.344534][    T9] usb 2-1: Manufacturer: syz
[ 1093.344549][    T9] usb 2-1: SerialNumber: syz
[ 1093.461694][    T9] usb 2-1: config 0 descriptor??
[ 1093.511397][    T9] smsc95xx v2.0.0
[ 1093.511415][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1093.511673][    T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[ 1094.207156][   T31] usb 2-1: USB disconnect, device number 90
[ 1094.267445][T13235] Bluetooth: hci0: command tx timeout
[ 1094.303960][T13234] chnl_net:caif_netlink_parms(): no params data found
[ 1096.820554][T13234] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1096.820694][T13234] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1096.820916][T13234] bridge_slave_0: entered allmulticast mode
[ 1096.824430][T13234] bridge_slave_0: entered promiscuous mode
[ 1097.114932][T13234] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1097.115071][T13234] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1097.115307][T13234] bridge_slave_1: entered allmulticast mode
[ 1097.118530][T13234] bridge_slave_1: entered promiscuous mode
[ 1097.536891][T13234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1097.540513][T12967] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1097.990228][T13234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1097.990541][T12967] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1098.951516][T12967] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1099.309992][T12967] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1099.400955][T13234] team0: Port device team_slave_0 added
[ 1099.422434][T13234] team0: Port device team_slave_1 added
[ 1099.716877][T13234] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1099.716893][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1099.716918][T13234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1099.768622][T13234] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1099.768638][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1099.768673][T13234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1099.866786][T12995] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1100.276750][T12995] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1100.392499][T12995] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1100.516482][T13377] usb usb8: usbfs: process 13377 (syz.4.1793) did not claim interface 0 before use
[ 1101.070892][T12995] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1101.112032][T13234] hsr_slave_0: entered promiscuous mode
[ 1101.113427][T13234] hsr_slave_1: entered promiscuous mode
[ 1101.114404][T13234] debugfs: 'hsr0' already exists in 'hsr'
[ 1101.114427][T13234] Cannot create hsr debugfs directory
[ 1101.878872][T10364] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1102.040467][T10364] usb 5-1: config 0 has an invalid interface number: 47 but max is 0
[ 1102.040495][T10364] usb 5-1: config 0 has no interface number 0
[ 1102.040542][T10364] usb 5-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8
[ 1102.040568][T10364] usb 5-1: config 0 interface 47 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8
[ 1102.040591][T10364] usb 5-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1102.040616][T10364] usb 5-1: config 0 interface 47 has no altsetting 0
[ 1102.040648][T10364] usb 5-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b
[ 1102.040671][T10364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.046232][T10364] usb 5-1: config 0 descriptor??
[ 1102.051752][T13385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1102.052456][T13385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1102.068663][T10364] usb-storage 5-1:0.47: USB Mass Storage device detected
[ 1102.285267][    T9] usb 5-1: USB disconnect, device number 60
[ 1103.118109][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1103.196909][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1103.456836][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1103.687478][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1103.803901][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1103.937730][T13407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1802'.
[ 1103.937757][T13407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1802'.
[ 1103.939953][T13407] binder: 13406:13407 unknown command 0
[ 1103.939972][T13407] binder: 13406:13407 ioctl c0306201 200000000080 returned -22
[ 1103.942659][T13407] binder_alloc: 13406: binder_alloc_buf, no vma
[ 1103.942935][T13407] binder: 13406:13407 ioctl c0306201 200000000300 returned -11
[ 1104.542176][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1104.628894][T12967] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1104.785800][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1104.886941][   T44] bridge_slave_1: left allmulticast mode
[ 1104.886970][   T44] bridge_slave_1: left promiscuous mode
[ 1104.887234][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.917477][T11640] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1105.067881][T11640] usb 5-1: Using ep0 maxpacket: 8
[ 1105.071948][T11640] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1105.071978][T11640] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1105.072003][T11640] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1105.072026][T11640] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1105.072068][T11640] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1105.072091][T11640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1105.112316][   T44] bridge_slave_0: left allmulticast mode
[ 1105.112345][   T44] bridge_slave_0: left promiscuous mode
[ 1105.112619][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.181963][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1105.461597][T11640] usb 5-1: GET_CAPABILITIES returned 0
[ 1105.461641][T11640] usbtmc 5-1:16.0: can't read capabilities
[ 1105.570961][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1105.667560][T11640] usb 5-1: USB disconnect, device number 61
[ 1105.929885][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1105.987595][    T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1106.018209][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1106.080159][   T44] bond0 (unregistering): Released all slaves
[ 1106.137891][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1106.140138][    T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1106.140164][    T9] usb 2-1: config 0 has no interface number 0
[ 1106.142830][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1106.142856][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.142866][    T9] usb 2-1: Product: syz
[ 1106.142873][    T9] usb 2-1: Manufacturer: syz
[ 1106.142880][    T9] usb 2-1: SerialNumber: syz
[ 1106.146756][    T9] usb 2-1: config 0 descriptor??
[ 1106.163769][    T9] smsc95xx v2.0.0
[ 1106.163787][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1106.164055][    T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[ 1106.284610][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1106.471972][T10364] usb 2-1: USB disconnect, device number 91
[ 1106.658269][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1106.842987][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1106.970760][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'.
[ 1107.060673][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1107.693919][T12967] 8021q: adding VLAN 0 to HW filter on device team0
[ 1108.663794][   T44] hsr_slave_0: left promiscuous mode
[ 1108.772363][   T44] hsr_slave_1: left promiscuous mode
[ 1108.776167][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1108.818273][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1109.427452][    T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1109.579577][    T9] usb 5-1: Using ep0 maxpacket: 8
[ 1109.584681][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1109.584717][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1109.584741][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1109.584764][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1109.584806][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1109.584826][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.052733][    T9] usb 5-1: GET_CAPABILITIES returned 0
[ 1110.052783][    T9] usbtmc 5-1:16.0: can't read capabilities
[ 1110.346104][    T9] usb 5-1: USB disconnect, device number 62
[ 1110.719597][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1110.868782][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1111.811185][T13139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1111.811301][T13139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1112.188170][T12995] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1112.209083][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.209217][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1113.269404][T12995] 8021q: adding VLAN 0 to HW filter on device team0
[ 1113.320985][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1113.325270][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1113.391738][ T5917] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1113.478144][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1113.478311][ T8135] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1113.539329][ T5917] usb 2-1: Using ep0 maxpacket: 8
[ 1113.548509][ T5917] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1113.548536][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1113.548560][ T5917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1113.548582][ T5917] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1113.548623][ T5917] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1113.548644][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.891686][ T5917] usb 2-1: GET_CAPABILITIES returned 0
[ 1113.891736][ T5917] usbtmc 2-1:16.0: can't read capabilities
[ 1114.091441][T13234] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1114.116641][ T5962] usb 2-1: USB disconnect, device number 92
[ 1114.354391][T13234] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1114.393800][T13234] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1114.447298][T13234] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1114.714595][T12967] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1115.062119][T13234] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1115.171100][T13234] 8021q: adding VLAN 0 to HW filter on device team0
[ 1116.058766][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.058970][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1116.099724][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1116.099899][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1116.122368][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.122556][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.255590][T12995] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1117.225507][T12995] veth0_vlan: entered promiscuous mode
[ 1117.270475][T12995] veth1_vlan: entered promiscuous mode
[ 1117.302276][T13234] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1117.347909][T12995] veth0_macvtap: entered promiscuous mode
[ 1117.353727][T12995] veth1_macvtap: entered promiscuous mode
[ 1117.383636][T12995] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1117.405416][T12995] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1117.422921][ T6209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.423175][ T6209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.423215][ T6209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.423250][ T6209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.820383][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1118.834533][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1118.835909][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1118.839349][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1118.840274][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1119.032928][ T8135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.032949][ T8135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.197513][ T5884] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1119.205212][T13576] lo speed is unknown, defaulting to 1000
[ 1119.369407][ T5884] usb 2-1: Using ep0 maxpacket: 8
[ 1119.371758][ T5884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1119.371787][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1119.371811][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1119.371834][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1119.371875][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1119.371904][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1119.595618][ T5884] usb 2-1: GET_CAPABILITIES returned 0
[ 1119.595667][ T5884] usbtmc 2-1:16.0: can't read capabilities
[ 1119.837211][ T1228] usb 2-1: USB disconnect, device number 93
[ 1119.985813][T13234] veth0_vlan: entered promiscuous mode
[ 1120.453878][T13234] veth1_vlan: entered promiscuous mode
[ 1120.635636][T13576] chnl_net:caif_netlink_parms(): no params data found
[ 1120.822710][T13139] bridge_slave_1: left allmulticast mode
[ 1120.822736][T13139] bridge_slave_1: left promiscuous mode
[ 1120.822977][T13139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1120.907744][ T5814] Bluetooth: hci2: command tx timeout
[ 1120.929091][T13139] bridge_slave_0: left allmulticast mode
[ 1120.929119][T13139] bridge_slave_0: left promiscuous mode
[ 1120.929381][T13139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1121.441817][T13235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1121.459301][T13235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1121.461938][T13235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1121.464129][T13235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1121.464976][T13235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1123.017477][T13235] Bluetooth: hci2: command tx timeout
[ 1123.548957][T13235] Bluetooth: hci3: command tx timeout
[ 1124.680328][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1856'.
[ 1125.071227][T13235] Bluetooth: hci2: command tx timeout
[ 1125.627746][T13235] Bluetooth: hci3: command tx timeout
[ 1126.191743][T13139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1126.250069][T13139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1126.271297][T13139] bond0 (unregistering): Released all slaves
[ 1126.768616][T13234] veth0_macvtap: entered promiscuous mode
[ 1127.109467][T11640] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1127.117837][T13576] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1127.117968][T13576] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.118209][T13576] bridge_slave_0: entered allmulticast mode
[ 1127.120837][T13576] bridge_slave_0: entered promiscuous mode
[ 1127.129079][T13234] veth1_macvtap: entered promiscuous mode
[ 1127.135278][T13576] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.135414][T13576] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.135608][T13576] bridge_slave_1: entered allmulticast mode
[ 1127.139003][T13576] bridge_slave_1: entered promiscuous mode
[ 1127.157471][T13235] Bluetooth: hci2: command tx timeout
[ 1127.257472][T11640] usb 2-1: Using ep0 maxpacket: 32
[ 1127.259603][T11640] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1127.259628][T11640] usb 2-1: config 0 has no interface number 0
[ 1127.262209][T11640] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1127.262236][T11640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1127.262247][T11640] usb 2-1: Product: syz
[ 1127.262254][T11640] usb 2-1: Manufacturer: syz
[ 1127.262261][T11640] usb 2-1: SerialNumber: syz
[ 1127.266123][T11640] usb 2-1: config 0 descriptor??
[ 1127.325371][T11640] smsc95xx v2.0.0
[ 1127.325388][T11640] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1127.325654][T11640] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[ 1127.368194][T13139] hsr_slave_0: left promiscuous mode
[ 1127.408961][T13139] hsr_slave_1: left promiscuous mode
[ 1127.413385][T13139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1127.468844][T13139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1127.717818][T13235] Bluetooth: hci3: command tx timeout
[ 1130.676293][T13235] Bluetooth: hci3: command tx timeout
[ 1131.368023][T13139] team0 (unregistering): Port device team_slave_1 removed
[ 1132.580270][T13139] team0 (unregistering): Port device team_slave_0 removed
[ 1134.035493][T13704] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1135.317984][   T31] usb 2-1: USB disconnect, device number 94
[ 1135.622291][T13576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1135.622361][T13600] lo speed is unknown, defaulting to 1000
[ 1135.643760][T13576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1136.227163][T13576] team0: Port device team_slave_0 added
[ 1136.262656][T13576] team0: Port device team_slave_1 added
[ 1137.841988][T13234] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1139.299616][T13576] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1139.299633][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1139.299658][T13576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1139.304951][T13576] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1139.304967][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1139.304992][T13576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1139.357608][ T7985] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1139.388817][T13234] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1139.689795][ T7985] usb 5-1: config 0 has an invalid interface number: 47 but max is 0
[ 1139.689823][ T7985] usb 5-1: config 0 has no interface number 0
[ 1139.689870][ T7985] usb 5-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8
[ 1139.689896][ T7985] usb 5-1: config 0 interface 47 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8
[ 1139.689920][ T7985] usb 5-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1139.689946][ T7985] usb 5-1: config 0 interface 47 has no altsetting 0
[ 1139.689980][ T7985] usb 5-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b
[ 1139.690002][ T7985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1139.695659][ T7985] usb 5-1: config 0 descriptor??
[ 1139.696820][T13742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1139.697004][T13742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1139.786646][ T1405] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.821351][ T7985] usb-storage 5-1:0.47: USB Mass Storage device detected
[ 1139.994716][ T7985] usb 5-1: USB disconnect, device number 63
[ 1140.038747][ T1405] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.043865][ T1405] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.086642][T13576] hsr_slave_0: entered promiscuous mode
[ 1140.088643][T13576] hsr_slave_1: entered promiscuous mode
[ 1140.089668][T13576] debugfs: 'hsr0' already exists in 'hsr'
[ 1140.089691][T13576] Cannot create hsr debugfs directory
[ 1140.111003][ T1405] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1140.977601][ T1228] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1140.981098][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1141.471639][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1141.473052][ T1228] usb 5-1: Using ep0 maxpacket: 8
[ 1141.476419][ T1228] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1141.476444][ T1228] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1141.476474][ T1228] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1141.476495][ T1228] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1141.476533][ T1228] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1141.476554][ T1228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.749874][ T1228] usb 5-1: GET_CAPABILITIES returned 0
[ 1141.749921][ T1228] usbtmc 5-1:16.0: can't read capabilities
[ 1141.838032][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1141.957617][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1141.984899][ T1228] usb 5-1: USB disconnect, device number 64
[ 1142.310259][T13139] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.830915][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1143.545861][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1144.031280][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1144.348451][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1144.371747][T13139] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.426283][T13600] chnl_net:caif_netlink_parms(): no params data found
[ 1144.435704][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1144.435722][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1144.660958][T13139] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.339932][T13139] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.732445][T13600] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.742044][T13600] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.742314][T13600] bridge_slave_0: entered allmulticast mode
[ 1145.745859][T13600] bridge_slave_0: entered promiscuous mode
[ 1145.764875][T13600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.765008][T13600] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.765239][T13600] bridge_slave_1: entered allmulticast mode
[ 1145.797219][T13600] bridge_slave_1: entered promiscuous mode
[ 1146.702946][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1146.708142][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1146.709256][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1146.712042][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1146.714064][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1146.851451][T13842] overlay: Unknown parameter '/owerdir'
[ 1146.897529][ T7985] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1146.923041][T13600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1146.930064][T13600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1147.047549][ T7985] usb 2-1: Using ep0 maxpacket: 8
[ 1147.050513][ T7985] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1147.050541][ T7985] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1147.050565][ T7985] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1147.050588][ T7985] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1147.050629][ T7985] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1147.050650][ T7985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1147.249230][T13600] team0: Port device team_slave_0 added
[ 1147.735720][T13600] team0: Port device team_slave_1 added
[ 1147.898064][ T7985] usb 2-1: usb_control_msg returned -71
[ 1147.898112][ T7985] usbtmc 2-1:16.0: can't read capabilities
[ 1147.949768][ T7985] usb 2-1: USB disconnect, device number 95
[ 1148.839177][T13235] Bluetooth: hci0: command tx timeout
[ 1148.928474][T13600] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1148.928490][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1148.928516][T13600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1149.021263][T13839] lo speed is unknown, defaulting to 1000
[ 1149.101147][T13600] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1149.101164][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1149.101190][T13600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1150.010949][T13139] bridge_slave_1: left allmulticast mode
[ 1150.010976][T13139] bridge_slave_1: left promiscuous mode
[ 1150.011209][T13139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1150.289443][T11640] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1150.329134][T13139] bridge_slave_0: left allmulticast mode
[ 1150.329153][T13139] bridge_slave_0: left promiscuous mode
[ 1150.329320][T13139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1150.449018][T11640] usb 2-1: Using ep0 maxpacket: 8
[ 1150.914541][ T5814] Bluetooth: hci0: command tx timeout
[ 1151.427907][T11640] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1151.427936][T11640] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1151.427959][T11640] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1151.427979][T11640] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1151.428022][T11640] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1151.428044][T11640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1152.606429][T11640] usb 2-1: usb_control_msg returned -71
[ 1152.606479][T11640] usbtmc 2-1:16.0: can't read capabilities
[ 1152.635324][T11640] usb 2-1: USB disconnect, device number 96
[ 1153.559016][ T5814] Bluetooth: hci0: command tx timeout
[ 1155.628043][ T5814] Bluetooth: hci0: command tx timeout
[ 1156.327510][ T1228] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1156.507507][ T1228] usb 2-1: Using ep0 maxpacket: 8
[ 1156.509843][ T1228] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1156.509870][ T1228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1156.509893][ T1228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1156.509915][ T1228] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1156.509954][ T1228] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1156.509975][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1156.816646][ T1228] usb 2-1: usb_control_msg returned -71
[ 1156.816693][ T1228] usbtmc 2-1:16.0: can't read capabilities
[ 1156.836703][ T1228] usb 2-1: USB disconnect, device number 97
[ 1157.318057][T13139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1157.358677][T13139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1157.380121][T13139] bond0 (unregistering): Released all slaves
[ 1157.538281][T13902] kthread_run failed with err -4
[ 1159.835492][T13600] hsr_slave_0: entered promiscuous mode
[ 1159.836819][T13600] hsr_slave_1: entered promiscuous mode
[ 1159.854322][T13600] debugfs: 'hsr0' already exists in 'hsr'
[ 1159.854349][T13600] Cannot create hsr debugfs directory
[ 1160.351121][T13576] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1160.463757][T13947] binder: 13946:13947 ioctl c0306201 200000000300 returned -11
[ 1160.823296][T13576] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1161.965712][T13576] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1161.982978][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1946'.
[ 1161.983002][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1946'.
[ 1161.987270][T13961] binder: 13960:13961 unknown command 0
[ 1161.993244][T13961] binder: 13960:13961 ioctl c0306201 200000000080 returned -22
[ 1161.996203][T13961] binder: BINDER_SET_CONTEXT_MGR already set
[ 1161.996216][T13961] binder: 13960:13961 ioctl 4018620d 200000000040 returned -16
[ 1161.996531][T13961] binder: 13960:13961 ioctl c0306201 200000000300 returned -11
[ 1162.146851][T13576] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1162.534438][ T7985] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1162.890190][ T7985] usb 2-1: Using ep0 maxpacket: 32
[ 1163.184831][ T7985] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1163.184859][ T7985] usb 2-1: config 0 has no interface number 0
[ 1163.189706][ T7985] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1163.189734][ T7985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.189753][ T7985] usb 2-1: Product: syz
[ 1163.189766][ T7985] usb 2-1: Manufacturer: syz
[ 1163.189779][ T7985] usb 2-1: SerialNumber: syz
[ 1163.197165][ T7985] usb 2-1: config 0 descriptor??
[ 1163.256819][ T7985] smsc95xx v2.0.0
[ 1163.256831][ T7985] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1163.256982][ T7985] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[ 1163.417519][T13139] hsr_slave_0: left promiscuous mode
[ 1163.457617][T13139] hsr_slave_1: left promiscuous mode
[ 1163.459227][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1163.459252][T13139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1163.498627][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1163.498655][T13139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1163.534125][ T1228] usb 2-1: USB disconnect, device number 98
[ 1163.678638][T13139] veth1_macvtap: left promiscuous mode
[ 1163.679926][T13139] veth0_macvtap: left promiscuous mode
[ 1163.680707][T13139] veth1_vlan: left promiscuous mode
[ 1163.680826][T13139] veth0_vlan: left promiscuous mode
[ 1164.346240][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1955'.
[ 1164.346259][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1955'.
[ 1164.366479][T13990] binder: 13989:13990 unknown command 0
[ 1164.366500][T13990] binder: 13989:13990 ioctl c0306201 200000000080 returned -22
[ 1164.384147][T13990] binder: BINDER_SET_CONTEXT_MGR already set
[ 1164.384161][T13990] binder: 13989:13990 ioctl 4018620d 200000000040 returned -16
[ 1164.384486][T13990] binder: 13989:13990 ioctl c0306201 200000000300 returned -11
[ 1166.106513][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1963'.
[ 1166.106528][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1963'.
[ 1166.115569][T14012] binder: 14011:14012 ioctl c0306201 200000000300 returned -11
[ 1166.177657][  T991] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1166.347922][  T991] usb 2-1: Using ep0 maxpacket: 8
[ 1166.349972][  T991] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1166.349996][  T991] usb 2-1: config 0 has no interface number 0
[ 1166.350036][  T991] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1166.350049][  T991] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1166.350111][  T991] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1166.350124][  T991] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1166.350148][  T991] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1166.350159][  T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.355552][  T991] usb 2-1: config 0 descriptor??
[ 1166.387788][  T991] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1167.469231][T13139] team0 (unregistering): Port device team_slave_1 removed
[ 1167.833472][T13139] team0 (unregistering): Port device team_slave_0 removed
[ 1168.657759][T11640] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1168.676523][ T1228] usb 2-1: USB disconnect, device number 99
[ 1168.717593][ T1228] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 1168.830670][T11640] usb 5-1: config 0 has an invalid interface number: 47 but max is 0
[ 1168.830699][T11640] usb 5-1: config 0 has no interface number 0
[ 1168.830751][T11640] usb 5-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8
[ 1168.830776][T11640] usb 5-1: config 0 interface 47 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8
[ 1168.830799][T11640] usb 5-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1168.830831][T11640] usb 5-1: config 0 interface 47 has no altsetting 0
[ 1168.830864][T11640] usb 5-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b
[ 1168.830886][T11640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1168.872776][T11640] usb 5-1: config 0 descriptor??
[ 1168.873812][T14022] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1168.876001][T14022] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1168.881538][T11640] usb-storage 5-1:0.47: USB Mass Storage device detected
[ 1169.100016][T11640] usb 5-1: USB disconnect, device number 65
[ 1169.235272][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1169.303081][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1169.560249][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1169.622551][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1169.842384][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1169.925443][T14035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1971'.
[ 1169.925458][T14035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1971'.
[ 1169.930096][T14035] binder: 14034:14035 ioctl c0306201 200000000300 returned -11
[ 1170.172074][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1170.440377][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1170.597167][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1171.020692][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1171.234206][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1171.331903][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1171.615006][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1171.948845][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1172.649944][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1172.725859][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1172.992439][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1173.085530][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1173.185745][T13839] chnl_net:caif_netlink_parms(): no params data found
[ 1173.212221][T14065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1979'.
[ 1173.212243][T14065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1979'.
[ 1173.217057][T14065] binder: 14064:14065 ioctl c0306201 200000000300 returned -11
[ 1173.536914][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1173.584019][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1173.724431][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1177.596006][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.630767][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.768102][T14107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1988'.
[ 1177.768124][T14107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1988'.
[ 1177.771805][T14107] binder: BINDER_SET_CONTEXT_MGR already set
[ 1177.771819][T14107] binder: 14106:14107 ioctl 4018620d 200000000040 returned -16
[ 1177.772167][T14107] binder: 14106:14107 ioctl c0306201 200000000300 returned -11
[ 1178.799618][T13839] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1178.799880][T13839] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1178.800111][T13839] bridge_slave_0: entered allmulticast mode
[ 1178.803055][T13839] bridge_slave_0: entered promiscuous mode
[ 1178.814198][T13839] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1178.814368][T13839] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1178.814590][T13839] bridge_slave_1: entered allmulticast mode
[ 1178.817234][T13839] bridge_slave_1: entered promiscuous mode
[ 1179.579775][T13839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1179.715928][T13139] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1179.795309][T13839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1180.070992][T13139] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1180.496067][T13139] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1180.522961][T13235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1180.531099][T13235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1180.540112][T13235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1180.541802][T13235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1180.542997][T13235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1180.590245][T13839] team0: Port device team_slave_0 added
[ 1180.623440][T13839] team0: Port device team_slave_1 added
[ 1181.019387][   T31] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1181.113241][T13139] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1181.169671][   T31] usb 2-1: config 0 has an invalid interface number: 47 but max is 0
[ 1181.169699][   T31] usb 2-1: config 0 has no interface number 0
[ 1181.169745][   T31] usb 2-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8
[ 1181.169770][   T31] usb 2-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1181.169793][   T31] usb 2-1: config 0 interface 47 has no altsetting 0
[ 1181.169812][   T31] usb 2-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b
[ 1181.169824][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1181.174716][   T31] usb 2-1: config 0 descriptor??
[ 1181.175671][T14130] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1181.235036][   T31] usb-storage 2-1:0.47: USB Mass Storage device detected
[ 1181.279127][T13839] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1181.279137][T13839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1181.279151][T13839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1181.296535][T13839] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1181.296551][T13839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1181.296575][T13839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1181.298765][T14124] lo speed is unknown, defaulting to 1000
[ 1181.418059][   T31] usb 2-1: USB disconnect, device number 100
[ 1181.792761][T13839] hsr_slave_0: entered promiscuous mode
[ 1181.794003][T13839] hsr_slave_1: entered promiscuous mode
[ 1181.794824][T13839] debugfs: 'hsr0' already exists in 'hsr'
[ 1181.794842][T13839] Cannot create hsr debugfs directory
[ 1182.393611][T13139] bridge_slave_1: left allmulticast mode
[ 1182.393638][T13139] bridge_slave_1: left promiscuous mode
[ 1182.393883][T13139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1182.469201][T13139] bridge_slave_0: left allmulticast mode
[ 1182.469229][T13139] bridge_slave_0: left promiscuous mode
[ 1182.469489][T13139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1182.587631][T13235] Bluetooth: hci2: command tx timeout
[ 1182.705059][T14164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'.
[ 1182.705083][T14164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1996'.
[ 1182.712622][T14164] binder: BINDER_SET_CONTEXT_MGR already set
[ 1182.712637][T14164] binder: 14162:14164 ioctl 4018620d 200000000040 returned -16
[ 1182.712969][T14164] binder: 14162:14164 ioctl c0306201 200000000300 returned -11
[ 1183.941547][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1183.960509][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1183.961843][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1183.971989][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1183.972987][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1184.667692][T13235] Bluetooth: hci2: command tx timeout
[ 1185.878058][T11640] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1185.996079][T14194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2004'.
[ 1185.996095][T14194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2004'.
[ 1185.999523][T14194] binder: BINDER_SET_CONTEXT_MGR already set
[ 1185.999535][T14194] binder: 14193:14194 ioctl 4018620d 200000000040 returned -16
[ 1185.999852][T14194] binder: 14193:14194 ioctl c0306201 200000000300 returned -11
[ 1186.037523][T11640] usb 2-1: Using ep0 maxpacket: 8
[ 1186.039869][T11640] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1186.039894][T11640] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1186.039919][T11640] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1186.039942][T11640] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1186.039983][T11640] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1186.040005][T11640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.108221][T13235] Bluetooth: hci3: command tx timeout
[ 1186.335070][T11640] usb 2-1: GET_CAPABILITIES returned 0
[ 1186.335111][T11640] usbtmc 2-1:16.0: can't read capabilities
[ 1186.547082][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1186.570548][  T991] usb 2-1: USB disconnect, device number 101
[ 1186.764911][T13235] Bluetooth: hci2: command tx timeout
[ 1187.198022][T13139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1187.355400][T13139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1187.712187][T13139] bond0 (unregistering): Released all slaves
[ 1188.226497][T13235] Bluetooth: hci3: command tx timeout
[ 1188.837357][T13235] Bluetooth: hci2: command tx timeout
[ 1189.186009][T14219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2012'.
[ 1189.186032][T14219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2012'.
[ 1189.208827][T14219] binder: 14218:14219 unknown command 0
[ 1189.208847][T14219] binder: 14218:14219 ioctl c0306201 200000000080 returned -22
[ 1189.212189][T14219] binder: 14218:14219 ioctl c0306201 200000000300 returned -11
[ 1189.426966][T14225] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1189.527477][T11640] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1189.677426][T11640] usb 2-1: Using ep0 maxpacket: 8
[ 1189.679877][T11640] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1189.679905][T11640] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1189.679930][T11640] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1189.679952][T11640] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1189.679994][T11640] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1189.680016][T11640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1190.518652][T13235] Bluetooth: hci3: command tx timeout
[ 1190.603103][T11640] usb 2-1: GET_CAPABILITIES returned 0
[ 1190.603152][T11640] usbtmc 2-1:16.0: can't read capabilities
[ 1190.717987][T14174] lo speed is unknown, defaulting to 1000
[ 1190.817769][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1190.839727][T11640] usb 2-1: USB disconnect, device number 102
[ 1191.040888][T13139] hsr_slave_0: left promiscuous mode
[ 1191.078677][T13139] hsr_slave_1: left promiscuous mode
[ 1191.079950][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1191.079976][T13139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1191.124974][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1191.125003][T13139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1191.271144][T13139] veth1_macvtap: left promiscuous mode
[ 1191.271258][T13139] veth0_macvtap: left promiscuous mode
[ 1191.271529][T13139] veth1_vlan: left promiscuous mode
[ 1191.271721][T13139] veth0_vlan: left promiscuous mode
[ 1192.318042][ T1228] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1192.581752][ T1228] usb 2-1: Using ep0 maxpacket: 32
[ 1192.587533][T13235] Bluetooth: hci3: command tx timeout
[ 1192.784309][ T1228] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1192.784532][ T1228] usb 2-1: config 0 has no interface number 0
[ 1192.871675][ T1228] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1192.871961][ T1228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1192.872285][ T1228] usb 2-1: Product: syz
[ 1192.872456][ T1228] usb 2-1: Manufacturer: syz
[ 1192.872601][ T1228] usb 2-1: SerialNumber: syz
[ 1193.050016][ T1228] usb 2-1: config 0 descriptor??
[ 1193.066665][ T1228] smsc95xx v2.0.0
[ 1193.066682][ T1228] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1193.066950][ T1228] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22
[ 1193.695326][  T991] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1193.882129][  T991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.882157][  T991] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[ 1193.884540][  T991] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1193.884562][  T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.884573][  T991] usb 5-1: Product: syz
[ 1193.884580][  T991] usb 5-1: Manufacturer: syz
[ 1193.884586][  T991] usb 5-1: SerialNumber: syz
[ 1194.606840][ T1228] usb 5-1: USB disconnect, device number 66
[ 1195.200798][T13139] team0 (unregistering): Port device team_slave_1 removed
[ 1195.419461][T13139] team0 (unregistering): Port device team_slave_0 removed
[ 1199.010170][ T1228] usb 2-1: USB disconnect, device number 103
[ 1199.270483][T14124] chnl_net:caif_netlink_parms(): no params data found
[ 1200.632076][T14124] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1200.925099][T14124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1200.935904][T14124] bridge_slave_0: entered allmulticast mode
[ 1200.986868][T14124] bridge_slave_0: entered promiscuous mode
[ 1201.440089][T14124] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1201.440289][T14124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1201.440529][T14124] bridge_slave_1: entered allmulticast mode
[ 1201.443517][T14124] bridge_slave_1: entered promiscuous mode
[ 1202.800043][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1202.864888][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1203.251090][T14124] team0: Port device team_slave_0 added
[ 1203.284186][T14124] team0: Port device team_slave_1 added
[ 1203.485646][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1203.485663][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1203.485687][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1203.530877][T14174] chnl_net:caif_netlink_parms(): no params data found
[ 1203.542658][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1203.542674][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1203.542698][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1203.543403][T13839] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1203.587475][T11640] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1203.645810][T13839] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1203.742227][T11640] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1203.742287][T11640] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1203.743778][T11640] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1203.743811][T11640] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1203.743831][T11640] usb 5-1: Manufacturer: syz
[ 1203.800120][T11640] usb 5-1: config 0 descriptor??
[ 1203.864473][T13839] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1203.877478][T11640] rc_core: IR keymap rc-hauppauge not found
[ 1203.877498][T11640] Registered IR keymap rc-empty
[ 1203.881814][T11640] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1203.908671][T11640] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6
[ 1204.413272][T13839] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1204.670095][T14308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1204.672569][T14308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1204.861100][T11640] usb 5-1: USB disconnect, device number 67
[ 1205.681755][T13839] kthread_run failed with err -4
[ 1205.726624][T14124] hsr_slave_0: entered promiscuous mode
[ 1205.734522][T14124] hsr_slave_1: entered promiscuous mode
[ 1205.735518][T14124] debugfs: 'hsr0' already exists in 'hsr'
[ 1205.735542][T14124] Cannot create hsr debugfs directory
[ 1206.069454][T14174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1206.069587][T14174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1206.069759][T14174] bridge_slave_0: entered allmulticast mode
[ 1206.071331][T14174] bridge_slave_0: entered promiscuous mode
[ 1206.166722][T14174] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1206.166879][T14174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1206.167100][T14174] bridge_slave_1: entered allmulticast mode
[ 1206.170689][T14174] bridge_slave_1: entered promiscuous mode
[ 1206.751209][T14174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1206.789739][T14174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1206.991540][T14174] team0: Port device team_slave_0 added
[ 1207.372421][T14174] team0: Port device team_slave_1 added
[ 1207.450137][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1207.494846][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1207.625679][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1207.686496][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1207.718510][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1208.692932][T14174] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1208.692944][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1208.692958][T14174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1208.746484][T14174] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1208.746500][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1208.746525][T14174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1209.162124][T14358] binder: 14357:14358 unknown command 0
[ 1209.162139][T14358] binder: 14357:14358 ioctl c0306201 200000000080 returned -22
[ 1209.847710][T11640] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1209.947408][ T5814] Bluetooth: hci0: command tx timeout
[ 1210.009612][T11640] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1210.009639][T11640] usb 5-1: config 0 has no interfaces?
[ 1210.011993][T11640] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1210.012019][T11640] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1210.012040][T11640] usb 5-1: Product: syz
[ 1210.012054][T11640] usb 5-1: Manufacturer: syz
[ 1210.012068][T11640] usb 5-1: SerialNumber: syz
[ 1210.070570][T11640] usb 5-1: config 0 descriptor??
[ 1210.207709][T14346] lo speed is unknown, defaulting to 1000
[ 1210.214645][T14174] hsr_slave_0: entered promiscuous mode
[ 1210.215466][T14174] hsr_slave_1: entered promiscuous mode
[ 1210.216139][T14174] debugfs: 'hsr0' already exists in 'hsr'
[ 1210.216155][T14174] Cannot create hsr debugfs directory
[ 1210.397479][ T1228] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1210.549716][ T1228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1210.549743][ T1228] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[ 1210.552780][ T1228] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1210.552808][ T1228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1210.552827][ T1228] usb 2-1: Product: syz
[ 1210.552840][ T1228] usb 2-1: Manufacturer: syz
[ 1210.552855][ T1228] usb 2-1: SerialNumber: syz
[ 1210.770081][ T1228] usb 2-1: USB disconnect, device number 104
[ 1211.203898][T13139] bridge_slave_1: left allmulticast mode
[ 1211.203924][T13139] bridge_slave_1: left promiscuous mode
[ 1211.204175][T13139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1211.268468][T13139] bridge_slave_0: left allmulticast mode
[ 1211.268489][T13139] bridge_slave_0: left promiscuous mode
[ 1211.268669][T13139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.495423][T13139] bridge_slave_1: left allmulticast mode
[ 1211.495454][T13139] bridge_slave_1: left promiscuous mode
[ 1211.495693][T13139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1211.578402][T13139] bridge_slave_0: left allmulticast mode
[ 1211.578423][T13139] bridge_slave_0: left promiscuous mode
[ 1211.578589][T13139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.847483][T11640] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1211.977683][T11640] usb 2-1: device descriptor read/64, error -71
[ 1211.978466][T13139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1212.027432][ T5814] Bluetooth: hci0: command tx timeout
[ 1212.069386][T13139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1212.131295][T13139] bond0 (unregistering): Released all slaves
[ 1212.257795][T11640] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1212.387554][T11640] usb 2-1: device descriptor read/64, error -71
[ 1212.389129][ T5884] usb 5-1: USB disconnect, device number 68
[ 1212.497963][T11640] usb usb2-port1: attempt power cycle
[ 1212.751778][T13139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1212.828211][T13139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1212.837454][T11640] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1212.860327][T11640] usb 2-1: device descriptor read/8, error -71
[ 1212.889316][T13139] bond0 (unregistering): Released all slaves
[ 1213.127545][T11640] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1213.188574][T11640] usb 2-1: device descriptor read/8, error -71
[ 1213.192736][T14346] chnl_net:caif_netlink_parms(): no params data found
[ 1213.315707][T11640] usb usb2-port1: unable to enumerate USB device
[ 1214.107513][ T5814] Bluetooth: hci0: command tx timeout
[ 1214.587610][T13139] hsr_slave_0: left promiscuous mode
[ 1214.631073][T13139] hsr_slave_1: left promiscuous mode
[ 1214.632117][T13139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1214.673507][T13139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1214.867461][T11640] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1215.017408][T11640] usb 5-1: Using ep0 maxpacket: 32
[ 1215.019789][T11640] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1215.019815][T11640] usb 5-1: config 0 has no interface number 0
[ 1215.022923][T11640] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1215.022948][T11640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.022968][T11640] usb 5-1: Product: syz
[ 1215.022981][T11640] usb 5-1: Manufacturer: syz
[ 1215.022996][T11640] usb 5-1: SerialNumber: syz
[ 1215.165500][T11640] usb 5-1: config 0 descriptor??
[ 1215.184652][T11640] smsc95xx v2.0.0
[ 1215.184669][T11640] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1215.184938][T11640] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22
[ 1215.347806][T13139] hsr_slave_0: left promiscuous mode
[ 1215.458646][T13139] hsr_slave_1: left promiscuous mode
[ 1215.459623][T13139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1215.498673][T13139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1216.188276][ T5814] Bluetooth: hci0: command tx timeout
[ 1216.388065][T13139] team0 (unregistering): Port device team_slave_1 removed
[ 1216.538096][T13139] team0 (unregistering): Port device team_slave_0 removed
[ 1217.237646][T11640] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1217.367454][T11640] usb 2-1: device descriptor read/64, error -71
[ 1217.608079][T13139] team0 (unregistering): Port device team_slave_1 removed
[ 1217.643911][T11640] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1217.768034][T13139] team0 (unregistering): Port device team_slave_0 removed
[ 1217.797369][T11640] usb 2-1: device descriptor read/64, error -71
[ 1217.908758][T11640] usb usb2-port1: attempt power cycle
[ 1218.257567][T11640] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1218.280678][T11640] usb 2-1: device descriptor read/8, error -71
[ 1218.466516][  T991] usb 5-1: USB disconnect, device number 69
[ 1218.518006][T11640] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1218.538391][T11640] usb 2-1: device descriptor read/8, error -71
[ 1218.649105][T11640] usb usb2-port1: unable to enumerate USB device
[ 1218.840466][T14346] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1218.840592][T14346] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.840761][T14346] bridge_slave_0: entered allmulticast mode
[ 1218.842496][T14346] bridge_slave_0: entered promiscuous mode
[ 1218.845257][T14346] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1218.845411][T14346] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.845529][T14346] bridge_slave_1: entered allmulticast mode
[ 1218.847110][T14346] bridge_slave_1: entered promiscuous mode
[ 1219.095540][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1219.109408][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1219.536959][T14437] siw: device registration error -23
[ 1219.582446][T14346] team0: Port device team_slave_0 added
[ 1219.619601][T14346] team0: Port device team_slave_1 added
[ 1219.860543][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1219.860560][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1219.860585][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1219.893967][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1219.893982][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1219.894014][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1220.099952][T14124] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1220.812749][T14124] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1220.885089][T14346] hsr_slave_0: entered promiscuous mode
[ 1220.886267][T14346] hsr_slave_1: entered promiscuous mode
[ 1220.887114][T14346] debugfs: 'hsr0' already exists in 'hsr'
[ 1220.887134][T14346] Cannot create hsr debugfs directory
[ 1220.911158][T14124] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1221.095780][T14124] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1223.107488][   T31] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1223.237585][   T31] usb 5-1: device descriptor read/64, error -71
[ 1223.418218][T14174] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1223.506346][T14174] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1223.527636][   T31] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1223.549363][T14174] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1223.604613][T14174] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1223.667725][   T31] usb 5-1: device descriptor read/64, error -71
[ 1223.777857][   T31] usb usb5-port1: attempt power cycle
[ 1224.139675][   T31] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1224.159132][   T31] usb 5-1: device descriptor read/8, error -71
[ 1224.491080][   T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1224.518635][   T31] usb 5-1: device descriptor read/8, error -71
[ 1224.683414][   T31] usb usb5-port1: unable to enumerate USB device
[ 1225.593243][T14124] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1226.044187][T14124] 8021q: adding VLAN 0 to HW filter on device team0
[ 1226.063306][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1226.063438][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1226.721539][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1226.727618][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1227.142980][T14174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1227.317397][T14540] siw: device registration error -23
[ 1227.424037][T14174] 8021q: adding VLAN 0 to HW filter on device team0
[ 1227.758453][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1227.776334][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1227.951283][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1227.951531][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1227.980571][T14346] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1228.249632][T13139] bridge_slave_1: left allmulticast mode
[ 1228.249661][T13139] bridge_slave_1: left promiscuous mode
[ 1228.249917][T13139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1228.319299][T13139] bridge_slave_0: left allmulticast mode
[ 1228.319329][T13139] bridge_slave_0: left promiscuous mode
[ 1228.319604][T13139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1229.227575][ T5962] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1229.357451][ T5962] usb 5-1: device descriptor read/64, error -71
[ 1229.498637][T13139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1229.607540][ T5962] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1229.608238][T13139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1229.670354][T13139] bond0 (unregistering): Released all slaves
[ 1229.711063][T14346] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1229.738185][ T5962] usb 5-1: device descriptor read/64, error -71
[ 1229.765576][T14346] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1229.952447][ T5962] usb usb5-port1: attempt power cycle
[ 1230.090584][T14346] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1230.298413][ T5962] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1230.554108][ T5962] usb 5-1: device descriptor read/8, error -71
[ 1230.817458][ T5962] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1230.847367][ T5962] usb 5-1: device descriptor read/8, error -71
[ 1230.971219][ T5962] usb usb5-port1: unable to enumerate USB device
[ 1231.067545][T13139] hsr_slave_0: left promiscuous mode
[ 1231.383357][T13139] hsr_slave_1: left promiscuous mode
[ 1231.384332][T13139] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1231.428905][T13139] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1232.378645][T13139] team0 (unregistering): Port device team_slave_1 removed
[ 1232.958266][T13139] team0 (unregistering): Port device team_slave_0 removed
[ 1234.716955][T14124] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1234.789531][ T5884] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1234.957451][ T5884] usb 2-1: device descriptor read/64, error -71
[ 1235.045097][T14346] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1235.110343][T14346] 8021q: adding VLAN 0 to HW filter on device team0
[ 1235.169496][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1235.177611][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1235.193756][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1235.193940][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1235.217552][ T5884] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1235.332862][T14174] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1235.359279][ T5884] usb 2-1: device descriptor read/64, error -71
[ 1235.467980][ T5884] usb usb2-port1: attempt power cycle
[ 1235.721787][T14124] veth0_vlan: entered promiscuous mode
[ 1235.764169][T14124] veth1_vlan: entered promiscuous mode
[ 1235.807578][ T5884] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1235.828750][ T5884] usb 2-1: device descriptor read/8, error -71
[ 1235.889145][T14124] veth0_macvtap: entered promiscuous mode
[ 1235.909226][T14124] veth1_macvtap: entered promiscuous mode
[ 1235.947152][T14174] veth0_vlan: entered promiscuous mode
[ 1235.965222][T14346] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1235.989664][T14174] veth1_vlan: entered promiscuous mode
[ 1236.067473][ T5884] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1236.090099][ T5884] usb 2-1: device descriptor read/8, error -71
[ 1236.121540][T14124] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1236.161044][T14124] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1236.175051][T14174] veth0_macvtap: entered promiscuous mode
[ 1236.182459][ T5921] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1236.184303][ T5921] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1236.185034][ T5921] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1236.186619][ T5921] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1236.198791][ T5884] usb usb2-port1: unable to enumerate USB device
[ 1236.201548][T14174] veth1_macvtap: entered promiscuous mode
[ 1236.384627][T14174] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1236.456099][T14634] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present
[ 1236.573605][T14174] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1236.636486][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1236.740108][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1236.745502][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1236.779003][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1236.834640][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1236.834669][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1237.076349][T13139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1237.076369][T13139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1237.458694][ T5921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1237.458714][ T5921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1237.512476][T14346] veth0_vlan: entered promiscuous mode
[ 1237.720803][T14346] veth1_vlan: entered promiscuous mode
[ 1237.740370][ T6209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1237.740388][ T6209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1237.807911][ T5917] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1237.957478][ T5917] usb 7-1: Using ep0 maxpacket: 16
[ 1237.960851][T14346] veth0_macvtap: entered promiscuous mode
[ 1237.964389][ T5917] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1237.989585][ T5917] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1237.989611][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.989630][ T5917] usb 7-1: Product: syz
[ 1237.989643][ T5917] usb 7-1: Manufacturer: syz
[ 1237.989656][ T5917] usb 7-1: SerialNumber: syz
[ 1238.013450][ T5917] usb 7-1: config 0 descriptor??
[ 1238.051586][ T5917] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[ 1238.054221][T14346] veth1_macvtap: entered promiscuous mode
[ 1238.055569][ T5917] usb 7-1: Detected FT232R
[ 1238.132904][T14346] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1238.209285][T14346] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1238.767233][ T5917] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1238.767822][ T5917] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1238.769317][ T5917] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[ 1238.776960][ T6210] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.785460][ T5917] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1238.806439][ T5917] usb 7-1: USB disconnect, device number 2
[ 1238.836080][ T6210] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.855697][ T6210] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.891531][ T6210] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.935491][ T5917] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1238.936272][ T5917] ftdi_sio 7-1:0.0: device disconnected
[ 1238.991332][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.991377][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.197371][ T2210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.197393][ T2210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.403582][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.403604][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.488097][  T991] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1240.617711][  T991] usb 7-1: device descriptor read/64, error -71
[ 1240.755053][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'.
[ 1241.687756][  T991] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1241.886150][  T991] usb 7-1: device descriptor read/64, error -71
[ 1241.988747][  T991] usb usb7-port1: attempt power cycle
[ 1250.690190][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2139'.
[ 1252.067433][  T991] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1252.070739][T14725] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present
[ 1252.227549][  T991] usb 2-1: Using ep0 maxpacket: 8
[ 1252.229529][  T991] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1252.229562][  T991] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1252.229574][  T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.680559][T13235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1252.702674][T13235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1252.704827][T13235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1252.716721][T13235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1252.728149][T13235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1253.488911][  T991] usb 2-1: USB disconnect, device number 117
[ 1254.207665][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2148'.
[ 1254.207728][T14740] netlink: 'syz.1.2148': attribute type 2 has an invalid length.
[ 1254.207737][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2148'.
[ 1255.283126][T13235] Bluetooth: hci5: command tx timeout
[ 1255.302771][T14726] lo speed is unknown, defaulting to 1000
[ 1256.547425][   T31] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1256.697426][   T31] usb 2-1: Using ep0 maxpacket: 8
[ 1256.699642][   T31] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1256.699677][   T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1256.699690][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1256.871525][   T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.307768][T13235] Bluetooth: hci5: command tx timeout
[ 1257.602348][   T31] usb 2-1: USB disconnect, device number 118
[ 1258.465742][   T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1259.387529][T13235] Bluetooth: hci5: command tx timeout
[ 1261.292424][   T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1262.127327][T13235] Bluetooth: hci5: command tx timeout
[ 1262.520532][ T5962] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1262.798361][ T5962] usb 2-1: Using ep0 maxpacket: 8
[ 1262.841504][ T5962] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1262.841540][ T5962] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1262.841553][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.961242][T14825] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2170'.
[ 1263.161131][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2170'.
[ 1263.206758][   T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1263.326773][T14726] chnl_net:caif_netlink_parms(): no params data found
[ 1263.698324][ T5962] usb 2-1: USB disconnect, device number 119
[ 1263.757451][   T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1263.907615][   T43] usb 6-1: Using ep0 maxpacket: 16
[ 1263.928992][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1263.929118][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1263.929405][   T43] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 1263.929486][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1264.408190][   T43] usb 6-1: config 0 descriptor??
[ 1264.426504][   T43] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input9
[ 1264.641740][   T43] usb 6-1: USB disconnect, device number 2
[ 1265.291434][T11640] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1266.064826][T14726] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1266.065037][T14726] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1266.084205][T14726] bridge_slave_0: entered allmulticast mode
[ 1266.101135][T14726] bridge_slave_0: entered promiscuous mode
[ 1266.117538][T11640] usb 2-1: Using ep0 maxpacket: 8
[ 1266.140330][T14726] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1266.140478][T14726] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1266.146071][T14726] bridge_slave_1: entered allmulticast mode
[ 1266.158393][T14726] bridge_slave_1: entered promiscuous mode
[ 1266.179063][T11640] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1266.179092][T11640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.179109][T11640] usb 2-1: Product: syz
[ 1266.179121][T11640] usb 2-1: Manufacturer: syz
[ 1266.179135][T11640] usb 2-1: SerialNumber: syz
[ 1266.230398][T11640] usb 2-1: config 0 descriptor??
[ 1266.234521][T11640] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1266.737647][T11640] gspca_sonixj: reg_w1 err -110
[ 1266.737753][T11640] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[ 1267.758195][T14726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1267.794350][T14726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1267.864298][   T43] usb 2-1: USB disconnect, device number 120
[ 1268.320485][   T69] bridge_slave_1: left allmulticast mode
[ 1268.320552][   T69] bridge_slave_1: left promiscuous mode
[ 1268.320713][   T69] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1268.380083][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'.
[ 1268.380180][T14859] netlink: 'syz.1.2181': attribute type 2 has an invalid length.
[ 1268.380194][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'.
[ 1268.559512][   T69] bridge_slave_0: left allmulticast mode
[ 1268.559538][   T69] bridge_slave_0: left promiscuous mode
[ 1268.559715][   T69] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1269.997404][ T5884] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1270.222220][ T5884] usb 2-1: Using ep0 maxpacket: 8
[ 1270.514432][ T5884] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1270.514469][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1270.514494][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1270.514507][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.598674][ T5884] usbtmc 2-1:16.0: bulk endpoints not found
[ 1270.718294][T13511] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1271.318466][T13511] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1271.318492][T13511] usb 6-1: config 0 has no interfaces?
[ 1271.337442][T13511] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1271.337472][T13511] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1271.337492][T13511] usb 6-1: Product: syz
[ 1271.337506][T13511] usb 6-1: Manufacturer: syz
[ 1271.337519][T13511] usb 6-1: SerialNumber: syz
[ 1271.406956][T13511] usb 6-1: config 0 descriptor??
[ 1271.566398][ T5884] usb 2-1: USB disconnect, device number 121
[ 1272.746889][T14886] usb usb8: usbfs: process 14886 (syz.7.2187) did not claim interface 0 before use
[ 1275.746846][   T43] usb 6-1: USB disconnect, device number 3
[ 1276.352012][ T5884] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1276.517801][ T5884] usb 7-1: Using ep0 maxpacket: 8
[ 1276.670554][ T5884] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1276.670613][ T5884] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1276.670655][ T5884] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1276.670677][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1276.921196][ T5884] usbtmc 7-1:16.0: bulk endpoints not found
[ 1278.078042][   T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1278.140329][   T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1278.207908][   T69] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1278.233562][   T69] bond0 (unregistering): Released all slaves
[ 1278.493796][T14882] kthread_run failed with err -4
[ 1278.532266][T14726] team0: Port device team_slave_0 added
[ 1278.586601][T14726] team0: Port device team_slave_1 added
[ 1278.931888][ T5884] usb 7-1: USB disconnect, device number 6
[ 1287.210990][ T5884] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1287.399785][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1287.399801][ T5884] usb 2-1: config 0 has no interfaces?
[ 1287.402683][ T5884] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1287.402698][ T5884] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1287.402709][ T5884] usb 2-1: Product: syz
[ 1287.402716][ T5884] usb 2-1: Manufacturer: syz
[ 1287.402725][ T5884] usb 2-1: SerialNumber: syz
[ 1287.406105][ T5884] usb 2-1: config 0 descriptor??
[ 1288.505805][   T43] usb 2-1: USB disconnect, device number 122
[ 1289.308854][  T991] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1289.619288][  T991] usb 6-1: Using ep0 maxpacket: 8
[ 1289.738816][  T991] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1289.738844][  T991] usb 6-1: config 0 has no interface number 0
[ 1289.738893][  T991] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1289.738916][  T991] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1289.738939][  T991] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1289.738965][  T991] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1289.739006][  T991] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1289.739028][  T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.744543][  T991] usb 6-1: config 0 descriptor??
[ 1290.042372][  T991] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1290.091730][  T991] usb 6-1: USB disconnect, device number 4
[ 1290.094787][  T991] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1290.363445][T14726] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1290.363456][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1290.363475][T14726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1290.370964][T14726] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1290.370980][T14726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1290.371003][T14726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1291.094433][   T69] hsr_slave_0: left promiscuous mode
[ 1291.157215][   T69] hsr_slave_1: left promiscuous mode
[ 1291.158977][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1291.158994][   T69] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1291.263185][   T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1291.263205][   T69] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1292.530785][   T69] veth1_macvtap: left promiscuous mode
[ 1292.530887][   T69] veth0_macvtap: left promiscuous mode
[ 1292.531129][   T69] veth1_vlan: left promiscuous mode
[ 1292.531313][   T69] veth0_vlan: left promiscuous mode
[ 1295.377440][T11640] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1295.537381][T11640] usb 2-1: Using ep0 maxpacket: 8
[ 1295.540531][T11640] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1295.540548][T11640] usb 2-1: config 0 has no interface number 0
[ 1295.540573][T11640] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1295.540585][T11640] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1295.540599][T11640] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1295.540612][T11640] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1295.540635][T11640] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1295.540647][T11640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1295.543640][T11640] usb 2-1: config 0 descriptor??
[ 1296.453172][T11640] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1296.488831][T11640] usb 2-1: USB disconnect, device number 123
[ 1296.495014][T11640] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 1296.536657][   T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1296.752031][   T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1296.752057][   T43] usb 8-1: config 0 has no interfaces?
[ 1296.779883][   T43] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1296.779910][   T43] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1296.779930][   T43] usb 8-1: Product: syz
[ 1296.779943][   T43] usb 8-1: Manufacturer: syz
[ 1296.779957][   T43] usb 8-1: SerialNumber: syz
[ 1296.836147][   T43] usb 8-1: config 0 descriptor??
[ 1297.637717][   T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1297.838843][  T991] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1297.857754][   T43] usb 7-1: Using ep0 maxpacket: 8
[ 1298.103207][   T43] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1298.103915][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1298.104781][   T43] usb 7-1: Product: syz
[ 1298.105809][   T43] usb 7-1: Manufacturer: syz
[ 1298.106428][   T43] usb 7-1: SerialNumber: syz
[ 1298.122406][  T991] usb 2-1: Using ep0 maxpacket: 8
[ 1298.153743][  T991] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1298.153799][  T991] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1298.153820][  T991] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1298.153840][  T991] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1298.153880][  T991] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1298.153903][  T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1298.164934][  T991] usbtmc 2-1:16.0: bulk endpoints not found
[ 1298.678231][   T43] usb 7-1: config 0 descriptor??
[ 1298.700015][   T43] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1298.724236][T11640] usb 8-1: USB disconnect, device number 2
[ 1299.116630][  T991] usb 2-1: USB disconnect, device number 124
[ 1299.217755][   T43] gspca_sonixj: reg_w1 err -110
[ 1299.217850][   T43] sonixj 7-1:0.0: probe with driver sonixj failed with error -110
[ 1299.241786][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'.
[ 1299.241838][T15061] netlink: 'syz.1.2238': attribute type 2 has an invalid length.
[ 1299.241850][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'.
[ 1300.459438][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.460013][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.977381][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1301.132926][ T5884] usb 6-1: Using ep0 maxpacket: 8
[ 1301.135599][ T5884] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1301.135625][ T5884] usb 6-1: config 0 has no interface number 0
[ 1301.135672][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1301.135696][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1301.135721][ T5884] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1301.135747][ T5884] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1301.135788][ T5884] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1301.135810][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1301.327568][ T5884] usb 6-1: config 0 descriptor??
[ 1301.378070][ T5884] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1301.568934][T15083] binder: 15082:15083 unknown command 0
[ 1301.568978][T15083] binder: 15082:15083 ioctl c0306201 200000000080 returned -22
[ 1301.571157][T15083] binder: 15082:15083 ioctl c0306201 200000000300 returned -11
[ 1301.590396][   T43] usb 6-1: USB disconnect, device number 5
[ 1301.595390][   T43] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1301.784099][ T5962] usb 7-1: USB disconnect, device number 7
[ 1303.752347][T14670] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1303.997514][T14670] usb 2-1: Using ep0 maxpacket: 8
[ 1304.005401][T14670] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1304.005418][T14670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1304.005433][T14670] usb 2-1: Product: syz
[ 1304.005448][T14670] usb 2-1: Manufacturer: syz
[ 1304.005459][T14670] usb 2-1: SerialNumber: syz
[ 1304.843161][T14670] usb 2-1: config 0 descriptor??
[ 1304.873570][T14670] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1305.301007][T14670] gspca_sonixj: reg_w1 err -71
[ 1305.301105][T14670] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[ 1305.373375][T14670] usb 2-1: USB disconnect, device number 125
[ 1305.398534][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2253'.
[ 1305.398618][T15109] netlink: 'syz.6.2253': attribute type 2 has an invalid length.
[ 1305.398632][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2253'.
[ 1305.459964][T15113] binder: 15112:15113 ioctl 4018620d 0 returned -22
[ 1305.460775][T15113] binder: 15112:15113 unknown command 0
[ 1305.460790][T15113] binder: 15112:15113 ioctl c0306201 200000000080 returned -22
[ 1305.463218][T15113] binder: 15112:15113 ioctl c0306201 200000000300 returned -11
[ 1307.685331][T15119] Bluetooth: hci2: command 0x0406 tx timeout
[ 1307.728412][T15119] Bluetooth: hci3: command 0x0406 tx timeout
[ 1308.952795][   T69] team0 (unregistering): Port device team_slave_1 removed
[ 1309.050204][T15148] binder: 15147:15148 ioctl 4018620d 0 returned -22
[ 1309.051006][T15148] binder: 15147:15148 unknown command 0
[ 1309.051021][T15148] binder: 15147:15148 ioctl c0306201 200000000080 returned -22
[ 1309.053537][T15148] binder: 15147:15148 ioctl c0306201 200000000300 returned -11
[ 1309.198443][   T69] team0 (unregistering): Port device team_slave_0 removed
[ 1312.152285][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1312.167613][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1312.170894][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1312.172527][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1312.173320][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1313.433984][T15181] binder: 15180:15181 ioctl 4018620d 0 returned -22
[ 1313.436678][T15181] binder: 15180:15181 unknown command 0
[ 1313.436691][T15181] binder: 15180:15181 ioctl c0306201 200000000080 returned -22
[ 1313.443007][T15181] binder: 15180:15181 ioctl c0306201 200000000300 returned -11
[ 1314.019048][T15142] kthread_run failed with err -4
[ 1314.294141][T13235] Bluetooth: hci4: command tx timeout
[ 1314.307459][T14346] ------------[ cut here ]------------
[ 1314.307485][T14346] WARNING: CPU: 1 PID: 14346 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150
[ 1314.307618][T14346] Modules linked in:
[ 1314.307659][T14346] CPU: 1 UID: 0 PID: 14346 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1314.307682][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1314.307699][T14346] RIP: 0010:kcov_task_exit+0x13c/0x150
[ 1314.307725][T14346] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90
[ 1314.307743][T14346] RSP: 0000:ffffc90004d47ac0 EFLAGS: 00010206
[ 1314.307759][T14346] RAX: 314a42981e171100 RBX: ffff888025147b00 RCX: 0000000000000000
[ 1314.307773][T14346] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff
[ 1314.307787][T14346] RBP: ffffc90004d47c28 R08: 0000000000000000 R09: ffffffff8ac2eb41
[ 1314.307802][T14346] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff110056a6e2d
[ 1314.307818][T14346] R13: 0000000000000009 R14: ffff888025147b08 R15: ffff888026c55a00
[ 1314.307832][T14346] FS:  0000555570d44500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000
[ 1314.307850][T14346] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1314.307864][T14346] CR2: 00007f5cb1d9f030 CR3: 00000000339ba000 CR4: 00000000003526f0
[ 1314.307882][T14346] Call Trace:
[ 1314.307894][T14346]  <TASK>
[ 1314.307906][T14346]  do_exit+0x105/0x2300
[ 1314.307958][T14346]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1314.308116][T14346]  ? __lock_acquire+0xab9/0xd20
[ 1314.308166][T14346]  ? __pfx_do_exit+0x10/0x10
[ 1314.308193][T14346]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1314.308223][T14346]  ? rt_spin_lock+0x1c1/0x3e0
[ 1314.308252][T14346]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1314.308284][T14346]  do_group_exit+0x21c/0x2d0
[ 1314.308301][T14346]  ? rt_spin_unlock+0x161/0x200
[ 1314.308329][T14346]  get_signal+0x125d/0x1310
[ 1314.308373][T14346]  arch_do_signal_or_restart+0xa0/0x790
[ 1314.308408][T14346]  ? __pfx___x64_sys_wait4+0x10/0x10
[ 1314.308429][T14346]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1314.308468][T14346]  ? exit_to_user_mode_loop+0x40/0x130
[ 1314.308506][T14346]  exit_to_user_mode_loop+0x72/0x130
[ 1314.308533][T14346]  do_syscall_64+0x2bd/0xfa0
[ 1314.308614][T14346]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1314.308642][T14346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.308679][T14346]  ? clear_bhb_loop+0x60/0xb0
[ 1314.308702][T14346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.308720][T14346] RIP: 0033:0x7f8249f65897
[ 1314.308744][T14346] Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44
[ 1314.308760][T14346] RSP: 002b:00007fff3beaa6f0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[ 1314.308779][T14346] RAX: fffffffffffffe00 RBX: 0000000000000042 RCX: 00007f8249f65897
[ 1314.308791][T14346] RDX: 0000000040000000 RSI: 00007fff3beaa75c RDI: 00000000ffffffff
[ 1314.308803][T14346] RBP: 00007fff3beaa75c R08: 0000000000000000 R09: 0000000000000000
[ 1314.308815][T14346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010
[ 1314.308826][T14346] R13: 0000555570d57590 R14: 000000000013d4e5 R15: 00007fff3beaa7b0
[ 1314.308854][T14346]  </TASK>
[ 1314.308868][T14346] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1314.308884][T14346] CPU: 1 UID: 0 PID: 14346 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1314.308905][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1314.308917][T14346] Call Trace:
[ 1314.308925][T14346]  <TASK>
[ 1314.308932][T14346]  dump_stack_lvl+0x99/0x250
[ 1314.308977][T14346]  ? __asan_memcpy+0x40/0x70
[ 1314.309026][T14346]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1314.309054][T14346]  ? __pfx__printk+0x10/0x10
[ 1314.309087][T14346]  vpanic+0x237/0x6d0
[ 1314.309106][T14346]  ? __pfx_vpanic+0x10/0x10
[ 1314.309133][T14346]  panic+0xb9/0xc0
[ 1314.309159][T14346]  ? __pfx_panic+0x10/0x10
[ 1314.309192][T14346]  __warn+0x31b/0x4b0
[ 1314.309209][T14346]  ? kcov_task_exit+0x13c/0x150
[ 1314.309236][T14346]  ? kcov_task_exit+0x13c/0x150
[ 1314.309260][T14346]  report_bug+0x2be/0x4f0
[ 1314.309348][T14346]  ? kcov_task_exit+0x13c/0x150
[ 1314.309373][T14346]  ? kcov_task_exit+0x13c/0x150
[ 1314.309399][T14346]  ? kcov_task_exit+0x13e/0x150
[ 1314.309425][T14346]  handle_bug+0x84/0x160
[ 1314.309446][T14346]  exc_invalid_op+0x1a/0x50
[ 1314.309465][T14346]  asm_exc_invalid_op+0x1a/0x20
[ 1314.309483][T14346] RIP: 0010:kcov_task_exit+0x13c/0x150
[ 1314.309510][T14346] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90
[ 1314.309527][T14346] RSP: 0000:ffffc90004d47ac0 EFLAGS: 00010206
[ 1314.309545][T14346] RAX: 314a42981e171100 RBX: ffff888025147b00 RCX: 0000000000000000
[ 1314.309560][T14346] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff
[ 1314.309573][T14346] RBP: ffffc90004d47c28 R08: 0000000000000000 R09: ffffffff8ac2eb41
[ 1314.309586][T14346] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff110056a6e2d
[ 1314.309601][T14346] R13: 0000000000000009 R14: ffff888025147b08 R15: ffff888026c55a00
[ 1314.309623][T14346]  ? rt_spin_lock+0x1c1/0x3e0
[ 1314.309656][T14346]  do_exit+0x105/0x2300
[ 1314.309685][T14346]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1314.309717][T14346]  ? __lock_acquire+0xab9/0xd20
[ 1314.309748][T14346]  ? __pfx_do_exit+0x10/0x10
[ 1314.309772][T14346]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 1314.309792][T14346]  ? rt_spin_lock+0x1c1/0x3e0
[ 1314.309816][T14346]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1314.309845][T14346]  do_group_exit+0x21c/0x2d0
[ 1314.309862][T14346]  ? rt_spin_unlock+0x161/0x200
[ 1314.309886][T14346]  get_signal+0x125d/0x1310
[ 1314.309928][T14346]  arch_do_signal_or_restart+0xa0/0x790
[ 1314.309947][T14346]  ? __pfx___x64_sys_wait4+0x10/0x10
[ 1314.309969][T14346]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1314.310009][T14346]  ? exit_to_user_mode_loop+0x40/0x130
[ 1314.310040][T14346]  exit_to_user_mode_loop+0x72/0x130
[ 1314.310064][T14346]  do_syscall_64+0x2bd/0xfa0
[ 1314.310089][T14346]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1314.310114][T14346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.310132][T14346]  ? clear_bhb_loop+0x60/0xb0
[ 1314.310165][T14346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.310182][T14346] RIP: 0033:0x7f8249f65897
[ 1314.310198][T14346] Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44
[ 1314.310215][T14346] RSP: 002b:00007fff3beaa6f0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[ 1314.310236][T14346] RAX: fffffffffffffe00 RBX: 0000000000000042 RCX: 00007f8249f65897
[ 1314.310249][T14346] RDX: 0000000040000000 RSI: 00007fff3beaa75c RDI: 00000000ffffffff
[ 1314.310262][T14346] RBP: 00007fff3beaa75c R08: 0000000000000000 R09: 0000000000000000
[ 1314.310274][T14346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010
[ 1314.310285][T14346] R13: 0000555570d57590 R14: 000000000013d4e5 R15: 00007fff3beaa7b0
[ 1314.310316][T14346]  </TASK>
[ 1314.310742][T14346] Kernel Offset: disabled