last executing test programs:

33m9.973507081s ago: executing program 0 (id=134):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x4001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
gettid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0)

33m7.117813484s ago: executing program 0 (id=139):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})

33m2.897550593s ago: executing program 0 (id=143):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x6001)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r6, 0x0, 0x0)
connect$llc(r6, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

33m1.211178851s ago: executing program 0 (id=146):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x3)
mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x8a20a1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0x1c1383)
ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x6, 0x1013, 0x7}})

32m59.758827963s ago: executing program 0 (id=147):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
userfaultfd(0x80001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f00000009c0)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x2372, 0x3, 0xd17, 0x202, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x9}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'})
socket$netlink(0x10, 0x3, 0x0)

32m58.184225441s ago: executing program 0 (id=149):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
semget$private(0x0, 0x4000000009, 0x208)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001400110000000000fddbcf250284"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)

32m42.745361589s ago: executing program 32 (id=149):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
semget$private(0x0, 0x4000000009, 0x208)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001400110000000000fddbcf250284"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40)

32m1.004595083s ago: executing program 2 (id=227):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
landlock_restrict_self(r1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0)
ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

31m54.719732552s ago: executing program 2 (id=233):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x3, {<r0=>0x0}, {}, 0x100000000, 0x1})
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}, 0x1, 0x2}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x1, 0x5, 0x0, 0x2, @private2, @local, 0x8000, 0x1, 0x2, 0x42e}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r8=>0xffffffffffffffff})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
r11 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000096000a000200aaaaaaaaaa0c0000060005"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1ac, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r13 = socket$phonet_pipe(0x23, 0x5, 0x2)
close(r13)

31m51.232737002s ago: executing program 2 (id=236):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = syz_open_procfs(0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3)
getdents(r0, &(0x7f0000000f40)=""/243, 0xf3)

31m50.854816849s ago: executing program 2 (id=237):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x4001, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
gettid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0)

31m50.196807717s ago: executing program 2 (id=240):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000000))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r1, 0x3)
mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x8a20a1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0x1c1383)
ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x6, 0x1013, 0x7}})

31m45.371701974s ago: executing program 2 (id=243):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x1, 0x4, 0x7, 0x4, 0x40}, 0xc)
ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0x184a, 0xb, [{0x1, 0x1}, {0x2}, {0xa}, {0x5, 0x1}, {0x4}, {0x6, 0x1}, {0x6, 0x1}, {0xb}, {0xc, 0x1}, {0x3, 0x1}, {0xe}]})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r7, 0x5402, 0x0)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, 0x0)
memfd_secret(0x0)
ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000]}, 0x8)
unshare(0x40020000)

31m30.111586428s ago: executing program 33 (id=243):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x1, 0x4, 0x7, 0x4, 0x40}, 0xc)
ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0x184a, 0xb, [{0x1, 0x1}, {0x2}, {0xa}, {0x5, 0x1}, {0x4}, {0x6, 0x1}, {0x6, 0x1}, {0xb}, {0xc, 0x1}, {0x3, 0x1}, {0xe}]})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r7, 0x5402, 0x0)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, 0x0)
memfd_secret(0x0)
ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x10000]}, 0x8)
unshare(0x40020000)

26m48.754045388s ago: executing program 3 (id=621):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, 0x0, 0xc}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

26m45.672058088s ago: executing program 3 (id=625):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
syz_pidfd_open(0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

26m41.884536095s ago: executing program 3 (id=630):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r6, 0x0, 0x0)
connect$llc(r6, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

26m39.638942868s ago: executing program 3 (id=631):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})

26m36.038559088s ago: executing program 3 (id=636):
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020)
openat$fb0(0xffffffffffffff9c, 0x0, 0xc0c01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r4, 0x0, 0x14)
socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

26m34.984022978s ago: executing program 3 (id=638):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
syz_pidfd_open(0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

26m18.787610351s ago: executing program 34 (id=638):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
syz_pidfd_open(0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

19m11.473581398s ago: executing program 4 (id=1209):
openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002940)={0x2020}, 0xfffffffffffffcc5)
timer_create(0x0, 0x0, 0x0)
mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./file0\x00', 0x0, 0x281847e, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0)

19m10.187752648s ago: executing program 4 (id=1210):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

19m9.698229616s ago: executing program 4 (id=1213):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
r3 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000feffffff050000000600008000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4, <r5=>0x0}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x26, &(0x7f0000000640)={0x0, 0x2, 0x0, 0x3})
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x143a82, 0x8)
dup(r8)

19m9.079856555s ago: executing program 4 (id=1215):
epoll_create1(0x80000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x181400, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0xfff, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xda4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0x9f, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x2, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x2, 0xd5d, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x8000007, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x7, 0x0, 0x5, 0x2, 0x7, 0x4, 0x40, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x6, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0x80000001, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x2, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x1, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0xaa25, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r3 = socket$netlink(0x10, 0x3, 0x0)
preadv(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000380)=""/183, 0xb7}], 0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

19m7.290779192s ago: executing program 4 (id=1219):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

19m7.224980386s ago: executing program 4 (id=1220):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x49)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="250327bd700003ba75d617"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)

18m52.068832942s ago: executing program 35 (id=1220):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
socket$netlink(0x10, 0x3, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x49)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="250327bd700003ba75d617"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)

12m19.600229561s ago: executing program 1 (id=1654):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$I2C(0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x2, &(0x7f00000008c0)={0x0, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000700))
r5 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r5})
syz_io_uring_setup(0x2775, &(0x7f0000000400)={0x0, 0x86f2, 0x100, 0x10000}, &(0x7f00000003c0), 0x0)

12m15.685296448s ago: executing program 1 (id=1656):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x18000000000002a0, 0x65, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e86dd", 0x0, 0x21fe4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

12m15.352470763s ago: executing program 1 (id=1657):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newsa={0x150, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYRESHEX=r5], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='fsi_master_gpio_poll_response_busy\x00', r6}, 0x18)
syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

12m14.364941968s ago: executing program 1 (id=1658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

12m14.12268381s ago: executing program 1 (id=1659):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(0xffffffffffffffff)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

12m8.820521573s ago: executing program 1 (id=1664):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x18000000000002a0, 0x65, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e86dd", 0x0, 0x21fe4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

12m8.67744353s ago: executing program 6 (id=257):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

11m54.858307725s ago: executing program 7 (id=1679):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0)

11m53.304910619s ago: executing program 36 (id=257):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

11m48.766177233s ago: executing program 7 (id=1684):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(r5)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d})

11m45.99173435s ago: executing program 7 (id=1688):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(r5)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d})

11m43.51704747s ago: executing program 7 (id=1690):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10)
getpeername$llc(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x9, 0x800, 0x0, 0x2, 0x7, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7, 0x5, 0x0, 0x5, 0xb, 0x0, {0x8, 0x80}, 0x2, 0x6}})
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)
pipe(&(0x7f00000002c0))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x80, 0x4}, {0x7, 0x6}}]}}, 0x11)

11m39.941297857s ago: executing program 7 (id=1695):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})

11m38.509080752s ago: executing program 7 (id=1697):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
r3 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000feffffff050000000600008000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4, <r5=>0x0}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x26, &(0x7f0000000640)={0x0, 0x2, 0x0, 0x3})
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x143a82, 0x8)
dup(r9)

11m23.281412625s ago: executing program 37 (id=1697):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
r3 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000feffffff050000000600008000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4, <r5=>0x0}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x26, &(0x7f0000000640)={0x0, 0x2, 0x0, 0x3})
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x143a82, 0x8)
dup(r9)

11.969210692s ago: executing program 8 (id=2416):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x4, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$tipc(0x1e, 0x5, 0x0)
socket(0x1d, 0x2, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

11.772583964s ago: executing program 8 (id=2417):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {0x0}, 0x0}}], 0x48}, 0x0)

11.675523279s ago: executing program 8 (id=2418):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x18081)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
getitimer(0x0, &(0x7f0000000040))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x15)
writev(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4)
fsopen(&(0x7f0000000540)='jfs\x00', 0x1)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000100001040000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

6.149291615s ago: executing program 8 (id=2422):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x200000c4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd1f, 0x408000)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r4, r5, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

5.054017708s ago: executing program 5 (id=2423):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f0000000000), 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, 0x0, &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x224)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
syz_emit_ethernet(0x32, &(0x7f00000001c0)={@remote, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x2a, 0x24, 0x68, 0x0, 0x0, 0x1, 0x0, @multicast1, @empty, {[@generic={0x83, 0x7, "4c462ebdec"}]}}, @info_request={0xf, 0x0, 0x0, 0x4, 0x7}}}}}, 0x0)

3.531376531s ago: executing program 5 (id=2424):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="ed"})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.609047304s ago: executing program 5 (id=2425):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7}, {0x0}, 0x0}}], 0x48}, 0x0)

2.525052209s ago: executing program 5 (id=2426):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(r4)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

1.316955355s ago: executing program 8 (id=2427):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[])
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0)

980.320559ms ago: executing program 8 (id=2428):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002fbd7000fcdbdf250900000000007a3100000000080041007278650014000000767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005)
socket$netlink(0x10, 0x3, 0x15)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
lseek(0xffffffffffffffff, 0x289e0cb5, 0x0)

255.333467ms ago: executing program 5 (id=2429):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff50013", 0x6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f", 0x1b5}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

0s ago: executing program 5 (id=2430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x200000c4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001e00)={0x1000000, 0x8, 0x4, 0x0, 0x4})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd1f, 0x408000)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r4, r5, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

tman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1754.083548][T15904] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1754.083563][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1754.083590][T15904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1754.640048][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1754.786509][T16243] overlayfs: missing 'lowerdir'
[ 1754.787721][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1755.351652][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1755.667254][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1756.407335][T15904] hsr_slave_0: entered promiscuous mode
[ 1756.476116][T15904] hsr_slave_1: entered promiscuous mode
[ 1756.477075][T15904] debugfs: 'hsr0' already exists in 'hsr'
[ 1756.477099][T15904] Cannot create hsr debugfs directory
[ 1756.518748][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1756.748070][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1757.215550][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1757.517239][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1758.282088][T16270] hub 9-0:1.0: USB hub found
[ 1758.288204][T16270] hub 9-0:1.0: 1 port detected
[ 1759.378918][T13441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1759.397149][T13441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1759.417608][T13441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1759.420765][T13441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1759.421522][T13441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1759.594767][ T5837] Bluetooth: hci5: ACL packet for unknown connection handle 201
[ 1759.962171][T16166] chnl_net:caif_netlink_parms(): no params data found
[ 1760.412602][T16283] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1760.412602][T16283]    program syz.8.1991 not setting count and/or reply_len properly
[ 1761.544205][ T5837] Bluetooth: hci1: command tx timeout
[ 1763.324457][T16298] usb usb8: usbfs: process 16298 (syz.5.1995) did not claim interface 0 before use
[ 1763.585036][ T5837] Bluetooth: hci1: command tx timeout
[ 1763.696251][T16166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1763.696387][T16166] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1763.696613][T16166] bridge_slave_0: entered allmulticast mode
[ 1763.727643][T16166] bridge_slave_0: entered promiscuous mode
[ 1763.792100][T16304] syz.8.1997 (16304): drop_caches: 2
[ 1763.792463][T16304] syz.8.1997 (16304): drop_caches: 2
[ 1764.248670][T16166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1764.248759][T16166] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1764.248956][T16166] bridge_slave_1: entered allmulticast mode
[ 1764.253138][T16166] bridge_slave_1: entered promiscuous mode
[ 1765.209192][T16321] usb usb8: usbfs: process 16321 (syz.5.2003) did not claim interface 0 before use
[ 1765.461895][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1765.681559][ T5837] Bluetooth: hci1: command tx timeout
[ 1765.970545][T16331] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1765.970545][T16331]    program syz.5.2004 not setting count and/or reply_len properly
[ 1766.726046][T16166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1766.784194][T16166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1766.941131][T16335] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[ 1766.941164][T16335] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1766.942429][T16335] vhci_hcd vhci_hcd.0: Device attached
[ 1767.214907][T11927] usb 43-1: new high-speed USB device number 4 using vhci_hcd
[ 1767.660667][T16337] vhci_hcd: connection reset by peer
[ 1767.676619][T14833] vhci_hcd: stop threads
[ 1767.676635][T14833] vhci_hcd: release socket
[ 1767.676710][T14833] vhci_hcd: disconnect device
[ 1767.744989][ T5837] Bluetooth: hci1: command tx timeout
[ 1767.998711][T16166] team0: Port device team_slave_0 added
[ 1768.168395][T16166] team0: Port device team_slave_1 added
[ 1768.582558][T16166] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1768.582574][T16166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1768.582601][T16166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1768.632085][T16166] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1768.632101][T16166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1768.632140][T16166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1768.967510][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2006'.
[ 1769.027974][ T7294] bridge_slave_1: left allmulticast mode
[ 1769.027996][ T7294] bridge_slave_1: left promiscuous mode
[ 1769.028232][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1769.117203][ T7294] bridge_slave_0: left allmulticast mode
[ 1769.117232][ T7294] bridge_slave_0: left promiscuous mode
[ 1769.117479][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1769.267885][ T7294] bridge_slave_1: left allmulticast mode
[ 1769.267907][ T7294] bridge_slave_1: left promiscuous mode
[ 1769.268060][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1769.416513][ T7294] bridge_slave_0: left allmulticast mode
[ 1769.416543][ T7294] bridge_slave_0: left promiscuous mode
[ 1769.416766][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1770.398486][T16368] overlayfs: missing 'lowerdir'
[ 1771.119045][T13441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1771.137989][T13441] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1771.145019][T13441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1771.155799][T13441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1771.156887][T13441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1771.477155][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1771.951697][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1772.111894][ T7294] bond0 (unregistering): Released all slaves
[ 1772.294924][T11927] vhci_hcd: vhci_device speed not set
[ 1772.856276][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1772.955564][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1773.018829][ T7294] bond0 (unregistering): Released all slaves
[ 1773.089941][T16377] netlink: 'syz.5.2008': attribute type 10 has an invalid length.
[ 1773.184947][T13441] Bluetooth: hci2: command tx timeout
[ 1773.964375][T16275] chnl_net:caif_netlink_parms(): no params data found
[ 1773.981873][T16166] hsr_slave_0: entered promiscuous mode
[ 1773.982738][T16166] hsr_slave_1: entered promiscuous mode
[ 1773.983347][T16166] debugfs: 'hsr0' already exists in 'hsr'
[ 1773.983363][T16166] Cannot create hsr debugfs directory
[ 1775.275974][T13441] Bluetooth: hci2: command tx timeout
[ 1776.262141][ T7294] hsr_slave_0: left promiscuous mode
[ 1776.321001][ T7294] hsr_slave_1: left promiscuous mode
[ 1776.321853][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1776.493280][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1776.850167][ T7294] hsr_slave_0: left promiscuous mode
[ 1776.915090][ T7294] hsr_slave_1: left promiscuous mode
[ 1776.915749][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1776.990551][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1777.016526][T16431] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[ 1777.016549][T16431] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1777.016649][T16431] vhci_hcd vhci_hcd.0: Device attached
[ 1777.314828][ T6649] usb 43-1: new high-speed USB device number 5 using vhci_hcd
[ 1777.344772][T13441] Bluetooth: hci2: command tx timeout
[ 1777.856510][T16433] vhci_hcd: connection reset by peer
[ 1777.885503][T14728] vhci_hcd: stop threads
[ 1777.885520][T14728] vhci_hcd: release socket
[ 1777.885594][T14728] vhci_hcd: disconnect device
[ 1779.424975][T13441] Bluetooth: hci2: command tx timeout
[ 1779.456400][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1779.709015][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1782.255425][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1782.365361][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1782.454924][ T6649] vhci_hcd: vhci_device speed not set
[ 1784.488179][T16275] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1784.488392][T16275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1784.488665][T16275] bridge_slave_0: entered allmulticast mode
[ 1784.519700][T16275] bridge_slave_0: entered promiscuous mode
[ 1784.546002][T16275] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1784.546485][T16275] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1784.546714][T16275] bridge_slave_1: entered allmulticast mode
[ 1784.548490][T16275] bridge_slave_1: entered promiscuous mode
[ 1785.445603][T16275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1785.602469][T16275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1786.197589][T16275] team0: Port device team_slave_0 added
[ 1786.242744][T16275] team0: Port device team_slave_1 added
[ 1786.439748][T16489] netlink: 'syz.8.2022': attribute type 4 has an invalid length.
[ 1786.439780][T16489] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2022'.
[ 1786.904987][T16275] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1786.905005][T16275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1786.905033][T16275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1786.965080][T16501] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[ 1786.965247][T16501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1786.970519][T16501] vhci_hcd vhci_hcd.0: Device attached
[ 1787.125275][T16275] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1787.125295][T16275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1787.125326][T16275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1787.464844][ T6649] usb 43-1: new high-speed USB device number 6 using vhci_hcd
[ 1787.583315][T16503] vhci_hcd: connection reset by peer
[ 1787.583867][ T7702] vhci_hcd: stop threads
[ 1787.583883][ T7702] vhci_hcd: release socket
[ 1787.583950][ T7702] vhci_hcd: disconnect device
[ 1788.426773][T16275] hsr_slave_0: entered promiscuous mode
[ 1788.460211][T16275] hsr_slave_1: entered promiscuous mode
[ 1788.462482][T16367] chnl_net:caif_netlink_parms(): no params data found
[ 1788.512131][T16166] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1788.684790][T16166] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1788.766444][T16166] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1789.396213][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2024'.
[ 1790.338563][T16166] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1792.924927][ T6649] vhci_hcd: vhci_device speed not set
[ 1793.271694][T16552] netlink: 'syz.5.2027': attribute type 4 has an invalid length.
[ 1793.271736][T16552] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2027'.
[ 1794.567921][T16367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1794.568163][T16367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1794.568387][T16367] bridge_slave_0: entered allmulticast mode
[ 1794.616438][T16367] bridge_slave_0: entered promiscuous mode
[ 1794.778955][T16367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1794.779125][T16367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1794.779374][T16367] bridge_slave_1: entered allmulticast mode
[ 1794.823504][T16367] bridge_slave_1: entered promiscuous mode
[ 1795.789915][T16367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1796.002841][T16367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1796.256116][T16586] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2031'.
[ 1796.793085][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[ 1796.793169][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[ 1797.758604][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2032'.
[ 1798.751348][T16367] team0: Port device team_slave_0 added
[ 1798.836565][T16367] team0: Port device team_slave_1 added
[ 1798.907422][T16612] binder: BINDER_SET_CONTEXT_MGR already set
[ 1798.907440][T16612] binder: 16609:16612 ioctl 4018620d 200000004a80 returned -16
[ 1799.593648][T16367] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1799.593669][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1799.593701][T16367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1799.642320][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2036'.
[ 1799.712542][T16367] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1799.712562][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1799.712594][T16367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1801.026799][T16367] hsr_slave_0: entered promiscuous mode
[ 1801.031339][T16367] hsr_slave_1: entered promiscuous mode
[ 1801.046683][T16367] debugfs: 'hsr0' already exists in 'hsr'
[ 1801.046736][T16367] Cannot create hsr debugfs directory
[ 1801.048568][T16275] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1801.132836][T16275] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1801.517255][ T7294] bridge_slave_1: left allmulticast mode
[ 1801.517294][ T7294] bridge_slave_1: left promiscuous mode
[ 1801.517575][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1801.596432][ T7294] bridge_slave_0: left allmulticast mode
[ 1801.596470][ T7294] bridge_slave_0: left promiscuous mode
[ 1801.596775][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1801.791681][ T7294] bridge_slave_1: left allmulticast mode
[ 1801.791720][ T7294] bridge_slave_1: left promiscuous mode
[ 1801.791986][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1801.866923][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1801.876148][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1801.885074][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1801.887512][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1801.889163][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1802.005964][ T7294] bridge_slave_0: left allmulticast mode
[ 1802.005991][ T7294] bridge_slave_0: left promiscuous mode
[ 1802.006190][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1802.514950][T11850] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1802.676095][T11850] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[ 1802.676122][T11850] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[ 1802.676142][T11850] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1802.676161][T11850] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1802.679246][T11850] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1802.679269][T11850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1802.679284][T11850] usb 9-1: Product: syz
[ 1802.679296][T11850] usb 9-1: Manufacturer: syz
[ 1802.679307][T11850] usb 9-1: SerialNumber: syz
[ 1802.696399][T11850] usb 9-1: config 0 descriptor??
[ 1802.767903][T16642] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1802.875338][T11850] usb 9-1: ucan: probing device on interface #0
[ 1802.875358][T11850] usb 9-1: ucan: invalid endpoint configuration
[ 1802.875369][T11850] usb 9-1: ucan: probe failed; try to update the device firmware
[ 1803.066702][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1803.201833][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1803.272177][ T7294] bond0 (unregistering): Released all slaves
[ 1803.837137][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1803.950180][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1804.010028][ T7294] bond0 (unregistering): Released all slaves
[ 1804.078729][T13441] Bluetooth: hci0: command tx timeout
[ 1804.130937][T16275] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1804.640246][T16275] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1805.234930][ T7294] hsr_slave_0: left promiscuous mode
[ 1805.260056][ T7294] hsr_slave_1: left promiscuous mode
[ 1805.261081][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1805.310023][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1805.534971][ T7294] hsr_slave_0: left promiscuous mode
[ 1805.576260][ T7294] hsr_slave_1: left promiscuous mode
[ 1805.578105][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1805.600419][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1806.154826][T13441] Bluetooth: hci0: command tx timeout
[ 1806.202682][T11851] usb 9-1: USB disconnect, device number 11
[ 1809.037286][T13441] Bluetooth: hci0: command tx timeout
[ 1811.105121][T13441] Bluetooth: hci0: command tx timeout
[ 1811.812386][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1812.118662][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1814.949600][T16684] hub 9-0:1.0: USB hub found
[ 1814.974664][T16684] hub 9-0:1.0: 1 port detected
[ 1816.613448][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1816.782454][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1818.272319][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1818.277658][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1818.287674][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1818.288848][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1818.289739][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1818.637143][T16707] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2056'.
[ 1819.324762][T16709] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1819.594798][T16709] usb 9-1: Using ep0 maxpacket: 8
[ 1819.597071][T16709] usb 9-1: config 0 has an invalid interface number: 246 but max is 0
[ 1819.597088][T16709] usb 9-1: config 0 has no interface number 0
[ 1819.597117][T16709] usb 9-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[ 1819.597134][T16709] usb 9-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1819.597151][T16709] usb 9-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024
[ 1819.601000][T16709] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 1819.601019][T16709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1819.601032][T16709] usb 9-1: Product: syz
[ 1819.601042][T16709] usb 9-1: Manufacturer: syz
[ 1819.601052][T16709] usb 9-1: SerialNumber: syz
[ 1819.604415][T16709] usb 9-1: config 0 descriptor??
[ 1819.810013][T16723] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2057'.
[ 1820.134134][T16726] syz.5.2057 (16726): drop_caches: 2
[ 1820.155207][T16726] syz.5.2057 (16726): drop_caches: 2
[ 1820.485484][ T5837] Bluetooth: hci3: command tx timeout
[ 1820.692377][T16709] msi2500 9-1:0.246: Registered as swradio24
[ 1820.692400][T16709] msi2500 9-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 1822.555541][ T5837] Bluetooth: hci3: command tx timeout
[ 1822.750156][T11850] usb 9-1: USB disconnect, device number 12
[ 1823.433297][T16636] chnl_net:caif_netlink_parms(): no params data found
[ 1823.474941][T11850] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1823.638918][T11850] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1823.638953][T11850] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1823.638977][T11850] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1823.639056][T11850] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87
[ 1823.639087][T11850] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64
[ 1823.699249][T11850] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1823.699283][T11850] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1823.699307][T11850] usb 9-1: Product: syz
[ 1823.699324][T11850] usb 9-1: Manufacturer: syz
[ 1823.759743][T11850] cdc_wdm 9-1:1.0: skipping garbage
[ 1823.759766][T11850] cdc_wdm 9-1:1.0: skipping garbage
[ 1823.759880][T11850] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1823.968674][T16709] usb 9-1: USB disconnect, device number 13
[ 1824.744937][T16769] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1824.744937][T16769]    program syz.5.2060 not setting count and/or reply_len properly
[ 1824.911952][ T5837] Bluetooth: hci3: command tx timeout
[ 1827.425461][ T5837] Bluetooth: hci3: command tx timeout
[ 1828.056481][T16798] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2064'.
[ 1828.319378][T16788] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1828.319527][T16788] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1828.319653][T16788] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1828.319707][T16788] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1828.367054][T16800] syz.8.2064 (16800): drop_caches: 2
[ 1828.369002][T16800] syz.8.2064 (16800): drop_caches: 2
[ 1828.581309][T16788] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1828.663968][T16788] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1828.664023][T16788] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1828.736660][T16788] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1829.062214][T16788] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1829.062281][T16788] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1830.116144][T16788] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1830.153666][T16636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1830.153795][T16636] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1830.154035][T16636] bridge_slave_0: entered allmulticast mode
[ 1830.198649][T16636] bridge_slave_0: entered promiscuous mode
[ 1830.280144][T16704] chnl_net:caif_netlink_parms(): no params data found
[ 1830.310344][T16636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1830.310488][T16636] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1830.310666][T16636] bridge_slave_1: entered allmulticast mode
[ 1830.313112][T16636] bridge_slave_1: entered promiscuous mode
[ 1830.384817][T13441] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1830.384835][ T5837] Bluetooth: hci5: command 0x0406 tx timeout
[ 1830.384864][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1830.706395][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1830.971373][T16823] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2066'.
[ 1831.104860][T13441] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1832.561338][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1832.584931][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1832.589263][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1832.591101][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1832.591913][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1832.815259][T16710] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1833.546116][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1833.546154][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1833.926032][T16710] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1833.926064][T16710] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1833.926086][T16710] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1833.926142][T16710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1833.926173][T16710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1833.934452][T16710] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1833.934480][T16710] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1833.934501][T16710] usb 6-1: Product: syz
[ 1833.934517][T16710] usb 6-1: Manufacturer: syz
[ 1833.966626][T16710] cdc_wdm 6-1:1.0: skipping garbage
[ 1833.966647][T16710] cdc_wdm 6-1:1.0: skipping garbage
[ 1833.984444][T16710] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1833.984467][T16710] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1834.057321][T16636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1834.130907][T16636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1834.175942][T12381] usb 6-1: USB disconnect, device number 5
[ 1834.625140][T13441] Bluetooth: hci1: command tx timeout
[ 1834.774980][T16848] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2073'.
[ 1834.970951][T16850] syz.8.2073 (16850): drop_caches: 2
[ 1834.991850][T16850] syz.8.2073 (16850): drop_caches: 2
[ 1835.768210][T13441] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1835.768246][T13441] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1836.241468][T16636] team0: Port device team_slave_0 added
[ 1836.310457][T16852] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2074'.
[ 1836.394104][T16636] team0: Port device team_slave_1 added
[ 1836.402090][T16704] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1836.402179][T16704] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1836.402304][T16704] bridge_slave_0: entered allmulticast mode
[ 1836.482613][T16704] bridge_slave_0: entered promiscuous mode
[ 1836.717770][ T5843] Bluetooth: hci1: command tx timeout
[ 1837.091237][T16704] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1837.091323][T16704] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1837.091466][T16704] bridge_slave_1: entered allmulticast mode
[ 1837.093277][T16704] bridge_slave_1: entered promiscuous mode
[ 1837.664433][T16636] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1837.664446][T16636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1837.664467][T16636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1838.168821][T16636] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1838.168856][T16636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1838.168889][T16636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1838.276451][T16704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1838.408524][T16704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1838.785708][ T5843] Bluetooth: hci1: command tx timeout
[ 1838.964634][T16704] team0: Port device team_slave_0 added
[ 1839.417088][T16704] team0: Port device team_slave_1 added
[ 1839.451783][T16636] hsr_slave_0: entered promiscuous mode
[ 1839.454378][T16636] hsr_slave_1: entered promiscuous mode
[ 1839.459979][T16636] debugfs: 'hsr0' already exists in 'hsr'
[ 1839.460000][T16636] Cannot create hsr debugfs directory
[ 1840.121069][T16704] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1840.121082][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1840.121102][T16704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1840.398574][T16704] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1840.398592][T16704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1840.398613][T16704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1840.864957][ T5843] Bluetooth: hci1: command tx timeout
[ 1841.421192][T16704] hsr_slave_0: entered promiscuous mode
[ 1841.422436][T16704] hsr_slave_1: entered promiscuous mode
[ 1841.423279][T16704] debugfs: 'hsr0' already exists in 'hsr'
[ 1841.423303][T16704] Cannot create hsr debugfs directory
[ 1841.464839][T13270] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1842.337933][T13270] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1842.337962][T13270] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1842.337981][T13270] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1842.338030][T13270] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1842.338056][T13270] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1842.343061][T13270] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1842.343087][T13270] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1842.343108][T13270] usb 9-1: Product: syz
[ 1842.343122][T13270] usb 9-1: Manufacturer: syz
[ 1842.387113][T13270] cdc_wdm 9-1:1.0: skipping garbage
[ 1842.387133][T13270] cdc_wdm 9-1:1.0: skipping garbage
[ 1842.425610][T13270] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1842.425632][T13270] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1842.652176][T13270] usb 9-1: USB disconnect, device number 14
[ 1845.016786][T16832] chnl_net:caif_netlink_parms(): no params data found
[ 1846.886888][T16832] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1846.887012][T16832] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1846.887158][T16832] bridge_slave_0: entered allmulticast mode
[ 1846.891233][T16832] bridge_slave_0: entered promiscuous mode
[ 1846.943595][T16832] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1846.943830][T16832] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1846.944032][T16832] bridge_slave_1: entered allmulticast mode
[ 1846.949078][T16832] bridge_slave_1: entered promiscuous mode
[ 1847.476373][T16832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1847.501268][T16832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1847.973598][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1848.320082][T16914] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1848.320082][T16914]    program syz.8.2091 not setting count and/or reply_len properly
[ 1848.410388][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1848.957567][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1849.164089][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1849.236315][T16832] team0: Port device team_slave_0 added
[ 1849.287696][T16832] team0: Port device team_slave_1 added
[ 1849.574850][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1849.727175][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1850.346286][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1851.344040][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1851.557033][ T7294] bridge_slave_1: left allmulticast mode
[ 1851.557064][ T7294] bridge_slave_1: left promiscuous mode
[ 1851.557394][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1851.712460][ T7294] bridge_slave_0: left allmulticast mode
[ 1851.712489][ T7294] bridge_slave_0: left promiscuous mode
[ 1851.712726][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1852.767378][ T7294] bridge_slave_1: left allmulticast mode
[ 1852.767421][ T7294] bridge_slave_1: left promiscuous mode
[ 1852.767703][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1852.871136][T16933] netlink: 'syz.5.2096': attribute type 1 has an invalid length.
[ 1852.871164][T16933] netlink: 'syz.5.2096': attribute type 4 has an invalid length.
[ 1853.015949][ T7294] bridge_slave_0: left allmulticast mode
[ 1853.016083][ T7294] bridge_slave_0: left promiscuous mode
[ 1853.044978][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1854.511700][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1854.586150][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1854.647363][ T7294] bond0 (unregistering): Released all slaves
[ 1856.206457][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1856.290352][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1856.361711][ T7294] bond0 (unregistering): Released all slaves
[ 1856.662622][T16832] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1856.662639][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1856.662666][T16832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1856.713302][T16832] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1856.713317][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1856.713344][T16832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1858.229355][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[ 1858.229412][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[ 1862.344852][ T7294] hsr_slave_0: left promiscuous mode
[ 1862.634861][ T7294] hsr_slave_1: left promiscuous mode
[ 1862.635670][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1862.702937][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1862.935770][ T7294] hsr_slave_0: left promiscuous mode
[ 1862.978555][ T7294] hsr_slave_1: left promiscuous mode
[ 1862.979506][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1863.000107][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1863.132802][T13441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1863.149458][T13441] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1863.152633][T13441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1863.169978][T13441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1863.174316][T13441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1864.686213][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1864.834023][T16983] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[ 1864.834087][T16983] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1864.854555][T16983] vhci_hcd vhci_hcd.0: Device attached
[ 1865.264966][T13441] Bluetooth: hci2: command tx timeout
[ 1865.666562][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1865.757778][T16984] vhci_hcd: connection closed
[ 1865.758348][T14832] vhci_hcd: stop threads
[ 1865.758365][T14832] vhci_hcd: release socket
[ 1865.770212][T14832] vhci_hcd: disconnect device
[ 1865.794845][T16710] vhci_hcd: vhci_device speed not set
[ 1867.511752][T13441] Bluetooth: hci2: command tx timeout
[ 1870.070153][T13441] Bluetooth: hci2: command tx timeout
[ 1870.146551][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1870.310801][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1870.629218][T11851] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1871.187085][T16832] hsr_slave_0: entered promiscuous mode
[ 1871.204170][T16832] hsr_slave_1: entered promiscuous mode
[ 1871.450856][T11851] usb 9-1: Using ep0 maxpacket: 8
[ 1871.492020][T11851] usb 9-1: config 0 has an invalid interface number: 246 but max is 0
[ 1871.492039][T11851] usb 9-1: config 0 has no interface number 0
[ 1871.492070][T11851] usb 9-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[ 1871.492088][T11851] usb 9-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1871.492107][T11851] usb 9-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024
[ 1871.573714][T11851] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 1871.573736][T11851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1871.573752][T11851] usb 9-1: Product: syz
[ 1871.573762][T11851] usb 9-1: Manufacturer: syz
[ 1871.573773][T11851] usb 9-1: SerialNumber: syz
[ 1871.608385][T11851] usb 9-1: config 0 descriptor??
[ 1872.166868][T13441] Bluetooth: hci2: command tx timeout
[ 1872.639197][T11851] msi2500 9-1:0.246: Registered as swradio24
[ 1872.639215][T11851] msi2500 9-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 1874.215576][T12381] usb 9-1: USB disconnect, device number 15
[ 1875.244497][T17027] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2116'.
[ 1875.693013][T17030] syz.5.2116 (17030): drop_caches: 2
[ 1875.700837][T17030] syz.5.2116 (17030): drop_caches: 2
[ 1876.930423][T17043] overlayfs: failed to resolve './file1': -2
[ 1877.058801][T13441] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1877.491563][T16975] chnl_net:caif_netlink_parms(): no params data found
[ 1878.034777][T16746] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1878.209064][T16746] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[ 1878.209102][T16746] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[ 1878.209130][T16746] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1878.209159][T16746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1878.264816][T16746] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1878.264835][T16746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1878.264848][T16746] usb 6-1: Product: syz
[ 1878.264858][T16746] usb 6-1: Manufacturer: syz
[ 1878.264867][T16746] usb 6-1: SerialNumber: syz
[ 1878.317388][T16746] usb 6-1: config 0 descriptor??
[ 1878.321616][T17049] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1878.365644][T16746] usb 6-1: ucan: probing device on interface #0
[ 1878.365666][T16746] usb 6-1: ucan: invalid endpoint configuration
[ 1878.365682][T16746] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1878.737210][ T7294] bridge_slave_1: left allmulticast mode
[ 1878.737234][ T7294] bridge_slave_1: left promiscuous mode
[ 1878.737443][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1878.873070][ T7294] bridge_slave_0: left allmulticast mode
[ 1878.873095][ T7294] bridge_slave_0: left promiscuous mode
[ 1878.873309][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1880.288206][ T7294] bridge_slave_1: left allmulticast mode
[ 1880.288232][ T7294] bridge_slave_1: left promiscuous mode
[ 1880.288721][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1880.535825][ T7294] bridge_slave_0: left allmulticast mode
[ 1880.535847][ T7294] bridge_slave_0: left promiscuous mode
[ 1880.536007][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1881.026511][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1881.058114][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1881.060940][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1881.062544][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1881.126519][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1881.404903][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1881.496717][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1881.562240][T17063] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[ 1881.620796][ T7294] bond0 (unregistering): Released all slaves
[ 1882.036272][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1882.115252][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1882.184176][ T7294] bond0 (unregistering): Released all slaves
[ 1882.447664][T11851] usb 6-1: USB disconnect, device number 6
[ 1882.944049][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2123'.
[ 1883.086653][T16975] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1883.086900][T16975] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1883.093624][T16975] bridge_slave_0: entered allmulticast mode
[ 1883.118243][T16975] bridge_slave_0: entered promiscuous mode
[ 1883.184930][T13441] Bluetooth: hci0: command tx timeout
[ 1883.315362][ T7294] hsr_slave_0: left promiscuous mode
[ 1883.416643][ T7294] hsr_slave_1: left promiscuous mode
[ 1883.432769][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1883.432802][T17077] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2125'.
[ 1883.701989][T17079] syz.8.2125 (17079): drop_caches: 2
[ 1883.718652][T17079] syz.8.2125 (17079): drop_caches: 2
[ 1885.264809][T13441] Bluetooth: hci0: command tx timeout
[ 1887.344780][T13441] Bluetooth: hci0: command tx timeout
[ 1889.424742][T13441] Bluetooth: hci0: command tx timeout
[ 1889.832261][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1890.084872][ T7294] hsr_slave_0: left promiscuous mode
[ 1890.194277][T17082] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2126'.
[ 1890.320564][T17083] syz.8.2126 (17083): drop_caches: 2
[ 1890.322815][T17083] syz.8.2126 (17083): drop_caches: 2
[ 1890.964835][ T7294] hsr_slave_1: left promiscuous mode
[ 1890.965891][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1891.067765][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1892.225397][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1892.505673][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1892.694442][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1892.738165][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1892.739804][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1892.740964][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1892.741664][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1893.494886][T16746] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1893.644840][T16746] usb 6-1: Using ep0 maxpacket: 8
[ 1893.670231][T16746] usb 6-1: config 0 has an invalid interface number: 246 but max is 0
[ 1893.670257][T16746] usb 6-1: config 0 has no interface number 0
[ 1893.670300][T16746] usb 6-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[ 1893.670326][T16746] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1893.670352][T16746] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024
[ 1893.678062][T16746] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 1893.678088][T16746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1893.678108][T16746] usb 6-1: Product: syz
[ 1893.678123][T16746] usb 6-1: Manufacturer: syz
[ 1893.678137][T16746] usb 6-1: SerialNumber: syz
[ 1893.761340][T16746] usb 6-1: config 0 descriptor??
[ 1893.908490][T17106] netlink: 'syz.8.2132': attribute type 4 has an invalid length.
[ 1893.908527][T17106] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2132'.
[ 1894.661473][T16746] msi2500 6-1:0.246: Registered as swradio24
[ 1894.662565][T16746] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 1894.892358][ T5843] Bluetooth: hci6: command tx timeout
[ 1895.655461][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1895.956100][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1896.365542][T11851] usb 6-1: USB disconnect, device number 7
[ 1896.604978][T17113] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2133'.
[ 1896.783327][T17115] syz.5.2133 (17115): drop_caches: 2
[ 1896.802744][T17115] syz.5.2133 (17115): drop_caches: 2
[ 1896.944832][ T5843] Bluetooth: hci6: command tx timeout
[ 1897.644416][T16975] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1897.652126][T16975] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1897.652312][T16975] bridge_slave_1: entered allmulticast mode
[ 1897.669742][T16975] bridge_slave_1: entered promiscuous mode
[ 1898.119237][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1898.334405][T16975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1898.404898][T16975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1899.034749][ T5843] Bluetooth: hci6: command tx timeout
[ 1899.336037][T17131] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2139'.
[ 1899.817884][T16975] team0: Port device team_slave_0 added
[ 1900.486194][T16975] team0: Port device team_slave_1 added
[ 1901.072816][T16975] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1901.072828][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1901.072848][T16975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1901.105068][ T5843] Bluetooth: hci6: command tx timeout
[ 1901.245681][T16975] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1901.245699][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1901.245728][T16975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1904.544357][T17147] syz.8.2142 (17147): drop_caches: 2
[ 1904.548230][T17147] syz.8.2142 (17147): drop_caches: 2
[ 1912.192193][T16975] hsr_slave_0: entered promiscuous mode
[ 1912.193624][T16975] hsr_slave_1: entered promiscuous mode
[ 1912.204990][T16975] debugfs: 'hsr0' already exists in 'hsr'
[ 1912.205014][T16975] Cannot create hsr debugfs directory
[ 1915.174182][T17168] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2147'.
[ 1915.292069][T17169] syz.8.2147 (17169): drop_caches: 2
[ 1915.330557][T17169] syz.8.2147 (17169): drop_caches: 2
[ 1916.406730][T17060] chnl_net:caif_netlink_parms(): no params data found
[ 1918.076677][T16709] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1918.275603][T16709] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[ 1918.275629][T16709] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[ 1918.275646][T16709] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1918.275663][T16709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1918.331043][T16709] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1918.331065][T16709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1918.331078][T16709] usb 6-1: Product: syz
[ 1918.331088][T16709] usb 6-1: Manufacturer: syz
[ 1918.331099][T16709] usb 6-1: SerialNumber: syz
[ 1918.537370][T16709] usb 6-1: config 0 descriptor??
[ 1918.539194][T17186] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1918.575806][T16709] usb 6-1: ucan: probing device on interface #0
[ 1918.575833][T16709] usb 6-1: ucan: invalid endpoint configuration
[ 1918.575849][T16709] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1919.063888][T17060] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1919.064034][T17060] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1919.064253][T17060] bridge_slave_0: entered allmulticast mode
[ 1919.067785][T17060] bridge_slave_0: entered promiscuous mode
[ 1919.097472][T17100] chnl_net:caif_netlink_parms(): no params data found
[ 1919.201651][T17060] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1919.201749][T17060] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1919.201929][T17060] bridge_slave_1: entered allmulticast mode
[ 1919.230292][T17060] bridge_slave_1: entered promiscuous mode
[ 1919.354759][T11927] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1919.355073][    C0] raw-gadget.1 gadget.8: ignoring, device is not running
[ 1919.514842][T11927] usb 9-1: device descriptor read/64, error -32
[ 1919.701461][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[ 1919.701541][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[ 1919.754831][T11927] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1919.981549][T11927] usb 9-1: Using ep0 maxpacket: 8
[ 1920.134093][T11927] usb 9-1: config 0 has an invalid interface number: 246 but max is 0
[ 1920.134113][T11927] usb 9-1: config 0 has no interface number 0
[ 1920.134144][T11927] usb 9-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[ 1920.134160][T11927] usb 9-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1920.134178][T11927] usb 9-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024
[ 1920.196046][T11927] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 1920.196069][T11927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1920.196088][T11927] usb 9-1: Product: syz
[ 1920.196098][T11927] usb 9-1: Manufacturer: syz
[ 1920.196108][T11927] usb 9-1: SerialNumber: syz
[ 1920.203544][T11927] usb 9-1: config 0 descriptor??
[ 1920.417573][T11927] msi2500 9-1:0.246: Registered as swradio24
[ 1920.417590][T11927] msi2500 9-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 1920.907571][T17060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1921.025690][T17060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1922.037806][T17060] team0: Port device team_slave_0 added
[ 1922.189375][T11927] usb 6-1: USB disconnect, device number 8
[ 1922.413520][T16746] usb 9-1: USB disconnect, device number 17
[ 1922.482343][T17060] team0: Port device team_slave_1 added
[ 1922.487491][T17100] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1922.487638][T17100] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1922.488214][T17100] bridge_slave_0: entered allmulticast mode
[ 1922.530506][T17100] bridge_slave_0: entered promiscuous mode
[ 1922.684524][T17100] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1922.685300][T17100] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1922.685520][T17100] bridge_slave_1: entered allmulticast mode
[ 1922.688321][T17100] bridge_slave_1: entered promiscuous mode
[ 1922.889264][T17060] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1922.889284][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1922.889317][T17060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1923.077606][T17207] 9pnet_fd: Insufficient options for proto=fd
[ 1923.098744][T17060] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1923.098770][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1923.098801][T17060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1923.151485][T17100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1923.579965][T17100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1924.038737][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1924.059273][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1924.061587][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1924.076003][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1924.078126][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1926.052762][T17060] hsr_slave_0: entered promiscuous mode
[ 1926.053756][T17060] hsr_slave_1: entered promiscuous mode
[ 1926.068650][T17060] debugfs: 'hsr0' already exists in 'hsr'
[ 1926.068671][T17060] Cannot create hsr debugfs directory
[ 1926.073082][T17100] team0: Port device team_slave_0 added
[ 1926.146657][T13441] Bluetooth: hci1: command tx timeout
[ 1926.425171][T17100] team0: Port device team_slave_1 added
[ 1927.270227][T17100] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1927.270239][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1927.270257][T17100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1927.306619][T17100] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1927.306635][T17100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1927.306666][T17100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1928.247103][T13441] Bluetooth: hci1: command tx timeout
[ 1930.683148][T13441] Bluetooth: hci1: command tx timeout
[ 1931.008041][T16746] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1931.045926][T17100] hsr_slave_0: entered promiscuous mode
[ 1931.064888][T17100] hsr_slave_1: entered promiscuous mode
[ 1931.089815][T17100] debugfs: 'hsr0' already exists in 'hsr'
[ 1931.089845][T17100] Cannot create hsr debugfs directory
[ 1931.170442][T16746] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[ 1931.170474][T16746] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[ 1931.170499][T16746] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1931.170524][T16746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1931.244922][T16746] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1931.244941][T16746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1931.244955][T16746] usb 9-1: Product: syz
[ 1931.244965][T16746] usb 9-1: Manufacturer: syz
[ 1931.244974][T16746] usb 9-1: SerialNumber: syz
[ 1931.260852][T16746] usb 9-1: config 0 descriptor??
[ 1931.294538][T17238] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1931.438414][T16746] usb 9-1: ucan: probing device on interface #0
[ 1931.438432][T16746] usb 9-1: ucan: invalid endpoint configuration
[ 1931.438455][T16746] usb 9-1: ucan: probe failed; try to update the device firmware
[ 1932.731390][T13441] Bluetooth: hci1: command tx timeout
[ 1933.002927][T17248] 9pnet_fd: Insufficient options for proto=fd
[ 1933.432999][T13270] usb 9-1: USB disconnect, device number 18
[ 1933.652872][T17252] binder: 17251:17252 ioctl c0306201 0 returned -14
[ 1934.969741][T17260] syz.8.2166 (17260): drop_caches: 2
[ 1934.971943][T17260] syz.8.2166 (17260): drop_caches: 2
[ 1935.752489][T17270] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2168'.
[ 1936.965441][T17273] syz.8.2168 (17273): drop_caches: 2
[ 1936.971218][T17273] syz.8.2168 (17273): drop_caches: 2
[ 1937.836636][ T7294] bridge_slave_1: left allmulticast mode
[ 1937.842857][ T7294] bridge_slave_1: left promiscuous mode
[ 1937.843028][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1938.282559][T17280] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1938.282559][T17280]    program syz.5.2169 not setting count and/or reply_len properly
[ 1939.095012][ T7294] bridge_slave_0: left allmulticast mode
[ 1939.095046][ T7294] bridge_slave_0: left promiscuous mode
[ 1939.095319][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1939.147610][ T7294] bridge_slave_1: left allmulticast mode
[ 1939.147633][ T7294] bridge_slave_1: left promiscuous mode
[ 1939.147795][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1939.246412][ T7294] bridge_slave_0: left allmulticast mode
[ 1939.246439][ T7294] bridge_slave_0: left promiscuous mode
[ 1939.246653][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1939.555453][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1939.615279][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1939.680274][ T7294] bond0 (unregistering): Released all slaves
[ 1939.875616][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1940.004183][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1940.066441][ T7294] bond0 (unregistering): Released all slaves
[ 1940.366460][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1940.377214][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1940.395889][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1940.445013][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1940.456089][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1940.471038][T17290] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2171'.
[ 1942.372043][ T7294] hsr_slave_0: left promiscuous mode
[ 1942.402522][ T7294] hsr_slave_1: left promiscuous mode
[ 1942.403385][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1942.424188][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1942.549247][T13441] Bluetooth: hci2: command tx timeout
[ 1942.627694][ T7294] hsr_slave_0: left promiscuous mode
[ 1942.694958][ T7294] hsr_slave_1: left promiscuous mode
[ 1942.695710][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1942.767992][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1944.628721][T13441] Bluetooth: hci2: command tx timeout
[ 1945.632816][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1945.817894][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1946.704854][T13441] Bluetooth: hci2: command tx timeout
[ 1947.626977][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1947.755822][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1948.784896][T13441] Bluetooth: hci2: command tx timeout
[ 1948.907046][T17213] chnl_net:caif_netlink_parms(): no params data found
[ 1949.114221][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1949.329044][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1949.882219][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1950.203232][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1951.649850][T17213] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1951.650004][T17213] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1951.650269][T17213] bridge_slave_0: entered allmulticast mode
[ 1951.654004][T17213] bridge_slave_0: entered promiscuous mode
[ 1951.724283][T17213] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1951.724417][T17213] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1951.724849][T17213] bridge_slave_1: entered allmulticast mode
[ 1951.751096][T17213] bridge_slave_1: entered promiscuous mode
[ 1951.983746][T17351] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[ 1951.983774][T17351] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1951.993146][T17351] vhci_hcd vhci_hcd.0: Device attached
[ 1952.328825][T12381] usb 43-1: new high-speed USB device number 7 using vhci_hcd
[ 1952.477107][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1952.519506][T17354] vhci_hcd: connection reset by peer
[ 1952.520394][   T12] vhci_hcd: stop threads
[ 1952.520415][   T12] vhci_hcd: release socket
[ 1952.520491][   T12] vhci_hcd: disconnect device
[ 1952.609306][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1953.173909][T17213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1953.242333][T17213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1953.581747][T17361] usb usb8: usbfs: process 17361 (syz.8.2187) did not claim interface 0 before use
[ 1954.892247][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1954.926182][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1954.930886][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1954.932885][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1954.960340][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1955.501609][T17213] team0: Port device team_slave_0 added
[ 1955.639154][T17213] team0: Port device team_slave_1 added
[ 1955.972903][T17375] capability: warning: `syz.8.2190' uses deprecated v2 capabilities in a way that may be insecure
[ 1955.994748][T11850] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1956.074174][T17213] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1956.074189][T17213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1956.074216][T17213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1956.095265][T17213] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1956.095282][T17213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1956.095311][T17213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1956.165870][T11850] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[ 1956.165890][T11850] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[ 1956.165925][T11850] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1956.165942][T11850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1956.172886][T11850] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1956.172913][T11850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1956.172933][T11850] usb 6-1: Product: syz
[ 1956.172948][T11850] usb 6-1: Manufacturer: syz
[ 1956.172964][T11850] usb 6-1: SerialNumber: syz
[ 1956.261923][T11850] usb 6-1: config 0 descriptor??
[ 1956.284046][T17371] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1956.306253][T11850] usb 6-1: ucan: probing device on interface #0
[ 1956.306276][T11850] usb 6-1: ucan: invalid endpoint configuration
[ 1956.306291][T11850] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1957.025261][ T5843] Bluetooth: hci0: command tx timeout
[ 1957.101738][T17288] chnl_net:caif_netlink_parms(): no params data found
[ 1957.132033][T17213] hsr_slave_0: entered promiscuous mode
[ 1957.143622][T17213] hsr_slave_1: entered promiscuous mode
[ 1957.414860][T12381] vhci_hcd: vhci_device speed not set
[ 1958.697147][T17288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1958.697255][T17288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1958.697422][T17288] bridge_slave_0: entered allmulticast mode
[ 1958.700593][T17288] bridge_slave_0: entered promiscuous mode
[ 1958.764905][T17288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1958.765075][T17288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1958.765277][T17288] bridge_slave_1: entered allmulticast mode
[ 1958.772666][T17288] bridge_slave_1: entered promiscuous mode
[ 1958.925391][T13270] usb 6-1: USB disconnect, device number 9
[ 1959.106128][ T5843] Bluetooth: hci0: command tx timeout
[ 1961.186841][ T5843] Bluetooth: hci0: command tx timeout
[ 1961.971409][T17288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1962.156510][T17288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1962.993833][T17403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[ 1963.092059][T17288] team0: Port device team_slave_0 added
[ 1963.183669][T17288] team0: Port device team_slave_1 added
[ 1963.264937][ T5843] Bluetooth: hci0: command tx timeout
[ 1963.589191][ T7294] bridge_slave_1: left allmulticast mode
[ 1963.589227][ T7294] bridge_slave_1: left promiscuous mode
[ 1963.589496][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1963.659909][ T7294] bridge_slave_0: left allmulticast mode
[ 1963.659932][ T7294] bridge_slave_0: left promiscuous mode
[ 1963.660148][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1963.728977][ T7294] bridge_slave_1: left allmulticast mode
[ 1963.729001][ T7294] bridge_slave_1: left promiscuous mode
[ 1963.729170][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1963.795737][ T7294] bridge_slave_0: left allmulticast mode
[ 1963.795757][ T7294] bridge_slave_0: left promiscuous mode
[ 1963.795903][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1965.335590][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1965.396765][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1965.477258][ T7294] bond0 (unregistering): Released all slaves
[ 1965.746668][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1966.036636][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1966.080030][ T7294] bond0 (unregistering): Released all slaves
[ 1967.196276][T17288] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1967.196293][T17288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1967.196328][T17288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1967.761717][T17364] chnl_net:caif_netlink_parms(): no params data found
[ 1967.789285][T17288] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1967.789299][T17288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1967.789321][T17288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1968.156786][ T7294] hsr_slave_0: left promiscuous mode
[ 1968.187160][ T7294] hsr_slave_1: left promiscuous mode
[ 1968.188843][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1968.227205][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1968.425350][ T7294] hsr_slave_0: left promiscuous mode
[ 1968.443763][T17427] netlink: 'syz.8.2199': attribute type 4 has an invalid length.
[ 1968.443833][T17427] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2199'.
[ 1968.485335][ T7294] hsr_slave_1: left promiscuous mode
[ 1970.074350][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1970.223384][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1971.535628][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1971.665809][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1972.865619][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1973.005425][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1975.430197][T17446] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2204'.
[ 1975.834072][T17448] syz.5.2204 (17448): drop_caches: 2
[ 1975.846486][T17448] syz.5.2204 (17448): drop_caches: 2
[ 1976.785616][T17458] 9pnet_fd: Insufficient options for proto=fd
[ 1976.787910][T17288] hsr_slave_0: entered promiscuous mode
[ 1976.792706][T17288] hsr_slave_1: entered promiscuous mode
[ 1976.793528][T17288] debugfs: 'hsr0' already exists in 'hsr'
[ 1976.793550][T17288] Cannot create hsr debugfs directory
[ 1978.574987][T17466] ptrace attach of ""[17468] was attempted by "./syz-executor exec"[17466]
[ 1978.705814][T17364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1978.705944][T17364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1978.706123][T17364] bridge_slave_0: entered allmulticast mode
[ 1978.711025][T17364] bridge_slave_0: entered promiscuous mode
[ 1979.095042][T17364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1979.096409][T17364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1979.096554][T17364] bridge_slave_1: entered allmulticast mode
[ 1979.105396][T17364] bridge_slave_1: entered promiscuous mode
[ 1980.212924][T17364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1980.246091][T17477] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2209'.
[ 1980.291573][T17364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1981.125224][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[ 1981.125280][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[ 1981.221013][T17364] team0: Port device team_slave_0 added
[ 1981.234941][T17364] team0: Port device team_slave_1 added
[ 1982.006947][T17364] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1982.006964][T17364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1982.006992][T17364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1982.032613][T17364] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1982.032631][T17364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1982.032663][T17364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1982.045278][T17213] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1982.219515][T17213] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1986.053858][T17213] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1986.225667][ T7294] bridge_slave_1: left allmulticast mode
[ 1986.225700][ T7294] bridge_slave_1: left promiscuous mode
[ 1986.226050][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1986.423946][ T7294] bridge_slave_0: left allmulticast mode
[ 1986.423976][ T7294] bridge_slave_0: left promiscuous mode
[ 1986.424215][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1986.936924][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1987.065204][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1987.176272][ T7294] bond0 (unregistering): Released all slaves
[ 1987.321112][T17213] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1988.709606][T17498] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2216'.
[ 1988.841345][T17500] syz.5.2216 (17500): drop_caches: 2
[ 1988.856772][T17500] syz.5.2216 (17500): drop_caches: 2
[ 1989.187582][T13441] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1989.215607][T13441] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1989.217664][T13441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1989.219337][T13441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1989.220200][T13441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1989.495072][T17364] hsr_slave_0: entered promiscuous mode
[ 1989.497229][T17364] hsr_slave_1: entered promiscuous mode
[ 1989.498080][T17364] debugfs: 'hsr0' already exists in 'hsr'
[ 1989.498103][T17364] Cannot create hsr debugfs directory
[ 1989.685000][ T7294] hsr_slave_0: left promiscuous mode
[ 1989.744969][ T7294] hsr_slave_1: left promiscuous mode
[ 1989.745793][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1989.787133][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1989.835449][T17509] ptrace attach of ""[17510] was attempted by "./syz-executor exec"[17509]
[ 1990.673352][T17515] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2219'.
[ 1991.346149][ T5843] Bluetooth: hci3: command tx timeout
[ 1992.226414][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 1992.595407][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 1993.094251][T17519] hub 9-0:1.0: USB hub found
[ 1993.099111][T17519] hub 9-0:1.0: 1 port detected
[ 1993.758571][ T5843] Bluetooth: hci3: command tx timeout
[ 1995.773778][T17288] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1995.835430][ T5843] Bluetooth: hci3: command tx timeout
[ 1995.929998][T17288] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1996.171817][T17288] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1996.303084][T17288] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1998.029305][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1998.034019][ T5843] Bluetooth: hci3: command tx timeout
[ 1998.817727][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2001.245246][T17502] chnl_net:caif_netlink_parms(): no params data found
[ 2001.312344][T17364] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2001.580217][T17364] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2001.805934][T17364] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2001.941651][T17364] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2002.644053][T13441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2002.684951][T13441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2002.691126][T13441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2002.693282][T13441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2002.694120][T13441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2003.442204][T17502] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2003.442335][T17502] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2003.442499][T17502] bridge_slave_0: entered allmulticast mode
[ 2003.476904][T17502] bridge_slave_0: entered promiscuous mode
[ 2003.610148][T17502] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2003.610335][T17502] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2003.610530][T17502] bridge_slave_1: entered allmulticast mode
[ 2003.620987][T17502] bridge_slave_1: entered promiscuous mode
[ 2004.286903][ T7294] bridge_slave_1: left allmulticast mode
[ 2004.286934][ T7294] bridge_slave_1: left promiscuous mode
[ 2004.287173][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2004.437586][ T7294] bridge_slave_0: left allmulticast mode
[ 2004.437617][ T7294] bridge_slave_0: left promiscuous mode
[ 2004.437874][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2004.784794][T13441] Bluetooth: hci1: command tx timeout
[ 2004.837051][T17631] trusted_key: syz.5.2235 sent an empty control message without MSG_MORE.
[ 2004.886232][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2005.005213][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2005.074926][ T7294] bond0 (unregistering): Released all slaves
[ 2005.182527][T17502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2005.247274][T17502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2005.548900][T17502] team0: Port device team_slave_0 added
[ 2005.732000][ T7294] hsr_slave_0: left promiscuous mode
[ 2005.783327][ T7294] hsr_slave_1: left promiscuous mode
[ 2005.783856][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2005.849145][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2006.864958][T13441] Bluetooth: hci1: command tx timeout
[ 2007.236304][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2007.496713][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2008.273043][T17657] netlink: 'syz.5.2239': attribute type 1 has an invalid length.
[ 2008.273064][T17657] netlink: 'syz.5.2239': attribute type 4 has an invalid length.
[ 2008.716017][T17502] team0: Port device team_slave_1 added
[ 2008.964774][T13441] Bluetooth: hci1: command tx timeout
[ 2010.364748][T17502] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2010.364763][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2010.364785][T17502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2010.458117][T17502] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2010.458131][T17502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2010.458156][T17502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2011.024733][T13441] Bluetooth: hci1: command tx timeout
[ 2014.046126][T17502] hsr_slave_0: entered promiscuous mode
[ 2014.065587][T17502] hsr_slave_1: entered promiscuous mode
[ 2014.946554][T17599] chnl_net:caif_netlink_parms(): no params data found
[ 2015.530463][T17696] usb usb8: usbfs: process 17696 (syz.8.2247) did not claim interface 0 before use
[ 2016.780717][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2016.794214][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2016.797666][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2016.808340][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2016.812443][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2017.164815][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2248'.
[ 2017.331878][T17708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8
[ 2018.998256][ T5843] Bluetooth: hci0: command tx timeout
[ 2019.087794][T17722] netlink: 'syz.5.2250': attribute type 4 has an invalid length.
[ 2019.087814][T17722] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2250'.
[ 2021.035296][ T5843] Bluetooth: hci0: command tx timeout
[ 2021.486530][T17599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2021.486677][T17599] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2021.486856][T17599] bridge_slave_0: entered allmulticast mode
[ 2021.489874][T17599] bridge_slave_0: entered promiscuous mode
[ 2021.828427][T17732] syz.8.2253 (17732): drop_caches: 2
[ 2021.830780][T17732] syz.8.2253 (17732): drop_caches: 2
[ 2022.778193][T17599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2022.778338][T17599] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2022.778543][T17599] bridge_slave_1: entered allmulticast mode
[ 2022.787068][T17599] bridge_slave_1: entered promiscuous mode
[ 2023.104737][ T5843] Bluetooth: hci0: command tx timeout
[ 2023.787318][T17599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2023.806684][T17599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2025.184992][ T5843] Bluetooth: hci0: command tx timeout
[ 2025.666999][T17599] team0: Port device team_slave_0 added
[ 2025.846033][T17599] team0: Port device team_slave_1 added
[ 2027.471384][T17599] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2027.471397][T17599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2027.471418][T17599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2027.523663][T17599] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2027.523675][T17599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2027.523694][T17599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2030.583242][ T7294] bridge_slave_1: left allmulticast mode
[ 2030.583292][ T7294] bridge_slave_1: left promiscuous mode
[ 2030.583606][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2030.783712][ T7294] bridge_slave_0: left allmulticast mode
[ 2030.783741][ T7294] bridge_slave_0: left promiscuous mode
[ 2030.783994][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2031.658617][T17787] usb usb8: usbfs: process 17787 (syz.5.2265) did not claim interface 0 before use
[ 2032.796062][T17796] netlink: 'syz.8.2266': attribute type 4 has an invalid length.
[ 2032.796084][T17796] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2266'.
[ 2033.285615][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2033.372890][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2033.452916][ T7294] bond0 (unregistering): Released all slaves
[ 2033.777780][T17599] hsr_slave_0: entered promiscuous mode
[ 2033.779143][T17599] hsr_slave_1: entered promiscuous mode
[ 2033.780163][T17599] debugfs: 'hsr0' already exists in 'hsr'
[ 2033.780187][T17599] Cannot create hsr debugfs directory
[ 2035.064805][ T7294] hsr_slave_0: left promiscuous mode
[ 2035.104749][ T7294] hsr_slave_1: left promiscuous mode
[ 2035.105552][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2035.135401][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2036.812423][T17816] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 2036.812561][T17816] overlayfs: failed to set xattr on upper
[ 2036.812593][T17816] overlayfs: ...falling back to redirect_dir=nofollow.
[ 2036.812625][T17816] overlayfs: ...falling back to index=off.
[ 2036.812657][T17816] overlayfs: ...falling back to uuid=null.
[ 2036.935528][T17817] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2036.935906][T17817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2038.821529][T17822] ptrace attach of ""[17825] was attempted by "./syz-executor exec"[17822]
[ 2038.821992][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2039.427968][T17829] usb usb8: usbfs: process 17829 (syz.8.2274) did not claim interface 0 before use
[ 2040.278321][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2042.550222][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[ 2042.550299][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[ 2042.623385][T17699] chnl_net:caif_netlink_parms(): no params data found
[ 2043.881557][T17859] usb usb8: usbfs: process 17859 (syz.5.2282) did not claim interface 0 before use
[ 2044.677675][T17502] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2044.903437][T17502] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2045.998261][T17502] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2047.357941][T17870] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[ 2047.357960][T17870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2047.358288][T17870] vhci_hcd vhci_hcd.0: Device attached
[ 2047.385491][T17502] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2047.408868][T17873] vhci_hcd: connection closed
[ 2047.409281][ T9402] vhci_hcd: stop threads
[ 2047.409297][ T9402] vhci_hcd: release socket
[ 2047.411378][ T9402] vhci_hcd: disconnect device
[ 2047.614200][T17699] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2047.614339][T17699] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2047.614502][T17699] bridge_slave_0: entered allmulticast mode
[ 2047.618018][T17699] bridge_slave_0: entered promiscuous mode
[ 2047.646469][T17699] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2047.646605][T17699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2047.646789][T17699] bridge_slave_1: entered allmulticast mode
[ 2047.661284][T17699] bridge_slave_1: entered promiscuous mode
[ 2048.079029][T17699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2048.344974][T17882] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2286'.
[ 2048.614364][T17884] syz.5.2286 (17884): drop_caches: 2
[ 2048.630170][T17884] syz.5.2286 (17884): drop_caches: 2
[ 2049.160045][T17886] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2287'.
[ 2049.426345][T17890] syz.8.2287 (17890): drop_caches: 2
[ 2049.446775][T17890] syz.8.2287 (17890): drop_caches: 2
[ 2050.295099][T13441] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2050.298802][T13441] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2050.300651][T13441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2050.302148][T13441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2050.302956][T13441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2050.472842][T17896] netlink: 'syz.5.2288': attribute type 1 has an invalid length.
[ 2050.472901][T17896] netlink: 'syz.5.2288': attribute type 4 has an invalid length.
[ 2051.265804][T17699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2052.386489][ T5843] Bluetooth: hci2: command tx timeout
[ 2052.433338][T17699] team0: Port device team_slave_0 added
[ 2052.536122][T17699] team0: Port device team_slave_1 added
[ 2053.992344][T17699] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2053.992356][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2053.992374][T17699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2053.994323][T17699] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2053.994333][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2053.994351][T17699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2056.864737][ T5843] Bluetooth: hci2: command tx timeout
[ 2057.501897][T17699] hsr_slave_0: entered promiscuous mode
[ 2057.516071][T17699] hsr_slave_1: entered promiscuous mode
[ 2057.535137][T17699] debugfs: 'hsr0' already exists in 'hsr'
[ 2057.535171][T17699] Cannot create hsr debugfs directory
[ 2059.188962][T13441] Bluetooth: hci2: command tx timeout
[ 2060.084516][T17599] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2060.100687][T17935] binder: 17933:17935 ioctl 4018620d 0 returned -22
[ 2060.173572][T17599] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2060.537093][T17939] usb usb8: usbfs: process 17939 (syz.8.2297) did not claim interface 0 before use
[ 2061.265125][T13441] Bluetooth: hci2: command tx timeout
[ 2061.390741][T17599] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2061.698691][T17599] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2062.173117][ T7294] bridge_slave_1: left allmulticast mode
[ 2062.173156][ T7294] bridge_slave_1: left promiscuous mode
[ 2062.173367][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2062.260064][ T7294] bridge_slave_0: left allmulticast mode
[ 2062.260104][ T7294] bridge_slave_0: left promiscuous mode
[ 2062.264039][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2063.146068][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2063.225744][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2063.287759][ T7294] bond0 (unregistering): Released all slaves
[ 2063.357656][T17599] kthread_run failed with err -4
[ 2064.937965][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2065.095316][T17957] syz.5.2300 (17957): drop_caches: 2
[ 2065.120525][T17957] syz.5.2300 (17957): drop_caches: 2
[ 2065.302020][T17893] chnl_net:caif_netlink_parms(): no params data found
[ 2065.677147][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2065.958730][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2065.970868][T17966] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2302'.
[ 2066.035542][ T7294] hsr_slave_0: left promiscuous mode
[ 2066.059159][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2066.098313][ T7294] hsr_slave_1: left promiscuous mode
[ 2066.099545][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2066.147821][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2066.156929][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2066.183246][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2066.192050][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2066.212569][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2066.213559][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2067.513939][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2067.617859][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2067.764672][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2067.826537][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2068.247032][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2068.304891][T13441] Bluetooth: hci3: command tx timeout
[ 2068.381679][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2068.521970][T17975] random: crng reseeded on system resumption
[ 2068.681944][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2070.384915][T13441] Bluetooth: hci3: command tx timeout
[ 2072.464871][T13441] Bluetooth: hci3: command tx timeout
[ 2072.690786][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2072.734380][T17893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2072.741206][T17893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2072.741566][T17893] bridge_slave_0: entered allmulticast mode
[ 2072.799134][T17893] bridge_slave_0: entered promiscuous mode
[ 2072.836110][T17893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2072.853009][T17893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2072.853262][T17893] bridge_slave_1: entered allmulticast mode
[ 2072.868550][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2072.870027][T17893] bridge_slave_1: entered promiscuous mode
[ 2072.940323][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2073.461609][T17893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2073.549165][T17893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2073.600532][T18001] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[ 2073.600561][T18001] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2073.604498][T18001] vhci_hcd vhci_hcd.0: Device attached
[ 2073.964716][T14428] usb 49-1: new high-speed USB device number 9 using vhci_hcd
[ 2074.244321][T17893] team0: Port device team_slave_0 added
[ 2074.245496][T18003] vhci_hcd: connection reset by peer
[ 2074.262980][   T86] vhci_hcd: stop threads
[ 2074.262996][   T86] vhci_hcd: release socket
[ 2074.263166][   T86] vhci_hcd: disconnect device
[ 2074.365365][T17893] team0: Port device team_slave_1 added
[ 2074.544930][T13441] Bluetooth: hci3: command tx timeout
[ 2075.061925][T17893] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2075.061944][T17893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2075.061975][T17893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2075.152574][T17893] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2075.152593][T17893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2075.152623][T17893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2076.529923][T17893] hsr_slave_0: entered promiscuous mode
[ 2076.531226][T17893] hsr_slave_1: entered promiscuous mode
[ 2076.572735][T17893] debugfs: 'hsr0' already exists in 'hsr'
[ 2076.572760][T17893] Cannot create hsr debugfs directory
[ 2076.692445][T18018] random: crng reseeded on system resumption
[ 2076.778402][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2076.811186][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2076.829503][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2076.833943][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2076.836055][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2076.979020][T17967] chnl_net:caif_netlink_parms(): no params data found
[ 2077.351607][T18022] ptrace attach of ""[18023] was attempted by "./syz-executor exec"[18022]
[ 2078.878049][T13441] Bluetooth: hci0: command tx timeout
[ 2079.804726][T14428] vhci_hcd: vhci_device speed not set
[ 2080.945096][T13441] Bluetooth: hci0: command tx timeout
[ 2083.025014][T13441] Bluetooth: hci0: command tx timeout
[ 2083.745653][T17967] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2083.746140][T17967] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2083.746435][T17967] bridge_slave_0: entered allmulticast mode
[ 2083.792947][T17967] bridge_slave_0: entered promiscuous mode
[ 2084.179999][T17967] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2084.180117][T17967] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2084.180355][T17967] bridge_slave_1: entered allmulticast mode
[ 2084.209338][T17967] bridge_slave_1: entered promiscuous mode
[ 2084.776437][T17967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2084.871979][T17967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2085.104714][T13441] Bluetooth: hci0: command tx timeout
[ 2085.267399][T18053] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[ 2085.267426][T18053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2085.267619][T18053] vhci_hcd vhci_hcd.0: Device attached
[ 2085.544660][T17614] usb 43-1: new high-speed USB device number 8 using vhci_hcd
[ 2085.959007][T18055] vhci_hcd: connection reset by peer
[ 2085.959648][T17781] vhci_hcd: stop threads
[ 2085.959666][T17781] vhci_hcd: release socket
[ 2085.959742][T17781] vhci_hcd: disconnect device
[ 2086.007958][T17967] team0: Port device team_slave_0 added
[ 2086.026110][T17967] team0: Port device team_slave_1 added
[ 2086.792259][T18063] random: crng reseeded on system resumption
[ 2087.158914][T17967] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2087.158930][T17967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2087.158978][T17967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2087.245557][T17967] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2087.245571][T17967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2087.245599][T17967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2088.461555][ T7294] bridge_slave_1: left allmulticast mode
[ 2088.461587][ T7294] bridge_slave_1: left promiscuous mode
[ 2088.461829][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2089.553693][ T7294] bridge_slave_0: left allmulticast mode
[ 2089.553716][ T7294] bridge_slave_0: left promiscuous mode
[ 2089.553894][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2089.673607][ T7294] bridge_slave_1: left allmulticast mode
[ 2089.673640][ T7294] bridge_slave_1: left promiscuous mode
[ 2089.673896][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2089.779093][ T7294] bridge_slave_0: left allmulticast mode
[ 2089.779115][ T7294] bridge_slave_0: left promiscuous mode
[ 2089.779294][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2090.426028][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2090.506682][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2090.589046][ T7294] bond0 (unregistering): Released all slaves
[ 2090.695306][T17614] vhci_hcd: vhci_device speed not set
[ 2090.724998][T18079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9
[ 2091.297777][T18085] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2326'.
[ 2091.596368][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2091.675591][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2091.855165][ T7294] bond0 (unregistering): Released all slaves
[ 2091.972995][T17967] hsr_slave_0: entered promiscuous mode
[ 2091.977853][T17967] hsr_slave_1: entered promiscuous mode
[ 2091.978839][T17967] debugfs: 'hsr0' already exists in 'hsr'
[ 2091.978872][T17967] Cannot create hsr debugfs directory
[ 2092.126487][T18019] chnl_net:caif_netlink_parms(): no params data found
[ 2093.144936][ T7294] hsr_slave_0: left promiscuous mode
[ 2093.208316][ T7294] hsr_slave_1: left promiscuous mode
[ 2093.215361][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2093.268011][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2093.497331][ T7294] hsr_slave_0: left promiscuous mode
[ 2093.522760][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2327'.
[ 2093.559243][ T7294] hsr_slave_1: left promiscuous mode
[ 2093.559849][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2093.606049][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2094.422027][T18101] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[ 2094.422053][T18101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2094.423570][T18101] vhci_hcd vhci_hcd.0: Device attached
[ 2094.654793][T14427] usb 43-1: new high-speed USB device number 9 using vhci_hcd
[ 2094.916935][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2095.142257][T18103] vhci_hcd: connection reset by peer
[ 2095.155370][   T86] vhci_hcd: stop threads
[ 2095.155383][   T86] vhci_hcd: release socket
[ 2095.155429][   T86] vhci_hcd: disconnect device
[ 2095.213701][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2096.976876][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2097.147797][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2098.503807][T17893] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2099.766900][T14427] vhci_hcd: vhci_device speed not set
[ 2101.221103][T18122] syz.5.2333 (18122): drop_caches: 2
[ 2101.222450][T18122] syz.5.2333 (18122): drop_caches: 2
[ 2101.371040][T17893] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2101.618887][T17893] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2101.656810][T18019] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2101.658276][T18019] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2101.658404][T18019] bridge_slave_0: entered allmulticast mode
[ 2101.704927][T18019] bridge_slave_0: entered promiscuous mode
[ 2101.806183][T17893] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2101.927815][T18019] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2101.927958][T18019] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2101.928104][T18019] bridge_slave_1: entered allmulticast mode
[ 2101.962227][T18019] bridge_slave_1: entered promiscuous mode
[ 2102.640427][T18134] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[ 2102.640445][T18134] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2102.643421][T18134] vhci_hcd vhci_hcd.0: Device attached
[ 2102.703563][T18138] vhci_hcd: connection closed
[ 2102.704072][ T3538] vhci_hcd: stop threads
[ 2102.704089][ T3538] vhci_hcd: release socket
[ 2102.704119][ T3538] vhci_hcd: disconnect device
[ 2102.790610][T18019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2102.826141][T18019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2103.324737][T18019] team0: Port device team_slave_0 added
[ 2103.546425][T18019] team0: Port device team_slave_1 added
[ 2104.033218][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[ 2104.033277][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[ 2104.051119][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2339'.
[ 2104.453652][T18019] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2104.453669][T18019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2104.453695][T18019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2104.625570][T18019] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2104.625595][T18019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2104.625617][T18019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2105.331171][T18019] hsr_slave_0: entered promiscuous mode
[ 2105.359359][T18019] hsr_slave_1: entered promiscuous mode
[ 2105.490995][T18159] binder: 18157:18159 ioctl c0306201 0 returned -14
[ 2107.996147][T18174] syz.5.2344 (18174): drop_caches: 2
[ 2108.034266][T18174] syz.5.2344 (18174): drop_caches: 2
[ 2108.776479][T18170] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2343'.
[ 2109.384843][T17967] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2109.438782][T17967] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2109.488741][T17967] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2109.525297][T17967] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2110.161883][T18186] overlay: filesystem on ./bus not supported
[ 2110.351499][ T7294] bridge_slave_1: left allmulticast mode
[ 2110.351535][ T7294] bridge_slave_1: left promiscuous mode
[ 2110.351805][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2110.467492][ T7294] bridge_slave_0: left allmulticast mode
[ 2110.467521][ T7294] bridge_slave_0: left promiscuous mode
[ 2110.467757][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2110.506561][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2110.523427][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2110.528921][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2110.530869][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2110.545104][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2110.968215][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2111.020668][T18197] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2347'.
[ 2111.178344][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2111.329261][ T7294] bond0 (unregistering): Released all slaves
[ 2111.725020][T18202] binder: 18200:18202 ioctl c0306201 0 returned -14
[ 2112.118646][ T7294] hsr_slave_0: left promiscuous mode
[ 2112.154784][ T7294] hsr_slave_1: left promiscuous mode
[ 2112.157579][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2112.178113][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2112.708302][T13441] Bluetooth: hci1: command tx timeout
[ 2114.337201][T18214] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2353'.
[ 2114.793559][T13441] Bluetooth: hci1: command tx timeout
[ 2114.886819][T18217] syz.8.2353 (18217): drop_caches: 2
[ 2114.890607][T18217] syz.8.2353 (18217): drop_caches: 2
[ 2115.384385][T18221] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2354'.
[ 2115.660759][T18224] syz.8.2354 (18224): drop_caches: 2
[ 2115.666932][T18224] syz.8.2354 (18224): drop_caches: 2
[ 2116.523858][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2116.768207][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2116.944685][T13441] Bluetooth: hci1: command tx timeout
[ 2116.964705][T17614] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 2117.124788][T17614] usb 6-1: Using ep0 maxpacket: 8
[ 2117.130077][T17614] usb 6-1: config 0 has an invalid interface number: 246 but max is 0
[ 2117.130097][T17614] usb 6-1: config 0 has no interface number 0
[ 2117.130131][T17614] usb 6-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[ 2117.130153][T17614] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 2117.130173][T17614] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024
[ 2117.187706][T17614] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 2117.187724][T17614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2117.187737][T17614] usb 6-1: Product: syz
[ 2117.187746][T17614] usb 6-1: Manufacturer: syz
[ 2117.187756][T17614] usb 6-1: SerialNumber: syz
[ 2117.271914][T17614] usb 6-1: config 0 descriptor??
[ 2117.405525][T17614] msi2500 6-1:0.246: Registered as swradio24
[ 2117.405546][T17614] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 2119.024754][T13441] Bluetooth: hci1: command tx timeout
[ 2119.907409][T18019] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2119.976038][T18019] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2120.043980][T17967] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2120.079250][T18019] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2120.295901][T18019] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2120.363713][T16746] usb 6-1: USB disconnect, device number 10
[ 2120.415725][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2359'.
[ 2120.562465][T18248] gtp0: entered promiscuous mode
[ 2121.315740][T17967] 8021q: adding VLAN 0 to HW filter on device team0
[ 2121.671868][T18190] chnl_net:caif_netlink_parms(): no params data found
[ 2121.707059][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2121.707438][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2121.739800][T18268] random: crng reseeded on system resumption
[ 2122.431264][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2122.433268][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2123.296234][T18190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2123.296466][T18190] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2123.296594][T18190] bridge_slave_0: entered allmulticast mode
[ 2123.344825][T18190] bridge_slave_0: entered promiscuous mode
[ 2123.495678][T18190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2123.495841][T18190] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2123.496009][T18190] bridge_slave_1: entered allmulticast mode
[ 2123.514680][T18190] bridge_slave_1: entered promiscuous mode
[ 2123.907732][T18190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2124.006551][T18190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2124.534704][T18190] team0: Port device team_slave_0 added
[ 2124.536371][ T7294] bridge_slave_1: left allmulticast mode
[ 2124.536399][ T7294] bridge_slave_1: left promiscuous mode
[ 2124.536629][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2124.615904][ T7294] bridge_slave_0: left allmulticast mode
[ 2124.615925][ T7294] bridge_slave_0: left promiscuous mode
[ 2124.616118][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2126.241965][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2126.652844][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2126.683562][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2126.895108][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2126.896338][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2128.585531][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2128.655216][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2128.718041][ T7294] bond0 (unregistering): Released all slaves
[ 2128.752629][T18190] team0: Port device team_slave_1 added
[ 2128.944643][T13441] Bluetooth: hci2: command tx timeout
[ 2130.469651][T18302] syz.5.2370 (18302): drop_caches: 2
[ 2130.479370][T18302] syz.5.2370 (18302): drop_caches: 2
[ 2130.580932][T18190] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2130.580947][T18190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2130.580973][T18190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2130.585739][T18190] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2130.585755][T18190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2130.585787][T18190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2130.798479][ T7294] hsr_slave_0: left promiscuous mode
[ 2130.835285][ T7294] hsr_slave_1: left promiscuous mode
[ 2130.836184][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2130.865289][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2130.887822][T18305] random: crng reseeded on system resumption
[ 2131.034881][T13441] Bluetooth: hci2: command tx timeout
[ 2133.216549][T13441] Bluetooth: hci2: command tx timeout
[ 2134.306936][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2134.730175][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2135.264876][T13441] Bluetooth: hci2: command tx timeout
[ 2136.616459][T18190] hsr_slave_0: entered promiscuous mode
[ 2136.617595][T18190] hsr_slave_1: entered promiscuous mode
[ 2136.618356][T18190] debugfs: 'hsr0' already exists in 'hsr'
[ 2136.618377][T18190] Cannot create hsr debugfs directory
[ 2138.597292][T18350] random: crng reseeded on system resumption
[ 2138.962403][T18355] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2138.970746][T18355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2138.976824][T18355] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2138.988846][T18355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2138.994973][T18355] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2140.748899][T18369] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2386'.
[ 2141.105716][T13441] Bluetooth: hci0: command tx timeout
[ 2141.251045][T18372] syz.5.2386 (18372): drop_caches: 2
[ 2141.272094][T18372] syz.5.2386 (18372): drop_caches: 2
[ 2143.175051][T18285] chnl_net:caif_netlink_parms(): no params data found
[ 2143.184689][T13441] Bluetooth: hci0: command tx timeout
[ 2143.805954][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2388'.
[ 2145.265080][T13441] Bluetooth: hci0: command tx timeout
[ 2145.730041][T18400] random: crng reseeded on system resumption
[ 2145.840027][T18402] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2394'.
[ 2146.022007][T18402] syz.5.2394 (18402): drop_caches: 2
[ 2146.023994][T18402] syz.5.2394 (18402): drop_caches: 2
[ 2147.347781][T13441] Bluetooth: hci0: command tx timeout
[ 2147.630035][T18285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2147.630196][T18285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2147.630352][T18285] bridge_slave_0: entered allmulticast mode
[ 2147.685716][T18285] bridge_slave_0: entered promiscuous mode
[ 2147.747199][T18285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2147.751849][T18285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2147.754692][T18285] bridge_slave_1: entered allmulticast mode
[ 2147.808541][T18285] bridge_slave_1: entered promiscuous mode
[ 2148.144763][T16746] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 2148.322343][T16746] usb 6-1: Using ep0 maxpacket: 8
[ 2148.332078][T16746] usb 6-1: config 0 has an invalid interface number: 246 but max is 0
[ 2148.332103][T16746] usb 6-1: config 0 has no interface number 0
[ 2148.332151][T16746] usb 6-1: config 0 interface 246 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[ 2148.332178][T16746] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 2148.332204][T16746] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x2 has invalid maxpacket 58148, setting to 1024
[ 2148.359828][T16746] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[ 2148.359864][T16746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2148.359891][T16746] usb 6-1: Product: syz
[ 2148.359910][T16746] usb 6-1: Manufacturer: syz
[ 2148.359930][T16746] usb 6-1: SerialNumber: syz
[ 2148.466295][T16746] usb 6-1: config 0 descriptor??
[ 2148.739990][T16746] msi2500 6-1:0.246: Registered as swradio24
[ 2148.740014][T16746] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[ 2148.896725][T18285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2148.944636][T18285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2149.813770][T18285] team0: Port device team_slave_0 added
[ 2149.835802][T18190] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2149.884987][T18351] chnl_net:caif_netlink_parms(): no params data found
[ 2149.986474][T18285] team0: Port device team_slave_1 added
[ 2149.993651][T18190] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2151.126560][T18429] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2398'.
[ 2151.500491][T18432] syz.8.2398 (18432): drop_caches: 2
[ 2151.543240][T18432] syz.8.2398 (18432): drop_caches: 2
[ 2152.377588][T18190] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2152.547442][ T6648] usb 6-1: USB disconnect, device number 11
[ 2152.977891][T18190] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2153.896937][T18442] Bluetooth: MGMT ver 1.23
[ 2153.939200][T18285] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2153.939229][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2153.939262][T18285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2155.324469][T18285] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2155.324487][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2155.324516][T18285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2156.798753][T18351] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2156.798839][T18351] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2156.798968][T18351] bridge_slave_0: entered allmulticast mode
[ 2156.838275][T18351] bridge_slave_0: entered promiscuous mode
[ 2156.901344][T18285] hsr_slave_0: entered promiscuous mode
[ 2156.902241][T18285] hsr_slave_1: entered promiscuous mode
[ 2156.911685][T18285] debugfs: 'hsr0' already exists in 'hsr'
[ 2156.911714][T18285] Cannot create hsr debugfs directory
[ 2156.942823][T18351] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2156.942907][T18351] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2156.943032][T18351] bridge_slave_1: entered allmulticast mode
[ 2156.947085][T18351] bridge_slave_1: entered promiscuous mode
[ 2157.428146][T18472] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2406'.
[ 2158.281380][T18476] syz.5.2406 (18476): drop_caches: 2
[ 2158.285341][T18476] syz.5.2406 (18476): drop_caches: 2
[ 2158.560956][T18351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2158.663641][T18351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2159.318716][T18351] team0: Port device team_slave_0 added
[ 2159.456742][T18351] team0: Port device team_slave_1 added
[ 2160.208143][T18351] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2160.208155][T18351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2160.208174][T18351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2160.441406][T18351] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2160.441419][T18351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2160.441437][T18351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2160.443912][ T7294] bridge_slave_1: left allmulticast mode
[ 2160.443942][ T7294] bridge_slave_1: left promiscuous mode
[ 2160.444205][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2160.555666][ T7294] bridge_slave_0: left allmulticast mode
[ 2160.555687][ T7294] bridge_slave_0: left promiscuous mode
[ 2160.555860][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2160.685256][ T7294] bridge_slave_1: left allmulticast mode
[ 2160.685277][ T7294] bridge_slave_1: left promiscuous mode
[ 2160.685459][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2160.755846][ T7294] bridge_slave_0: left allmulticast mode
[ 2160.755867][ T7294] bridge_slave_0: left promiscuous mode
[ 2160.756075][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2162.198289][T18497] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2412'.
[ 2162.354984][T18499] syz.8.2412 (18499): drop_caches: 2
[ 2162.503160][T18499] syz.8.2412 (18499): drop_caches: 2
[ 2165.446805][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[ 2165.446989][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[ 2165.462502][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2165.950484][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2166.247916][ T7294] bond0 (unregistering): Released all slaves
[ 2167.438298][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2167.499653][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2167.554747][ T7294] bond0 (unregistering): Released all slaves
[ 2168.345934][T18351] hsr_slave_0: entered promiscuous mode
[ 2168.346964][T18351] hsr_slave_1: entered promiscuous mode
[ 2168.354915][T18351] debugfs: 'hsr0' already exists in 'hsr'
[ 2168.354941][T18351] Cannot create hsr debugfs directory
[ 2168.594660][ T7294] hsr_slave_0: left promiscuous mode
[ 2168.635997][ T7294] hsr_slave_1: left promiscuous mode
[ 2168.639453][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2168.700845][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2168.884854][ T7294] hsr_slave_0: left promiscuous mode
[ 2168.925278][ T7294] hsr_slave_1: left promiscuous mode
[ 2168.927656][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2168.958392][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2168.966399][T18527] fuse: Unknown parameter '/dev/sg#'
[ 2169.096431][T18526] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2418'.
[ 2169.688239][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2169.815344][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2170.877038][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2171.036101][ T7294] team0 (unregistering): Port device team_slave_0 removed
[ 2172.420991][T18355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2172.452115][T18355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2172.453432][T18355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2172.464762][T18355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2172.487114][T18355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2173.706293][T18540] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2421'.
[ 2173.977399][T18542] syz.5.2421 (18542): drop_caches: 2
[ 2173.981059][T18542] syz.5.2421 (18542): drop_caches: 2
[ 2174.554762][T13441] Bluetooth: hci3: command tx timeout
[ 2175.850685][T18548] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2422'.
[ 2176.626329][T13441] Bluetooth: hci3: command tx timeout
[ 2178.385898][T18568] fuse: Unknown parameter '/dev/sg#'
[ 2178.705826][T13441] Bluetooth: hci3: command tx timeout
[ 2178.840815][T18530] chnl_net:caif_netlink_parms(): no params data found
[ 2179.994882][T18593] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[ 2179.994957][T18593] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 2179.995207][T18593] vhci_hcd vhci_hcd.0: Device attached
[ 2180.158097][   T37] audit: type=1800 audit(1757384629.743:161): pid=18593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2428" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 2180.261796][T18597] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2430'.
[ 2180.475390][T11850] usb 50-1: SetAddress Request (2) to port 0
[ 2180.475423][T11850] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48
[ 2180.475439][T11850] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 11850, name: kworker/1:0
[ 2180.475457][T11850] preempt_count: 0, expected: 0
[ 2180.475467][T11850] RCU nest depth: 0, expected: 0
[ 2180.475488][T11850] 6 locks held by kworker/1:0/11850:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2180.475501][T11850]  #0: ffff8881442af138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 2180.475571][T11850]  #1: ffffc90003fe7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 2180.475624][T11850]  #2: ffff888029457188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 2180.475675][T11850]  #3: ffff888146f925b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 2180.475727][T11850]  #4: ffff88802926c358 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 2180.475777][T11850]  #5: ffff888028f64868 (&mbus->lock){+.+.}-{3:3}, at: mon_complete+0x5c/0x200
[ 2180.475836][T11850] irq event stamp: 8096570
[ 2180.475845][T11850] hardirqs last  enabled at (8096569): [<ffffffff8afa3325>] _raw_spin_unlock_irqrestore+0x85/0x110
[ 2180.475884][T11850] hardirqs last disabled at (8096570): [<ffffffff8718ba3c>] vhci_urb_enqueue+0xb2c/0xe70
[ 2180.475909][T11850] softirqs last  enabled at (8093824): [<ffffffff8184cfa4>] __local_bh_enable_ip+0x1a4/0x270
[ 2180.475941][T11850] softirqs last disabled at (8093810): [<ffffffff8960d2ec>] update_defense_level+0xec/0xd80
[ 2180.475992][T11850] CPU: 1 UID: 0 PID: 11850 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2180.476017][T11850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 2180.476030][T11850] Workqueue: usb_hub_wq hub_event
[ 2180.476057][T11850] Call Trace:
[ 2180.476066][T11850]  <TASK>
[ 2180.476076][T11850]  dump_stack_lvl+0x189/0x250
[ 2180.476111][T11850]  ? update_defense_level+0xec/0xd80
[ 2180.476137][T11850]  ? update_defense_level+0xec/0xd80
[ 2180.476160][T11850]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2180.476194][T11850]  ? rtlock_slowlock_locked+0xd8/0x4010
[ 2180.476225][T11850]  ? print_lock_name+0xde/0x100
[ 2180.476256][T11850]  __might_resched+0x44b/0x5d0
[ 2180.476288][T11850]  ? __pfx___might_resched+0x10/0x10
[ 2180.476313][T11850]  ? mon_complete+0x5c/0x200
[ 2180.476343][T11850]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 2180.476389][T11850]  rt_spin_lock+0xc7/0x2c0
[ 2180.476418][T11850]  ? __pfx_rt_spin_lock+0x10/0x10
[ 2180.476445][T11850]  ? rt_mutex_slowunlock+0x493/0x8a0
[ 2180.476472][T11850]  ? reacquire_held_locks+0x127/0x1d0
[ 2180.476507][T11850]  ? __pfx_migrate_enable+0x10/0x10
[ 2180.476538][T11850]  mon_complete+0x5c/0x200
[ 2180.476574][T11850]  __usb_hcd_giveback_urb+0x254/0x5e0
[ 2180.476612][T11850]  vhci_urb_enqueue+0xb4f/0xe70
[ 2180.476649][T11850]  ? __pfx_vhci_urb_enqueue+0x10/0x10
[ 2180.476672][T11850]  ? usb_hcd_map_urb_for_dma+0x3c1/0xd80
[ 2180.476711][T11850]  usb_hcd_submit_urb+0x320/0x1a80
[ 2180.476755][T11850]  usb_start_wait_urb+0x114/0x4c0
[ 2180.476787][T11850]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2180.476822][T11850]  ? trace_kmalloc+0x1f/0xd0
[ 2180.476864][T11850]  usb_control_msg+0x232/0x3e0
[ 2180.476896][T11850]  hub_port_init+0xe24/0x2800
[ 2180.476949][T11850]  hub_event+0x2532/0x4a20
[ 2180.477035][T11850]  ? __pfx_hub_event+0x10/0x10
[ 2180.477063][T11850]  ? process_scheduled_works+0x9ef/0x17b0
[ 2180.477100][T11850]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2180.477150][T11850]  ? process_scheduled_works+0x9ef/0x17b0
[ 2180.477175][T11850]  ? process_scheduled_works+0x9ef/0x17b0
[ 2180.477203][T11850]  process_scheduled_works+0xade/0x17b0
[ 2180.477246][T11850]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2180.477278][T11850]  worker_thread+0x8a0/0xda0
[ 2180.477317][T11850]  kthread+0x70e/0x8a0
[ 2180.477343][T11850]  ? __pfx_worker_thread+0x10/0x10
[ 2180.477361][T11850]  ? __pfx_kthread+0x10/0x10
[ 2180.477390][T11850]  ? __pfx_kthread+0x10/0x10
[ 2180.477414][T11850]  ret_from_fork+0x3f9/0x770
[ 2180.477436][T11850]  ? __pfx_ret_from_fork+0x10/0x10
[ 2180.477461][T11850]  ? __switch_to_asm+0x39/0x70
[ 2180.477474][T11850]  ? __switch_to_asm+0x33/0x70
[ 2180.477488][T11850]  ? __pfx_kthread+0x10/0x10
[ 2180.477511][T11850]  ret_from_fork_asm+0x1a/0x30
[ 2180.477539][T11850]  </TASK>
[ 2180.477601][T11850] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 2180.785272][T13441] Bluetooth: hci3: command tx timeout
[ 2181.145042][T18530] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2181.145180][T18530] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2181.145411][T18530] bridge_slave_0: entered allmulticast mode
[ 2181.184819][T18530] bridge_slave_0: entered promiscuous mode
[ 2184.173640][T18594] vhci_hcd: connection reset by peer
[ 2184.306929][  T162] vhci_hcd: stop threads
[ 2184.306949][  T162] vhci_hcd: release socket
[ 2184.307042][  T162] vhci_hcd: disconnect device
[ 2185.754880][T11850] usb 50-1: device descriptor read/8, error -110
[ 2186.125105][ T7294] bridge_slave_1: left allmulticast mode
[ 2186.125207][ T7294] bridge_slave_1: left promiscuous mode
[ 2186.125502][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2186.156580][T11850] usb usb50-port1: attempt power cycle
[ 2186.216289][ T7294] bridge_slave_0: left allmulticast mode
[ 2186.216327][ T7294] bridge_slave_0: left promiscuous mode
[ 2186.216634][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2186.770005][T11850] usb usb50-port1: unable to enumerate USB device
[ 2187.275610][ T7294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2187.355827][ T7294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2187.429287][ T7294] bond0 (unregistering): Released all slaves
[ 2187.872639][ T7294] hsr_slave_0: left promiscuous mode
[ 2187.895061][ T7294] hsr_slave_1: left promiscuous mode
[ 2187.896065][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2187.955804][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2188.865763][ T7294] team0 (unregistering): Port device team_slave_1 removed
[ 2189.055646][ T7294] team0 (unregistering): Port device team_slave_0 removed