last executing test programs:

19m15.480676374s ago: executing program 32 (id=155):
sendto$inet(0xffffffffffffffff, &(0x7f000001b000)="2689968d54db21a45f27e53c0887edd6113939dc5a2fb40c521cff1f30b1c778555c870acf2affc61a70262d86cfc4331a71bd2ba8ee01612ecb4e3f502ff04fdec24a31a5", 0x45, 0x4000000, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff)

18m42.990461985s ago: executing program 0 (id=241):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0))
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

18m37.402882879s ago: executing program 0 (id=248):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41024}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r5, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"})
close_range(r1, 0xffffffffffffffff, 0x0)

18m34.597561273s ago: executing program 3 (id=252):
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6e)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

18m33.913908057s ago: executing program 0 (id=255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a406ff18e464cac629efb7dc5dea6fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a3100000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x1929d510d9043f39}, 0x24040005)
recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

18m32.121888719s ago: executing program 0 (id=257):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0))
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

18m27.696501433s ago: executing program 3 (id=264):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41024}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r5, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"})
close_range(r1, 0xffffffffffffffff, 0x0)

18m25.339350692s ago: executing program 0 (id=267):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe0900, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
fcntl$lock(0xffffffffffffffff, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffff8ba2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x3, 0x6)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
lseek(r4, 0x851, 0x0)
getrlimit(0x4, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}})
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
setrlimit(0xb, &(0x7f00000000c0)={0x2, 0x3})
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00008b", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

18m24.151777509s ago: executing program 0 (id=269):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xbe, &(0x7f0000000540)=""/190, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9c, 0x10000}, 0x28)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
memfd_secret(0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0)

18m22.878818333s ago: executing program 3 (id=270):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300)}}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, 0xffffffffffffffff, 0x0})
io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28)
recvfrom(r1, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)

18m19.274943452s ago: executing program 3 (id=274):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000080)={0x44, 0x86}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0x3, &(0x7f0000000080)=0x4, 0x4)
write(r8, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
recvmmsg(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'macvlan1\x00'})
ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000500))

18m17.835897653s ago: executing program 3 (id=276):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0)

18m17.617444093s ago: executing program 3 (id=278):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sigaltstack(&(0x7f00000000c0)={&(0x7f0000001580)=""/4118, 0x80000001, 0x1016}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
wait4(r3, 0x0, 0x40000000, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
unshare(0x66000080)
socket$netlink(0x10, 0x3, 0x0)
gettid()

18m8.861857043s ago: executing program 33 (id=269):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xbe, &(0x7f0000000540)=""/190, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9c, 0x10000}, 0x28)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
memfd_secret(0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x0)

18m2.166378616s ago: executing program 34 (id=278):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sigaltstack(&(0x7f00000000c0)={&(0x7f0000001580)=""/4118, 0x80000001, 0x1016}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
wait4(r3, 0x0, 0x40000000, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
unshare(0x66000080)
socket$netlink(0x10, 0x3, 0x0)
gettid()

10m35.997742786s ago: executing program 1 (id=1038):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x1, 0x25}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0xfffffffffffffdd4, 0x0, 0x0})

10m35.836157063s ago: executing program 1 (id=1039):
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)

10m35.391243741s ago: executing program 1 (id=1042):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x5})

10m35.125946008s ago: executing program 1 (id=1045):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140)=0x400030, 0x4)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x80, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4018000}, 0x880)
connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x0)

10m29.686647458s ago: executing program 1 (id=1058):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB])
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}]})

10m23.220888031s ago: executing program 1 (id=1069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x38}}, 0x0)

10m21.35652345s ago: executing program 2 (id=1074):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x80000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10m21.00699552s ago: executing program 2 (id=1076):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94)

10m19.945790053s ago: executing program 2 (id=1078):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2500000004000000"], 0x20)

10m19.508025941s ago: executing program 2 (id=1082):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
r5 = getpid()
syz_pidfd_open(r5, 0x0)

10m17.039864551s ago: executing program 2 (id=1084):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2500000004000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x31, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000200000000000001000000", 0x1b)
ioprio_set$uid(0x3, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x1, 0x80, 0x0, 0x6, {{0xb, 0x4, 0x1, 0x28, 0x2c, 0x65, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x5, 0x3, "dc"}, {0x1, 0x3, "ca"}]}]}}}}})

10m14.928717201s ago: executing program 2 (id=1089):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a7eba1ba0fa8f0e}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8)

10m7.4639833s ago: executing program 35 (id=1069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x38}}, 0x0)

9m59.443424177s ago: executing program 36 (id=1089):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a7eba1ba0fa8f0e}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8)

8m28.846784539s ago: executing program 6 (id=1287):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000051c0)=@newtaction={0xffc, 0x30, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{0xac, 0x1, [@m_ipt={0xa8, 0x806, 0x0, 0x0, {{0x8}, {0x4}, {0x7d, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x40, 0x1, [@m_ipt={0x3c, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x11, 0x6, "e2ebd2e0185a4d308803e9306e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x62c, 0x1, [@m_ipt={0x4c, 0x14, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x1b, 0x6, "1af4d23bb88561537a355b01f686b616ad659466ede330"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_ipt={0x2b4, 0x6, 0x0, 0x0, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x121, 0x6, {0xe, 'filter\x00', 0xca, 0xfc79, "972669edc2fa8226c5dc6701833ed311d65bf4adc5ce1d4454bfd1c5a4c688ae0bf289bb2bead526d9bed20810edef5be201978096fea9a15dac3b6ba53151aface046beb6da8026bc8b63e51cb49c84205238be773c7607a75630ceb5d2d354c5616b73da4ed2668fa844b2a4bd68d66c8752c4c24e65da66b71c939f6758c72b4f0d4174b1bf591581282387dbdd682f034413edb577ae0ecd24c0cdb33116f0f4cd8ac06580fbb9a0071036e6a9d81abe6baa019ea36394d5bd190a60ebe238c1c238240cb4c7426bba859367daa9356dfd09376ce25738881d444cd0d27fbafe3e1b3208d59913fa8ce6fce4a880faed2719125c12"}}, @TCA_IPT_TARG={0xbd, 0x6, {0x461, 'raw\x00', 0x1, 0x9, "e4988ac2ed1363c493d5f199d019fb307adfd3e856cdba68cf6b91879dfd609aff2c4e3cb6a176984f622455d2c730456995d2e900de756f7a8b82a5697be71d76323a5867c311d3c04cbd859a878d89436894aea56ed52094b460a1bf8bc7b573eb9fa503b58a3a9b8a48673fbbc75a1f131a416baced9732387ef2119a11d0c2eed7cd6bc6a00c7c8166666d30d66f4d94fc"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x73, 0x6, "185958781d1db7b9b704cf6537222d0e05d80edc9ca3679a153c6d7f0daa4ef88167eb28cec88d6651b36bc14d064a61cf4cb893fb619b24b60c1fc4cfc989ad32d726f7bcf39f8e1accbe8141e2c2d3f6b89e412f6075a7aa78897eeea4db4944cf8d199f199c8872d7bb43723431"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x1e4, 0xf, 0x0, 0x0, {{0x8}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x45, 0x6, {0x9, 'raw\x00', 0x4, 0x9, "6f4fa8b7b50115b1c201aa96398fe4b95eb7cc63806ecf1e8c21a0"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xa5, 0x6, "3f67a3c7f374dc8aee2dd8232b761c0943c890fecbd1793e69e26f5cd36f229cffe9a9ec5569af76729fc0896a91bd69becfcfd6b10a381c6a61e4d5b880ed00198a24672137dfce843d46301095cfd83667c3d4869a92aa439e9aaabc4eac797287c5269a5b099daef651a8d1fb8f7f38a6b040ffbcd10090d398804b6793049172b155e115f90e20d96896b2ef781bcc4b61a1d046b8aaef5269ec1ff93e824e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x144, 0xe, 0x0, 0x0, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf6, 0x6, {0x1, 'nat\x00', 0x4, 0xfff, "7d5677b54ee5fc71f1005f3bf91736d469ca0fb66b11856dbe91ece4b37501557b955f3a7c966bae3f8a99a7f378905c8c5e84f69d74076de16a77543326ebfb3d3d277bc2b97c17fc0982eb16e2dbec868f690f0882a28411e3bd58fcdcb52e8b0237744d4d92e8942991fcba00042f503bd84efd6b91a4e50c8c9b650c6ee8614a516728627ebfdb5603d3b576f59950ce19889081d1b55a54411f3246c0d226fd8c8e828c0e7e43e0f7be05356c64fe29431d74ed61869b544c9cf3c8badc5d5b6cc076cd68e4cd9ff465"}}]}, {0x24, 0x6, "85a8cb4e169f6053966cedf43ad5c936771956869b0fea50ee5f0d60a032efe6"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x8d0, 0x1, [@m_ipt={0x8cc, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x8a2, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xffc}}, 0x4008800)
recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4094, 0xffe}], 0x1}}], 0x1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8m27.613036882s ago: executing program 6 (id=1289):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$can_bcm(r0, &(0x7f0000001ff0), 0x10)
sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0)

8m27.299025775s ago: executing program 6 (id=1291):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)

8m27.280464769s ago: executing program 6 (id=1292):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000040)=0x1)

8m27.162763112s ago: executing program 6 (id=1293):
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, 0x0, &(0x7f00000002c0)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0)

8m26.033759641s ago: executing program 6 (id=1294):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44890}, 0x8840)

8m10.561596074s ago: executing program 37 (id=1294):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44890}, 0x8840)

9.893843769s ago: executing program 5 (id=1948):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x31, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000200000000000001000000", 0x1b)
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', 0x0})

8.249058567s ago: executing program 7 (id=1950):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

7.249961821s ago: executing program 7 (id=1953):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x48, r0, 0x400, 0x70bd2d, 0x8, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0xe}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xfb3, 0x1, 0x3, 0x5, 0x800, 0x6]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
ioctl$KDSIGACCEPT(r5, 0x4b4e, 0xf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010)

6.759806733s ago: executing program 4 (id=1954):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000700)={0x1, 0x40, 0x5, &(0x7f0000000240)={0x6, "0fd62f5244b23de763cfb137449ccf18ea4ee9f23bc4e6acba8d11e8daa6c4ee99"}})

6.688156549s ago: executing program 5 (id=1955):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10, 0x40008b}, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x2048ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x3005, 0x1, 0x69}, &(0x7f0000000080), &(0x7f0000ff4000))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

5.884411174s ago: executing program 4 (id=1956):
syz_open_dev$usbfs(0x0, 0x76, 0x103381)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)

5.757593404s ago: executing program 5 (id=1957):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)

4.642227305s ago: executing program 5 (id=1958):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

4.186714301s ago: executing program 7 (id=1959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
wait4(r0, 0x0, 0x4, &(0x7f0000000680))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)

2.546049405s ago: executing program 7 (id=1960):
r0 = getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_pidfd_open(r0, 0x0)
setns(0xffffffffffffffff, 0x66020000)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)

2.504042913s ago: executing program 4 (id=1961):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
unshare(0x20000400)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20)

2.181683294s ago: executing program 7 (id=1962):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe2$watch_queue(&(0x7f0000001100), 0x80)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000051c0)=@newtaction={0xf14, 0x30, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{0xac, 0x1, [@m_ipt={0xa8, 0x806, 0x0, 0x0, {{0x8}, {0x4}, {0x7d, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x40, 0x1, [@m_ipt={0x3c, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x11, 0x6, "e2ebd2e0185a4d308803e9306e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x534, 0x1, [@m_ipt={0x4c, 0x14, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x1b, 0x6, "1af4d23bb88561537a355b01f686b616ad659466ede330"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_ipt={0x2b4, 0x6, 0x0, 0x0, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x121, 0x6, {0xe, 'filter\x00', 0xca, 0xfc79, "972669edc2fa8226c5dc6701833ed311d65bf4adc5ce1d4454bfd1c5a4c688ae0bf289bb2bead526d9bed20810edef5be201978096fea9a15dac3b6ba53151aface046beb6da8026bc8b63e51cb49c84205238be773c7607a75630ceb5d2d354c5616b73da4ed2668fa844b2a4bd68d66c8752c4c24e65da66b71c939f6758c72b4f0d4174b1bf591581282387dbdd682f034413edb577ae0ecd24c0cdb33116f0f4cd8ac06580fbb9a0071036e6a9d81abe6baa019ea36394d5bd190a60ebe238c1c238240cb4c7426bba859367daa9356dfd09376ce25738881d444cd0d27fbafe3e1b3208d59913fa8ce6fce4a880faed2719125c12"}}, @TCA_IPT_TARG={0xbd, 0x6, {0x461, 'raw\x00', 0x1, 0x9, "e4988ac2ed1363c493d5f199d019fb307adfd3e856cdba68cf6b91879dfd609aff2c4e3cb6a176984f622455d2c730456995d2e900de756f7a8b82a5697be71d76323a5867c311d3c04cbd859a878d89436894aea56ed52094b460a1bf8bc7b573eb9fa503b58a3a9b8a48673fbbc75a1f131a416baced9732387ef2119a11d0c2eed7cd6bc6a00c7c8166666d30d66f4d94fc"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x73, 0x6, "185958781d1db7b9b704cf6537222d0e05d80edc9ca3679a153c6d7f0daa4ef88167eb28cec88d6651b36bc14d064a61cf4cb893fb619b24b60c1fc4cfc989ad32d726f7bcf39f8e1accbe8141e2c2d3f6b89e412f6075a7aa78897eeea4db4944cf8d199f199c8872d7bb43723431"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x1e4, 0xf, 0x0, 0x0, {{0x8}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x45, 0x6, {0x9, 'raw\x00', 0x4, 0x9, "6f4fa8b7b50115b1c201aa96398fe4b95eb7cc63806ecf1e8c21a0"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xa5, 0x6, "3f67a3c7f374dc8aee2dd8232b761c0943c890fecbd1793e69e26f5cd36f229cffe9a9ec5569af76729fc0896a91bd69becfcfd6b10a381c6a61e4d5b880ed00198a24672137dfce843d46301095cfd83667c3d4869a92aa439e9aaabc4eac797287c5269a5b099daef651a8d1fb8f7f38a6b040ffbcd10090d398804b6793049172b155e115f90e20d96896b2ef781bcc4b61a1d046b8aaef5269ec1ff93e824e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x4c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x24, 0x6, "85a8cb4e169f6053966cedf43ad5c936771956869b0fea50ee5f0d60a032efe6"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x8e0, 0x1, [@m_ipt={0x8dc, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x8b1, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xf14}}, 0x4008800)
recvmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4094, 0xffe}], 0x1}}], 0x1, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r6, 0x400c0930, 0x7)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0)

2.026741451s ago: executing program 4 (id=1963):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x4000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

618.292498ms ago: executing program 4 (id=1964):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

540.13502ms ago: executing program 7 (id=1965):
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040))

229.249294ms ago: executing program 38 (id=1965):
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x480e0)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040))

170.614365ms ago: executing program 5 (id=1967):
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000})

49.27846ms ago: executing program 5 (id=1968):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
wait4(r0, 0x0, 0x4, &(0x7f0000000680))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

0s ago: executing program 4 (id=1969):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4d, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}})
io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019300)=""/102400, 0x19000)
syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x5, 0x296}, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r5, 0x0)
open(0x0, 0x84242, 0x1df2a23c5997fa5f)

kernel console output (not intermixed with test programs):

eout
[ 1005.525906][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1005.646130][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1005.728530][  T153] bond0 (unregistering): Released all slaves
[ 1006.395666][T12114] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.395895][T12114] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.396146][T12114] bridge_slave_0: entered allmulticast mode
[ 1006.402424][T12114] bridge_slave_0: entered promiscuous mode
[ 1006.705309][  T153] hsr_slave_0: left promiscuous mode
[ 1006.767874][ T9516] Bluetooth: hci5: command tx timeout
[ 1006.771719][  T153] hsr_slave_1: left promiscuous mode
[ 1006.773059][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1006.808271][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1007.324907][ T9516] Bluetooth: hci0: command tx timeout
[ 1007.484959][ T9516] Bluetooth: hci2: command tx timeout
[ 1007.889011][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1008.035748][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1008.846002][ T9516] Bluetooth: hci5: command tx timeout
[ 1009.404853][ T9516] Bluetooth: hci0: command tx timeout
[ 1009.816486][T12114] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.816625][T12114] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.816822][T12114] bridge_slave_1: entered allmulticast mode
[ 1009.818982][T12114] bridge_slave_1: entered promiscuous mode
[ 1010.121244][T12271] overlayfs: overlapping lowerdir path
[ 1010.728156][T12275] fuse: Bad value for 'fd'
[ 1010.933227][ T9516] Bluetooth: hci5: command tx timeout
[ 1011.099866][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1011.183383][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1011.485093][ T9516] Bluetooth: hci0: command tx timeout
[ 1011.686632][T12114] team0: Port device team_slave_0 added
[ 1011.870037][T12114] team0: Port device team_slave_1 added
[ 1012.343697][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1012.343715][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.343737][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1012.469764][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1012.469779][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1012.469800][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1012.639971][T11977] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1012.676911][T11977] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1012.810505][T11977] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1012.907302][T11977] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1013.004569][ T9516] Bluetooth: hci5: command tx timeout
[ 1013.049384][T12114] hsr_slave_0: entered promiscuous mode
[ 1013.050509][T12114] hsr_slave_1: entered promiscuous mode
[ 1013.051304][T12114] debugfs: 'hsr0' already exists in 'hsr'
[ 1013.051323][T12114] Cannot create hsr debugfs directory
[ 1013.904590][T10563] usb 8-1: new full-speed USB device number 25 using dummy_hcd
[ 1014.056973][T10563] usb 8-1: config 0 has no interfaces?
[ 1014.061331][T10563] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1014.061362][T10563] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.061377][T10563] usb 8-1: Product: syz
[ 1014.061388][T10563] usb 8-1: Manufacturer: syz
[ 1014.061399][T10563] usb 8-1: SerialNumber: syz
[ 1014.107131][T10563] usb 8-1: config 0 descriptor??
[ 1014.141736][T12206] chnl_net:caif_netlink_parms(): no params data found
[ 1014.220186][T12188] chnl_net:caif_netlink_parms(): no params data found
[ 1014.311696][T10522] usb 8-1: USB disconnect, device number 25
[ 1015.154444][T10522] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[ 1015.242616][T12206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1015.243036][T12206] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.243291][T12206] bridge_slave_0: entered allmulticast mode
[ 1015.268317][T12206] bridge_slave_0: entered promiscuous mode
[ 1015.322577][T10522] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1015.322612][T10522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.322635][T10522] usb 8-1: Product: syz
[ 1015.322651][T10522] usb 8-1: Manufacturer: syz
[ 1015.322668][T10522] usb 8-1: SerialNumber: syz
[ 1015.421831][T12206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1015.422133][T12206] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.422397][T12206] bridge_slave_1: entered allmulticast mode
[ 1015.447340][T12206] bridge_slave_1: entered promiscuous mode
[ 1015.652811][T12188] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1015.652960][T12188] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.653197][T12188] bridge_slave_0: entered allmulticast mode
[ 1015.679919][T12188] bridge_slave_0: entered promiscuous mode
[ 1015.742099][T10522] net_ratelimit: 10 callbacks suppressed
[ 1015.742127][T10522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1015.742190][T10522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1016.149027][T12188] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1016.149171][T12188] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1016.149420][T12188] bridge_slave_1: entered allmulticast mode
[ 1016.152391][T12188] bridge_slave_1: entered promiscuous mode
[ 1016.201075][T12206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1016.522375][T12206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1016.557324][T10522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[ 1016.557386][T10522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1016.559147][T10522] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1016.637383][T10522] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71
[ 1016.657923][T10522] usb 8-1: USB disconnect, device number 26
[ 1016.823592][T12188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1017.248906][T12188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1017.270711][T12206] team0: Port device team_slave_0 added
[ 1017.336935][T12348] vivid-000: disconnect
[ 1017.473114][T12342] vivid-000: reconnect
[ 1017.609924][T12206] team0: Port device team_slave_1 added
[ 1019.223496][T12188] team0: Port device team_slave_0 added
[ 1019.494740][T12188] team0: Port device team_slave_1 added
[ 1019.842913][T12206] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1019.842929][T12206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1019.842954][T12206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1019.970474][T12206] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1019.970494][T12206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1019.970522][T12206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1020.390012][T12188] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1020.390031][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1020.390062][T12188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1020.462095][T12188] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1020.462111][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1020.462136][T12188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1021.308422][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1485'.
[ 1021.559538][T12206] hsr_slave_0: entered promiscuous mode
[ 1021.562039][T12206] hsr_slave_1: entered promiscuous mode
[ 1021.563157][T12206] debugfs: 'hsr0' already exists in 'hsr'
[ 1021.563184][T12206] Cannot create hsr debugfs directory
[ 1022.571345][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1022.707017][T12188] hsr_slave_0: entered promiscuous mode
[ 1022.708590][T12188] hsr_slave_1: entered promiscuous mode
[ 1022.709620][T12188] debugfs: 'hsr0' already exists in 'hsr'
[ 1022.709648][T12188] Cannot create hsr debugfs directory
[ 1023.319246][T11977] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1023.552062][T12114] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1023.629874][T12114] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1023.818283][T12114] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1023.895583][T12114] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1024.573704][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1025.437800][T11977] 8021q: adding VLAN 0 to HW filter on device team0
[ 1025.564815][  T153] bridge_slave_1: left allmulticast mode
[ 1025.564848][  T153] bridge_slave_1: left promiscuous mode
[ 1025.565128][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.664185][  T153] bridge_slave_0: left allmulticast mode
[ 1025.664208][  T153] bridge_slave_0: left promiscuous mode
[ 1025.664411][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.737491][  T153] bridge_slave_1: left allmulticast mode
[ 1025.737514][  T153] bridge_slave_1: left promiscuous mode
[ 1025.737693][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.816170][  T153] bridge_slave_0: left allmulticast mode
[ 1025.816195][  T153] bridge_slave_0: left promiscuous mode
[ 1025.816386][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.888311][  T153] bridge_slave_1: left allmulticast mode
[ 1025.888336][  T153] bridge_slave_1: left promiscuous mode
[ 1025.888513][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.019117][  T153] bridge_slave_0: left allmulticast mode
[ 1026.019142][  T153] bridge_slave_0: left promiscuous mode
[ 1026.019336][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.384318][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1026.722300][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1026.936104][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1027.372003][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1029.694531][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1029.755652][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1029.816161][  T153] bond0 (unregistering): Released all slaves
[ 1030.604658][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1030.684502][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1030.746987][  T153] bond0 (unregistering): Released all slaves
[ 1032.334253][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1032.434223][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1032.475733][  T153] bond0 (unregistering): Released all slaves
[ 1032.497250][T12467] lo speed is unknown, defaulting to 1000
[ 1032.497929][T12467] lo speed is unknown, defaulting to 1000
[ 1032.514979][T12467] lo speed is unknown, defaulting to 1000
[ 1032.535085][T12467] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1032.554648][T12467] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1032.718953][T12467] lo speed is unknown, defaulting to 1000
[ 1032.730881][T12467] lo speed is unknown, defaulting to 1000
[ 1032.736356][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.737117][ T6224] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1032.739002][T12467] lo speed is unknown, defaulting to 1000
[ 1032.742486][T12467] lo speed is unknown, defaulting to 1000
[ 1032.746750][T12467] lo speed is unknown, defaulting to 1000
[ 1032.750127][T12467] lo speed is unknown, defaulting to 1000
[ 1032.753432][T12467] lo speed is unknown, defaulting to 1000
[ 1032.756788][T12467] lo speed is unknown, defaulting to 1000
[ 1032.889262][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.889545][ T6224] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1034.523353][T10569] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[ 1034.663856][  T153] hsr_slave_0: left promiscuous mode
[ 1034.683708][T10569] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1034.683741][T10569] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.683763][T10569] usb 8-1: Product: syz
[ 1034.683780][T10569] usb 8-1: Manufacturer: syz
[ 1034.683795][T10569] usb 8-1: SerialNumber: syz
[ 1034.687509][  T153] hsr_slave_1: left promiscuous mode
[ 1034.697539][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1034.768273][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1034.903560][  T153] hsr_slave_0: left promiscuous mode
[ 1034.945969][  T153] hsr_slave_1: left promiscuous mode
[ 1034.947049][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1034.987317][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1035.123553][  T153] hsr_slave_0: left promiscuous mode
[ 1035.153406][  T153] hsr_slave_1: left promiscuous mode
[ 1035.155247][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1035.157377][T10569] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1035.157441][T10569] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1035.224715][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1036.126965][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1036.294108][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1036.450824][T10569] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1036.451590][T10569] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[ 1036.656972][T10569] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO
[ 1036.657018][T10569] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1036.657661][T10569] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1036.715695][T10569] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71
[ 1036.735698][T10569] usb 8-1: USB disconnect, device number 27
[ 1040.220357][T12510] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1497' sets config #0
[ 1040.300788][T12510] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1497' sets config #1
[ 1040.663833][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1041.517751][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1041.658736][T12522] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1500'.
[ 1044.439124][T12530] Bluetooth: MGMT ver 1.23
[ 1044.539990][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1045.715712][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1046.791153][T12544] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1507'.
[ 1049.780386][T12114] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1050.102237][T12114] 8021q: adding VLAN 0 to HW filter on device team0
[ 1050.123807][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.124032][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1050.140667][T11977] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1050.167239][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.167473][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1053.467313][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1053.486862][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1053.489664][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1053.491380][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1053.514478][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1053.723951][T12591] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1514'.
[ 1054.776146][T12206] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1054.973029][T12206] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1055.546742][T12206] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1056.682497][ T9516] Bluetooth: hci4: command tx timeout
[ 1056.716082][T12206] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1056.718652][T12588] lo speed is unknown, defaulting to 1000
[ 1056.905282][T12114] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1056.962183][T10563] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 1057.039757][T12188] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1057.116003][T12188] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1057.135566][T10563] usb 8-1: Using ep0 maxpacket: 8
[ 1057.140767][T10563] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1057.140802][T10563] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.140825][T10563] usb 8-1: Product: syz
[ 1057.140842][T10563] usb 8-1: Manufacturer: syz
[ 1057.140858][T10563] usb 8-1: SerialNumber: syz
[ 1057.189266][T10563] usb 8-1: config 0 descriptor??
[ 1057.229913][T12188] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1057.360115][T12188] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1057.408309][T10563] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1057.956168][T12588] chnl_net:caif_netlink_parms(): no params data found
[ 1058.022430][T10563] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1058.063447][T10563] usb 8-1: USB disconnect, device number 28
[ 1058.486022][T12588] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1058.486231][T12588] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.486460][T12588] bridge_slave_0: entered allmulticast mode
[ 1058.489222][T12588] bridge_slave_0: entered promiscuous mode
[ 1058.504970][T12588] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.505133][T12588] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1058.505446][T12588] bridge_slave_1: entered allmulticast mode
[ 1058.508715][T12588] bridge_slave_1: entered promiscuous mode
[ 1058.762078][ T9516] Bluetooth: hci4: command tx timeout
[ 1059.169179][T12588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1059.228524][T12588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1059.548352][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1059.551648][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1059.570529][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1059.600506][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1059.601391][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1060.107330][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1060.869801][ T5808] Bluetooth: hci4: command tx timeout
[ 1061.649293][T12647] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1521'.
[ 1062.506012][ T5808] Bluetooth: hci2: command tx timeout
[ 1062.776853][T12206] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1062.820214][T12588] team0: Port device team_slave_0 added
[ 1063.057360][T12588] team0: Port device team_slave_1 added
[ 1063.164143][ T5808] Bluetooth: hci4: command tx timeout
[ 1063.512886][T12588] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1063.512899][T12588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1063.512921][T12588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1063.539588][T12588] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1063.539611][T12588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1063.539647][T12588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1063.572061][T12635] lo speed is unknown, defaulting to 1000
[ 1063.688692][T12206] 8021q: adding VLAN 0 to HW filter on device team0
[ 1063.978971][T12588] hsr_slave_0: entered promiscuous mode
[ 1063.990246][T12588] hsr_slave_1: entered promiscuous mode
[ 1064.002119][T12588] debugfs: 'hsr0' already exists in 'hsr'
[ 1064.002151][T12588] Cannot create hsr debugfs directory
[ 1064.054948][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1064.055127][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1064.376512][  T153] bridge_slave_1: left allmulticast mode
[ 1064.376541][  T153] bridge_slave_1: left promiscuous mode
[ 1064.376749][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.453688][  T153] bridge_slave_0: left allmulticast mode
[ 1064.453722][  T153] bridge_slave_0: left promiscuous mode
[ 1064.454007][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.500192][ T9516] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1064.523814][ T9516] Bluetooth: hci2: command tx timeout
[ 1064.546780][ T9516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1064.556931][ T9516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1064.559195][ T9516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1064.560754][ T9516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1065.292941][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1065.298173][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1065.299402][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1065.312267][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1065.317104][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1066.601732][ T9516] Bluetooth: hci0: command tx timeout
[ 1066.602534][ T5808] Bluetooth: hci2: command tx timeout
[ 1066.653642][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1066.732165][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1066.755943][  T153] bond0 (unregistering): Released all slaves
[ 1067.297941][T12669] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1067.404753][  T153] hsr_slave_0: left promiscuous mode
[ 1067.422446][  T153] hsr_slave_1: left promiscuous mode
[ 1067.423576][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1067.475203][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1067.483115][ T9516] Bluetooth: hci3: command tx timeout
[ 1068.633730][T12679] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1528'.
[ 1069.607190][ T9516] Bluetooth: hci3: command tx timeout
[ 1069.766390][ T9516] Bluetooth: hci0: command tx timeout
[ 1069.768404][ T5808] Bluetooth: hci2: command tx timeout
[ 1071.641358][ T5808] Bluetooth: hci3: command tx timeout
[ 1071.804090][ T5808] Bluetooth: hci0: command tx timeout
[ 1073.239626][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1073.814177][T12707] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1535'.
[ 1074.727229][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1074.801239][ T5808] Bluetooth: hci3: command 0x0419 tx timeout
[ 1074.812104][ T5808] Bluetooth: hci0: command tx timeout
[ 1076.951534][ T9516] Bluetooth: hci3: command 0x0419 tx timeout
[ 1079.354510][T12655] lo speed is unknown, defaulting to 1000
[ 1079.534190][T12665] lo speed is unknown, defaulting to 1000
[ 1080.941841][T12635] chnl_net:caif_netlink_parms(): no params data found
[ 1081.745300][T12755] overlayfs: overlapping lowerdir path
[ 1082.072031][T12635] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1082.083207][T12635] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1082.084088][T12635] bridge_slave_0: entered allmulticast mode
[ 1082.135804][T12635] bridge_slave_0: entered promiscuous mode
[ 1082.218001][T12758] fuse: Bad value for 'fd'
[ 1082.614624][T12635] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1082.614772][T12635] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1082.615040][T12635] bridge_slave_1: entered allmulticast mode
[ 1082.618037][T12635] bridge_slave_1: entered promiscuous mode
[ 1084.120030][T12776] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1084.834439][T12635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1084.901925][T12635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1085.034756][T12655] chnl_net:caif_netlink_parms(): no params data found
[ 1085.216544][T12665] chnl_net:caif_netlink_parms(): no params data found
[ 1085.312833][T12635] team0: Port device team_slave_0 added
[ 1085.427641][T12635] team0: Port device team_slave_1 added
[ 1086.155980][T12635] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1086.155997][T12635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1086.156018][T12635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1086.169788][T12588] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1086.302371][T10569] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[ 1086.421596][T12635] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1086.421610][T12635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1086.421632][T12635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1086.429795][T12588] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1086.490445][T10569] usb 8-1: Using ep0 maxpacket: 8
[ 1086.511096][T10569] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1086.511128][T10569] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.511152][T10569] usb 8-1: Product: syz
[ 1086.511168][T10569] usb 8-1: Manufacturer: syz
[ 1086.511185][T10569] usb 8-1: SerialNumber: syz
[ 1086.551638][T10569] usb 8-1: config 0 descriptor??
[ 1086.758896][T12588] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1086.767201][T10569] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1086.981566][T12588] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1087.194738][T12655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1087.195082][T12655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.195457][T12655] bridge_slave_0: entered allmulticast mode
[ 1087.208516][T12655] bridge_slave_0: entered promiscuous mode
[ 1087.214827][T12665] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1087.214980][T12665] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1087.215188][T12665] bridge_slave_0: entered allmulticast mode
[ 1087.219747][T12665] bridge_slave_0: entered promiscuous mode
[ 1087.321859][T12655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.321999][T12655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.322209][T12655] bridge_slave_1: entered allmulticast mode
[ 1087.324939][T12655] bridge_slave_1: entered promiscuous mode
[ 1087.326736][T12665] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.326864][T12665] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.327044][T12665] bridge_slave_1: entered allmulticast mode
[ 1087.329710][T12665] bridge_slave_1: entered promiscuous mode
[ 1087.385408][T10569] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1087.424481][T10569] usb 8-1: USB disconnect, device number 29
[ 1087.848474][T12635] hsr_slave_0: entered promiscuous mode
[ 1087.849510][T12635] hsr_slave_1: entered promiscuous mode
[ 1088.650413][T12802] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1089.168849][T12655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1089.219483][T12665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1089.234157][T12655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1089.352774][T12665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1089.734192][T12655] team0: Port device team_slave_0 added
[ 1089.819074][T12665] team0: Port device team_slave_0 added
[ 1089.828691][T12655] team0: Port device team_slave_1 added
[ 1089.851075][T12665] team0: Port device team_slave_1 added
[ 1090.284171][T12655] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1090.284191][T12655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.284220][T12655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1090.494620][T12665] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1090.494634][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.494657][T12665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1090.495949][T12655] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1090.495965][T12655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.495997][T12655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1090.514813][T12665] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1090.514833][T12665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1090.514869][T12665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.457583][T12655] hsr_slave_0: entered promiscuous mode
[ 1092.458690][T12655] hsr_slave_1: entered promiscuous mode
[ 1092.459502][T12655] debugfs: 'hsr0' already exists in 'hsr'
[ 1092.459521][T12655] Cannot create hsr debugfs directory
[ 1092.499565][T12665] hsr_slave_0: entered promiscuous mode
[ 1092.505095][T12665] hsr_slave_1: entered promiscuous mode
[ 1092.506625][T12665] debugfs: 'hsr0' already exists in 'hsr'
[ 1092.506656][T12665] Cannot create hsr debugfs directory
[ 1093.506359][T12834] netlink: 'syz.7.1568': attribute type 1 has an invalid length.
[ 1097.559997][ T9339] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[ 1097.720910][ T9339] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1097.720944][ T9339] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1097.728960][ T9339] usb 8-1: config 0 descriptor??
[ 1097.817144][ T9339] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1098.200267][T12588] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1098.226112][  T153] bridge_slave_1: left allmulticast mode
[ 1098.226144][  T153] bridge_slave_1: left promiscuous mode
[ 1098.226408][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.307664][  T153] bridge_slave_0: left allmulticast mode
[ 1098.307696][  T153] bridge_slave_0: left promiscuous mode
[ 1098.307994][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.364939][  T153] bridge_slave_1: left allmulticast mode
[ 1098.364970][  T153] bridge_slave_1: left promiscuous mode
[ 1098.365229][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.453096][  T153] bridge_slave_0: left allmulticast mode
[ 1098.453129][  T153] bridge_slave_0: left promiscuous mode
[ 1098.453394][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.514677][  T153] bridge_slave_1: left allmulticast mode
[ 1098.514712][  T153] bridge_slave_1: left promiscuous mode
[ 1098.515006][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.572546][  T153] bridge_slave_0: left allmulticast mode
[ 1098.572580][  T153] bridge_slave_0: left promiscuous mode
[ 1098.572821][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.809992][ T9339] usb 8-1: USB disconnect, device number 30
[ 1100.700192][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1100.770440][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1100.781052][T12860] netlink: 'syz.7.1575': attribute type 1 has an invalid length.
[ 1100.833567][  T153] bond0 (unregistering): Released all slaves
[ 1101.450287][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1101.530199][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1101.593149][  T153] bond0 (unregistering): Released all slaves
[ 1103.150450][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1103.231990][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1103.252595][  T153] bond0 (unregistering): Released all slaves
[ 1103.502515][T12635] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1103.581995][T12635] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1103.650866][T12588] 8021q: adding VLAN 0 to HW filter on device team0
[ 1103.651969][T12635] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1104.053359][T12635] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1105.047797][ T1512] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.048057][ T1512] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1105.417879][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.418048][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1105.784613][T12883] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1106.529815][  T153] hsr_slave_0: left promiscuous mode
[ 1106.700476][  T153] hsr_slave_1: left promiscuous mode
[ 1106.705670][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1107.214505][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1107.619594][  T153] hsr_slave_0: left promiscuous mode
[ 1107.662334][  T153] hsr_slave_1: left promiscuous mode
[ 1107.665168][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1107.710395][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1107.859307][  T153] hsr_slave_0: left promiscuous mode
[ 1107.900272][  T153] hsr_slave_1: left promiscuous mode
[ 1107.900991][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1107.922442][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1110.283604][T12900] cgroup: fork rejected by pids controller in /syz7
[ 1110.377547][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1110.563417][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1111.914670][T14150] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1113.045829][ T9516] Bluetooth: hci1: unexpected event 0x10 length: 11 > 1
[ 1113.049404][ T5808] Bluetooth: hci1: hardware error 0xff
[ 1113.258601][T12692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1113.274572][T12692] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1113.276008][T12692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1113.279823][T12692] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1113.280852][T12692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1114.409542][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1114.569506][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1115.238832][ T5808] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1115.398930][ T5808] Bluetooth: hci5: command tx timeout
[ 1116.919544][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1117.510557][ T5808] Bluetooth: hci5: command tx timeout
[ 1117.539496][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1119.124646][T14180] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1119.558550][ T5808] Bluetooth: hci5: command tx timeout
[ 1120.631676][T12692] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1120.642758][T12692] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1120.644416][T12692] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1120.645912][T12692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1120.647462][T12692] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1121.494279][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.658322][T12692] Bluetooth: hci5: command tx timeout
[ 1122.481149][T14190] lo speed is unknown, defaulting to 1000
[ 1122.488083][T14161] lo speed is unknown, defaulting to 1000
[ 1122.689006][T12692] Bluetooth: hci6: command tx timeout
[ 1124.758413][T12692] Bluetooth: hci6: command tx timeout
[ 1124.978783][T14190] chnl_net:caif_netlink_parms(): no params data found
[ 1125.201440][T14161] chnl_net:caif_netlink_parms(): no params data found
[ 1125.673582][T14190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1125.673740][T14190] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1125.673909][T14190] bridge_slave_0: entered allmulticast mode
[ 1125.675860][T14190] bridge_slave_0: entered promiscuous mode
[ 1125.818402][T14190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1125.818548][T14190] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.818806][T14190] bridge_slave_1: entered allmulticast mode
[ 1125.831563][T14190] bridge_slave_1: entered promiscuous mode
[ 1126.277060][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1126.311200][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1126.315470][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1126.316712][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1126.317967][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1126.450899][T14161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1126.451156][T14161] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.451461][T14161] bridge_slave_0: entered allmulticast mode
[ 1126.454701][T14161] bridge_slave_0: entered promiscuous mode
[ 1126.504504][T14190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1126.621751][T14161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1126.621912][T14161] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.622174][T14161] bridge_slave_1: entered allmulticast mode
[ 1126.625173][T14161] bridge_slave_1: entered promiscuous mode
[ 1126.663142][T14190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1126.912753][ T5808] Bluetooth: hci6: command tx timeout
[ 1127.757333][T12692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1127.776984][T12692] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1127.788697][T12692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1127.790827][T12692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1127.793922][T12692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1128.467603][ T5808] Bluetooth: hci2: command tx timeout
[ 1128.731921][T14260] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1129.053229][T12692] Bluetooth: hci6: command tx timeout
[ 1129.958090][T12692] Bluetooth: hci4: command tx timeout
[ 1129.964051][T14161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1130.003971][T14190] team0: Port device team_slave_0 added
[ 1130.032195][T14161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1130.080372][T14190] team0: Port device team_slave_1 added
[ 1130.518002][T12692] Bluetooth: hci2: command tx timeout
[ 1131.440675][T14232] lo speed is unknown, defaulting to 1000
[ 1131.450629][T14161] team0: Port device team_slave_0 added
[ 1131.455809][T14190] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1131.455831][T14190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1131.455867][T14190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1131.537138][T14161] team0: Port device team_slave_1 added
[ 1131.549503][T14190] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1131.549524][T14190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1131.549556][T14190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1131.550171][T14251] lo speed is unknown, defaulting to 1000
[ 1131.925529][T14161] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1131.925549][T14161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1131.925580][T14161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1131.965109][T14161] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1131.965130][T14161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1131.965167][T14161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1132.037903][T12692] Bluetooth: hci4: command 0x041b tx timeout
[ 1132.394640][T14190] hsr_slave_0: entered promiscuous mode
[ 1132.396347][T14190] hsr_slave_1: entered promiscuous mode
[ 1132.397431][T14190] debugfs: 'hsr0' already exists in 'hsr'
[ 1132.397457][T14190] Cannot create hsr debugfs directory
[ 1132.597916][T12692] Bluetooth: hci2: command tx timeout
[ 1133.335464][T14161] hsr_slave_0: entered promiscuous mode
[ 1133.336585][T14161] hsr_slave_1: entered promiscuous mode
[ 1133.337303][T14161] debugfs: 'hsr0' already exists in 'hsr'
[ 1133.337322][T14161] Cannot create hsr debugfs directory
[ 1134.128450][T12692] Bluetooth: hci4: command 0x041b tx timeout
[ 1134.678738][T12692] Bluetooth: hci2: command tx timeout
[ 1136.198105][T12692] Bluetooth: hci4: command 0x041b tx timeout
[ 1136.664957][T14354] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1138.295170][T12692] Bluetooth: hci4: command 0x041b tx timeout
[ 1138.340220][T14232] chnl_net:caif_netlink_parms(): no params data found
[ 1138.581335][T14251] chnl_net:caif_netlink_parms(): no params data found
[ 1139.705400][T14232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.705635][T14232] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.705873][T14232] bridge_slave_0: entered allmulticast mode
[ 1139.729461][T14232] bridge_slave_0: entered promiscuous mode
[ 1140.302825][T14232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1140.302972][T14232] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.303252][T14232] bridge_slave_1: entered allmulticast mode
[ 1140.306516][T14232] bridge_slave_1: entered promiscuous mode
[ 1140.320206][T14251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1140.320378][T14251] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.320687][T14251] bridge_slave_0: entered allmulticast mode
[ 1140.369381][T14251] bridge_slave_0: entered promiscuous mode
[ 1140.458620][T14251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1140.458762][T14251] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.459074][T14251] bridge_slave_1: entered allmulticast mode
[ 1140.461196][T14251] bridge_slave_1: entered promiscuous mode
[ 1140.873960][T14382] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1612' sets config #0
[ 1140.876834][T14382] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1612' sets config #1
[ 1141.114390][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1141.244693][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1141.519750][T14251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1141.715621][T14251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1142.241541][T14232] team0: Port device team_slave_0 added
[ 1142.323112][T14232] team0: Port device team_slave_1 added
[ 1142.563293][T14251] team0: Port device team_slave_0 added
[ 1142.671862][T14251] team0: Port device team_slave_1 added
[ 1143.108834][T14392] 9pnet_virtio: no channels available for device ./bus
[ 1143.324563][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1143.324583][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1143.324616][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1143.723028][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1143.723047][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1143.723080][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1143.814986][T14251] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1143.815000][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1143.815022][T14251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1143.870093][T14251] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1143.870107][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1143.870129][T14251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1144.217807][T14232] hsr_slave_0: entered promiscuous mode
[ 1144.221306][T14232] hsr_slave_1: entered promiscuous mode
[ 1144.227495][T14232] debugfs: 'hsr0' already exists in 'hsr'
[ 1144.227540][T14232] Cannot create hsr debugfs directory
[ 1145.194760][T14251] hsr_slave_0: entered promiscuous mode
[ 1145.195879][T14251] hsr_slave_1: entered promiscuous mode
[ 1145.196666][T14251] debugfs: 'hsr0' already exists in 'hsr'
[ 1145.196690][T14251] Cannot create hsr debugfs directory
[ 1145.690754][  T153] bridge_slave_1: left allmulticast mode
[ 1145.690786][  T153] bridge_slave_1: left promiscuous mode
[ 1145.691079][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.758789][  T153] bridge_slave_0: left allmulticast mode
[ 1145.758814][  T153] bridge_slave_0: left promiscuous mode
[ 1145.759025][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.831185][  T153] bridge_slave_1: left allmulticast mode
[ 1145.831216][  T153] bridge_slave_1: left promiscuous mode
[ 1145.831399][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1145.888963][  T153] bridge_slave_0: left allmulticast mode
[ 1145.888997][  T153] bridge_slave_0: left promiscuous mode
[ 1145.889269][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.961399][  T153] bridge_slave_1: left allmulticast mode
[ 1145.961424][  T153] bridge_slave_1: left promiscuous mode
[ 1145.961650][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1146.018421][  T153] bridge_slave_0: left allmulticast mode
[ 1146.018446][  T153] bridge_slave_0: left promiscuous mode
[ 1146.018639][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1146.438898][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1146.538819][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1146.599996][  T153] bond0 (unregistering): Released all slaves
[ 1146.870480][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1147.369433][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1147.640735][  T153] bond0 (unregistering): Released all slaves
[ 1150.576419][T14420] 9pnet_virtio: no channels available for device ./bus
[ 1152.727584][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1152.828143][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1152.888884][  T153] bond0 (unregistering): Released all slaves
[ 1153.866797][  T153] hsr_slave_0: left promiscuous mode
[ 1153.886866][  T153] hsr_slave_1: left promiscuous mode
[ 1153.887841][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1153.927407][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1154.566670][  T153] hsr_slave_0: left promiscuous mode
[ 1154.606647][  T153] hsr_slave_1: left promiscuous mode
[ 1154.607678][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1154.837622][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1155.956676][  T153] hsr_slave_0: left promiscuous mode
[ 1156.171535][  T153] hsr_slave_1: left promiscuous mode
[ 1156.173758][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1156.207322][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1158.257060][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1158.447052][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1160.657039][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1161.841792][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1163.089780][T14473] overlayfs: overlapping lowerdir path
[ 1163.530320][T14476] fuse: Bad value for 'fd'
[ 1164.906771][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1165.346610][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1171.520891][T14190] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1171.566568][T14190] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1171.788217][T14190] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1171.884069][T14190] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1173.798966][T14190] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1173.895685][T14190] 8021q: adding VLAN 0 to HW filter on device team0
[ 1173.915278][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1173.915624][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1173.991284][  T169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1173.991407][  T169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1174.650845][ T9516] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1174.664129][ T9516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1174.675654][ T9516] Bluetooth: hci4: command 0x041b tx timeout
[ 1174.682338][ T9516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1174.698632][ T9516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1174.738006][ T9516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1174.856150][T14564] lo speed is unknown, defaulting to 1000
[ 1175.780030][T14564] chnl_net:caif_netlink_parms(): no params data found
[ 1176.838017][ T5808] Bluetooth: hci0: command tx timeout
[ 1176.859250][T14190] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1177.179350][T14564] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.180640][T14564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.181016][T14564] bridge_slave_0: entered allmulticast mode
[ 1177.208841][T14564] bridge_slave_0: entered promiscuous mode
[ 1177.297580][T14564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1177.297722][T14564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1177.298109][T14564] bridge_slave_1: entered allmulticast mode
[ 1177.301709][T14564] bridge_slave_1: entered promiscuous mode
[ 1177.654648][T14564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1177.704462][T14564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1179.273715][ T5808] Bluetooth: hci0: command tx timeout
[ 1179.382094][T14564] team0: Port device team_slave_0 added
[ 1179.484967][T14564] team0: Port device team_slave_1 added
[ 1180.300304][  T153] bridge_slave_1: left allmulticast mode
[ 1180.300329][  T153] bridge_slave_1: left promiscuous mode
[ 1180.300510][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1180.393558][  T153] bridge_slave_0: left allmulticast mode
[ 1180.393591][  T153] bridge_slave_0: left promiscuous mode
[ 1180.409724][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1180.925767][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1181.025983][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1181.087582][  T153] bond0 (unregistering): Released all slaves
[ 1181.130660][T14564] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1181.130680][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1181.130712][T14564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1181.186625][T14564] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1181.186645][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1181.186678][T14564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1181.319261][ T5808] Bluetooth: hci0: command tx timeout
[ 1181.340410][T14232] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1181.417150][T14232] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1181.941711][T14232] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1182.570505][ T9516] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1182.581852][ T9516] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1182.583659][ T9516] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1182.586840][ T9516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1182.587734][ T9516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1183.002932][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1183.274684][T14232] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1183.395684][ T9516] Bluetooth: hci0: command tx timeout
[ 1183.424946][T10557] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[ 1183.501720][T14564] hsr_slave_0: entered promiscuous mode
[ 1183.502758][T14564] hsr_slave_1: entered promiscuous mode
[ 1183.575017][T10557] usb 8-1: Using ep0 maxpacket: 16
[ 1183.580925][T10557] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1183.580958][T10557] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1183.580981][T10557] usb 8-1: Product: syz
[ 1183.580997][T10557] usb 8-1: Manufacturer: syz
[ 1183.581013][T10557] usb 8-1: SerialNumber: syz
[ 1183.588828][T10557] r8152-cfgselector 8-1: Unknown version 0x0000
[ 1183.588854][T10557] r8152-cfgselector 8-1: config 0 descriptor??
[ 1183.695141][  T153] hsr_slave_0: left promiscuous mode
[ 1183.714968][  T153] hsr_slave_1: left promiscuous mode
[ 1183.716139][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1183.755748][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1183.794156][T10557] r8152-cfgselector 8-1: Unknown version 0x0020
[ 1183.794515][T10557] r8152-cfgselector 8-1: bad CDC descriptors
[ 1184.000119][T10557] r8152-cfgselector 8-1: USB disconnect, device number 31
[ 1184.465758][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1184.645673][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1184.686074][ T9516] Bluetooth: hci3: command tx timeout
[ 1186.135997][T14668] lo speed is unknown, defaulting to 1000
[ 1186.813369][ T9516] Bluetooth: hci3: command tx timeout
[ 1186.834794][T14251] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1187.272763][T14251] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1187.392090][T14251] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1187.940474][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1187.943137][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1187.944337][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1187.947771][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1187.948710][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1189.142107][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1189.165796][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1189.167488][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1189.168706][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1189.169547][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1189.410644][ T5808] Bluetooth: hci3: command tx timeout
[ 1190.287597][ T5808] Bluetooth: hci2: command tx timeout
[ 1190.850106][T14720] lo speed is unknown, defaulting to 1000
[ 1191.236707][ T5808] Bluetooth: hci4: command tx timeout
[ 1191.403527][T14727] lo speed is unknown, defaulting to 1000
[ 1191.474512][ T5808] Bluetooth: hci3: command tx timeout
[ 1192.526961][ T5808] Bluetooth: hci2: command tx timeout
[ 1192.710606][T14668] chnl_net:caif_netlink_parms(): no params data found
[ 1193.325946][ T5808] Bluetooth: hci4: command tx timeout
[ 1194.571025][T14668] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1194.571243][T14668] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1194.571804][T14668] bridge_slave_0: entered allmulticast mode
[ 1194.594671][ T5808] Bluetooth: hci2: command tx timeout
[ 1194.616339][T14668] bridge_slave_0: entered promiscuous mode
[ 1194.659001][T14564] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1194.865518][T14668] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1194.865707][T14668] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1194.865913][T14668] bridge_slave_1: entered allmulticast mode
[ 1194.868838][T14668] bridge_slave_1: entered promiscuous mode
[ 1194.892070][T14564] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1195.716469][ T5808] Bluetooth: hci4: command tx timeout
[ 1195.833997][T14564] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1196.197840][T14720] chnl_net:caif_netlink_parms(): no params data found
[ 1196.320711][T14564] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1196.378500][T14668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1196.507383][T14668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1196.688844][ T5808] Bluetooth: hci2: command tx timeout
[ 1197.678035][T14668] team0: Port device team_slave_0 added
[ 1197.691634][T14727] chnl_net:caif_netlink_parms(): no params data found
[ 1197.741148][T14668] team0: Port device team_slave_1 added
[ 1197.795878][ T5808] Bluetooth: hci4: command tx timeout
[ 1197.878429][T14789] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1200.141305][T14668] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1200.141320][T14668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1200.141341][T14668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1200.427453][T14720] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1200.427613][T14720] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1200.427795][T14720] bridge_slave_0: entered allmulticast mode
[ 1200.429953][T14720] bridge_slave_0: entered promiscuous mode
[ 1200.433750][T14668] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1200.433761][T14668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1200.433783][T14668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1200.648151][T14720] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1200.648266][T14720] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1200.648478][T14720] bridge_slave_1: entered allmulticast mode
[ 1200.650625][T14720] bridge_slave_1: entered promiscuous mode
[ 1201.292195][T14720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1202.916393][T14727] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1202.916529][T14727] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1202.916743][T14727] bridge_slave_0: entered allmulticast mode
[ 1202.918808][T14727] bridge_slave_0: entered promiscuous mode
[ 1202.923408][T14720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1203.007791][T14727] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1203.007933][T14727] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.008190][T14727] bridge_slave_1: entered allmulticast mode
[ 1203.011210][T14727] bridge_slave_1: entered promiscuous mode
[ 1203.093897][T10563] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[ 1203.122758][T14668] hsr_slave_0: entered promiscuous mode
[ 1203.124551][T14668] hsr_slave_1: entered promiscuous mode
[ 1203.125843][T14668] debugfs: 'hsr0' already exists in 'hsr'
[ 1203.125872][T14668] Cannot create hsr debugfs directory
[ 1203.243857][T10563] usb 8-1: Using ep0 maxpacket: 16
[ 1203.252960][T10563] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1203.252993][T10563] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.253015][T10563] usb 8-1: Product: syz
[ 1203.253031][T10563] usb 8-1: Manufacturer: syz
[ 1203.253048][T10563] usb 8-1: SerialNumber: syz
[ 1203.277206][T10563] r8152-cfgselector 8-1: Unknown version 0x0000
[ 1203.277236][T10563] r8152-cfgselector 8-1: config 0 descriptor??
[ 1203.652063][T14720] team0: Port device team_slave_0 added
[ 1203.680651][T14727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1203.683181][T14720] team0: Port device team_slave_1 added
[ 1203.726232][T10557] r8152-cfgselector 8-1: USB disconnect, device number 32
[ 1203.864093][T14727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1204.975357][T14720] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1204.975376][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1204.975406][T14720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1205.050971][T14727] team0: Port device team_slave_0 added
[ 1205.103378][T14720] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1205.103398][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1205.103428][T14720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1205.125450][T14727] team0: Port device team_slave_1 added
[ 1206.062307][T14727] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1206.062327][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1206.062356][T14727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1206.201035][T14727] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1206.201054][T14727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1206.201087][T14727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1206.439841][T14720] hsr_slave_0: entered promiscuous mode
[ 1206.441396][T14720] hsr_slave_1: entered promiscuous mode
[ 1206.442673][T14720] debugfs: 'hsr0' already exists in 'hsr'
[ 1206.442700][T14720] Cannot create hsr debugfs directory
[ 1207.186685][T14727] hsr_slave_0: entered promiscuous mode
[ 1207.188252][T14727] hsr_slave_1: entered promiscuous mode
[ 1207.189351][T14727] debugfs: 'hsr0' already exists in 'hsr'
[ 1207.189377][T14727] Cannot create hsr debugfs directory
[ 1207.862531][T14855] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1695' sets config #0
[ 1207.862682][T14855] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1695' sets config #1
[ 1209.493757][T14564] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1209.968671][T14564] 8021q: adding VLAN 0 to HW filter on device team0
[ 1210.032393][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1210.032690][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1210.188596][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1210.188749][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1210.231484][  T153] bridge_slave_1: left allmulticast mode
[ 1210.231515][  T153] bridge_slave_1: left promiscuous mode
[ 1210.231774][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1210.305131][  T153] bridge_slave_0: left allmulticast mode
[ 1210.305164][  T153] bridge_slave_0: left promiscuous mode
[ 1210.305449][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1210.398624][  T153] bridge_slave_1: left allmulticast mode
[ 1210.398660][  T153] bridge_slave_1: left promiscuous mode
[ 1210.398958][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1210.904975][  T153] bridge_slave_0: left allmulticast mode
[ 1210.905009][  T153] bridge_slave_0: left promiscuous mode
[ 1210.905313][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.026925][T14876] overlayfs: overlapping lowerdir path
[ 1211.028173][  T153] bridge_slave_1: left allmulticast mode
[ 1211.028194][  T153] bridge_slave_1: left promiscuous mode
[ 1211.028430][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1211.257337][  T153] bridge_slave_0: left allmulticast mode
[ 1211.257362][  T153] bridge_slave_0: left promiscuous mode
[ 1211.257558][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.408604][T14879] fuse: Bad value for 'fd'
[ 1211.410884][  T153] bridge_slave_1: left allmulticast mode
[ 1211.410958][  T153] bridge_slave_1: left promiscuous mode
[ 1211.411765][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1211.497631][  T153] bridge_slave_0: left allmulticast mode
[ 1211.497700][  T153] bridge_slave_0: left promiscuous mode
[ 1211.499222][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.999681][T14881] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1702' sets config #0
[ 1211.999916][T14881] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1702' sets config #1
[ 1212.255831][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1212.335241][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1212.411238][  T153] bond0 (unregistering): Released all slaves
[ 1212.776190][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1212.865590][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1212.926544][  T153] bond0 (unregistering): Released all slaves
[ 1214.613934][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1214.695544][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1214.717664][  T153] bond0 (unregistering): Released all slaves
[ 1214.935889][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1215.024436][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1215.095855][  T153] bond0 (unregistering): Released all slaves
[ 1216.212862][  T153] hsr_slave_0: left promiscuous mode
[ 1216.704673][  T153] hsr_slave_1: left promiscuous mode
[ 1216.705755][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1216.754026][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1216.823899][T14900] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1217.003284][T14906] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1709' sets config #0
[ 1217.003436][T14906] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1709' sets config #1
[ 1217.053767][  T153] hsr_slave_0: left promiscuous mode
[ 1217.093252][  T153] hsr_slave_1: left promiscuous mode
[ 1217.094036][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1217.147738][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1217.304220][  T153] hsr_slave_0: left promiscuous mode
[ 1217.343651][  T153] hsr_slave_1: left promiscuous mode
[ 1217.344636][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1217.374431][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1217.533989][  T153] hsr_slave_0: left promiscuous mode
[ 1217.573983][  T153] hsr_slave_1: left promiscuous mode
[ 1217.575079][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1217.599453][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1218.603973][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1218.764755][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1219.905008][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1220.073654][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1222.504416][   T38] kauditd_printk_skb: 3 callbacks suppressed
[ 1222.504463][   T38] audit: type=1326 audit(1762049053.105:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14919 comm="syz.7.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1222.504752][   T38] audit: type=1326 audit(1762049053.105:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14919 comm="syz.7.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1222.505001][   T38] audit: type=1326 audit(1762049053.115:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14919 comm="syz.7.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1222.505355][   T38] audit: type=1326 audit(1762049053.115:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14919 comm="syz.7.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1222.505576][   T38] audit: type=1326 audit(1762049053.115:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14919 comm="syz.7.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1223.503475][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1223.889869][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1225.061315][   T38] audit: type=1326 audit(1762049055.645:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.7.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1225.061826][   T38] audit: type=1326 audit(1762049055.645:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.7.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1225.062075][   T38] audit: type=1326 audit(1762049055.645:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.7.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1225.062326][   T38] audit: type=1326 audit(1762049055.645:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.7.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1225.063288][   T38] audit: type=1326 audit(1762049055.645:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14928 comm="syz.7.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1228.603066][  T153] team0 (unregistering): Port device team_slave_1 removed
[ 1228.743988][  T153] team0 (unregistering): Port device team_slave_0 removed
[ 1229.384599][T14564] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1230.186070][T14564] veth0_vlan: entered promiscuous mode
[ 1230.265924][T14564] veth1_vlan: entered promiscuous mode
[ 1230.326780][T14564] veth0_macvtap: entered promiscuous mode
[ 1230.348441][T14564] veth1_macvtap: entered promiscuous mode
[ 1230.455968][T14564] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1230.513950][T14564] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1230.529050][   T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.529753][   T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.530266][   T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.530714][   T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.786634][ T5961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1231.786660][ T5961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1232.028061][ T5009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1232.028080][ T5009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1234.036044][T14668] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1234.108153][T14668] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1234.254524][T14668] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1234.345805][T14668] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1234.926536][T14720] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1234.975248][T14720] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1235.092170][T14720] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1235.404898][T14720] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1235.903993][T14727] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1236.100160][T14727] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1236.161589][T14727] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1236.266572][T14727] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1236.614433][T14668] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1236.739645][T14668] 8021q: adding VLAN 0 to HW filter on device team0
[ 1236.807802][  T153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1236.808295][  T153] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1236.860599][T14720] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1236.923867][ T4853] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1236.924020][ T4853] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1237.083789][T14720] 8021q: adding VLAN 0 to HW filter on device team0
[ 1237.149233][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1237.149658][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1237.230370][T14727] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1237.294516][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1237.294749][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1237.473923][T14727] 8021q: adding VLAN 0 to HW filter on device team0
[ 1237.539975][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1237.541480][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1237.625886][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1237.628430][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1238.110427][T14668] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1239.318341][T14720] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1239.531126][T14727] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1239.839760][T14668] veth0_vlan: entered promiscuous mode
[ 1240.162789][T14668] veth1_vlan: entered promiscuous mode
[ 1240.575859][T14668] veth0_macvtap: entered promiscuous mode
[ 1240.657549][T14668] veth1_macvtap: entered promiscuous mode
[ 1240.804907][T14668] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1240.830333][T14668] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1240.893872][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.902310][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.946614][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.974597][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1241.420821][T14720] veth0_vlan: entered promiscuous mode
[ 1241.654040][T14720] veth1_vlan: entered promiscuous mode
[ 1241.711460][  T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1241.717639][  T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1241.994084][T14727] veth0_vlan: entered promiscuous mode
[ 1242.115766][T14720] veth0_macvtap: entered promiscuous mode
[ 1242.124252][T14727] veth1_vlan: entered promiscuous mode
[ 1242.133826][T14720] veth1_macvtap: entered promiscuous mode
[ 1242.257400][T14720] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1242.307996][T14720] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1242.331363][T14727] veth0_macvtap: entered promiscuous mode
[ 1242.359625][  T169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.375242][  T169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.384315][  T169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.385099][T14727] veth1_macvtap: entered promiscuous mode
[ 1242.409698][  T169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.646334][T14727] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1242.673255][T14727] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1243.343017][  T169] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.351913][  T169] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.372741][  T169] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.373795][  T169] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.552839][T10561] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[ 1243.558055][ T9516] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1243.564433][ T9516] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1243.571927][ T9516] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1243.573238][ T9516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1243.575522][ T9516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1243.701569][T10561] usb 8-1: Using ep0 maxpacket: 16
[ 1243.706381][T10561] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1243.706414][T10561] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.706436][T10561] usb 8-1: Product: syz
[ 1243.706452][T10561] usb 8-1: Manufacturer: syz
[ 1243.706468][T10561] usb 8-1: SerialNumber: syz
[ 1243.754940][T10561] r8152-cfgselector 8-1: Unknown version 0x0000
[ 1243.754970][T10561] r8152-cfgselector 8-1: config 0 descriptor??
[ 1243.863921][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1243.863944][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1244.120038][ T1122] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1244.358530][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.663229][ T1122] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1244.712760][T15078] lo speed is unknown, defaulting to 1000
[ 1244.850609][ T5961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1244.850632][ T5961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1245.174022][ T1122] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1245.831726][ T5808] Bluetooth: hci3: command tx timeout
[ 1245.857249][ T1122] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1246.948917][  T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1246.948941][  T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1247.015663][T14595] r8152-cfgselector 8-1: USB disconnect, device number 33
[ 1247.980089][ T5808] Bluetooth: hci3: command tx timeout
[ 1247.997748][ T1512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1247.997773][ T1512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1249.152238][ T1122] bridge_slave_1: left allmulticast mode
[ 1249.152272][ T1122] bridge_slave_1: left promiscuous mode
[ 1249.152534][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1249.273762][ T1122] bridge_slave_0: left allmulticast mode
[ 1249.273795][ T1122] bridge_slave_0: left promiscuous mode
[ 1249.274102][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1250.031501][ T5808] Bluetooth: hci3: command tx timeout
[ 1250.598890][ T9516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1250.615089][ T9516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1250.616505][ T9516] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1250.620008][ T9516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1250.649554][ T9516] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1252.144603][ T5808] Bluetooth: hci3: command tx timeout
[ 1252.751207][ T5808] Bluetooth: hci4: command tx timeout
[ 1253.318470][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1253.393158][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1253.419423][T15138] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[ 1253.419454][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1253.423093][T15138] vhci_hcd vhci_hcd.0: Device attached
[ 1253.427036][T15138] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[ 1253.427068][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1253.430043][T15138] vhci_hcd vhci_hcd.0: Device attached
[ 1253.434696][T15138] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16)
[ 1253.434727][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1253.434796][T15138] vhci_hcd vhci_hcd.0: Device attached
[ 1253.436318][T15138] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1253.439389][T15138] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20)
[ 1253.439418][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1253.439479][T15138] vhci_hcd vhci_hcd.0: Device attached
[ 1253.450911][T15138] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(22)
[ 1253.454607][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1253.454960][T15138] vhci_hcd vhci_hcd.0: Device attached
[ 1253.456656][T15138] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1253.460736][T15138] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(26)
[ 1253.460779][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1253.475670][T15138] vhci_hcd vhci_hcd.0: Device attached
[ 1253.505269][T15149] vhci_hcd: connection closed
[ 1253.506110][   T13] vhci_hcd: stop threads
[ 1253.506133][   T13] vhci_hcd: release socket
[ 1253.506190][   T13] vhci_hcd: disconnect device
[ 1253.509054][T15147] vhci_hcd: connection closed
[ 1253.509786][   T13] vhci_hcd: stop threads
[ 1253.509801][   T13] vhci_hcd: release socket
[ 1253.509841][   T13] vhci_hcd: disconnect device
[ 1253.509907][T15145] vhci_hcd: connection closed
[ 1253.514323][   T13] vhci_hcd: stop threads
[ 1253.514339][   T13] vhci_hcd: release socket
[ 1253.514382][   T13] vhci_hcd: disconnect device
[ 1253.517312][T15143] vhci_hcd: connection closed
[ 1253.517896][   T13] vhci_hcd: stop threads
[ 1253.517910][   T13] vhci_hcd: release socket
[ 1253.517949][   T13] vhci_hcd: disconnect device
[ 1253.518262][T15141] vhci_hcd: connection closed
[ 1253.521862][T15139] vhci_hcd: connection closed
[ 1253.534772][   T13] vhci_hcd: stop threads
[ 1253.534797][   T13] vhci_hcd: release socket
[ 1253.535469][   T13] vhci_hcd: disconnect device
[ 1253.536229][   T13] vhci_hcd: stop threads
[ 1253.536242][   T13] vhci_hcd: release socket
[ 1253.536821][   T13] vhci_hcd: disconnect device
[ 1253.601130][T10557] vhci_hcd: vhci_device speed not set
[ 1253.705451][ T1122] bond0 (unregistering): Released all slaves
[ 1253.770157][T15116] bond0: entered promiscuous mode
[ 1253.770178][T15116] bond_slave_0: entered promiscuous mode
[ 1253.770434][T15116] bond_slave_1: entered promiscuous mode
[ 1254.830966][ T5808] Bluetooth: hci4: command tx timeout
[ 1254.981543][T14595] usb 8-1: new full-speed USB device number 34 using dummy_hcd
[ 1255.258386][T14595] usb 8-1: config 0 has no interfaces?
[ 1255.318504][T14595] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1255.318554][T14595] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.318613][T14595] usb 8-1: Product: syz
[ 1255.318631][T14595] usb 8-1: Manufacturer: syz
[ 1255.318885][T14595] usb 8-1: SerialNumber: syz
[ 1255.483479][T14595] usb 8-1: config 0 descriptor??
[ 1255.703574][T15078] chnl_net:caif_netlink_parms(): no params data found
[ 1255.835297][   T44] usb 8-1: USB disconnect, device number 34
[ 1255.960331][T15181] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[ 1255.960362][T15181] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1255.960462][T15181] vhci_hcd vhci_hcd.0: Device attached
[ 1255.983760][T15178] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[ 1255.983788][T15178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1255.985165][T15178] vhci_hcd vhci_hcd.0: Device attached
[ 1255.988167][T15178] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16)
[ 1255.988186][T15178] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1255.988776][T15178] vhci_hcd vhci_hcd.0: Device attached
[ 1256.024103][T15178] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1256.027053][T15178] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20)
[ 1256.027083][T15178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1256.027188][T15178] vhci_hcd vhci_hcd.0: Device attached
[ 1256.034951][T15178] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(22)
[ 1256.034979][T15178] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1256.035076][T15178] vhci_hcd vhci_hcd.0: Device attached
[ 1256.036384][T15178] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1256.058236][T15178] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(26)
[ 1256.058270][T15178] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1256.058371][T15178] vhci_hcd vhci_hcd.0: Device attached
[ 1256.096649][T15192] vhci_hcd: connection closed
[ 1256.097367][ T1512] vhci_hcd: stop threads
[ 1256.097387][ T1512] vhci_hcd: release socket
[ 1256.097477][ T1512] vhci_hcd: disconnect device
[ 1256.098471][T15190] vhci_hcd: connection closed
[ 1256.099006][ T1512] vhci_hcd: stop threads
[ 1256.099020][ T1512] vhci_hcd: release socket
[ 1256.099058][ T1512] vhci_hcd: disconnect device
[ 1256.102469][T15188] vhci_hcd: connection closed
[ 1256.103147][ T1512] vhci_hcd: stop threads
[ 1256.103161][ T1512] vhci_hcd: release socket
[ 1256.103241][ T1512] vhci_hcd: disconnect device
[ 1256.103540][T15186] vhci_hcd: connection closed
[ 1256.103967][T15184] vhci_hcd: connection closed
[ 1256.104295][T15182] vhci_hcd: connection closed
[ 1256.104869][ T1512] vhci_hcd: stop threads
[ 1256.104882][ T1512] vhci_hcd: release socket
[ 1256.104959][ T1512] vhci_hcd: disconnect device
[ 1256.105389][ T1512] vhci_hcd: stop threads
[ 1256.105398][ T1512] vhci_hcd: release socket
[ 1256.105627][ T1512] vhci_hcd: disconnect device
[ 1256.106161][ T1512] vhci_hcd: stop threads
[ 1256.106171][ T1512] vhci_hcd: release socket
[ 1256.106622][ T1512] vhci_hcd: disconnect device
[ 1256.807063][T15120] lo speed is unknown, defaulting to 1000
[ 1256.920972][ T5808] Bluetooth: hci4: command tx timeout
[ 1256.970941][ T1122] hsr_slave_0: left promiscuous mode
[ 1257.012448][ T1122] hsr_slave_1: left promiscuous mode
[ 1257.013619][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1257.013647][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1257.073066][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1257.073089][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1257.291031][ T1122] veth1_macvtap: left promiscuous mode
[ 1257.291151][ T1122] veth0_macvtap: left promiscuous mode
[ 1257.291426][ T1122] veth1_vlan: left promiscuous mode
[ 1257.291620][ T1122] veth0_vlan: left promiscuous mode
[ 1258.841788][T15221] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[ 1258.841818][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1258.844260][T15221] vhci_hcd vhci_hcd.0: Device attached
[ 1258.876665][T15221] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14)
[ 1258.876695][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1258.876826][T15221] vhci_hcd vhci_hcd.0: Device attached
[ 1258.879688][T15221] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16)
[ 1258.879715][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1258.879820][T15221] vhci_hcd vhci_hcd.0: Device attached
[ 1258.882731][T15221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1258.922095][T15221] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20)
[ 1258.922130][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1258.922191][T15221] vhci_hcd vhci_hcd.0: Device attached
[ 1258.925316][T15221] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(22)
[ 1258.925346][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1258.927676][T15221] vhci_hcd vhci_hcd.0: Device attached
[ 1258.929047][T15221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1258.939323][T15221] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(26)
[ 1258.939354][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1258.939461][T15221] vhci_hcd vhci_hcd.0: Device attached
[ 1258.993387][ T5808] Bluetooth: hci4: command tx timeout
[ 1259.745828][T15236] vhci_hcd: connection closed
[ 1259.746470][ T5961] vhci_hcd: stop threads
[ 1259.746487][ T5961] vhci_hcd: release socket
[ 1259.746551][ T5961] vhci_hcd: disconnect device
[ 1259.751158][T15234] vhci_hcd: connection closed
[ 1259.756081][T15232] vhci_hcd: connection closed
[ 1259.757871][ T5961] vhci_hcd: stop threads
[ 1259.757883][ T5961] vhci_hcd: release socket
[ 1259.757953][ T5961] vhci_hcd: disconnect device
[ 1259.760139][T15229] vhci_hcd: connection closed
[ 1259.760239][ T5961] vhci_hcd: stop threads
[ 1259.760249][ T5961] vhci_hcd: release socket
[ 1259.760316][ T5961] vhci_hcd: disconnect device
[ 1259.784101][   T44] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[ 1259.784420][T15225] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1259.840619][T15226] vhci_hcd: connection closed
[ 1259.840654][T15224] vhci_hcd: connection closed
[ 1259.857289][ T5961] vhci_hcd: stop threads
[ 1259.857312][ T5961] vhci_hcd: release socket
[ 1259.857539][ T5961] vhci_hcd: disconnect device
[ 1259.857601][ T5961] vhci_hcd: stop threads
[ 1259.857610][ T5961] vhci_hcd: release socket
[ 1259.857812][ T5961] vhci_hcd: disconnect device
[ 1259.858151][ T5961] vhci_hcd: stop threads
[ 1259.858160][ T5961] vhci_hcd: release socket
[ 1259.858354][ T5961] vhci_hcd: disconnect device
[ 1260.194383][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1260.331873][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1262.006465][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1262.099516][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1262.457891][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1262.635204][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1262.773017][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1263.388878][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1264.650734][T15268] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1782'.
[ 1264.856608][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1265.587692][ T9516] Bluetooth: hci4: command 0x0405 tx timeout
[ 1265.598294][   T44] vhci_hcd: vhci_device speed not set
[ 1268.291189][T10570] usb usb42-port1: attempt power cycle
[ 1269.222398][T10570] usb usb42-port1: unable to enumerate USB device
[ 1270.000714][ T1122] team0 (unregistering): Port device team_slave_1 removed
[ 1270.410831][ T1122] team0 (unregistering): Port device team_slave_0 removed
[ 1273.107826][ T9516] Bluetooth: hci0: unexpected event 0x10 length: 11 > 1
[ 1273.111627][ T5808] Bluetooth: hci0: hardware error 0xff
[ 1275.389876][ T5808] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1276.506532][T15078] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1276.507234][T15078] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1276.507427][T15078] bridge_slave_0: entered allmulticast mode
[ 1276.511244][T15078] bridge_slave_0: entered promiscuous mode
[ 1276.563170][T15078] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1276.563291][T15078] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1276.563504][T15078] bridge_slave_1: entered allmulticast mode
[ 1276.566164][T15078] bridge_slave_1: entered promiscuous mode
[ 1277.085084][T15078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1277.154881][T15078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1277.569656][T10532] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[ 1277.705821][T15078] team0: Port device team_slave_0 added
[ 1277.721918][T10532] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1277.721938][T10532] usb 8-1: config 0 has no interfaces?
[ 1277.721961][T10532] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1277.721978][T10532] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.725844][T10532] usb 8-1: config 0 descriptor??
[ 1277.761984][T15078] team0: Port device team_slave_1 added
[ 1279.314519][T15078] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1279.314534][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1279.314556][T15078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1279.352107][T15078] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1279.352130][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1279.352178][T15078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1280.324171][T10563] usb 8-1: USB disconnect, device number 35
[ 1283.567784][ T1122] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.887631][T15078] hsr_slave_0: entered promiscuous mode
[ 1283.901472][T15078] hsr_slave_1: entered promiscuous mode
[ 1283.904981][T15078] debugfs: 'hsr0' already exists in 'hsr'
[ 1283.908391][T15078] Cannot create hsr debugfs directory
[ 1284.251828][ T1122] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.312279][T15120] chnl_net:caif_netlink_parms(): no params data found
[ 1284.643619][ T1122] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.807955][T15413] bond0: entered promiscuous mode
[ 1285.807984][T15413] bond_slave_0: entered promiscuous mode
[ 1285.808222][T15413] bond_slave_1: entered promiscuous mode
[ 1286.872798][ T1122] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1288.079038][T10570] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1288.281248][T10570] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1288.281278][T10570] usb 6-1: config 0 has no interfaces?
[ 1288.281311][T10570] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1288.281334][T10570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.286778][T10570] usb 6-1: config 0 descriptor??
[ 1288.341361][T15120] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1288.341478][T15120] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1288.341679][T15120] bridge_slave_0: entered allmulticast mode
[ 1288.344408][T15120] bridge_slave_0: entered promiscuous mode
[ 1288.450452][T15120] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1288.450688][T15120] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1288.450899][T15120] bridge_slave_1: entered allmulticast mode
[ 1288.452903][T15120] bridge_slave_1: entered promiscuous mode
[ 1288.490907][T15428] syz.5.1828 uses obsolete (PF_INET,SOCK_PACKET)
[ 1288.688617][T15120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1288.727939][T15120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1289.803246][T15120] team0: Port device team_slave_0 added
[ 1289.911423][T15120] team0: Port device team_slave_1 added
[ 1291.755295][   T38] audit: type=1326 audit(1762049122.279:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15450 comm="syz.7.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1291.755370][   T38] audit: type=1326 audit(1762049122.279:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15450 comm="syz.7.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1291.811362][T10557] usb 6-1: USB disconnect, device number 2
[ 1291.963170][ T1122] bridge_slave_1: left allmulticast mode
[ 1291.963204][ T1122] bridge_slave_1: left promiscuous mode
[ 1291.963525][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.088295][ T1122] bridge_slave_0: left allmulticast mode
[ 1292.088326][ T1122] bridge_slave_0: left promiscuous mode
[ 1292.093714][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1294.529504][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1294.592321][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1294.633277][ T1122] bond0 (unregistering): Released all slaves
[ 1294.805215][T15456] macvtap0: entered allmulticast mode
[ 1294.805239][T15456] veth0_macvtap: entered allmulticast mode
[ 1294.813732][T15120] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1294.813755][T15120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1294.813791][T15120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1295.232107][T15472] siw: device registration error -23
[ 1295.842277][T15120] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1295.842413][T15120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1295.842453][T15120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1296.792382][T15485] netlink: 'syz.4.1846': attribute type 2 has an invalid length.
[ 1296.792428][T15485] netlink: 'syz.4.1846': attribute type 8 has an invalid length.
[ 1296.792466][T15485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1846'.
[ 1301.415141][T15120] hsr_slave_0: entered promiscuous mode
[ 1301.418080][T15120] hsr_slave_1: entered promiscuous mode
[ 1301.419860][T15120] debugfs: 'hsr0' already exists in 'hsr'
[ 1301.419889][T15120] Cannot create hsr debugfs directory
[ 1301.688824][T10532] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[ 1302.478235][T10532] usb 8-1: Using ep0 maxpacket: 16
[ 1302.485545][T10532] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1302.485581][T10532] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1302.485604][T10532] usb 8-1: Product: syz
[ 1302.485622][T10532] usb 8-1: Manufacturer: syz
[ 1302.485639][T10532] usb 8-1: SerialNumber: syz
[ 1302.618310][T10557] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1302.690229][T10532] r8152-cfgselector 8-1: Unknown version 0x0000
[ 1302.690258][T10532] r8152-cfgselector 8-1: config 0 descriptor??
[ 1303.066070][ T1122] hsr_slave_0: left promiscuous mode
[ 1303.500877][ T1122] hsr_slave_1: left promiscuous mode
[ 1303.503619][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1303.503650][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1303.527261][T10557] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1303.527336][T10557] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1303.527367][T10557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.603230][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1303.603262][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1303.619350][T10557] usb 6-1: config 0 descriptor??
[ 1303.639030][T10557] pwc: Askey VC010 type 2 USB webcam detected.
[ 1303.692118][T10570] r8152-cfgselector 8-1: USB disconnect, device number 36
[ 1303.794052][ T1122] veth1_macvtap: left promiscuous mode
[ 1303.794172][ T1122] veth0_macvtap: left promiscuous mode
[ 1303.794425][ T1122] veth1_vlan: left promiscuous mode
[ 1303.794600][ T1122] veth0_vlan: left promiscuous mode
[ 1304.031557][T10557] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1304.248795][T10557] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1304.275359][T10557] pwc: recv_control_msg error -71 req 04 val 1000
[ 1304.275880][T10557] pwc: recv_control_msg error -71 req 04 val 1300
[ 1304.279329][T10557] pwc: recv_control_msg error -71 req 04 val 1400
[ 1304.279866][T10557] pwc: recv_control_msg error -71 req 02 val 2000
[ 1304.281967][T10557] pwc: recv_control_msg error -71 req 02 val 2100
[ 1304.282524][T10557] pwc: recv_control_msg error -71 req 04 val 1500
[ 1304.283649][T10557] pwc: recv_control_msg error -71 req 02 val 2500
[ 1304.284215][T10557] pwc: recv_control_msg error -71 req 02 val 2400
[ 1304.284808][T10557] pwc: recv_control_msg error -71 req 02 val 2600
[ 1304.285378][T10557] pwc: recv_control_msg error -71 req 02 val 2900
[ 1304.285940][T10557] pwc: recv_control_msg error -71 req 02 val 2800
[ 1304.286941][T10557] pwc: recv_control_msg error -71 req 04 val 1100
[ 1304.287493][T10557] pwc: recv_control_msg error -71 req 04 val 1200
[ 1304.305754][T10557] pwc: Registered as video103.
[ 1304.312823][T10557] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13
[ 1304.419102][T10557] usb 6-1: USB disconnect, device number 3
[ 1305.556692][ T9516] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1305.578200][ T9516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1305.580143][ T9516] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1305.581550][ T9516] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1305.583388][ T9516] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1305.809716][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1306.391502][T15560] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1870' sets config #0
[ 1306.391912][T15560] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1870' sets config #1
[ 1307.708535][ T9516] Bluetooth: hci5: command tx timeout
[ 1309.787963][ T9516] Bluetooth: hci5: command tx timeout
[ 1309.863781][T15576] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1310.245863][T15573] syz.7.1874 (15573) used greatest stack depth: 17976 bytes left
[ 1311.706869][T12692] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1311.720643][T12692] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1311.722655][T12692] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1311.737914][T12692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1311.747105][T12692] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1311.859315][ T1122] team0 (unregistering): Port device team_slave_1 removed
[ 1311.867751][T14163] Bluetooth: hci5: command tx timeout
[ 1312.056232][T15595] overlayfs: overlapping lowerdir path
[ 1312.597946][T15598] fuse: Bad value for 'fd'
[ 1312.958718][ T1122] team0 (unregistering): Port device team_slave_0 removed
[ 1313.008093][T14163] Bluetooth: hci2: command 0x0406 tx timeout
[ 1313.877223][ T5808] Bluetooth: hci6: command tx timeout
[ 1313.948253][ T5808] Bluetooth: hci5: command 0x0419 tx timeout
[ 1315.987492][ T9516] Bluetooth: hci6: command tx timeout
[ 1316.027861][ T9516] Bluetooth: hci5: command 0x0419 tx timeout
[ 1316.106665][T15612] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1882' sets config #0
[ 1316.108017][T15612] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1882' sets config #1
[ 1318.037519][ T9516] Bluetooth: hci6: command tx timeout
[ 1318.257327][T10532] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1318.499305][T10532] usb 6-1: Using ep0 maxpacket: 16
[ 1318.502043][T10532] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1318.502074][T10532] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1318.508283][T10532] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1318.508321][T10532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1318.508347][T10532] usb 6-1: Product: syz
[ 1318.508366][T10532] usb 6-1: Manufacturer: syz
[ 1318.508384][T10532] usb 6-1: SerialNumber: syz
[ 1318.791666][T10532] usb 6-1: 0:2 : does not exist
[ 1318.799095][T10532] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1319.150783][T15633] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1319.789799][T10532] usb 6-1: USB disconnect, device number 4
[ 1320.026188][T15338] udevd[15338]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1320.120719][ T9516] Bluetooth: hci6: command tx timeout
[ 1322.905163][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1894'.
[ 1324.256647][T15658] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1896' sets config #0
[ 1324.268308][T15658] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1896' sets config #1
[ 1324.790081][T15663] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1326.617517][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1326.685531][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1326.989991][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1327.039240][T15684] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1327.254717][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1327.414388][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1327.663530][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1328.064907][   T38] audit: type=1326 audit(1762049158.681:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.064972][   T38] audit: type=1326 audit(1762049158.681:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.065022][   T38] audit: type=1326 audit(1762049158.681:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.065073][   T38] audit: type=1326 audit(1762049158.681:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9d0872d9dc code=0x7ffc0000
[ 1328.065121][   T38] audit: type=1326 audit(1762049158.681:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.065172][   T38] audit: type=1326 audit(1762049158.681:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.065222][   T38] audit: type=1326 audit(1762049158.681:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.065279][   T38] audit: type=1326 audit(1762049158.681:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.065328][   T38] audit: type=1326 audit(1762049158.681:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.065377][   T38] audit: type=1326 audit(1762049158.681:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15674 comm="syz.7.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f9d0872efc9 code=0x7ffc0000
[ 1328.137402][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1328.277870][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1328.427100][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1328.609558][T15684] veth1_to_team: entered promiscuous mode
[ 1328.610863][T15684] bridge0: entered promiscuous mode
[ 1328.612644][T15684] hsr1: entered allmulticast mode
[ 1328.612657][T15684] veth1_to_team: entered allmulticast mode
[ 1328.612671][T15684] bridge0: entered allmulticast mode
[ 1328.725870][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1328.925511][T15693] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1906' sets config #0
[ 1328.925889][T15693] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1906' sets config #1
[ 1329.916682][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1330.195424][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1330.615173][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.210217][T15551] lo speed is unknown, defaulting to 1000
[ 1332.246318][T15585] lo speed is unknown, defaulting to 1000
[ 1332.378791][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.618085][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.717840][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.825749][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1332.860664][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1333.074227][T15715] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1334.247854][T15723] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1915' sets config #0
[ 1334.248104][T15723] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1915' sets config #1
[ 1335.003546][T15732] netlink: 'syz.7.1917': attribute type 1 has an invalid length.
[ 1338.944958][T15760] fuse: Invalid rootmode
[ 1338.966079][   T38] kauditd_printk_skb: 4 callbacks suppressed
[ 1338.966099][   T38] audit: type=1326 audit(1762049169.572:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1338.966153][   T38] audit: type=1326 audit(1762049169.572:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1338.966203][   T38] audit: type=1326 audit(1762049169.572:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1338.966249][   T38] audit: type=1326 audit(1762049169.572:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1338.966296][   T38] audit: type=1326 audit(1762049169.572:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1338.966342][   T38] audit: type=1326 audit(1762049169.572:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4adbe5d9dc code=0x7ffc0000
[ 1338.966390][   T38] audit: type=1326 audit(1762049169.572:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1338.966439][   T38] audit: type=1326 audit(1762049169.572:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1338.966489][   T38] audit: type=1326 audit(1762049169.572:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1338.966538][   T38] audit: type=1326 audit(1762049169.572:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15745 comm="syz.4.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adbe5efc9 code=0x7ffc0000
[ 1341.005167][T15551] chnl_net:caif_netlink_parms(): no params data found
[ 1341.150093][T15585] chnl_net:caif_netlink_parms(): no params data found
[ 1348.075593][T15847] Bluetooth: MGMT ver 1.23
[ 1349.648676][T15551] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.648803][T15551] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.649030][T15551] bridge_slave_0: entered allmulticast mode
[ 1349.651681][T15551] bridge_slave_0: entered promiscuous mode
[ 1349.772818][T15551] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1349.772914][T15551] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1349.773096][T15551] bridge_slave_1: entered allmulticast mode
[ 1349.775095][T15551] bridge_slave_1: entered promiscuous mode
[ 1349.790652][T15585] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.790812][T15585] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.791116][T15585] bridge_slave_0: entered allmulticast mode
[ 1349.825624][T14595] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[ 1349.826697][T15585] bridge_slave_0: entered promiscuous mode
[ 1350.005518][T14595] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1350.005549][T14595] usb 8-1: config 0 has no interfaces?
[ 1350.005583][T14595] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1350.005608][T14595] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.020781][T14595] usb 8-1: config 0 descriptor??
[ 1350.048194][T15585] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.048355][T15585] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1350.048667][T15585] bridge_slave_1: entered allmulticast mode
[ 1350.051883][T15585] bridge_slave_1: entered promiscuous mode
[ 1350.940216][ T9516] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1351.172473][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1947'.
[ 1351.324829][T15551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1351.709986][T15551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1351.818561][T10557] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1352.709914][T15585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1352.767109][T14595] usb 8-1: USB disconnect, device number 37
[ 1352.965584][T10557] usb 6-1: Using ep0 maxpacket: 16
[ 1352.981386][T10557] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1352.981419][T10557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.981442][T10557] usb 6-1: Product: syz
[ 1352.981456][T10557] usb 6-1: Manufacturer: syz
[ 1352.981472][T10557] usb 6-1: SerialNumber: syz
[ 1353.014417][T10557] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1353.014450][T10557] r8152-cfgselector 6-1: config 0 descriptor??
[ 1353.048477][T15585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1353.054831][T15874] overlayfs: failed to clone lowerpath
[ 1353.202644][T15875] fuse: Bad value for 'fd'
[ 1353.373308][T15551] team0: Port device team_slave_0 added
[ 1353.456980][T10561] r8152-cfgselector 6-1: USB disconnect, device number 5
[ 1353.491002][T15551] team0: Port device team_slave_1 added
[ 1353.541234][T15585] team0: Port device team_slave_0 added
[ 1353.630818][T15585] team0: Port device team_slave_1 added
[ 1354.287591][ T5009] bridge_slave_1: left allmulticast mode
[ 1354.287623][ T5009] bridge_slave_1: left promiscuous mode
[ 1354.287923][ T5009] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1354.381894][ T5009] bridge_slave_0: left allmulticast mode
[ 1354.381924][ T5009] bridge_slave_0: left promiscuous mode
[ 1354.382188][ T5009] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1354.458761][ T5009] bridge_slave_1: left allmulticast mode
[ 1354.458794][ T5009] bridge_slave_1: left promiscuous mode
[ 1354.459031][ T5009] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1354.497532][ T5009] bridge_slave_0: left allmulticast mode
[ 1354.497555][ T5009] bridge_slave_0: left promiscuous mode
[ 1354.497745][ T5009] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1355.236200][ T5009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1355.326057][ T5009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1355.397693][ T5009] bond0 (unregistering): Released all slaves
[ 1356.355672][ T5009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1356.586675][ T5009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1356.688023][ T5009] bond0 (unregistering): Released all slaves
[ 1356.726517][T15551] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1356.726531][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1356.726557][T15551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1357.105493][T10570] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1358.225243][T10570] usb 6-1: Using ep0 maxpacket: 8
[ 1358.311514][T10570] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1358.311549][T10570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1358.311573][T10570] usb 6-1: Product: syz
[ 1358.311589][T10570] usb 6-1: Manufacturer: syz
[ 1358.311605][T10570] usb 6-1: SerialNumber: syz
[ 1358.530867][T10570] usb 6-1: config 0 descriptor??
[ 1358.594299][T15551] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1358.594553][T15551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.594587][T15551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1358.600464][T15585] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1358.600485][T15585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.600520][T15585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1358.616108][T15585] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1358.616129][T15585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.616162][T15585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1358.775071][T10570] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1360.251208][T10570] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1360.266442][T10570] usb 6-1: USB disconnect, device number 6
[ 1360.292563][T15907] veth1_to_team: entered promiscuous mode
[ 1360.293961][T15907] bridge0: entered promiscuous mode
[ 1360.294727][T15907] debugfs: 'hsr1' already exists in 'hsr'
[ 1360.294752][T15907] Cannot create hsr debugfs directory
[ 1360.295015][T15907] hsr1: entered allmulticast mode
[ 1360.295029][T15907] veth1_to_team: entered allmulticast mode
[ 1360.295043][T15907] bridge0: entered allmulticast mode
[ 1360.584040][T15551] hsr_slave_0: entered promiscuous mode
[ 1360.586114][T15551] hsr_slave_1: entered promiscuous mode
[ 1360.587198][T15551] debugfs: 'hsr0' already exists in 'hsr'
[ 1360.587224][T15551] Cannot create hsr debugfs directory
[ 1360.736839][T15585] hsr_slave_0: entered promiscuous mode
[ 1360.741067][T15585] hsr_slave_1: entered promiscuous mode
[ 1360.746052][T15585] debugfs: 'hsr0' already exists in 'hsr'
[ 1360.746085][T15585] Cannot create hsr debugfs directory
[ 1360.975055][ T5009] hsr_slave_0: left promiscuous mode
[ 1361.050145][ T5009] hsr_slave_1: left promiscuous mode
[ 1361.051158][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1361.118853][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1361.324433][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1361.347435][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1361.349094][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1361.350376][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1361.351201][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1362.542322][    C0] ------------[ cut here ]------------
[ 1362.542339][    C0] refcount_t: addition on 0; use-after-free.
[ 1362.542985][    C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0
[ 1362.543089][    C0] Modules linked in:
[ 1362.543115][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1362.543160][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1362.543176][    C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[ 1362.543204][    C0] Code: 00 00 e8 59 5c 45 fd 5b 41 5e e9 91 bb 4a 06 cc e8 4b 5c 45 fd c6 05 d6 08 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 2b 5c 45 fd c6 05 b7 08 47 0a 01 90 48 c7 c7
[ 1362.543225][    C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246
[ 1362.543244][    C0] RAX: efa0685e6cc72000 RBX: 0000000000000002 RCX: ffff88801b6a5a00
[ 1362.543262][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 1362.543276][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[ 1362.543290][    C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18
[ 1362.543309][    C0] R13: ffff888049fab160 R14: ffff888049faad80 R15: dffffc0000000000
[ 1362.543329][    C0] FS:  0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000
[ 1362.543347][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1362.543363][    C0] CR2: 0000556134833950 CR3: 0000000064ea8000 CR4: 00000000003526f0
[ 1362.543382][    C0] Call Trace:
[ 1362.543391][    C0]  <TASK>
[ 1362.543405][    C0]  mptcp_schedule_work+0x164/0x1a0
[ 1362.543495][    C0]  mptcp_tout_timer+0x21/0xa0
[ 1362.543527][    C0]  call_timer_fn+0x17e/0x5f0
[ 1362.543568][    C0]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1362.543598][    C0]  ? call_timer_fn+0xbe/0x5f0
[ 1362.543629][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1362.543673][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1362.543748][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1362.543786][    C0]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1362.543821][    C0]  __run_timer_base+0x648/0x970
[ 1362.543867][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1362.543918][    C0]  run_timer_softirq+0xb7/0x180
[ 1362.543950][    C0]  handle_softirqs+0x22f/0x710
[ 1362.544010][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1362.544054][    C0]  run_ktimerd+0xcf/0x190
[ 1362.544087][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[ 1362.544119][    C0]  ? schedule+0x91/0x360
[ 1362.544164][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1362.544201][    C0]  smpboot_thread_fn+0x542/0xa60
[ 1362.544235][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1362.544278][    C0]  kthread+0x711/0x8a0
[ 1362.544319][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1362.544351][    C0]  ? __pfx_kthread+0x10/0x10
[ 1362.544385][    C0]  ? rt_spin_unlock+0x150/0x200
[ 1362.544416][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1362.544441][    C0]  ? __pfx_kthread+0x10/0x10
[ 1362.544479][    C0]  ret_from_fork+0x4bc/0x870
[ 1362.544524][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1362.544563][    C0]  ? __switch_to_asm+0x39/0x70
[ 1362.544589][    C0]  ? __switch_to_asm+0x33/0x70
[ 1362.544614][    C0]  ? __pfx_kthread+0x10/0x10
[ 1362.544653][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1362.544754][    C0]  </TASK>
[ 1362.544772][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1362.544790][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1362.544815][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1362.544830][    C0] Call Trace:
[ 1362.544839][    C0]  <TASK>
[ 1362.544848][    C0]  dump_stack_lvl+0x99/0x250
[ 1362.544888][    C0]  ? __asan_memcpy+0x40/0x70
[ 1362.544919][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1362.544957][    C0]  ? __pfx__printk+0x10/0x10
[ 1362.545004][    C0]  vpanic+0x237/0x6d0
[ 1362.545028][    C0]  ? __pfx_vpanic+0x10/0x10
[ 1362.545065][    C0]  panic+0xb9/0xc0
[ 1362.545085][    C0]  ? __pfx_panic+0x10/0x10
[ 1362.545127][    C0]  __warn+0x31b/0x4b0
[ 1362.545157][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1362.545188][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1362.545216][    C0]  report_bug+0x2be/0x4f0
[ 1362.545315][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1362.545344][    C0]  ? refcount_warn_saturate+0xfa/0x1d0
[ 1362.545371][    C0]  ? refcount_warn_saturate+0xfc/0x1d0
[ 1362.545461][    C0]  handle_bug+0x84/0x160
[ 1362.545513][    C0]  exc_invalid_op+0x1a/0x50
[ 1362.545553][    C0]  asm_exc_invalid_op+0x1a/0x20
[ 1362.545577][    C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[ 1362.545606][    C0] Code: 00 00 e8 59 5c 45 fd 5b 41 5e e9 91 bb 4a 06 cc e8 4b 5c 45 fd c6 05 d6 08 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 2b 5c 45 fd c6 05 b7 08 47 0a 01 90 48 c7 c7
[ 1362.545626][    C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246
[ 1362.545646][    C0] RAX: efa0685e6cc72000 RBX: 0000000000000002 RCX: ffff88801b6a5a00
[ 1362.545665][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[ 1362.545678][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[ 1362.545692][    C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18
[ 1362.545710][    C0] R13: ffff888049fab160 R14: ffff888049faad80 R15: dffffc0000000000
[ 1362.545751][    C0]  mptcp_schedule_work+0x164/0x1a0
[ 1362.545780][    C0]  mptcp_tout_timer+0x21/0xa0
[ 1362.545814][    C0]  call_timer_fn+0x17e/0x5f0
[ 1362.545850][    C0]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1362.545881][    C0]  ? call_timer_fn+0xbe/0x5f0
[ 1362.545914][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1362.545958][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1362.545991][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1362.546020][    C0]  ? __pfx_mptcp_tout_timer+0x10/0x10
[ 1362.546055][    C0]  __run_timer_base+0x648/0x970
[ 1362.546202][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1362.546257][    C0]  run_timer_softirq+0xb7/0x180
[ 1362.546291][    C0]  handle_softirqs+0x22f/0x710
[ 1362.546341][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1362.546384][    C0]  run_ktimerd+0xcf/0x190
[ 1362.546418][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[ 1362.546449][    C0]  ? schedule+0x91/0x360
[ 1362.546489][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1362.546519][    C0]  smpboot_thread_fn+0x542/0xa60
[ 1362.546552][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[ 1362.546603][    C0]  kthread+0x711/0x8a0
[ 1362.546645][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1362.546677][    C0]  ? __pfx_kthread+0x10/0x10
[ 1362.546711][    C0]  ? rt_spin_unlock+0x150/0x200
[ 1362.546744][    C0]  ? rt_spin_unlock+0x161/0x200
[ 1362.546767][    C0]  ? __pfx_kthread+0x10/0x10
[ 1362.546807][    C0]  ret_from_fork+0x4bc/0x870
[ 1362.546841][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1362.546881][    C0]  ? __switch_to_asm+0x39/0x70
[ 1362.546905][    C0]  ? __switch_to_asm+0x33/0x70
[ 1362.546929][    C0]  ? __pfx_kthread+0x10/0x10
[ 1362.546967][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1362.547017][    C0]  </TASK>
[ 1362.547183][    C0] Kernel Offset: disabled