last executing test programs:

29m7.113340584s ago: executing program 4 (id=611):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r6, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

29m0.064721016s ago: executing program 4 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

28m58.831933809s ago: executing program 4 (id=617):
r0 = gettid()
r1 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, 0x0)
getpgid(r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

28m57.627100215s ago: executing program 4 (id=619):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)

28m56.464254731s ago: executing program 4 (id=623):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(&(0x7f0000000d00)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000180)=0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41)
openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
unshare(0x62040200)

28m54.891249968s ago: executing program 4 (id=625):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
r1 = epoll_create1(0x0)
epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x2040000, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r8}, 0x10)
setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff})
timer_create(0x3, 0x0, &(0x7f0000000300))

28m38.448652843s ago: executing program 32 (id=625):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
r1 = epoll_create1(0x0)
epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x2040000, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r8}, 0x10)
setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff})
timer_create(0x3, 0x0, &(0x7f0000000300))

28m20.9308548s ago: executing program 2 (id=696):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0006000d0085a168d0bf46d3234565360064", 0x37, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
futex(0xfffffffffffffffc, 0x9, 0x4, 0x0, 0x0, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$key(0xf, 0x3, 0x2)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x180, 0x0)
r4 = socket(0x10, 0x80002, 0x2)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f800200", 0x2c}], 0x1}, 0x4000)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x2, 0x0, 0xa, &(0x7f0000000180)})
r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
r7 = fsmount(r6, 0x0, 0x0)
r8 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2})
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x5, @pix_mp={0x8, 0x4000000, 0x55595659, 0x0, 0x9, [{0x1, 0xe037}, {0x6}, {0x2, 0x6}, {0x101, 0x7fff}, {0xffffff80, 0x9}, {0x2, 0x100003}, {0x6, 0xfff}, {0x9, 0x3ff}], 0xca, 0x1, 0x6, 0x3}})
openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, 0x0)

28m12.766157488s ago: executing program 2 (id=708):
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1, @mcast1, 0x7ffe}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

28m11.578279086s ago: executing program 2 (id=710):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

28m10.887051756s ago: executing program 2 (id=712):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f0966f2a665f0ff0f0fc73666ba2100ecc4e2e59364498e2e0f06ea009000002c00c4c1b81516", 0x27}], 0x1, 0x11, 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(r4, 0x0, 0x1)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)={'#! ', './file0/file0'}, 0x11)
r7 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
userfaultfd(0x1001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r9], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, 0x0, 0x20000801)

28m5.287513159s ago: executing program 2 (id=725):
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup.cpu/cpuset.cpus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

28m3.979600807s ago: executing program 2 (id=728):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000008100181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
pipe(&(0x7f0000000d00)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000180)=0x4)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41)
openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
unshare(0x62040200)
socket$nl_route(0x10, 0x3, 0x0)

27m48.84526335s ago: executing program 33 (id=728):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000008100181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
pipe(&(0x7f0000000d00)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000180)=0x4)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41)
openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
unshare(0x62040200)
socket$nl_route(0x10, 0x3, 0x0)

26m30.966408172s ago: executing program 0 (id=846):
socket$netlink(0x10, 0x3, 0x10)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280))
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup(r1)
r3 = fcntl$dupfd(r0, 0x0, r1)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000})
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000005300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x5000})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

26m29.701612947s ago: executing program 0 (id=849):
r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x101, 0xe06)

26m29.594352267s ago: executing program 0 (id=851):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r3, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xc8}}, 0x0)

26m28.559773027s ago: executing program 0 (id=852):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0)
syz_emit_ethernet(0x50, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x1a, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c"}}}}}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r4)
ioprio_set$pid(0x2, 0x0, 0x4000)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=0x0], 0x2c2)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
r5 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00')
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'})

26m26.241468684s ago: executing program 0 (id=858):
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000300)=0x71, &(0x7f0000000340)=0x1)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000001100)={0x11, 0x4, r3, 0x1, 0x5, 0x6, @multicast}, 0x14)
r4 = dup2(r1, r1)
sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890)

26m26.168013298s ago: executing program 0 (id=861):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7fff, 0x6, 0x1, {0x0, r5, r2}})
r6 = memfd_secret(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @broadcast}, &(0x7f0000000300)=0xc)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x21}, 0x4)
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$I2C_PEC(0xffffffffffffffff, 0x703, 0x60)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x1, @local}, 0x4, {0x2, 0x4e20, @private=0xa010101}})

26m10.932668737s ago: executing program 34 (id=861):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7fff, 0x6, 0x1, {0x0, r5, r2}})
r6 = memfd_secret(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @broadcast}, &(0x7f0000000300)=0xc)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x21}, 0x4)
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$I2C_PEC(0xffffffffffffffff, 0x703, 0x60)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x1, @local}, 0x4, {0x2, 0x4e20, @private=0xa010101}})

6m47.146262061s ago: executing program 3 (id=2728):
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x39, 0x10, 0x70bd66, 0x4000, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8010)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, <r0=>0x0}, 0x2020)
setresuid(r0, r0, r0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000019400)=<r1=>0x0)
stat(&(0x7f00000193c0)='./file1\x00', &(0x7f0000019480)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f0000019500)='./file0\x00', &(0x7f0000019540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000019600)={{}, {0x1, 0x3}, [{0x2, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x0, r0}, {0x2, 0x2, r1}, {0x2, 0x5, r2}], {0x4, 0x2}, [{0x8, 0x5, r3}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x1}}, 0x74, 0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r7 = fcntl$dupfd(r5, 0x0, r5)
setsockopt$inet_mtu(r7, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000080)={0xa, {0x2, 0x7f, 0x3}}, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
r8 = socket$inet6(0xa, 0x3, 0x3c)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x9a, 0xe8, 0xc9, 0x40, 0x979, 0x227, 0x6f50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0x50, 0xe, [{{0x9, 0x4, 0xe, 0xda, 0x0, 0x29, 0x1, 0x91, 0x5}}]}}]}}, 0x0)

6m43.358030043s ago: executing program 3 (id=2734):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r9, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

6m41.10939732s ago: executing program 3 (id=2736):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
poll(&(0x7f0000002a40), 0x0, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x20000000)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)

6m39.858910546s ago: executing program 3 (id=2739):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xba, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x70, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x8, "e706d30bd224"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

6m38.064260243s ago: executing program 3 (id=2743):
syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0)
socket$inet(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)

6m31.896746318s ago: executing program 3 (id=2751):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000040000000c00088008000c00", @ANYRES8, @ANYBLOB="3724cacf34cb989134055de0b114f1bcaad051b4b9a8048ccfd63db4554600d863ccfb541f8a496a7643eee80e6ab19b70cd8bbdb1013d8f14018a8ef3aed082138d32bdf098c65483b120beabb6d4cd0c1b03695e7f7f8d81da2d"], 0x28}}, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
socket$packet(0x11, 0x3, 0x300)

6m9.509725499s ago: executing program 5 (id=2786):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c)
sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)

6m7.530172617s ago: executing program 5 (id=2787):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r4 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x80, 0x0)
pidfd_getfd(0xffffffffffffffff, r4, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
renameat2(r5, &(0x7f00000002c0)='./file0\x00', r5, &(0x7f00000003c0)='./bus\x00', 0x0)

6m4.37464109s ago: executing program 5 (id=2793):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r0=>0x0}, &(0x7f0000cab000)=0xffffffffffffff06)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
setregid(0xffffffffffffffff, r0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38)

5m58.281579178s ago: executing program 5 (id=2804):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
poll(&(0x7f0000002a40), 0x0, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x20000000)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)

5m56.929292605s ago: executing program 5 (id=2805):
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x6093, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0)
tee(r0, r4, 0xf3a, 0x4)
write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6)

5m55.282895479s ago: executing program 5 (id=2808):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r2, 0x0, 0x86)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r5 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), &(0x7f0000000100))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="000126bd7000fddbdf250c0000000f000a00f92b8e6ff49809d743028f000800090001ac0f0010006e800400010004000100040002000500080001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x24004085)
io_uring_enter(r5, 0x48df, 0x0, 0x62, 0x0, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

5m38.608746993s ago: executing program 35 (id=2808):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r2, 0x0, 0x86)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r3, r2, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r5 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), &(0x7f0000000100))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="000126bd7000fddbdf250c0000000f000a00f92b8e6ff49809d743028f000800090001ac0f0010006e800400010004000100040002000500080001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0x24004085)
io_uring_enter(r5, 0x48df, 0x0, 0x62, 0x0, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

18.104086745s ago: executing program 6 (id=3282):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac)

17.113808757s ago: executing program 6 (id=3285):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a000009"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x20, 0x84, 0x2, "b0e0"}, 0x0})

13.821347337s ago: executing program 6 (id=3289):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_dev$sndpcmp(&(0x7f0000000380), 0xf, 0x1ef403)
socket(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c)

11.893752546s ago: executing program 6 (id=3294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

9.74465054s ago: executing program 6 (id=3297):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x108, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a54}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x83}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x750}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x108}}, 0x20000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408c4)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(r2)

8.180513303s ago: executing program 1 (id=3300):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_io_uring_setup(0x497, 0x0, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000600)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

7.017429469s ago: executing program 7 (id=3301):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$can_bcm(r1, 0x0, 0x40894)
socket(0x10, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.016663898s ago: executing program 1 (id=3302):
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000200)=0x9, 0x4)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
unshare(0x2a020400)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

5.827175774s ago: executing program 7 (id=3303):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)

5.780908309s ago: executing program 1 (id=3304):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac)

4.681688683s ago: executing program 7 (id=3305):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

4.480511655s ago: executing program 1 (id=3306):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000040000000c00088008000c00", @ANYRES8, @ANYBLOB="3724cacf34cb989134055de0b114f1bcaad051b4b9a8048ccfd63db4554600d863ccfb541f8a496a7643eee80e6ab19b70cd8bbdb1013d8f14018a8ef3aed082138d32bdf098c65483b120beabb6d4cd0c1b03695e7f7f8d81da2d"], 0x28}}, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)

3.326754471s ago: executing program 7 (id=3307):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a000009"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x20, 0x84, 0x2, "b0e0"}, 0x0})

2.129566202s ago: executing program 6 (id=3308):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a000009"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x20, 0x84, 0x2, "b0e0"}, 0x0})

1.728973373s ago: executing program 7 (id=3309):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10)
epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0xe112, 0x0, 0x0)

1.601056904s ago: executing program 1 (id=3310):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000000)={0x893d, 0x2, [{0x1, 0x1}, {0x8, 0x1}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x25, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @alu={0x7, 0x0, 0xa, 0xb, 0x9, 0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x2a}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001540)='syzkaller\x00', 0x800, 0xa7, &(0x7f0000001580)=""/167, 0x41000, 0xa, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001640)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x0, 0x100003, 0xffffffff, 0x89f}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000016c0)=[r2, r1, r4, r1, r2, r2, r2, r1, r2], &(0x7f0000001700)=[{0x2, 0x1, 0xc, 0x3}], 0x10, 0xdff}, 0x94)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0)

38.494398ms ago: executing program 7 (id=3311):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r2, 0x89a0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x220)
setpgid(0x0, r3)
open_tree(0xffffffffffffff9c, 0x0, 0x901)
mount(0x0, 0x0, 0x0, 0x2000, 0x0)
bind$can_j1939(r2, 0x0, 0x0)
epoll_create(0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)

0s ago: executing program 1 (id=3312):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Port device team_slave_0 removed
[ 1487.426343][T15189] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1487.454246][T15464] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1487.454262][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1487.454290][T15464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1488.090491][T15464] hsr_slave_0: entered promiscuous mode
[ 1488.091853][T15464] hsr_slave_1: entered promiscuous mode
[ 1489.266000][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1489.277957][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1489.288238][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1489.289646][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1489.291492][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1489.639940][T15653] syz.1.2379 (15653): drop_caches: 2
[ 1489.815767][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1489.815849][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1491.755286][T15468] Bluetooth: hci0: command tx timeout
[ 1494.104147][ T5799] Bluetooth: hci0: command tx timeout
[ 1494.667424][T15644] lo speed is unknown, defaulting to 1000
[ 1496.114999][ T5799] Bluetooth: hci0: command tx timeout
[ 1496.623763][T15682] netlink: 'syz.3.2386': attribute type 4 has an invalid length.
[ 1496.623778][T15682] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2386'.
[ 1498.195308][ T5799] Bluetooth: hci0: command tx timeout
[ 1500.897852][ T5799] Bluetooth: hci5: unexpected event for opcode 0x2006
[ 1509.092604][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1509.296964][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1509.498348][T15784] random: crng reseeded on system resumption
[ 1509.696241][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1509.935911][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1510.318476][T15783] syz.1.2410 (15783): drop_caches: 2
[ 1510.623234][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1510.849915][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1511.439511][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1512.046600][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1512.233313][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1512.931583][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1513.124125][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1513.173438][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1513.590989][T15644] chnl_net:caif_netlink_parms(): no params data found
[ 1513.705596][T15819] syz.5.2419 (15819): drop_caches: 2
[ 1514.145979][T14735] bridge_slave_1: left allmulticast mode
[ 1514.145999][T14735] bridge_slave_1: left promiscuous mode
[ 1514.146158][T14735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1514.279396][T15828] random: crng reseeded on system resumption
[ 1515.005976][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1515.454351][T14735] bridge_slave_0: left allmulticast mode
[ 1515.454373][T14735] bridge_slave_0: left promiscuous mode
[ 1515.454546][T14735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1515.947617][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1516.759182][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1517.495843][T14735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1517.678882][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1517.798434][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1517.848256][T14735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1517.891869][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1517.943682][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1518.042306][T14735] bond0 (unregistering): Released all slaves
[ 1518.432040][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1518.486473][T15464] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1518.672971][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1518.966192][  T991] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1519.125292][  T991] usb 6-1: Using ep0 maxpacket: 32
[ 1519.153445][  T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1519.153706][  T991] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1519.153754][  T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.395172][  T991] usb 6-1: config 0 descriptor??
[ 1519.568527][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1519.818634][  T991] elo 0003:04E7:0009.000E: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0
[ 1519.881354][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1519.935871][T15464] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1520.082276][T15464] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1520.205708][T15644] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1520.205936][T15644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1520.206204][T15644] bridge_slave_0: entered allmulticast mode
[ 1520.220802][T15644] bridge_slave_0: entered promiscuous mode
[ 1520.231374][T15464] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1520.454990][T14735] hsr_slave_0: left promiscuous mode
[ 1520.495263][T14735] hsr_slave_1: left promiscuous mode
[ 1520.496232][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1520.534704][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1521.369016][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1521.375137][T15008] usb 6-1: USB disconnect, device number 3
[ 1522.567474][T15882] ALSA: mixer_oss: invalid OSS volume ''
[ 1522.581287][T14735] team0 (unregistering): Port device team_slave_1 removed
[ 1522.715717][T14735] team0 (unregistering): Port device team_slave_0 removed
[ 1522.833114][T15883] syz.5.2434 (15883): drop_caches: 2
[ 1523.338568][T15464] kthread_run failed with err -4
[ 1523.435436][T15644] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1523.435568][T15644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1523.435824][T15644] bridge_slave_1: entered allmulticast mode
[ 1523.505726][T15644] bridge_slave_1: entered promiscuous mode
[ 1523.830431][T15644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1523.846267][T15644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1524.090263][T15644] team0: Port device team_slave_0 added
[ 1524.092605][T15644] team0: Port device team_slave_1 added
[ 1524.881886][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1525.118457][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1525.810389][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1526.006095][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1526.197438][T15468] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1526.218800][T15468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1526.228398][T15468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1526.230012][T15468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1526.230767][T15468] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1526.330632][T15644] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1526.330649][T15644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1526.330673][T15644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1526.580312][T15644] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1526.580329][T15644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1526.580357][T15644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1526.649966][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1526.700695][T15904] netlink: 'syz.5.2439': attribute type 10 has an invalid length.
[ 1527.335282][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1527.783329][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1528.008325][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1528.274979][T15468] Bluetooth: hci1: command tx timeout
[ 1528.416992][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1528.687716][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1528.972173][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1529.335031][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1529.417508][T15644] hsr_slave_0: entered promiscuous mode
[ 1529.418869][T15644] hsr_slave_1: entered promiscuous mode
[ 1529.419845][T15644] debugfs: 'hsr0' already exists in 'hsr'
[ 1529.419869][T15644] Cannot create hsr debugfs directory
[ 1529.677760][T15900] lo speed is unknown, defaulting to 1000
[ 1529.710164][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1529.940830][T15928] block device autoloading is deprecated and will be removed.
[ 1529.943969][T15928] FAT-fs (loop3): unable to read boot sector
[ 1530.384210][T15468] Bluetooth: hci1: command tx timeout
[ 1532.515053][T15468] Bluetooth: hci1: command tx timeout
[ 1534.595204][T15468] Bluetooth: hci1: command tx timeout
[ 1541.902418][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1542.064975][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 1542.067412][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1542.067458][    T9] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1542.067479][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.126623][    T9] usb 6-1: config 0 descriptor??
[ 1543.369784][    T9] usbhid 6-1:0.0: can't add hid device: -71
[ 1543.369910][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1543.410713][    T9] usb 6-1: USB disconnect, device number 4
[ 1545.733458][T15900] chnl_net:caif_netlink_parms(): no params data found
[ 1547.043318][T14735] bridge_slave_1: left allmulticast mode
[ 1547.043619][T14735] bridge_slave_1: left promiscuous mode
[ 1547.065068][T14735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1547.566457][T14735] bridge_slave_0: left allmulticast mode
[ 1547.566485][T14735] bridge_slave_0: left promiscuous mode
[ 1547.566733][T14735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1547.759332][T16039] syz.1.2474 (16039): drop_caches: 2
[ 1547.844974][  T991] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1547.996820][  T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1547.996869][  T991] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1547.996885][  T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1548.048452][  T991] usb 4-1: config 0 descriptor??
[ 1548.172593][T14735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1548.277147][T14735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1548.371587][T14735] bond0 (unregistering): Released all slaves
[ 1549.325221][T14735] hsr_slave_0: left promiscuous mode
[ 1549.365116][T14735] hsr_slave_1: left promiscuous mode
[ 1549.367258][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1549.397291][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1556.181180][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1556.202665][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1556.204304][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1556.220952][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1556.221813][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1556.290660][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1556.290733][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1556.325380][  T991] usbhid 4-1:0.0: can't add hid device: -71
[ 1556.325515][  T991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1556.345364][  T991] usb 4-1: USB disconnect, device number 42
[ 1558.354984][T15468] Bluetooth: hci2: command tx timeout
[ 1558.506469][T14735] team0 (unregistering): Port device team_slave_1 removed
[ 1558.965772][T14735] team0 (unregistering): Port device team_slave_0 removed
[ 1560.439768][T15468] Bluetooth: hci2: command tx timeout
[ 1561.075098][T14057] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1561.106301][T15900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1561.106513][T15900] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1561.106784][T15900] bridge_slave_0: entered allmulticast mode
[ 1561.110000][T15900] bridge_slave_0: entered promiscuous mode
[ 1561.121494][T15900] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1561.129873][T15900] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1561.130119][T15900] bridge_slave_1: entered allmulticast mode
[ 1561.138538][T15900] bridge_slave_1: entered promiscuous mode
[ 1561.250177][T14057] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1561.250228][T14057] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1561.250250][T14057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.286235][T14057] usb 4-1: config 0 descriptor??
[ 1562.519245][T15468] Bluetooth: hci2: command tx timeout
[ 1563.909340][T14057] usbhid 4-1:0.0: can't add hid device: -71
[ 1563.909467][T14057] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1563.940204][T14057] usb 4-1: USB disconnect, device number 43
[ 1564.008730][T15900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1564.101898][T15900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1564.146141][T16107] ALSA: mixer_oss: invalid OSS volume ''
[ 1565.365679][T15468] Bluetooth: hci2: command tx timeout
[ 1565.401174][T16107] syz.5.2490 (16107): drop_caches: 2
[ 1565.458647][T16055] lo speed is unknown, defaulting to 1000
[ 1565.917252][T15900] team0: Port device team_slave_0 added
[ 1565.941216][T15900] team0: Port device team_slave_1 added
[ 1567.347982][T15900] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1567.348000][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1567.348027][T15900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1567.642713][T15900] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1567.642726][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1567.642741][T15900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1568.769143][T16131] ALSA: mixer_oss: invalid OSS volume ''
[ 1569.018450][T16131] syz.5.2496 (16131): drop_caches: 2
[ 1571.096175][T15900] hsr_slave_0: entered promiscuous mode
[ 1571.097607][T15900] hsr_slave_1: entered promiscuous mode
[ 1571.462684][T16153] syz.3.2502 (16153): drop_caches: 2
[ 1572.322035][T16150] ALSA: mixer_oss: invalid OSS volume ''
[ 1574.765360][T16171] could not open pipe file descriptor
[ 1581.126246][T16055] chnl_net:caif_netlink_parms(): no params data found
[ 1581.860587][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.090955][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1582.999861][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1583.048921][T16224] ALSA: mixer_oss: invalid OSS volume ''
[ 1583.065327][T16224] syz.3.2516 (16224): drop_caches: 2
[ 1583.372389][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1583.640812][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1584.345591][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1585.613601][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1585.767871][T16055] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1585.768804][T16055] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1585.769052][T16055] bridge_slave_0: entered allmulticast mode
[ 1585.815487][T16055] bridge_slave_0: entered promiscuous mode
[ 1585.860624][T16055] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1585.860758][T16055] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1585.860948][T16055] bridge_slave_1: entered allmulticast mode
[ 1585.873139][T16055] bridge_slave_1: entered promiscuous mode
[ 1586.163210][T16055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1586.233765][T16055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1586.316005][T14735] bridge_slave_1: left allmulticast mode
[ 1586.316033][T14735] bridge_slave_1: left promiscuous mode
[ 1586.316220][T14735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1586.386356][T14735] bridge_slave_0: left allmulticast mode
[ 1586.386377][T14735] bridge_slave_0: left promiscuous mode
[ 1586.386580][T14735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1586.715669][T14735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1586.795678][T14735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1586.877362][T14735] bond0 (unregistering): Released all slaves
[ 1587.160971][T16055] team0: Port device team_slave_0 added
[ 1587.165501][T16055] team0: Port device team_slave_1 added
[ 1587.429583][T14735] hsr_slave_0: left promiscuous mode
[ 1587.510736][T14735] hsr_slave_1: left promiscuous mode
[ 1587.511742][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1587.565873][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1587.885756][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1587.943923][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1587.945820][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1587.947569][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1587.948438][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1588.835701][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1589.856274][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1590.113570][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1590.760274][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1591.698673][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1592.983697][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1592.984093][T15468] Bluetooth: hci0: command tx timeout
[ 1593.310937][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1594.846627][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1594.919085][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1595.082602][T15468] Bluetooth: hci0: command tx timeout
[ 1595.320530][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1595.896072][T14735] team0 (unregistering): Port device team_slave_1 removed
[ 1596.827504][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1596.934583][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1597.155395][T15468] Bluetooth: hci0: command tx timeout
[ 1597.595581][T14735] team0 (unregistering): Port device team_slave_0 removed
[ 1598.364932][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1598.618385][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1598.955518][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1599.283999][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1599.729679][T15468] Bluetooth: hci0: command tx timeout
[ 1605.017640][T16055] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1605.017653][T16055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1605.017667][T16055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1605.026340][T16055] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1605.026351][T16055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1605.026365][T16055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1608.046805][T16055] hsr_slave_0: entered promiscuous mode
[ 1608.049635][T16055] hsr_slave_1: entered promiscuous mode
[ 1608.050626][T16055] debugfs: 'hsr0' already exists in 'hsr'
[ 1608.050651][T16055] Cannot create hsr debugfs directory
[ 1608.101138][T16245] lo speed is unknown, defaulting to 1000
[ 1608.186324][T16364] ALSA: mixer_oss: invalid OSS volume ''
[ 1608.229288][T16364] syz.3.2553 (16364): drop_caches: 2
[ 1611.081454][T14735] bridge_slave_1: left allmulticast mode
[ 1611.081474][T14735] bridge_slave_1: left promiscuous mode
[ 1611.081629][T14735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1611.186781][T14735] bridge_slave_0: left allmulticast mode
[ 1611.186811][T14735] bridge_slave_0: left promiscuous mode
[ 1611.187090][T14735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1611.785235][T14735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1611.905742][T14735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1611.997347][T14735] bond0 (unregistering): Released all slaves
[ 1612.546899][T14735] hsr_slave_0: left promiscuous mode
[ 1613.515692][T14735] hsr_slave_1: left promiscuous mode
[ 1613.517112][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1613.589175][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1613.772461][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1613.793349][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1613.802863][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1613.812434][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1613.813329][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1615.875785][T15468] Bluetooth: hci1: command tx timeout
[ 1616.576231][T14735] team0 (unregistering): Port device team_slave_1 removed
[ 1617.715763][T14735] team0 (unregistering): Port device team_slave_0 removed
[ 1617.832237][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1617.832308][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1617.955048][ T5799] Bluetooth: hci1: command tx timeout
[ 1618.037307][T16427] ALSA: mixer_oss: invalid OSS volume ''
[ 1618.119177][T16426] syz.3.2566 (16426): drop_caches: 2
[ 1618.454800][T16245] chnl_net:caif_netlink_parms(): no params data found
[ 1618.988144][T16399] lo speed is unknown, defaulting to 1000
[ 1619.515584][T16245] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1619.515878][T16245] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1619.516121][T16245] bridge_slave_0: entered allmulticast mode
[ 1619.537071][T16245] bridge_slave_0: entered promiscuous mode
[ 1619.612687][T16245] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1619.612828][T16245] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1619.613064][T16245] bridge_slave_1: entered allmulticast mode
[ 1619.623511][T16245] bridge_slave_1: entered promiscuous mode
[ 1620.889769][ T5799] Bluetooth: hci1: command tx timeout
[ 1621.230529][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1621.374373][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1622.531119][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1622.915463][ T5799] Bluetooth: hci1: command tx timeout
[ 1623.537402][T16245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1623.580993][T16245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1623.897205][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1624.161638][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1624.852205][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1624.912158][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1625.258707][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1625.298842][T16245] team0: Port device team_slave_0 added
[ 1625.466574][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1625.566822][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1625.979794][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1625.992160][T16245] team0: Port device team_slave_1 added
[ 1628.825245][T14735] bridge_slave_1: left allmulticast mode
[ 1628.825275][T14735] bridge_slave_1: left promiscuous mode
[ 1628.825536][T14735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1628.893313][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1628.932187][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1629.103143][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1629.154926][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1629.436523][T14735] bridge_slave_0: left allmulticast mode
[ 1629.436552][T14735] bridge_slave_0: left promiscuous mode
[ 1629.436814][T14735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1629.750473][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1631.425081][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1631.542998][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1632.407711][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1632.907260][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1633.888396][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1634.274262][T14735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1634.926806][ T5799] Bluetooth: hci5: unexpected event for opcode 0x2006
[ 1635.305859][T14735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1635.679715][T14735] bond0 (unregistering): Released all slaves
[ 1635.894817][T16245] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1635.894894][T16245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1635.894920][T16245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1635.936058][T16245] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1635.936075][T16245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1635.936102][T16245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1636.722816][ T5799] Bluetooth: hci5: unexpected event for opcode 0x2006
[ 1638.727548][T16245] hsr_slave_0: entered promiscuous mode
[ 1638.729174][T16245] hsr_slave_1: entered promiscuous mode
[ 1639.116460][T14735] hsr_slave_0: left promiscuous mode
[ 1639.136511][T14735] hsr_slave_1: left promiscuous mode
[ 1639.142568][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1639.179972][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1643.131063][T16594] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1643.166310][T14735] team0 (unregistering): Port device team_slave_1 removed
[ 1644.145628][T14735] team0 (unregistering): Port device team_slave_0 removed
[ 1647.718432][T16399] chnl_net:caif_netlink_parms(): no params data found
[ 1648.537659][T16399] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1648.537869][T16399] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1648.538095][T16399] bridge_slave_0: entered allmulticast mode
[ 1648.540824][T16399] bridge_slave_0: entered promiscuous mode
[ 1648.659586][T16399] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1648.659775][T16399] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1648.660014][T16399] bridge_slave_1: entered allmulticast mode
[ 1648.662105][T16399] bridge_slave_1: entered promiscuous mode
[ 1649.050976][T16399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1649.065363][T16399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1649.208929][T16399] team0: Port device team_slave_0 added
[ 1649.211231][T16399] team0: Port device team_slave_1 added
[ 1649.456053][T14735] bridge_slave_1: left allmulticast mode
[ 1649.456082][T14735] bridge_slave_1: left promiscuous mode
[ 1649.456336][T14735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1649.546093][T14735] bridge_slave_0: left allmulticast mode
[ 1649.546114][T14735] bridge_slave_0: left promiscuous mode
[ 1649.546293][T14735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1650.149171][T14735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1650.286650][T15468] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1650.307449][T15468] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1650.309444][T15468] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1650.329916][T15468] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1650.333589][T15468] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1650.495981][T14735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1651.334175][ T5799] Bluetooth: hci5: unexpected event for opcode 0x2006
[ 1651.568387][T14735] bond0 (unregistering): Released all slaves
[ 1651.767116][T16399] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1651.767128][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1651.767142][T16399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1652.525032][ T5799] Bluetooth: hci0: command tx timeout
[ 1653.581816][T16399] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1653.585811][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1653.586795][T16399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1653.885995][T14735] hsr_slave_0: left promiscuous mode
[ 1653.925165][T14735] hsr_slave_1: left promiscuous mode
[ 1653.926278][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1653.975503][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1654.900664][T15468] Bluetooth: hci0: command tx timeout
[ 1657.972597][ T5799] Bluetooth: hci0: command tx timeout
[ 1658.633229][T14735] team0 (unregistering): Port device team_slave_1 removed
[ 1659.765700][T14735] team0 (unregistering): Port device team_slave_0 removed
[ 1659.840888][T16715] ALSA: mixer_oss: invalid OSS volume ''
[ 1660.071081][ T5799] Bluetooth: hci0: command tx timeout
[ 1660.108015][T16712] netlink: 'syz.1.2638': attribute type 4 has an invalid length.
[ 1660.108038][T16712] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2638'.
[ 1661.163866][T16718] syz.5.2636 (16718): drop_caches: 2
[ 1663.556866][T16640] lo speed is unknown, defaulting to 1000
[ 1663.753817][T16399] hsr_slave_0: entered promiscuous mode
[ 1663.761276][T16399] hsr_slave_1: entered promiscuous mode
[ 1668.606424][T16773] could not open pipe file descriptor
[ 1668.663521][T16640] chnl_net:caif_netlink_parms(): no params data found
[ 1669.880115][T16640] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1669.883167][T16640] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1669.917273][T16640] bridge_slave_0: entered allmulticast mode
[ 1670.006196][T16640] bridge_slave_0: entered promiscuous mode
[ 1670.160977][T16640] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1670.182773][T16640] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1670.210715][T16640] bridge_slave_1: entered allmulticast mode
[ 1670.250583][T16640] bridge_slave_1: entered promiscuous mode
[ 1670.521912][T16640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1670.546316][T16640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1670.555442][T14057] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1670.707439][T14057] usb 2-1: config 6 has an invalid interface number: 14 but max is 0
[ 1670.707468][T14057] usb 2-1: config 6 has no interface number 0
[ 1670.707501][T14057] usb 2-1: config 6 interface 14 has no altsetting 0
[ 1670.710477][T14057] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 1670.710513][T14057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1670.710533][T14057] usb 2-1: Product: syz
[ 1670.710547][T14057] usb 2-1: Manufacturer: syz
[ 1670.710562][T14057] usb 2-1: SerialNumber: syz
[ 1671.447730][T14057] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1671.447838][T14057] command write [95] error -22
[ 1671.477136][T14057] usb 2-1: USB disconnect, device number 33
[ 1671.483941][T16640] team0: Port device team_slave_0 added
[ 1671.509990][T16754] udevd[16754]: setting mode of /dev/bus/usb/002/033 to 020664 failed: No such file or directory
[ 1671.510195][T16754] udevd[16754]: setting owner of /dev/bus/usb/002/033 to uid=0, gid=0 failed: No such file or directory
[ 1671.552630][T16640] team0: Port device team_slave_1 added
[ 1672.071102][T16640] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1672.071119][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1672.071146][T16640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1672.828354][T16640] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1672.828372][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1672.828398][T16640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1673.066209][T16640] hsr_slave_0: entered promiscuous mode
[ 1673.067657][T16640] hsr_slave_1: entered promiscuous mode
[ 1673.068724][T16640] debugfs: 'hsr0' already exists in 'hsr'
[ 1673.068748][T16640] Cannot create hsr debugfs directory
[ 1674.077354][T16640] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1674.196430][T16640] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1674.218593][T16640] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1674.337663][T16640] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1674.440650][T16640] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1674.457558][T16640] 8021q: adding VLAN 0 to HW filter on device team0
[ 1674.462746][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1674.481648][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1674.502785][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1674.503130][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1674.676359][   T58] bridge_slave_1: left allmulticast mode
[ 1674.676389][   T58] bridge_slave_1: left promiscuous mode
[ 1674.676629][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1674.786946][   T58] bridge_slave_0: left allmulticast mode
[ 1674.786976][   T58] bridge_slave_0: left promiscuous mode
[ 1674.802201][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1675.709104][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1675.815789][T15468] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1675.826236][T15468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1675.849084][T15468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1675.864245][T15468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1675.868261][T15468] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1676.285322][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1676.536978][   T58] bond0 (unregistering): Released all slaves
[ 1677.605983][T15008] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1677.711931][T16837] lo speed is unknown, defaulting to 1000
[ 1677.761023][T15008] usb 6-1: config 6 has an invalid interface number: 14 but max is 0
[ 1677.761051][T15008] usb 6-1: config 6 has no interface number 0
[ 1677.761083][T15008] usb 6-1: config 6 interface 14 has no altsetting 0
[ 1677.787905][T15008] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 1677.787934][T15008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.787952][T15008] usb 6-1: Product: syz
[ 1677.787965][T15008] usb 6-1: Manufacturer: syz
[ 1677.787979][T15008] usb 6-1: SerialNumber: syz
[ 1678.129610][T15008] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1678.129667][T15008] command write [95] error -22
[ 1678.187661][T15008] usb 6-1: USB disconnect, device number 5
[ 1678.304259][T16857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2673'.
[ 1678.365113][   T58] hsr_slave_0: left promiscuous mode
[ 1678.406130][   T58] hsr_slave_1: left promiscuous mode
[ 1678.407107][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1678.515700][T15468] Bluetooth: hci1: command tx timeout
[ 1679.238789][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1679.238832][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1679.303548][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1679.455427][T16871] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[ 1680.641424][T15468] Bluetooth: hci1: command tx timeout
[ 1682.729999][T15468] Bluetooth: hci1: command tx timeout
[ 1682.881630][T10335] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1683.075567][T10335] usb 6-1: Using ep0 maxpacket: 32
[ 1683.102927][T10335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1683.103203][T10335] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1683.103250][T10335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1683.578156][T10335] usb 6-1: config 0 descriptor??
[ 1683.845236][T10335] usbhid 6-1:0.0: can't add hid device: -71
[ 1683.845365][T10335] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1683.895269][T10335] usb 6-1: USB disconnect, device number 6
[ 1684.765019][T15468] Bluetooth: hci1: command tx timeout
[ 1685.685021][T10335] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1685.867177][T10335] usb 4-1: config 6 has an invalid interface number: 14 but max is 0
[ 1685.867195][T10335] usb 4-1: config 6 has no interface number 0
[ 1685.867215][T10335] usb 4-1: config 6 interface 14 has no altsetting 0
[ 1685.869609][T10335] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 1685.869627][T10335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1685.869636][T10335] usb 4-1: Product: syz
[ 1685.869643][T10335] usb 4-1: Manufacturer: syz
[ 1685.869651][T10335] usb 4-1: SerialNumber: syz
[ 1686.194656][T10335] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1686.194710][T10335] command write [95] error -22
[ 1686.243250][T10335] usb 4-1: USB disconnect, device number 44
[ 1686.657857][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 1686.915895][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 1689.445390][  T991] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1690.112234][  T991] usb 6-1: Using ep0 maxpacket: 32
[ 1690.114211][  T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1690.114265][  T991] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1690.114285][  T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1690.154343][  T991] usb 6-1: config 0 descriptor??
[ 1690.480708][T16937] block device autoloading is deprecated and will be removed.
[ 1690.514767][T16937] FAT-fs (loop7): unable to read boot sector
[ 1690.577169][  T991] elo 0003:04E7:0009.000F: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0
[ 1691.422248][T16640] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1691.503995][T16837] chnl_net:caif_netlink_parms(): no params data found
[ 1691.905250][  T991] usb 6-1: USB disconnect, device number 7
[ 1692.758834][T16837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1692.758944][T16837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1692.759109][T16837] bridge_slave_0: entered allmulticast mode
[ 1692.761331][T16837] bridge_slave_0: entered promiscuous mode
[ 1692.763483][T16837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1692.763553][T16837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1692.763674][T16837] bridge_slave_1: entered allmulticast mode
[ 1692.794964][T16837] bridge_slave_1: entered promiscuous mode
[ 1692.939623][T10335] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1693.816806][T10335] usb 4-1: config 6 has an invalid interface number: 14 but max is 0
[ 1693.816824][T10335] usb 4-1: config 6 has no interface number 0
[ 1693.816842][T10335] usb 4-1: config 6 interface 14 has no altsetting 0
[ 1693.819159][T10335] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 1693.819176][T10335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1693.819186][T10335] usb 4-1: Product: syz
[ 1693.819193][T10335] usb 4-1: Manufacturer: syz
[ 1693.819201][T10335] usb 4-1: SerialNumber: syz
[ 1694.002348][T16837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1694.062064][T16837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1694.094539][T10335] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1694.094645][T10335] command write [95] error -22
[ 1694.148128][T10335] usb 4-1: USB disconnect, device number 45
[ 1694.419250][T16837] team0: Port device team_slave_0 added
[ 1694.446656][T16837] team0: Port device team_slave_1 added
[ 1697.275617][T16837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1697.275629][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1697.275643][T16837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1697.316731][T16837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1697.316749][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1697.316775][T16837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1698.105988][T16640] veth0_vlan: entered promiscuous mode
[ 1699.485601][T16837] hsr_slave_0: entered promiscuous mode
[ 1699.487051][T16837] hsr_slave_1: entered promiscuous mode
[ 1699.656029][T16640] veth1_vlan: entered promiscuous mode
[ 1700.646323][T16640] veth0_macvtap: entered promiscuous mode
[ 1700.673253][T16640] veth1_macvtap: entered promiscuous mode
[ 1701.469599][T16640] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1701.524965][T10335] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1701.680583][T10335] usb 4-1: config 6 has an invalid interface number: 14 but max is 0
[ 1701.680610][T10335] usb 4-1: config 6 has no interface number 0
[ 1701.680643][T10335] usb 4-1: config 6 interface 14 has no altsetting 0
[ 1701.684355][T10335] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 1701.684383][T10335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1701.684401][T10335] usb 4-1: Product: syz
[ 1701.684414][T10335] usb 4-1: Manufacturer: syz
[ 1701.684428][T10335] usb 4-1: SerialNumber: syz
[ 1702.063690][T16640] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1702.406620][T14735] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1702.446859][T10335] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1702.446915][T10335] command write [95] error -22
[ 1702.468526][T14735] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1702.497896][T10335] usb 4-1: USB disconnect, device number 46
[ 1703.806881][T14735] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.810557][T14735] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1704.735288][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1704.745174][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1704.915328][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1705.025227][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1705.317934][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1705.487283][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1705.893431][T16837] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1705.959141][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1705.959162][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1705.960650][T16837] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1706.013749][T16837] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1706.062141][T16837] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1706.089895][T17062] ALSA: mixer_oss: invalid OSS volume ''
[ 1706.231239][ T6590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1706.231259][ T6590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1706.570636][T16837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1706.618086][T16837] 8021q: adding VLAN 0 to HW filter on device team0
[ 1706.671294][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1706.671426][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1706.705459][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1706.705557][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1706.779687][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1707.621460][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1707.945196][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1707.989308][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1708.237678][T17062] syz.1.2725 (17062): drop_caches: 2
[ 1709.056210][T17043] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1709.519413][T17043] usb 4-1: config 6 has an invalid interface number: 14 but max is 0
[ 1709.519440][T17043] usb 4-1: config 6 has no interface number 0
[ 1709.519474][T17043] usb 4-1: config 6 interface 14 has no altsetting 0
[ 1709.550946][T17043] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 1709.550976][T17043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1709.550994][T17043] usb 4-1: Product: syz
[ 1709.551007][T17043] usb 4-1: Manufacturer: syz
[ 1709.551020][T17043] usb 4-1: SerialNumber: syz
[ 1710.799004][T17043] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1710.799108][T17043] command write [95] error -22
[ 1710.853560][T16837] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1710.918266][T17043] usb 4-1: USB disconnect, device number 47
[ 1712.085787][T16837] veth0_vlan: entered promiscuous mode
[ 1712.179092][T16837] veth1_vlan: entered promiscuous mode
[ 1713.587327][T16837] veth0_macvtap: entered promiscuous mode
[ 1713.592544][T16837] veth1_macvtap: entered promiscuous mode
[ 1713.910564][T16837] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1713.952355][T16837] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1713.979466][ T4363] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1713.981692][ T4363] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1713.981743][ T4363] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1713.981777][ T4363] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1718.015001][T14331] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1718.795542][T14331] usb 4-1: Using ep0 maxpacket: 32
[ 1719.615678][T14331] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1719.615705][T14331] usb 4-1: config 0 has no interface number 0
[ 1719.618645][T14331] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1719.618672][T14331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1719.618691][T14331] usb 4-1: Product: syz
[ 1719.618705][T14331] usb 4-1: Manufacturer: syz
[ 1719.618718][T14331] usb 4-1: SerialNumber: syz
[ 1719.768808][T14331] usb 4-1: config 0 descriptor??
[ 1719.916252][T14331] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1719.916284][T14331] usb 4-1: selecting invalid altsetting 1
[ 1719.916300][T14331] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1720.017369][T10335] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1720.020074][T14331] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1720.022559][T14331] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1720.022780][T14331] usb 4-1: media controller created
[ 1720.030359][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1720.030379][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1720.144443][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1720.144465][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1720.175015][T10335] usb 6-1: Using ep0 maxpacket: 32
[ 1720.177460][T10335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1720.177506][T10335] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1720.177529][T10335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1721.132312][T14331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1721.191218][T10335] usb 6-1: config 0 descriptor??
[ 1721.347474][T10335] usb 6-1: can't set config #0, error -71
[ 1721.523540][T10335] usb 6-1: USB disconnect, device number 8
[ 1721.595843][T17168] ALSA: mixer_oss: invalid OSS volume ''
[ 1721.705939][T17168] syz.1.2747 (17168): drop_caches: 2
[ 1721.893372][T17174] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1722.875107][T14331] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1722.875184][T14331] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1724.387833][T14331] usb 4-1: USB disconnect, device number 48
[ 1725.501734][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1725.515085][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1725.516546][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1725.518309][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1725.522031][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1726.533095][T17196] lo speed is unknown, defaulting to 1000
[ 1728.698580][ T5799] Bluetooth: hci2: command tx timeout
[ 1730.401854][T17196] chnl_net:caif_netlink_parms(): no params data found
[ 1731.411922][ T5799] Bluetooth: hci2: command tx timeout
[ 1731.502742][T17222] syz.5.2761 (17222): drop_caches: 2
[ 1731.845023][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1732.052443][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1732.152049][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1732.565609][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1732.947855][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1733.359078][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1733.392002][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1733.458105][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1733.627226][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1733.689421][ T5799] Bluetooth: hci2: command tx timeout
[ 1733.743569][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1734.700949][T17148] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1735.086501][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1735.265029][T17148] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1735.265079][T17148] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1735.265102][T17148] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1735.286253][T17148] usb 8-1: config 0 descriptor??
[ 1735.673882][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1735.715429][ T5799] Bluetooth: hci2: command tx timeout
[ 1735.770541][T17266] netlink: 'syz.1.2773': attribute type 1 has an invalid length.
[ 1741.825844][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1741.825925][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1741.846399][T17148] usbhid 8-1:0.0: can't add hid device: -71
[ 1741.846527][T17148] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1741.875414][T17148] usb 8-1: USB disconnect, device number 2
[ 1742.429290][T17277] syz.7.2776 (17277): drop_caches: 2
[ 1751.987869][T17196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1751.988006][T17196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1751.988261][T17196] bridge_slave_0: entered allmulticast mode
[ 1752.048663][T17196] bridge_slave_0: entered promiscuous mode
[ 1752.075147][T17357] netlink: 'syz.7.2796': attribute type 10 has an invalid length.
[ 1752.603621][ T5799] Bluetooth: hci3: unexpected event for opcode 0x2006
[ 1754.286759][T17196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1754.286866][T17196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1754.287095][T17196] bridge_slave_1: entered allmulticast mode
[ 1754.308109][T17196] bridge_slave_1: entered promiscuous mode
[ 1754.311415][T17357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1754.368678][T17357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1754.384967][T17148] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1754.420844][T17357] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1754.426389][T17357] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1754.426795][T17357] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1754.426959][T17357] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1754.431062][T17357] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1754.535138][T17148] usb 2-1: Using ep0 maxpacket: 32
[ 1754.537408][T17148] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1754.537480][T17148] usb 2-1: config 0 has no interface number 0
[ 1754.540222][T17148] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1754.540311][T17148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.540322][T17148] usb 2-1: Product: syz
[ 1754.540330][T17148] usb 2-1: Manufacturer: syz
[ 1754.540337][T17148] usb 2-1: SerialNumber: syz
[ 1754.550669][T17148] usb 2-1: config 0 descriptor??
[ 1754.584485][T17148] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1754.584514][T17148] usb 2-1: selecting invalid altsetting 1
[ 1754.584529][T17148] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1754.606805][T17148] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1754.607405][T17148] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1754.607457][T17148] usb 2-1: media controller created
[ 1754.712044][T17148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1754.720738][T17369] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2800'.
[ 1755.905289][T17148] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1755.905349][T17148] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1756.464379][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1756.635006][    T9] usb 7-1: Using ep0 maxpacket: 32
[ 1756.637313][    T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1756.637339][    T9] usb 7-1: config 0 has no interface number 0
[ 1756.641438][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1756.641513][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1756.641531][    T9] usb 7-1: Product: syz
[ 1756.641538][    T9] usb 7-1: Manufacturer: syz
[ 1756.641546][    T9] usb 7-1: SerialNumber: syz
[ 1756.715290][    T9] usb 7-1: config 0 descriptor??
[ 1756.851512][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1756.854195][    T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1756.854213][    T9] usb 7-1: selecting invalid altsetting 1
[ 1756.854221][    T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1758.082647][T17148] usb 2-1: USB disconnect, device number 34
[ 1758.165272][    T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1758.165636][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1758.165685][    T9] usb 7-1: media controller created
[ 1759.303314][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1759.317866][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1759.991429][T17196] team0: Port device team_slave_0 added
[ 1760.010442][T17196] team0: Port device team_slave_1 added
[ 1761.183719][    T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1761.183769][    T9] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1761.428226][    T9] usb 7-1: USB disconnect, device number 2
[ 1762.133156][T17407] syz.5.2808 (17407): drop_caches: 2
[ 1762.348696][T17400] ALSA: mixer_oss: invalid OSS volume ''
[ 1762.685061][T17422] FAT-fs (loop13): unable to read boot sector
[ 1773.449608][T17412] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1773.466567][T17412] bond1: (slave macvlan5): Enslaving as an active interface with an up link
[ 1773.475198][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1773.475212][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1773.475232][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1773.888087][T15468] Bluetooth: hci0: command 0x0406 tx timeout
[ 1773.918960][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1773.918977][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1773.919001][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1779.897037][T17196] hsr_slave_0: entered promiscuous mode
[ 1779.898574][T17196] hsr_slave_1: entered promiscuous mode
[ 1779.956951][T17196] debugfs: 'hsr0' already exists in 'hsr'
[ 1779.956980][T17196] Cannot create hsr debugfs directory
[ 1781.171442][T15468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1782.182688][T15468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1782.191850][T15468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1782.227544][T15468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1783.408129][T15468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1786.215296][   T44] bridge_slave_1: left allmulticast mode
[ 1786.215316][   T44] bridge_slave_1: left promiscuous mode
[ 1786.215489][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1786.216007][T17483] syz.1.2830 (17483): drop_caches: 2
[ 1787.085021][T15468] Bluetooth: hci4: command tx timeout
[ 1787.355867][   T44] bridge_slave_0: left allmulticast mode
[ 1787.355888][   T44] bridge_slave_0: left promiscuous mode
[ 1787.356054][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1788.460628][T15008] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1788.635012][T15008] usb 7-1: Using ep0 maxpacket: 32
[ 1788.638320][T15008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1788.638372][T15008] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1788.638394][T15008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.709322][T15008] usb 7-1: config 0 descriptor??
[ 1788.864095][T10483] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1789.091657][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1789.125616][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1789.134301][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1789.152516][T10483] usb 8-1: Using ep0 maxpacket: 32
[ 1789.156624][ T5799] Bluetooth: hci4: command tx timeout
[ 1789.162241][T10483] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1789.162267][T10483] usb 8-1: config 0 has no interface number 0
[ 1789.166854][T10483] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1789.166884][T10483] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1789.166903][T10483] usb 8-1: Product: syz
[ 1789.166916][T10483] usb 8-1: Manufacturer: syz
[ 1789.166929][T10483] usb 8-1: SerialNumber: syz
[ 1789.261226][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1789.263794][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1789.368869][T10483] usb 8-1: config 0 descriptor??
[ 1789.454663][T10483] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1789.454693][T10483] usb 8-1: selecting invalid altsetting 1
[ 1789.454709][T10483] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1790.838753][T15008] usbhid 7-1:0.0: can't add hid device: -71
[ 1790.838884][T15008] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1790.853298][T15008] usb 7-1: USB disconnect, device number 3
[ 1791.044553][T10483] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1791.045307][T10483] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1791.045363][T10483] usb 8-1: media controller created
[ 1791.141480][T10483] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1791.235199][T15468] Bluetooth: hci4: command tx timeout
[ 1791.325011][ T5799] Bluetooth: hci5: command tx timeout
[ 1791.872771][T10483] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1791.872839][T10483] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1791.873315][T10483] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1793.081791][T10483] usb 8-1: USB disconnect, device number 3
[ 1795.064070][ T5799] Bluetooth: hci4: command tx timeout
[ 1796.122255][ T5799] Bluetooth: hci5: command tx timeout
[ 1797.683478][T17539] netlink: 'syz.1.2842': attribute type 10 has an invalid length.
[ 1798.909255][T15468] Bluetooth: hci5: command tx timeout
[ 1799.315043][T15468] Bluetooth: hci1: command 0x0406 tx timeout
[ 1800.076047][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1800.268686][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1800.682592][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1800.748399][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1800.864633][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1800.943390][ T5799] Bluetooth: hci5: command tx timeout
[ 1801.065792][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1801.520187][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1801.606905][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1801.657296][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1801.766398][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1802.486851][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1802.572237][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1802.572307][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1802.810707][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1803.245644][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1803.305507][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1803.366471][   T44] bond0 (unregistering): Released all slaves
[ 1803.407962][   T44] bond1 (unregistering): Released all slaves
[ 1803.577326][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1803.871757][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1804.029955][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1804.087498][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1804.516128][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1805.126569][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1807.488310][   T44] bond2 (unregistering): Released all slaves
[ 1808.500789][   T44] bond3 (unregistering): Released all slaves
[ 1809.172353][T17533] 8021q: adding VLAN 0 to HW filter on device macvlan6
[ 1809.174197][T17533] bond1: (slave macvlan6): Enslaving as an active interface with an up link
[ 1813.161790][T17501] lo speed is unknown, defaulting to 1000
[ 1814.626978][T17606] netlink: 'syz.6.2860': attribute type 10 has an invalid length.
[ 1815.023120][T17467] lo speed is unknown, defaulting to 1000
[ 1815.936765][T17606] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1815.937742][T17606] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1815.949793][T17606] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1815.949944][T17606] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1815.950307][T17606] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1815.950480][T17606] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1815.954499][T17606] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1822.725790][T17652] netlink: 'syz.7.2872': attribute type 10 has an invalid length.
[ 1823.909271][T17652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1823.909684][T17652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1831.088220][   T44] hsr_slave_0: left promiscuous mode
[ 1832.166110][   T44] hsr_slave_1: left promiscuous mode
[ 1832.167132][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1832.583631][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1833.880009][T17576] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1835.058178][T17576] usb 7-1: config 6 has an invalid interface number: 14 but max is 0
[ 1835.058196][T17576] usb 7-1: config 6 has no interface number 0
[ 1835.058217][T17576] usb 7-1: config 6 interface 14 has no altsetting 0
[ 1835.063384][T17576] usb 7-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[ 1835.063413][T17576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1835.063431][T17576] usb 7-1: Product: syz
[ 1835.063443][T17576] usb 7-1: Manufacturer: syz
[ 1835.063457][T17576] usb 7-1: SerialNumber: syz
[ 1836.021801][T17576] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1836.021895][T17576] command write [95] error -22
[ 1836.035709][T17576] usb 7-1: USB disconnect, device number 4
[ 1840.790731][T15468] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1840.811143][T15468] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1840.813774][T15468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1840.816977][T15468] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1840.840404][T15468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1841.050145][T17762] ALSA: mixer_oss: invalid OSS volume ''
[ 1841.251088][T17763] syz.7.2900 (17763): drop_caches: 2
[ 1843.330388][ T5799] Bluetooth: hci2: command tx timeout
[ 1845.153724][T15008] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1845.304974][T15008] usb 2-1: Using ep0 maxpacket: 16
[ 1845.356904][T15008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1845.356935][T15008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1845.356971][T15008] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 1845.356992][T15008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1845.370058][T15008] usb 2-1: config 0 descriptor??
[ 1845.394944][ T5799] Bluetooth: hci2: command tx timeout
[ 1845.935845][   T44] team0 (unregistering): Port device team_slave_1 removed
[ 1846.124994][T17576] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1846.230610][T15008] usbhid 2-1:0.0: can't add hid device: -71
[ 1846.230743][T15008] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1846.245492][T15008] usb 2-1: USB disconnect, device number 35
[ 1846.275078][T17576] usb 7-1: Using ep0 maxpacket: 32
[ 1846.282291][T17576] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1846.282342][T17576] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 1846.282365][T17576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1846.307071][T17576] usb 7-1: config 0 descriptor??
[ 1846.319617][   T44] team0 (unregistering): Port device team_slave_0 removed
[ 1846.905019][T15468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1846.916383][T15468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1846.917913][T15468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1847.025259][T15468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1847.029215][T15468] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1847.474966][ T5799] Bluetooth: hci2: command tx timeout
[ 1849.157952][ T5799] Bluetooth: hci6: command tx timeout
[ 1849.603819][ T5799] Bluetooth: hci2: command tx timeout
[ 1849.647749][T17576] usbhid 7-1:0.0: can't add hid device: -71
[ 1849.647884][T17576] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1849.690804][T17576] usb 7-1: USB disconnect, device number 5
[ 1851.375935][ T5799] Bluetooth: hci6: command tx timeout
[ 1852.267224][T17781] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2903'.
[ 1852.268083][T17467] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[ 1852.573323][T17821] ALSA: mixer_oss: invalid OSS volume ''
[ 1852.695629][T17789] lo speed is unknown, defaulting to 1000
[ 1852.737160][T17757] lo speed is unknown, defaulting to 1000
[ 1852.786514][T17821] syz.6.2913 (17821): drop_caches: 2
[ 1853.394930][ T5799] Bluetooth: hci6: command tx timeout
[ 1855.475271][ T5799] Bluetooth: hci6: command tx timeout
[ 1859.355240][T14057] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1859.364975][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1859.507413][T14057] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1859.507939][T14057] usb 8-1: not running at top speed; connect to a high speed hub
[ 1859.508997][T14057] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1859.509010][T14057] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1859.514024][T14057] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1859.514042][T14057] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1859.514053][T14057] usb 8-1: Product: syz
[ 1859.514060][T14057] usb 8-1: Manufacturer: syz
[ 1859.514067][T14057] usb 8-1: SerialNumber: syz
[ 1859.535068][    T9] usb 7-1: Using ep0 maxpacket: 32
[ 1859.624614][    T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1859.624640][    T9] usb 7-1: config 0 has no interface number 0
[ 1859.632563][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1859.632594][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1859.632613][    T9] usb 7-1: Product: syz
[ 1859.632626][    T9] usb 7-1: Manufacturer: syz
[ 1859.632639][    T9] usb 7-1: SerialNumber: syz
[ 1859.724054][    T9] usb 7-1: config 0 descriptor??
[ 1859.754137][    T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1859.754165][    T9] usb 7-1: selecting invalid altsetting 1
[ 1859.754181][    T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1859.974409][    T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1859.983729][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1859.983794][    T9] usb 7-1: media controller created
[ 1860.199181][T17757] chnl_net:caif_netlink_parms(): no params data found
[ 1860.224965][T14057] usb 8-1: 0:2 : does not exist
[ 1861.302347][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1861.474474][T14057] usb 8-1: USB disconnect, device number 4
[ 1861.783878][T17498] udevd[17498]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1862.905187][    T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1862.905223][    T9] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1863.138898][    T9] usb 7-1: USB disconnect, device number 6
[ 1863.317978][T17789] chnl_net:caif_netlink_parms(): no params data found
[ 1863.525013][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1863.562596][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1863.562670][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1864.339012][    T9] usb 7-1: Using ep0 maxpacket: 16
[ 1864.342495][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1864.342525][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1864.342562][    T9] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 1864.342584][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1864.391735][    T9] usb 7-1: config 0 descriptor??
[ 1864.889664][   T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1865.013325][    T9] usbhid 7-1:0.0: can't add hid device: -71
[ 1865.013458][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1865.021549][    T9] usb 7-1: USB disconnect, device number 7
[ 1869.801620][T17906] ALSA: mixer_oss: invalid OSS volume ''
[ 1870.004981][T10335] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 1870.042045][T17906] syz.1.2932 (17906): drop_caches: 2
[ 1870.158055][T10335] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1870.158805][T10335] usb 7-1: not running at top speed; connect to a high speed hub
[ 1870.202348][T10335] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1870.202374][T10335] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1870.210732][T10335] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1870.210759][T10335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1870.210778][T10335] usb 7-1: Product: syz
[ 1870.210791][T10335] usb 7-1: Manufacturer: syz
[ 1870.210805][T10335] usb 7-1: SerialNumber: syz
[ 1870.582513][   T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1870.586893][T10335] usb 7-1: 0:2 : does not exist
[ 1871.678074][T10335] usb 7-1: USB disconnect, device number 8
[ 1871.885508][T17908] udevd[17908]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1872.526630][T17757] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1873.023128][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1873.031588][T17757] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1873.031853][T17757] bridge_slave_0: entered allmulticast mode
[ 1873.034594][T17757] bridge_slave_0: entered promiscuous mode
[ 1873.535892][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1873.725699][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1874.442135][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1874.752486][   T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1875.583200][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1875.840268][T17757] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1875.897085][T17757] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1875.919393][T17757] bridge_slave_1: entered allmulticast mode
[ 1876.077244][T17757] bridge_slave_1: entered promiscuous mode
[ 1877.185029][T17576] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1879.536062][T17961] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2947'.
[ 1880.337931][   T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1880.369699][T17576] usb 2-1: unable to read config index 0 descriptor/all
[ 1880.369730][T17576] usb 2-1: can't read configurations, error -71
[ 1880.569668][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1880.619732][T17789] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1880.619889][T17789] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1880.620120][T17789] bridge_slave_0: entered allmulticast mode
[ 1880.623445][T17789] bridge_slave_0: entered promiscuous mode
[ 1880.959075][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1881.568068][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1881.628372][T17757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1881.635462][T17789] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1881.635607][T17789] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1881.635860][T17789] bridge_slave_1: entered allmulticast mode
[ 1881.638605][T17789] bridge_slave_1: entered promiscuous mode
[ 1881.643050][T17757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1882.060227][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1882.376980][T17977] ALSA: mixer_oss: invalid OSS volume ''
[ 1882.681050][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1882.775244][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1883.508992][T17986] usb usb7: usbfs: process 17986 (syz.6.2952) did not claim interface 0 before use
[ 1883.680615][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1883.685683][T17977] syz.7.2949 (17977): drop_caches: 2
[ 1884.672598][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1884.802902][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1885.028990][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1885.319056][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1885.337898][T17789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1885.616402][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1885.780355][T17757] team0: Port device team_slave_0 added
[ 1885.912309][T17789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1885.947001][T17757] team0: Port device team_slave_1 added
[ 1887.784347][T18003] 8021q: adding VLAN 0 to HW filter on device macvlan7
[ 1887.801346][T18003] bond1: (slave macvlan7): Enslaving as an active interface with an up link
[ 1887.919042][T17789] team0: Port device team_slave_0 added
[ 1887.928379][T17757] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1887.928395][T17757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1887.928421][T17757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1888.023943][T17789] team0: Port device team_slave_1 added
[ 1888.127076][T17757] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1888.127094][T17757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1888.127121][T17757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1888.728331][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1888.929471][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1889.251725][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1889.560999][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1890.312315][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1890.725005][T17576] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1890.882735][T17576] usb 7-1: Using ep0 maxpacket: 16
[ 1890.892421][T17576] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1890.892441][T17576] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1890.892466][T17576] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 1890.892480][T17576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1890.942740][T17576] usb 7-1: config 0 descriptor??
[ 1891.301991][T17757] hsr_slave_0: entered promiscuous mode
[ 1891.304591][T17757] hsr_slave_1: entered promiscuous mode
[ 1891.306721][T17757] debugfs: 'hsr0' already exists in 'hsr'
[ 1891.306750][T17757] Cannot create hsr debugfs directory
[ 1891.308484][T17789] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1891.308497][T17789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1891.308525][T17789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1891.337043][T17789] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1891.337061][T17789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1891.337088][T17789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1892.629851][T18040] syz.1.2965 (18040): drop_caches: 2
[ 1892.815586][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1892.868569][T17576] usbhid 7-1:0.0: can't add hid device: -71
[ 1892.868717][T17576] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1892.968527][T17576] usb 7-1: USB disconnect, device number 9
[ 1893.148470][   T58] bridge_slave_1: left allmulticast mode
[ 1893.148491][   T58] bridge_slave_1: left promiscuous mode
[ 1893.148657][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1893.256059][   T58] bridge_slave_0: left allmulticast mode
[ 1893.256080][   T58] bridge_slave_0: left promiscuous mode
[ 1893.257383][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1893.349049][   T58] bridge_slave_1: left allmulticast mode
[ 1893.349071][   T58] bridge_slave_1: left promiscuous mode
[ 1893.349240][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1893.436422][   T58] bridge_slave_0: left allmulticast mode
[ 1893.436452][   T58] bridge_slave_0: left promiscuous mode
[ 1893.436692][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1897.294324][   T58] bond0 (unregistering): Released all slaves
[ 1899.948763][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1900.030401][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1900.049784][T15468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1900.069029][T15468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1900.088455][T15468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1900.090845][T15468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1900.091815][T15468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1900.296603][   T58] bond0 (unregistering): Released all slaves
[ 1902.370488][T18088] syz.7.2977 (18088): drop_caches: 2
[ 1902.374333][ T5799] Bluetooth: hci4: command tx timeout
[ 1905.004965][ T5799] Bluetooth: hci4: command tx timeout
[ 1905.031196][   T58] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1906.506057][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1906.558338][T15468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1906.565856][T15468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1906.582017][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1906.595342][T15468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1906.598085][   T58] bond0 (unregistering): Released all slaves
[ 1906.619987][T15468] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1906.620644][T15468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1907.075387][T15468] Bluetooth: hci4: command tx timeout
[ 1907.231437][T18087] lo speed is unknown, defaulting to 1000
[ 1908.077682][T18131] usb usb7: usbfs: process 18131 (syz.6.2988) did not claim interface 0 before use
[ 1908.697682][T15468] Bluetooth: hci5: command tx timeout
[ 1909.354919][T15468] Bluetooth: hci4: command tx timeout
[ 1909.667355][T18120] lo speed is unknown, defaulting to 1000
[ 1910.913060][T15468] Bluetooth: hci5: command tx timeout
[ 1912.092386][T18145] 8021q: adding VLAN 0 to HW filter on device macvlan8
[ 1912.094082][T18145] bond1: (slave macvlan8): Enslaving as an active interface with an up link
[ 1912.915186][ T5799] Bluetooth: hci5: command tx timeout
[ 1914.684004][T18170] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2997'.
[ 1914.995142][ T5799] Bluetooth: hci5: command tx timeout
[ 1918.587737][T18087] chnl_net:caif_netlink_parms(): no params data found
[ 1921.553328][T18120] chnl_net:caif_netlink_parms(): no params data found
[ 1921.835096][   T58] hsr_slave_0: left promiscuous mode
[ 1922.175546][   T58] hsr_slave_1: left promiscuous mode
[ 1922.184699][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1922.422605][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1922.843779][T18223] ALSA: mixer_oss: invalid OSS volume ''
[ 1922.895005][T17143] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1922.954995][   T58] hsr_slave_0: left promiscuous mode
[ 1922.974975][   T58] hsr_slave_1: left promiscuous mode
[ 1922.975664][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1922.975682][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1923.006051][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1923.006080][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1923.044956][T17143] usb 2-1: Using ep0 maxpacket: 32
[ 1923.046796][T17143] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1923.046810][T17143] usb 2-1: config 0 has no interface number 0
[ 1923.048920][T17143] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1923.048935][T17143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1923.048946][T17143] usb 2-1: Product: syz
[ 1923.048954][T17143] usb 2-1: Manufacturer: syz
[ 1923.048961][T17143] usb 2-1: SerialNumber: syz
[ 1923.052170][T17143] usb 2-1: config 0 descriptor??
[ 1923.068428][   T58] veth1_macvtap: left promiscuous mode
[ 1923.068493][   T58] veth0_macvtap: left promiscuous mode
[ 1923.068702][   T58] veth1_vlan: left promiscuous mode
[ 1923.068808][   T58] veth0_vlan: left promiscuous mode
[ 1923.151029][T17143] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1923.151049][T17143] usb 2-1: selecting invalid altsetting 1
[ 1923.151060][T17143] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1923.185812][T17143] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1923.186221][T17143] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1923.186276][T17143] usb 2-1: media controller created
[ 1923.267864][T17143] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1924.542096][T17143] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1924.542132][T17143] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1924.965643][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 1925.021483][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1925.021526][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1925.125883][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 1925.611574][T18237] ALSA: mixer_oss: invalid OSS volume ''
[ 1926.006358][T18237] syz.6.3014 (18237): drop_caches: 2
[ 1930.155798][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 1930.455783][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 1933.345814][T18224] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3011'.
[ 1933.635547][T17143] usb 2-1: USB disconnect, device number 38
[ 1936.392972][T18259] ALSA: mixer_oss: invalid OSS volume ''
[ 1936.403276][T18282] ALSA: mixer_oss: invalid OSS volume ''
[ 1936.690317][T18282] syz.6.3024 (18282): drop_caches: 2
[ 1936.946693][T18087] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1936.946832][T18087] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1936.947045][T18087] bridge_slave_0: entered allmulticast mode
[ 1936.950150][T18087] bridge_slave_0: entered promiscuous mode
[ 1937.062335][T18087] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1937.062472][T18087] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1937.062723][T18087] bridge_slave_1: entered allmulticast mode
[ 1937.164205][T18087] bridge_slave_1: entered promiscuous mode
[ 1938.960202][T18087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1940.448555][T18087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1940.449079][T18120] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1940.449183][T18120] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1940.449309][T18120] bridge_slave_0: entered allmulticast mode
[ 1940.535111][T18120] bridge_slave_0: entered promiscuous mode
[ 1941.718209][T18120] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1941.718364][T18120] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1941.718640][T18120] bridge_slave_1: entered allmulticast mode
[ 1941.723207][T18120] bridge_slave_1: entered promiscuous mode
[ 1941.791008][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1942.780253][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1943.069251][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1943.267559][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1943.273329][T18333] ALSA: mixer_oss: invalid OSS volume ''
[ 1943.312429][T18087] team0: Port device team_slave_0 added
[ 1943.322694][T18327] ALSA: mixer_oss: invalid OSS volume ''
[ 1943.329109][T18327] syz.6.3035 (18327): drop_caches: 2
[ 1943.438114][T18087] team0: Port device team_slave_1 added
[ 1943.452384][T18120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1943.732068][T18120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1943.940330][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1944.219657][T18087] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1944.219672][T18087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1944.219695][T18087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1944.497354][T18087] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1944.497372][T18087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1944.497407][T18087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1944.603271][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1944.628838][T18120] team0: Port device team_slave_0 added
[ 1944.684091][T18120] team0: Port device team_slave_1 added
[ 1944.877739][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1945.032008][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1945.296165][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1945.376051][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1945.604722][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1945.720419][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1948.572113][T18120] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1948.572131][T18120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1948.572159][T18120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1950.430136][T18120] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1950.430154][T18120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1950.430182][T18120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1950.446058][T18087] hsr_slave_0: entered promiscuous mode
[ 1950.447680][T18087] hsr_slave_1: entered promiscuous mode
[ 1950.448800][T18087] debugfs: 'hsr0' already exists in 'hsr'
[ 1950.448825][T18087] Cannot create hsr debugfs directory
[ 1950.745317][T18382] ALSA: mixer_oss: invalid OSS volume ''
[ 1950.788644][T18382] syz.1.3048 (18382): drop_caches: 2
[ 1953.817095][T18399] ALSA: mixer_oss: invalid OSS volume ''
[ 1953.851582][T18120] hsr_slave_0: entered promiscuous mode
[ 1953.856189][T18120] hsr_slave_1: entered promiscuous mode
[ 1953.867163][T18120] debugfs: 'hsr0' already exists in 'hsr'
[ 1953.867182][T18120] Cannot create hsr debugfs directory
[ 1967.506299][   T58] bridge_slave_1: left allmulticast mode
[ 1967.506321][   T58] bridge_slave_1: left promiscuous mode
[ 1967.506484][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1968.236731][   T58] bridge_slave_0: left allmulticast mode
[ 1968.236762][   T58] bridge_slave_0: left promiscuous mode
[ 1968.237038][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1968.406210][T15468] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1968.424304][T15468] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1968.441807][T15468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1968.442796][T15468] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1968.444012][T15468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1968.501557][   T58] bridge_slave_1: left allmulticast mode
[ 1968.501589][   T58] bridge_slave_1: left promiscuous mode
[ 1968.501829][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1968.709103][   T58] bridge_slave_0: left allmulticast mode
[ 1968.709134][   T58] bridge_slave_0: left promiscuous mode
[ 1968.709389][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1970.429150][T18466] ALSA: mixer_oss: invalid OSS volume ''
[ 1970.529604][ T5799] Bluetooth: hci2: command tx timeout
[ 1970.575258][T18461] could not open pipe file descriptor
[ 1970.732799][T15468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1970.790780][T15468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1970.793370][T15468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1970.859822][T15468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1970.878859][T15468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1971.101902][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1971.266970][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1971.348026][   T58] bond0 (unregistering): Released all slaves
[ 1971.815826][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1971.975989][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1972.058997][   T58] bond0 (unregistering): Released all slaves
[ 1972.598765][ T5799] Bluetooth: hci2: command tx timeout
[ 1973.010943][ T5799] Bluetooth: hci4: command tx timeout
[ 1974.769348][T12785] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1974.787134][ T5799] Bluetooth: hci2: command tx timeout
[ 1974.915151][T12785] usb 7-1: Using ep0 maxpacket: 16
[ 1974.920552][T12785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1974.920571][T12785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1974.920595][T12785] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 1974.920607][T12785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1974.924367][T12785] usb 7-1: config 0 descriptor??
[ 1975.070090][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1975.075029][ T5799] Bluetooth: hci4: command tx timeout
[ 1975.105999][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1975.206837][   T58] hsr_slave_0: left promiscuous mode
[ 1975.229440][T18512] ALSA: mixer_oss: invalid OSS volume ''
[ 1975.255722][   T58] hsr_slave_1: left promiscuous mode
[ 1975.261295][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1975.309394][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1975.438810][T18512] syz.1.3085 (18512): drop_caches: 2
[ 1975.560978][T12785] usbhid 7-1:0.0: can't add hid device: -71
[ 1975.561059][T12785] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1975.611522][T12785] usb 7-1: USB disconnect, device number 10
[ 1976.016507][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 1976.407031][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 1976.912276][ T5799] Bluetooth: hci2: command tx timeout
[ 1977.732272][ T5799] Bluetooth: hci4: command tx timeout
[ 1979.934908][ T5799] Bluetooth: hci4: command tx timeout
[ 1980.060958][T18539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3093'.
[ 1984.393733][T18573] syz.7.3102 (18573): drop_caches: 2
[ 1985.013543][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 1985.111982][T18575] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3103'.
[ 1985.319773][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 1985.998590][T18584] ALSA: mixer_oss: invalid OSS volume ''
[ 1986.020519][T18584] syz.7.3106 (18584): drop_caches: 2
[ 1986.448775][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1986.448820][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1986.727992][T18567] 8021q: adding VLAN 0 to HW filter on device macvlan9
[ 1986.738277][T18567] bond1: (slave macvlan9): Enslaving as an active interface with an up link
[ 1986.833891][T18446] lo speed is unknown, defaulting to 1000
[ 1987.174973][T18469] lo speed is unknown, defaulting to 1000
[ 1988.525122][T18446] chnl_net:caif_netlink_parms(): no params data found
[ 1989.319178][T18606] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3112'.
[ 1992.508564][T18639] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3121'.
[ 1992.544760][T18446] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1992.552484][T18446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1992.552754][T18446] bridge_slave_0: entered allmulticast mode
[ 1992.569358][T18446] bridge_slave_0: entered promiscuous mode
[ 1992.582144][T18469] chnl_net:caif_netlink_parms(): no params data found
[ 1992.600754][T18446] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1992.600891][T18446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1992.601129][T18446] bridge_slave_1: entered allmulticast mode
[ 1992.604024][T18446] bridge_slave_1: entered promiscuous mode
[ 1995.904960][T14331] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1995.959329][T18446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1996.054034][T18446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1996.071075][T14331] usb 7-1: Using ep0 maxpacket: 32
[ 1996.074098][T14331] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1996.074124][T14331] usb 7-1: config 0 has no interface number 0
[ 1996.110841][T14331] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1996.110870][T14331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1996.110890][T14331] usb 7-1: Product: syz
[ 1996.110903][T14331] usb 7-1: Manufacturer: syz
[ 1996.110917][T14331] usb 7-1: SerialNumber: syz
[ 1996.172605][T14331] usb 7-1: config 0 descriptor??
[ 1996.222804][T14331] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1996.222833][T14331] usb 7-1: selecting invalid altsetting 1
[ 1996.222848][T14331] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1996.301696][T14331] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1996.302108][T14331] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1996.302159][T14331] usb 7-1: media controller created
[ 1996.363618][T14331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1997.600612][T14331] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1997.600670][T14331] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 2000.106985][T14331] usb 7-1: USB disconnect, device number 11
[ 2000.525165][T17148] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 2000.551678][T18446] team0: Port device team_slave_0 added
[ 2002.045913][T18690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3133'.
[ 2002.054931][T17148] usb 8-1: Using ep0 maxpacket: 16
[ 2002.113687][T18446] team0: Port device team_slave_1 added
[ 2002.123455][T17148] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2002.123488][T17148] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2002.123527][T17148] usb 8-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 2002.123549][T17148] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2002.206029][T17148] usb 8-1: config 0 descriptor??
[ 2002.207638][T18469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2002.207827][T18469] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2002.208197][T18469] bridge_slave_0: entered allmulticast mode
[ 2002.247330][T18469] bridge_slave_0: entered promiscuous mode
[ 2003.217660][T18469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2003.217962][T18469] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2003.218361][T18469] bridge_slave_1: entered allmulticast mode
[ 2003.222869][T18469] bridge_slave_1: entered promiscuous mode
[ 2003.685571][T17148] usbhid 8-1:0.0: can't add hid device: -71
[ 2003.685698][T17148] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 2003.720493][T17148] usb 8-1: USB disconnect, device number 5
[ 2004.154707][T18446] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2004.154720][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2004.154734][T18446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2004.308175][T18446] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2004.308192][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2004.308218][T18446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2005.760029][T18469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2006.899243][T18732] ALSA: mixer_oss: invalid OSS volume ''
[ 2006.910477][T18469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2006.913131][   T58] bridge_slave_1: left allmulticast mode
[ 2006.913158][   T58] bridge_slave_1: left promiscuous mode
[ 2006.913399][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2006.991263][T18732] syz.7.3141 (18732): drop_caches: 2
[ 2007.199825][   T58] bridge_slave_0: left allmulticast mode
[ 2007.199846][   T58] bridge_slave_0: left promiscuous mode
[ 2007.200018][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2008.196739][   T58] bridge_slave_1: left allmulticast mode
[ 2008.196779][   T58] bridge_slave_1: left promiscuous mode
[ 2008.197040][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2008.607309][   T58] bridge_slave_0: left allmulticast mode
[ 2008.607339][   T58] bridge_slave_0: left promiscuous mode
[ 2008.607590][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2010.005524][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2010.944553][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2010.987024][   T58] bond0 (unregistering): Released all slaves
[ 2011.516148][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2012.660256][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2013.664935][   T58] bond0 (unregistering): Released all slaves
[ 2018.226994][T18469] team0: Port device team_slave_0 added
[ 2020.321587][T18469] team0: Port device team_slave_1 added
[ 2021.394173][T18446] hsr_slave_0: entered promiscuous mode
[ 2021.395862][T18446] hsr_slave_1: entered promiscuous mode
[ 2021.396850][T18446] debugfs: 'hsr0' already exists in 'hsr'
[ 2021.396874][T18446] Cannot create hsr debugfs directory
[ 2023.609675][T18828] ALSA: mixer_oss: invalid OSS volume ''
[ 2023.642839][T18827] syz.6.3170 (18827): drop_caches: 2
[ 2027.259893][   T58] hsr_slave_0: left promiscuous mode
[ 2027.295070][   T58] hsr_slave_1: left promiscuous mode
[ 2027.295800][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2027.485681][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2028.445614][   T58] hsr_slave_0: left promiscuous mode
[ 2028.516518][   T58] hsr_slave_1: left promiscuous mode
[ 2028.517516][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2028.538793][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2029.236551][T15468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2029.241421][T15468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2029.243335][T15468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2029.244408][T15468] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2029.258201][T15468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2029.291941][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 2029.496508][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 2031.048669][T15468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2031.133088][T15468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2031.168171][T15468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2031.188129][T15468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2031.194683][T15468] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2031.665409][ T5799] Bluetooth: hci5: command tx timeout
[ 2033.300669][T18889] netlink: 'syz.7.3182': attribute type 1 has an invalid length.
[ 2034.135734][ T5799] Bluetooth: hci6: command tx timeout
[ 2034.136296][ T5799] Bluetooth: hci5: command tx timeout
[ 2036.894935][T15468] Bluetooth: hci5: command tx timeout
[ 2036.894967][T15468] Bluetooth: hci6: command tx timeout
[ 2038.147585][T18929] No control pipe specified
[ 2038.188534][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 2039.428964][ T5799] Bluetooth: hci6: command tx timeout
[ 2039.429003][ T5799] Bluetooth: hci5: command tx timeout
[ 2039.529443][T18929] could not open pipe file descriptor
[ 2039.857912][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 2039.963132][T18943] random: crng reseeded on system resumption
[ 2041.475009][T15468] Bluetooth: hci6: command tx timeout
[ 2042.439290][T18469] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2042.439308][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2042.439344][T18469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2042.679860][T18869] lo speed is unknown, defaulting to 1000
[ 2042.700833][T18850] lo speed is unknown, defaulting to 1000
[ 2042.950433][T18958] No control pipe specified
[ 2043.328225][T18964] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3201'.
[ 2047.867890][T18987] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3207'.
[ 2047.881470][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 2047.881543][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 2048.021159][T18992] random: crng reseeded on system resumption
[ 2049.274054][T18869] chnl_net:caif_netlink_parms(): no params data found
[ 2051.422543][T19010] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3212'.
[ 2053.120898][T18850] chnl_net:caif_netlink_parms(): no params data found
[ 2054.956556][T10335] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[ 2055.247592][T10335] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 2055.248339][T10335] usb 8-1: not running at top speed; connect to a high speed hub
[ 2055.249827][T10335] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2055.249850][T10335] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2055.253941][T10335] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2055.253968][T10335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2055.253989][T10335] usb 8-1: Product: syz
[ 2055.254003][T10335] usb 8-1: Manufacturer: syz
[ 2055.254018][T10335] usb 8-1: SerialNumber: syz
[ 2055.426377][T18869] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2055.426512][T18869] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2055.426738][T18869] bridge_slave_0: entered allmulticast mode
[ 2055.429953][T18869] bridge_slave_0: entered promiscuous mode
[ 2055.478209][T18869] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2055.478428][T18869] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2055.478675][T18869] bridge_slave_1: entered allmulticast mode
[ 2055.481480][T18869] bridge_slave_1: entered promiscuous mode
[ 2055.598475][T10335] usb 8-1: 0:2 : does not exist
[ 2055.629043][T10335] usb 8-1: USB disconnect, device number 6
[ 2055.764261][T18681] udevd[18681]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2055.969124][T18869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2056.103983][T18869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2056.106802][T18850] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2056.106932][T18850] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2056.107170][T18850] bridge_slave_0: entered allmulticast mode
[ 2056.119775][T18850] bridge_slave_0: entered promiscuous mode
[ 2056.257849][T18850] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2056.257983][T18850] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2056.258218][T18850] bridge_slave_1: entered allmulticast mode
[ 2056.263659][T19050] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3222'.
[ 2056.336906][T18850] bridge_slave_1: entered promiscuous mode
[ 2063.716675][T18869] team0: Port device team_slave_0 added
[ 2063.766378][T18869] team0: Port device team_slave_1 added
[ 2064.067819][T19076] random: crng reseeded on system resumption
[ 2064.836883][T19091] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3231'.
[ 2065.811043][T18850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2072.589119][T19112] random: crng reseeded on system resumption
[ 2072.633932][T19124] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3240'.
[ 2072.775011][T17148] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 2072.793762][T18850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2072.806342][T18869] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2072.806357][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2072.806383][T18869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2072.807381][   T58] bridge_slave_1: left allmulticast mode
[ 2072.807405][   T58] bridge_slave_1: left promiscuous mode
[ 2072.807654][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2072.925015][T17148] usb 8-1: Using ep0 maxpacket: 32
[ 2072.927819][T17148] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 2072.927845][T17148] usb 8-1: config 0 has no interface number 0
[ 2072.930906][T17148] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 2072.930933][T17148] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2072.930953][T17148] usb 8-1: Product: syz
[ 2072.930966][T17148] usb 8-1: Manufacturer: syz
[ 2072.930980][T17148] usb 8-1: SerialNumber: syz
[ 2073.011570][T17148] usb 8-1: config 0 descriptor??
[ 2073.031299][T17148] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 2073.031329][T17148] usb 8-1: selecting invalid altsetting 1
[ 2073.031345][T17148] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 2073.061664][T17148] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2073.062120][T17148] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 2073.062179][T17148] usb 8-1: media controller created
[ 2073.112397][T17148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2073.186500][   T58] bridge_slave_0: left allmulticast mode
[ 2073.186534][   T58] bridge_slave_0: left promiscuous mode
[ 2073.189349][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2075.928245][T17148] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 2075.928300][T17148] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 2075.939942][   T58] bridge_slave_1: left allmulticast mode
[ 2075.939971][   T58] bridge_slave_1: left promiscuous mode
[ 2075.940206][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2076.236490][   T58] bridge_slave_0: left allmulticast mode
[ 2076.236521][   T58] bridge_slave_0: left promiscuous mode
[ 2076.236777][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2077.235053][T17148] usb 8-1: USB disconnect, device number 7
[ 2078.664750][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2078.751319][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2079.868223][   T58] bond0 (unregistering): Released all slaves
[ 2080.408752][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2080.485545][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2080.542418][   T58] bond0 (unregistering): Released all slaves
[ 2080.932735][T18869] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2080.932751][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2080.932774][T18869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2081.588112][T18850] team0: Port device team_slave_0 added
[ 2081.601185][T18850] team0: Port device team_slave_1 added
[ 2082.983125][T19181] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3253'.
[ 2084.299250][T18850] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2084.299269][T18850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2084.299294][T18850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2086.444565][T19208] random: crng reseeded on system resumption
[ 2086.555818][T19203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3261'.
[ 2086.717144][T18850] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2086.717162][T18850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2086.717188][T18850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2086.981906][T18869] hsr_slave_0: entered promiscuous mode
[ 2086.983358][T18869] hsr_slave_1: entered promiscuous mode
[ 2087.015591][T18869] debugfs: 'hsr0' already exists in 'hsr'
[ 2087.015628][T18869] Cannot create hsr debugfs directory
[ 2087.050932][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2091.265299][   T58] hsr_slave_0: left promiscuous mode
[ 2091.438990][T19231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2091.456606][T19231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2091.458583][T19231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2091.480522][T19231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2091.492778][T19231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2091.666454][   T58] hsr_slave_1: left promiscuous mode
[ 2091.667428][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2091.705944][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2092.076452][T19242] ALSA: mixer_oss: invalid OSS volume ''
[ 2092.438378][T19243] random: crng reseeded on system resumption
[ 2092.530006][T19242] syz.7.3270 (19242): drop_caches: 2
[ 2093.325106][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 2093.377404][T19231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2093.594650][T19231] Bluetooth: hci2: command tx timeout
[ 2094.001259][T19231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2094.003235][T19231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2094.023477][T19231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2094.041264][T19231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2094.571531][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 2095.671933][T19231] Bluetooth: hci2: command tx timeout
[ 2096.278841][T19231] Bluetooth: hci4: command tx timeout
[ 2097.145176][T19282] random: crng reseeded on system resumption
[ 2097.755914][T19231] Bluetooth: hci2: command tx timeout
[ 2098.383094][T19231] Bluetooth: hci4: command tx timeout
[ 2099.128236][T17143] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 2099.377839][T17143] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2099.378610][T17143] usb 7-1: not running at top speed; connect to a high speed hub
[ 2099.405433][T17143] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2099.405461][T17143] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2099.408205][T17143] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2099.408231][T17143] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2099.408248][T17143] usb 7-1: Product: syz
[ 2099.408261][T17143] usb 7-1: Manufacturer: syz
[ 2099.408276][T17143] usb 7-1: SerialNumber: syz
[ 2099.805347][T19231] Bluetooth: hci2: command tx timeout
[ 2100.376215][   T58] team0 (unregistering): Port device team_slave_1 removed
[ 2100.445074][T19231] Bluetooth: hci4: command tx timeout
[ 2100.468728][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 2100.469125][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 2100.487788][T19299] ALSA: mixer_oss: invalid OSS volume ''
[ 2100.488382][T17143] usb 7-1: 0:2 : does not exist
[ 2100.522854][T19298] syz.7.3288 (19298): drop_caches: 2
[ 2100.567862][T17143] usb 7-1: USB disconnect, device number 12
[ 2100.642162][T18681] udevd[18681]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2100.671259][   T58] team0 (unregistering): Port device team_slave_0 removed
[ 2102.545467][T19231] Bluetooth: hci4: command tx timeout
[ 2102.633708][T19249] 8021q: adding VLAN 0 to HW filter on device macvlan10
[ 2102.644061][T19249] bond1: (slave macvlan10): Enslaving as an active interface with an up link
[ 2103.340847][T19314] random: crng reseeded on system resumption
[ 2103.807834][T19256] lo speed is unknown, defaulting to 1000
[ 2103.810599][T19229] lo speed is unknown, defaulting to 1000
[ 2109.323196][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 2109.323269][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 2111.752662][T19229] chnl_net:caif_netlink_parms(): no params data found
[ 2111.907449][T12785] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[ 2111.927602][T19256] chnl_net:caif_netlink_parms(): no params data found
[ 2112.098081][T12785] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 2112.105548][T12785] usb 8-1: not running at top speed; connect to a high speed hub
[ 2112.107422][T12785] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2112.107446][T12785] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2112.110666][T12785] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2112.110693][T12785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2112.110712][T12785] usb 8-1: Product: syz
[ 2112.110726][T12785] usb 8-1: Manufacturer: syz
[ 2112.110740][T12785] usb 8-1: SerialNumber: syz
[ 2112.562636][T12785] usb 8-1: 0:2 : does not exist
[ 2112.614554][T12785] usb 8-1: USB disconnect, device number 8
[ 2112.760553][T19375] udevd[19375]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2113.094974][T10335] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[ 2113.192146][T19229] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2113.192282][T19229] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2113.192515][T19229] bridge_slave_0: entered allmulticast mode
[ 2113.199698][T19229] bridge_slave_0: entered promiscuous mode
[ 2113.258120][T10335] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2113.258864][T10335] usb 7-1: not running at top speed; connect to a high speed hub
[ 2113.260372][T10335] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2113.260396][T10335] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2113.264628][T10335] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2113.264654][T10335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2113.264672][T10335] usb 7-1: Product: syz
[ 2113.264686][T10335] usb 7-1: Manufacturer: syz
[ 2113.264700][T10335] usb 7-1: SerialNumber: syz
[ 2113.503138][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 2113.503525][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 2113.503913][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 2113.527988][T10335] usb 7-1: 0:2 : does not exist
[ 2113.555979][T10335] usb 7-1: USB disconnect, device number 13
[ 2113.658449][T19229] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2113.658577][T19229] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2113.658828][T19229] bridge_slave_1: entered allmulticast mode
[ 2113.680906][T19375] udevd[19375]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2114.718315][T19229] bridge_slave_1: entered promiscuous mode
[ 2114.866742][   T23] ==================================================================
[ 2114.866760][   T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190
[ 2114.866787][   T23] Read of size 8 at addr ffffc90005b09090 by task irq_work/0/23
[ 2114.866803][   T23] 
[ 2114.866824][   T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2114.866846][   T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2114.866865][   T23] Call Trace:
[ 2114.866876][   T23]  <TASK>
[ 2114.866885][   T23]  dump_stack_lvl+0x189/0x250
[ 2114.866908][   T23]  ? run_irq_workd+0x116/0x190
[ 2114.866929][   T23]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2114.866960][   T23]  ? __pfx__printk+0x10/0x10
[ 2114.866984][   T23]  ? __virt_addr_valid+0xdc/0x5c0
[ 2114.867006][   T23]  ? __virt_addr_valid+0xdc/0x5c0
[ 2114.867028][   T23]  print_report+0xca/0x240
[ 2114.867052][   T23]  ? run_irq_workd+0x116/0x190
[ 2114.867070][   T23]  kasan_report+0x118/0x150
[ 2114.867089][   T23]  ? run_irq_workd+0x116/0x190
[ 2114.867111][   T23]  run_irq_workd+0x116/0x190
[ 2114.867128][   T23]  ? __pfx_run_irq_workd+0x10/0x10
[ 2114.867147][   T23]  ? schedule+0x91/0x360
[ 2114.867256][   T23]  ? smpboot_thread_fn+0x4d/0xa60
[ 2114.867275][   T23]  ? smpboot_thread_fn+0x4d/0xa60
[ 2114.867292][   T23]  smpboot_thread_fn+0x542/0xa60
[ 2114.867317][   T23]  ? smpboot_thread_fn+0x4d/0xa60
[ 2114.867339][   T23]  kthread+0x711/0x8a0
[ 2114.867361][   T23]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 2114.867379][   T23]  ? __pfx_kthread+0x10/0x10
[ 2114.867398][   T23]  ? rt_spin_unlock+0x150/0x200
[ 2114.867455][   T23]  ? rt_spin_unlock+0x161/0x200
[ 2114.867476][   T23]  ? __pfx_kthread+0x10/0x10
[ 2114.867497][   T23]  ret_from_fork+0x4bc/0x870
[ 2114.867524][   T23]  ? __pfx_ret_from_fork+0x10/0x10
[ 2114.867553][   T23]  ? __switch_to_asm+0x39/0x70
[ 2114.867575][   T23]  ? __switch_to_asm+0x33/0x70
[ 2114.867597][   T23]  ? __pfx_kthread+0x10/0x10
[ 2114.867618][   T23]  ret_from_fork_asm+0x1a/0x30
[ 2114.867650][   T23]  </TASK>
[ 2114.867657][   T23] 
[ 2114.867662][   T23] The buggy address belongs to a vmalloc virtual mapping
[ 2114.867681][   T23] Memory state around the buggy address:
[ 2114.867692][   T23]  ffffc90005b08f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2114.867706][   T23]  ffffc90005b09000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2114.867720][   T23] >ffffc90005b09080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2114.867735][   T23]                          ^
[ 2114.867746][   T23]  ffffc90005b09100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2114.867760][   T23]  ffffc90005b09180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2114.867770][   T23] ==================================================================
[ 2114.867792][   T23] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2114.867806][   T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2114.867827][   T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2114.867839][   T23] Call Trace:
[ 2114.867847][   T23]  <TASK>
[ 2114.867855][   T23]  dump_stack_lvl+0x99/0x250
[ 2114.867877][   T23]  ? __asan_memcpy+0x40/0x70
[ 2114.867902][   T23]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2114.867924][   T23]  ? __pfx__printk+0x10/0x10
[ 2114.867951][   T23]  vpanic+0x237/0x6d0
[ 2114.867969][   T23]  ? __pfx_vpanic+0x10/0x10
[ 2114.867992][   T23]  panic+0xb9/0xc0
[ 2114.868009][   T23]  ? __pfx_panic+0x10/0x10
[ 2114.868025][   T23]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 2114.868064][   T23]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 2114.868094][   T23]  ? run_irq_workd+0x116/0x190
[ 2114.868112][   T23]  check_panic_on_warn+0x89/0xb0
[ 2114.868133][   T23]  ? run_irq_workd+0x116/0x190
[ 2114.868150][   T23]  end_report+0x78/0x160
[ 2114.868167][   T23]  kasan_report+0x129/0x150
[ 2114.868186][   T23]  ? run_irq_workd+0x116/0x190
[ 2114.868206][   T23]  run_irq_workd+0x116/0x190
[ 2114.868223][   T23]  ? __pfx_run_irq_workd+0x10/0x10
[ 2114.868241][   T23]  ? schedule+0x91/0x360
[ 2114.868266][   T23]  ? smpboot_thread_fn+0x4d/0xa60
[ 2114.868284][   T23]  ? smpboot_thread_fn+0x4d/0xa60
[ 2114.868308][   T23]  smpboot_thread_fn+0x542/0xa60
[ 2114.868327][   T23]  ? smpboot_thread_fn+0x4d/0xa60
[ 2114.868349][   T23]  kthread+0x711/0x8a0
[ 2114.868371][   T23]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 2114.868389][   T23]  ? __pfx_kthread+0x10/0x10
[ 2114.868407][   T23]  ? rt_spin_unlock+0x150/0x200
[ 2114.868431][   T23]  ? rt_spin_unlock+0x161/0x200
[ 2114.868451][   T23]  ? __pfx_kthread+0x10/0x10
[ 2114.868471][   T23]  ret_from_fork+0x4bc/0x870
[ 2114.868498][   T23]  ? __pfx_ret_from_fork+0x10/0x10
[ 2114.868527][   T23]  ? __switch_to_asm+0x39/0x70
[ 2114.868549][   T23]  ? __switch_to_asm+0x33/0x70
[ 2114.868571][   T23]  ? __pfx_kthread+0x10/0x10
[ 2114.868591][   T23]  ret_from_fork_asm+0x1a/0x30
[ 2114.868623][   T23]  </TASK>
[ 2114.868905][   T23] Kernel Offset: disabled