last executing test programs:

4m56.321431447s ago: executing program 2 (id=167):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

4m56.17177147s ago: executing program 2 (id=169):
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x50, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731", 0x0, 0x8024, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m55.903482837s ago: executing program 2 (id=174):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10002, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m55.58197374s ago: executing program 2 (id=180):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000180)={'syzkaller0\x00', @multicast})

4m55.13587772s ago: executing program 2 (id=186):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = dup2(r2, r1)
close_range(r3, 0xffffffffffffffff, 0x0)

4m54.354912831s ago: executing program 2 (id=189):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

4m38.848637435s ago: executing program 32 (id=189):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

20.403002797s ago: executing program 3 (id=941):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)

19.866866898s ago: executing program 3 (id=943):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
inotify_init()
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setscheduler(0x0, 0x2, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]})
timer_settime(0x0, 0x0, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)

14.458900195s ago: executing program 0 (id=957):
mprotect(&(0x7f0000fea000/0x14000)=nil, 0x14000, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4, 0x34, 0xd, 0x58a}, {0xe, 0x9, 0xf8, 0x300}]})
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = dup(r1)
ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d0f, &(0x7f0000000000)={0x9, 0x3})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x0)
getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)={0x0, 0x2000000})
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

13.561524452s ago: executing program 0 (id=960):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
sendto$inet6(r1, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001200050926bd7000fddbdf250a0904004e", @ANYRES32=0x0, @ANYBLOB="000001000010000006000000ffffffff2100010008"], 0x70}, 0x1, 0x0, 0x0, 0x26000001}, 0x800)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x101800)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
pread64(r4, 0x0, 0x0, 0xce2)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522)
syz_io_uring_setup(0x40b8, &(0x7f0000000440)={0x0, 0x4e32, 0x2, 0x1, 0x12d}, &(0x7f00000000c0), &(0x7f0000000200))
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x90, 0x0, 0xf, 0xc00003, 0x7]}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

12.42174548s ago: executing program 0 (id=961):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x1}, &(0x7f0000000080)=0x90)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}})
openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

11.33152568s ago: executing program 5 (id=963):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
listen(r3, 0x4000)
close(r3)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
chroot(&(0x7f0000000040)='./file0\x00')
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000113ee1c3ff191a97a003002a07000000", @ANYRES32=r6, @ANYBLOB="01000000521900000c001a800800048004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x891}, 0x0)

11.330626991s ago: executing program 1 (id=964):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
lseek(0xffffffffffffffff, 0x10001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)

11.329406566s ago: executing program 3 (id=966):
r0 = socket$unix(0x1, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44055)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$tipc(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x1004)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x2c}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}}, 0x1c}}, 0x0)

10.330811933s ago: executing program 5 (id=967):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = getpid()
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f00000003c0)={0x2, 0x0, 0x80, {0xfffffffb, 0x2}, 0x3, 0x4})
syz_pidfd_open(r5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0)
preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0)

10.112302473s ago: executing program 1 (id=968):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100", @ANYRES64=r1], 0x20, 0x4054000}, 0x4040884)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r3, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0xfff7)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x2000c851, 0x0, 0x0)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, 0x0, 0x0, 0x40800)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8800)

9.05837197s ago: executing program 3 (id=969):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x2000c0c0)
r4 = semget$private(0x0, 0x5, 0x0)
semop(r4, 0x0, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x7, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffc, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x9, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xe9, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x13, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$input_event(r5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
semctl$IPC_INFO(r4, 0x4, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

8.859728331s ago: executing program 1 (id=970):
creat(0x0, 0xd931d3864d39dc55)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000580)={{0x3, r2, 0x0, 0x0, r3, 0x2, 0x9b}, 0xdf2, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6cf})

8.822723177s ago: executing program 5 (id=971):
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x19e)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"})
unshare(0x22020600)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

7.854282916s ago: executing program 3 (id=972):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0xff)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101040)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000b4e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000)
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f0000000a00)=""/4096)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xe, 0x5d4c023fd7f6c600}, 0x9})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
getsockopt$bt_hci(r1, 0x6, 0x3, &(0x7f00000045c0)=""/4115, &(0x7f00000000c0)=0x1013)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})

6.919620051s ago: executing program 1 (id=973):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r3, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000002800018014000400fe8800006f0000000000000000dd0001060001000a0000000800060082"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0)

6.846583741s ago: executing program 5 (id=974):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40)
r1 = fanotify_init(0xf00, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r3}, 0x18)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40111}, 0x20000004)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000180)={0x1c, r5, 0x50be6fea6f3bdfbb, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}}, 0x20000000)
fanotify_mark(r1, 0x105, 0x4800002c, r2, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0xd)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr, <r9=>0x0}, &(0x7f0000000040)=0x14)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@private=0xa010101, @empty, r9}, 0xc)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4)
read$FUSE(r2, &(0x7f0000002f00)={0x2020}, 0x2020)

6.643566549s ago: executing program 1 (id=976):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac000904000001070000090905", @ANYBLOB="980e2d2e604b5f"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0xf, 0x2, 0x401, {{0x2d, 0x4, 0x0, 0x4, 0xb4, 0x66, 0x0, 0xc2, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@generic={0x44, 0x2}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x4, [{@local, 0x6}, {@broadcast, 0x9}, {@private=0xa010101, 0x2}, {@multicast2, 0x8}, {@multicast2, 0x5}, {@local, 0x10}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xa5, 0x0, 0x4, [0x100, 0x9]}, @rr={0x7, 0x27, 0xd5, [@multicast1, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010101, @empty, @multicast2, @local, @empty]}, @lsrr={0x83, 0x7, 0x76, [@broadcast]}, @rr={0x7, 0x2b, 0xea, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, @multicast2, @empty, @empty]}, @noop]}}}}})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000010500000008000000000000e101000085000000000000000001000000000000200000"], 0x0, 0x42}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000100)=0xfffffff9, 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffff3)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x189e, &(0x7f0000001700)='\xb3x\xd7,n\x1e\v\xc4\xe84\x04\xcb\xcb#\x80\x83\xb2\'&\xe3\xf1\x97\a\xef\xff`\x1e\x11E\xff\xff\x9b\x9f\x1c\x13w\xd7\xda\x92~i\xf5\x06\x00\xe7;K\x97\xeb\xda\\\t)<\xf4{\x95+A\xf9*\xa0\xd8\x13\x88\xcd\xe2\x86\x8a\x00jrv\xe4\xafY(\xe1\xdb\bF\xbb\xde\x02\x00\x00\x00\x83E/\x00V\xf0\xa8\xf5!_\xe7\xa0\xd0,\x00\x00\xff\xf6\x00\x00\x00\xbd\x03\n\xecT\x03&i\xa6_\xc5>\xdc?\x191#\xf41\x00\x7f\xce\xea]\xc2\x7f!\xd1\xb8\x94\t3S\tm\xe9\xfa\x13\xa7\xe3HI\xed\xf6\xe4\xdc!Aw5\x9ay \xb0\nGoF\xef\xaa\xe8\xec\x1c\x8a\x88\x10U\xd4\x91\xf4\xa7/\x01\x83\xa6~\xcdl\x82\x8ck\x93\x7f\xdc\xdf\x0e\xdc4K8\xe2\x10\xa2N\x91\xe0\xf3\xfb\x1c\xcc`\x87\x11\xc5\xa2\x13>\x9a%\x1c(Q|s\xdd\xd1\x9b\xfb\xf0\xfet\x01\xb9\xb1\x04J\xaf~\xa6:^\x00\x19\xc4P\x80.\xa3\xebM\x13\x03\x13u\xd0\xac\x8c\r\x9f7\x9a\x16\xe6\xba\xec\xdb\x15\xa2-\x9b\xf8\xfc\xee\x10O\xed$t\xa99\'C\xa1')
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0x0, &(0x7f00000001c0))
sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)

6.495559666s ago: executing program 4 (id=977):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
close(0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5})
sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
close(r4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044080)
mq_open(&(0x7f0000000200)='\xd9\x93\x10\xe3\x8e\x80Dg@]\xa6\xa2\x9ae\xf1\xce\x18h\x00\x95v\x17jk\xf4\x9f{\fw\x10J&qo\xf4\x9c0\x12*xO\x8b\xe3\xb6\xaa\xc5\x99\xbfK\xd3\x8d\x99K\xfa\xbdZX\x8b\x98e\xf1\x9f\xd6v^\x88\x1c', 0x840, 0x100, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

5.554692841s ago: executing program 5 (id=978):
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
io_uring_setup(0x2ad5, &(0x7f0000000100)={0x0, 0xfffffffe, 0x0, 0x80000, 0x180})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
setrlimit(0x9, &(0x7f0000000440)={0x8001, 0xc})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a0000000400", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x22)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x12, 0x5, &(0x7f0000000680)=ANY=[@ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012002000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)

3.503963914s ago: executing program 5 (id=979):
r0 = socket$unix(0x1, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44055)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$tipc(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x1004)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x2c}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}}, 0x1c}}, 0x0)

3.502698114s ago: executing program 4 (id=980):
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x684, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000200001800"/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32], 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x100})

2.918599956s ago: executing program 0 (id=981):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100", @ANYRES64=r1], 0x20, 0x4054000}, 0x4040884)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r3, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0xfff7)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x2000c851, 0x0, 0x0)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, 0x0, 0x0, 0x40800)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8800)

2.513601949s ago: executing program 4 (id=982):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x2000c0c0)
r4 = semget$private(0x0, 0x5, 0x0)
semop(0x0, &(0x7f0000000340)=[{0x2, 0x2, 0x1000}], 0x1)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x7, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffc, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x9, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xe9, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x13, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r5, 0x5501)
write$input_event(r5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
semctl$IPC_INFO(r4, 0x4, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2.431541542s ago: executing program 0 (id=983):
creat(0x0, 0xd931d3864d39dc55)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000580)={{0x3, r2, 0x0, 0x0, r3, 0x2, 0x9b}, 0xdf2, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6cf})

1.340379848s ago: executing program 4 (id=984):
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x19e)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"})
unshare(0x22020600)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

1.284893076s ago: executing program 1 (id=985):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

415.241783ms ago: executing program 0 (id=986):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x83)
mkdir(&(0x7f0000000400)='./file2\x00', 0xc)
mkdir(&(0x7f0000000100)='./bus\x00', 0x51)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x3, 0x0, 0xffffffff})
ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
setfsgid(0x0)
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x21c143, 0x1cd)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b400000000000000791000070000000005000000000000009500050000000000e737d18209be9ae301a57c216c8f9f9d8ef4c33eea4ade36ab14f74cdee4783be80e0a3813022b6169dccae830fe9b7124919fc4c69ad5f4d5e7b3007f541fa98cb1af8354b0882b3d6e70a5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18f100000000000000000000f9ffffff181b0000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

271.16508ms ago: executing program 4 (id=987):
syz_emit_vhci(&(0x7f0000005980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0xf, 0xc9, 0x8}}}}, 0xa)

168.863541ms ago: executing program 3 (id=988):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000000400)="37f8edf5985d6e8ab1f6a43ee5ac41c516c467f4fffffff4f9b5a9e845447cb57749cf6d7a0dbf3f9c09eba78d01584a636051", 0x33)
syz_open_dev$char_usb(0xc, 0xb4, 0x1000000000000)
syz_usb_disconnect(r0)

0s ago: executing program 4 (id=989):
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = creat(0x0, 0x0)
semget$private(0x0, 0x0, 0x587)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000400))
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r5, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e00"], 0x50}}, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x950a, 0x0, 0x0, 0x0, 0xc000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x3, 0x3, 0x4, 0x0, 0x388177fc, {0x5, 0xff, 0x1, 0x0, 0x10003, 0x2, 0xa, 0x2, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r6, 0x0)
recvmmsg(r6, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x18000}], 0x1, 0x10142, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000004)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)

kernel console output (not intermixed with test programs):

too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.523176][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.539311][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.584757][ T5834] hsr_slave_0: entered promiscuous mode
[   83.592509][ T5834] hsr_slave_1: entered promiscuous mode
[   83.601968][ T5835] team0: Port device team_slave_1 added
[   83.608829][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.616336][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.642658][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.663581][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.720518][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.727956][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.754531][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.795884][ T5840] team0: Port device team_slave_0 added
[   83.804455][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.811838][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.841523][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.920532][ T5840] team0: Port device team_slave_1 added
[   83.945972][ T5836] hsr_slave_0: entered promiscuous mode
[   83.952659][ T5836] hsr_slave_1: entered promiscuous mode
[   83.958734][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.966588][ T5836] Cannot create hsr debugfs directory
[   83.984964][ T5852] hsr_slave_0: entered promiscuous mode
[   83.991577][ T5852] hsr_slave_1: entered promiscuous mode
[   83.997772][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.005522][ T5852] Cannot create hsr debugfs directory
[   84.082428][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.089671][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.116783][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.129938][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.137897][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.164579][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.181415][ T5835] hsr_slave_0: entered promiscuous mode
[   84.187719][ T5835] hsr_slave_1: entered promiscuous mode
[   84.193963][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.201948][ T5835] Cannot create hsr debugfs directory
[   84.365820][ T5840] hsr_slave_0: entered promiscuous mode
[   84.373180][ T5840] hsr_slave_1: entered promiscuous mode
[   84.379301][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.386969][ T5840] Cannot create hsr debugfs directory
[   84.921422][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.935362][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.956269][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.975429][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.024948][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.047124][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.068986][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.083924][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.164898][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.201680][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.214038][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.220967][ T5838] Bluetooth: hci2: command tx timeout
[   85.221009][ T5838] Bluetooth: hci3: command tx timeout
[   85.255288][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.301614][ T5848] Bluetooth: hci0: command tx timeout
[   85.301961][ T5838] Bluetooth: hci4: command tx timeout
[   85.307053][ T5848] Bluetooth: hci1: command tx timeout
[   85.333727][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.363873][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.374340][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.385254][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.503720][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   85.517271][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   85.543026][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.550004][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   85.576099][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.661914][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.677455][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   85.703384][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.710823][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.720299][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.727474][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.774171][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   85.843237][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.850511][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.866126][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.886364][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.898335][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.905575][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.938722][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   86.000312][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   86.020435][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.027697][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.047339][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.054536][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.084832][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   86.096832][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.143476][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.150809][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.223385][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.230602][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.424860][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.528095][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   86.569405][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.576818][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.612663][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.619960][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.643885][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.669955][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.825371][  T926] cfg80211: failed to load regulatory.db
[   86.893124][ T5835] veth0_vlan: entered promiscuous mode
[   86.933740][ T5834] veth0_vlan: entered promiscuous mode
[   86.984909][ T5835] veth1_vlan: entered promiscuous mode
[   87.007693][ T5834] veth1_vlan: entered promiscuous mode
[   87.036734][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.067799][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.193981][ T5835] veth0_macvtap: entered promiscuous mode
[   87.206292][ T5834] veth0_macvtap: entered promiscuous mode
[   87.227102][ T5852] veth0_vlan: entered promiscuous mode
[   87.243186][ T5834] veth1_macvtap: entered promiscuous mode
[   87.262689][ T5852] veth1_vlan: entered promiscuous mode
[   87.275794][ T5835] veth1_macvtap: entered promiscuous mode
[   87.302051][ T5851] Bluetooth: hci2: command tx timeout
[   87.307751][ T5848] Bluetooth: hci3: command tx timeout
[   87.320116][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.373814][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.386072][ T5848] Bluetooth: hci1: command tx timeout
[   87.392454][ T5851] Bluetooth: hci4: command tx timeout
[   87.392983][ T5838] Bluetooth: hci0: command tx timeout
[   87.417791][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.439397][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.450775][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.459629][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.474255][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.483150][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.533623][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.546554][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.558995][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.568622][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.577701][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.613915][ T5836] veth0_vlan: entered promiscuous mode
[   87.624735][ T5852] veth0_macvtap: entered promiscuous mode
[   87.658219][ T5852] veth1_macvtap: entered promiscuous mode
[   87.690700][ T5836] veth1_vlan: entered promiscuous mode
[   87.818105][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.827330][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.842733][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.869790][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.928665][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.938217][ T5840] veth0_vlan: entered promiscuous mode
[   87.946088][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.962305][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.971416][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.980313][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.990249][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.048310][ T5836] veth0_macvtap: entered promiscuous mode
[   88.072122][ T5836] veth1_macvtap: entered promiscuous mode
[   88.086254][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.096567][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.105875][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.116307][ T5840] veth1_vlan: entered promiscuous mode
[   88.158888][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.162958][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.174848][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.244461][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   88.246815][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.282329][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.291484][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.300295][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.382598][ T5840] veth0_macvtap: entered promiscuous mode
[   88.437562][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.465685][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.497208][ T5840] veth1_macvtap: entered promiscuous mode
[   88.648272][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.670371][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.718651][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.829154][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.886743][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.890608][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.380941][ T5838] Bluetooth: hci3: command tx timeout
[   89.382135][ T5848] Bluetooth: hci2: command tx timeout
[   89.394863][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.407254][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.421526][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.430388][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.462694][ T5848] Bluetooth: hci1: command tx timeout
[   89.468600][ T5848] Bluetooth: hci4: command tx timeout
[   89.476978][ T5848] Bluetooth: hci0: command tx timeout
[   89.500093][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   89.518951][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.531927][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   89.782064][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.790025][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.811281][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   90.175277][ T5983] tipc: Started in network mode
[   90.180388][ T5983] tipc: Node identity ac14140f, cluster identity 4711
[   90.188393][ T5983] tipc: New replicast peer: 255.255.255.255
[   90.194901][ T5983] tipc: Enabled bearer <udp:syz2>, priority 10
[   90.531874][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   90.586420][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.616961][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.992219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.191320][ T5996] netlink: 'syz.0.11': attribute type 7 has an invalid length.
[   91.312203][ T5916] tipc: Node number set to 2886997007
[   91.472584][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.574589][ T6001] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   91.574589][ T6001]    program syz.3.12 not setting count and/or reply_len properly
[   91.731882][ T5996] : entered promiscuous mode
[   91.759265][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.775901][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.915167][ T6003] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[   92.576096][  T926] IPVS: starting estimator thread 0...
[   92.731263][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.741036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   92.749267][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   92.758163][ T6004] IPVS: using max 34 ests per chain, 81600 per kthread
[   92.851537][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.241591][ T1212] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[   93.434989][ T1212] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2
[   93.463507][ T1212] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88
[   93.496432][ T1212] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt
[   93.523779][ T1212] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   93.573038][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.668862][ T6006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   95.246343][ T1212] usb 4-1: string descriptor 0 read error: -71
[   95.518089][ T1212] usb 4-1: USB disconnect, device number 2
[   95.920093][ T6025] FAULT_INJECTION: forcing a failure.
[   95.920093][ T6025] name failslab, interval 1, probability 0, space 0, times 1
[   95.933047][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: syz.2.14 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[   95.933072][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   95.933090][ T6025] Call Trace:
[   95.933101][ T6025]  <TASK>
[   95.933109][ T6025]  dump_stack_lvl+0x189/0x250
[   95.933142][ T6025]  ? __pfx____ratelimit+0x10/0x10
[   95.933163][ T6025]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.933185][ T6025]  ? __pfx__printk+0x10/0x10
[   95.933215][ T6025]  ? __pfx___might_resched+0x10/0x10
[   95.933235][ T6025]  ? fs_reclaim_acquire+0x7d/0x100
[   95.933263][ T6025]  should_fail_ex+0x414/0x560
[   95.933289][ T6025]  should_failslab+0xa8/0x100
[   95.933311][ T6025]  __kmalloc_noprof+0xcb/0x4f0
[   95.933328][ T6025]  ? kfree+0x4d/0x440
[   95.933353][ T6025]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[   95.933383][ T6025]  tomoyo_realpath_from_path+0xe3/0x5d0
[   95.933410][ T6025]  ? tomoyo_domain+0xda/0x130
[   95.933441][ T6025]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[   95.933462][ T6025]  tomoyo_path_number_perm+0x1e8/0x5a0
[   95.933485][ T6025]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   95.933509][ T6025]  ? __pfx___schedule+0x10/0x10
[   95.933540][ T6025]  ? __lock_acquire+0xab9/0xd20
[   95.933580][ T6025]  ? __fget_files+0x2a/0x420
[   95.933604][ T6025]  ? __fget_files+0x2a/0x420
[   95.933624][ T6025]  ? __fget_files+0x3a0/0x420
[   95.933644][ T6025]  ? __fget_files+0x2a/0x420
[   95.933669][ T6025]  security_file_ioctl+0xcb/0x2d0
[   95.933693][ T6025]  __se_sys_ioctl+0x47/0x170
[   95.933723][ T6025]  do_syscall_64+0xfa/0x3b0
[   95.933746][ T6025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.933764][ T6025]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[   95.933782][ T6025]  ? clear_bhb_loop+0x60/0xb0
[   95.933811][ T6025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.933829][ T6025] RIP: 0033:0x7f93fab8ebe9
[   95.933851][ T6025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.933867][ T6025] RSP: 002b:00007f93fba83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.933888][ T6025] RAX: ffffffffffffffda RBX: 00007f93fadb6180 RCX: 00007f93fab8ebe9
[   95.933902][ T6025] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 000000000000000b
[   95.933914][ T6025] RBP: 00007f93fba83090 R08: 0000000000000000 R09: 0000000000000000
[   95.933926][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.933937][ T6025] R13: 00007f93fadb6218 R14: 00007f93fadb6180 R15: 00007ffd394c4a18
[   95.933969][ T6025]  </TASK>
[   95.933977][ T6025] ERROR: Out of memory at tomoyo_realpath_from_path.
[   96.435710][ T5842] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   97.058917][ T6027] mkiss: ax0: crc mode is auto.
[   97.086829][ T6027] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET)
[   97.160772][ T5842] usb 2-1: Using ep0 maxpacket: 32
[   97.176860][ T5842] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a
[   97.205686][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[   97.219987][ T6042] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[   97.219987][ T6042]    program syz.0.22 not setting count and/or reply_len properly
[   97.659881][ T5842] usb 2-1: Product: syz
[   97.782986][ T5842] usb 2-1: config 0 descriptor??
[   97.813536][ T5842] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[   97.820008][ T5842] gspca_stv06xx: st6422 sensor detected
[   97.930128][ T6045] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[   97.962396][ T5899] IPVS: starting estimator thread 0...
[   98.450868][ T6046] IPVS: using max 49 ests per chain, 117600 per kthread
[   98.573134][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.606382][ T6050] No such timeout policy "syz0"
[  100.638995][ T6069] trusted_key: encrypted_key: master key parameter 'use' is invalid
[  100.738783][ T6067] fuse: Bad value for 'fd'
[  100.820951][ T5842] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71
[  100.835444][ T5942] Process accounting resumed
[  100.843298][ T6067] netlink: 52 bytes leftover after parsing attributes in process `syz.3.26'.
[  100.920913][ T5842] usb 2-1: USB disconnect, device number 2
[  101.040217][ T6074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  101.300757][ T5942] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.331172][ T6077] netlink: 'syz.1.29': attribute type 2 has an invalid length.
[  101.474352][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[  101.491071][ T5942] usb 4-1: Using ep0 maxpacket: 32
[  101.496569][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[  101.834993][ T5942] usb 4-1: config 32 has an invalid interface number: 76 but max is 0
[  101.843475][ T5942] usb 4-1: config 32 has no interface number 0
[  101.850592][ T5942] usb 4-1: config 32 interface 76 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11
[  101.862254][ T5942] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.e3
[  101.871387][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.888930][ T5942] usbtest 4-1:32.76: Linux gadget zero
[  101.894599][ T5942] usbtest 4-1:32.76: high-speed {control in/out int-out} tests (+alt)
[  101.967202][ T6086] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  101.967202][ T6086]    program syz.1.33 not setting count and/or reply_len properly
[  102.159808][ T1212] usb 4-1: USB disconnect, device number 3
[  102.208477][ T6088] IPv6: NLM_F_REPLACE set, but no existing node found!
[  102.309865][ T6092] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  102.352101][ T5842] IPVS: starting estimator thread 0...
[  102.911716][ T6070] Process accounting resumed
[  102.927594][ T6089] netlink: 'syz.0.31': attribute type 7 has an invalid length.
[  103.084573][ T6093] IPVS: using max 29 ests per chain, 69600 per kthread
[  103.353695][ T6103] capability: warning: `syz.3.37' uses deprecated v2 capabilities in a way that may be insecure
[  104.749163][ T6120] warning: `syz.1.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  105.470757][ T6117] binder: BINDER_SET_CONTEXT_MGR already set
[  105.477826][ T6117] binder: 6115:6117 ioctl 4018620d 200000000040 returned -16
[  105.504171][ T6122] netlink: 'syz.3.41': attribute type 16 has an invalid length.
[  105.860997][ T6122] netlink: 'syz.3.41': attribute type 17 has an invalid length.
[  106.006468][ T6123] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  106.184546][ T6122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.056993][ T6134] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  108.056993][ T6134]    program syz.2.45 not setting count and/or reply_len properly
[  108.670344][ T6144] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  108.710140][ T5913] IPVS: starting estimator thread 0...
[  108.980840][ T6145] IPVS: using max 24 ests per chain, 57600 per kthread
[  109.012116][ T1212] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  109.055788][ T6140] netlink: 'syz.4.47': attribute type 16 has an invalid length.
[  109.081736][ T6140] netlink: 'syz.4.47': attribute type 17 has an invalid length.
[  109.189637][ T6140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.225724][ T1212] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  109.283402][ T1212] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  109.298917][ T1212] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  109.303000][ T6149] comedi comedi1: bad chanlist[0]=0x00000092 chan=146 range length=1
[  109.309035][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.663924][ T1212] usb 2-1: usb_control_msg returned -32
[  109.682467][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'.
[  109.755768][ T6152] fuse: Bad value for 'fd'
[  109.794296][ T1212] usbtmc 2-1:16.0: can't read capabilities
[  110.300844][ T6157] hsr0: entered promiscuous mode
[  110.341113][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.361385][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.647597][   T30] audit: type=1326 audit(1754644044.065:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  110.685026][   T30] audit: type=1326 audit(1754644044.065:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  110.711537][   T30] audit: type=1326 audit(1754644044.075:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  110.734215][ T5842] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  110.935722][ T6176] can0: slcan on ttyS3.
[  111.196526][   T30] audit: type=1326 audit(1754644044.075:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  111.200173][ T6173] netlink: 300 bytes leftover after parsing attributes in process `syz.2.57'.
[  111.233033][   T30] audit: type=1326 audit(1754644044.075:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  111.352436][ T5842] usb 4-1: Using ep0 maxpacket: 8
[  111.462547][   T30] audit: type=1326 audit(1754644044.075:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  111.489766][   T30] audit: type=1326 audit(1754644044.075:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  111.511265][   T30] audit: type=1326 audit(1754644044.075:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  111.512272][ T5842] usb 4-1: config 0 has an invalid interface number: 112 but max is 1
[  111.869351][ T5842] usb 4-1: config 0 has an invalid interface number: 17 but max is 1
[  111.873479][ T5982] usb 2-1: USB disconnect, device number 3
[  111.918724][   T30] audit: type=1326 audit(1754644044.075:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  111.949313][ T5842] usb 4-1: config 0 has no interface number 0
[  111.993264][ T6136] hsr0: left promiscuous mode
[  112.004255][   T30] audit: type=1326 audit(1754644044.075:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.0.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  112.011758][ T5842] usb 4-1: config 0 has no interface number 1
[  112.062827][ T6168] can0 (unregistered): slcan off ttyS3.
[  112.108814][ T5842] usb 4-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[  112.142514][ T6173] evm: overlay not supported
[  112.210755][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.218976][ T5842] usb 4-1: Product: syz
[  112.254769][ T5842] usb 4-1: Manufacturer: syz
[  112.259432][ T5842] usb 4-1: SerialNumber: syz
[  112.292951][ T5842] usb 4-1: config 0 descriptor??
[  112.443857][ T5982] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  112.638436][ T6186] netlink: 56 bytes leftover after parsing attributes in process `syz.0.58'.
[  112.649850][ T5982] usb 3-1: Using ep0 maxpacket: 8
[  112.708960][ T5982] usb 3-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config
[  113.192441][ T5982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  113.203095][ T5982] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29289, setting to 64
[  113.215937][ T5982] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  113.231017][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.450564][ T5982] hub 3-1:1.0: bad descriptor, ignoring hub
[  113.460784][ T5982] hub 3-1:1.0: probe with driver hub failed with error -5
[  113.491191][ T5982] cdc_wdm 3-1:1.0: skipping garbage
[  113.496901][ T5982] cdc_wdm 3-1:1.0: skipping garbage
[  113.846691][ T5982] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  114.649284][ T5982] usb 3-1: USB disconnect, device number 2
[  115.665129][ T5899] usb 4-1: USB disconnect, device number 4
[  116.111580][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[  116.136990][ T6204] fuse: Bad value for 'fd'
[  116.911561][ T6221] process 'syz.1.68' launched '/dev/fd/3' with NULL argv: empty string added
[  116.945885][ T6226] sg_write: process 50 (syz.2.69) changed security contexts after opening file descriptor, this is not allowed.
[  117.775750][ T5899] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  117.959014][ T6233] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  117.973372][ T5899] usb 2-1: config 0 has an invalid interface number: 135 but max is 0
[  118.630763][ T5899] usb 2-1: config 0 has no interface number 0
[  118.652110][ T5899] usb 2-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32
[  118.671240][ T5899] usb 2-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  118.725702][ T5899] usb 2-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=45.65
[  118.745200][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.753639][ T5899] usb 2-1: Product: syz
[  118.758008][ T5899] usb 2-1: Manufacturer: syz
[  118.758030][ T5899] usb 2-1: SerialNumber: syz
[  118.763975][ T5899] usb 2-1: config 0 descriptor??
[  118.770628][ T6221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  118.806798][ T6221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  119.142283][ T6221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  119.312333][ T6221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  119.536026][ T6248] netlink: 'syz.2.74': attribute type 2 has an invalid length.
[  119.674214][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'.
[  119.690984][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'.
[  119.700593][ T5899] asix 2-1:0.135 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  119.724906][ T5899] asix 2-1:0.135: probe with driver asix failed with error -71
[  119.754748][ T5899] usb 2-1: USB disconnect, device number 4
[  120.042450][ T6254] binder: 6251:6254 ioctl 4018620d 0 returned -22
[  120.220903][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  120.532392][ T5906] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.579905][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.609094][ T6256] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  120.609094][ T6256]    program syz.3.77 not setting count and/or reply_len properly
[  120.611442][ T5906] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  120.764026][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  120.772851][ T5906] usb 1-1: SerialNumber: syz
[  121.529259][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[  121.568852][ T5906] usb 1-1: 0:2 : does not exist
[  121.574234][ T5906] usb 1-1: unit 255 not found!
[  121.597396][ T5906] usb 1-1: USB disconnect, device number 2
[  121.676012][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.821362][ T5982] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  121.971495][ T5982] usb 2-1: Using ep0 maxpacket: 16
[  121.984858][ T5982] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  122.007167][ T5982] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.113478][ T5982] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  122.130240][ T5913] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  122.174467][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.284434][ T5982] usb 2-1: Product: syz
[  122.336334][ T5982] usb 2-1: Manufacturer: syz
[  122.398039][ T5982] usb 2-1: SerialNumber: syz
[  122.428200][ T5913] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2
[  122.533117][ T5913] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88
[  122.717443][ T5913] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt
[  122.929970][ T5913] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  123.063586][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.185957][ T6275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  123.215037][ T6287] netlink: 'syz.0.85': attribute type 2 has an invalid length.
[  123.261293][ T5982] usb 2-1: 0:2 : does not exist
[  123.285037][ T5982] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  123.956401][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[  124.597191][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[  124.855782][ T5982] usb 2-1: USB disconnect, device number 5
[  124.904422][ T5913] usb 5-1: string descriptor 0 read error: -71
[  125.149991][ T5913] usb 5-1: USB disconnect, device number 2
[  125.282363][ T6299] No such timeout policy "syz0"
[  125.544663][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.978125][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.018418][ T6295] ALSA: mixer_oss: invalid OSS volume ''
[  126.025177][ T6295] ALSA: mixer_oss: invalid OSS volume ''
[  126.325143][ T6307] overlayfs: failed to resolve './file1': -2
[  127.991391][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  128.211446][ T5906] usb 1-1: Using ep0 maxpacket: 32
[  128.230689][ T6335] No such timeout policy "syz0"
[  128.513214][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a
[  128.560027][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  128.654437][ T5906] usb 1-1: Product: syz
[  128.811035][ T5842] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  128.920531][ T5906] usb 1-1: config 0 descriptor??
[  129.080117][ T5906] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  129.080217][ T5906] gspca_stv06xx: st6422 sensor detected
[  129.115886][ T5842] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2
[  129.115939][ T5842] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88
[  129.115982][ T5842] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt
[  129.116016][ T5842] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  129.116037][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.129384][ T6337] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  129.199817][ T6344] netlink: 'syz.1.105': attribute type 2 has an invalid length.
[  129.660087][ T6349] can0: slcan on ttyS3.
[  131.082071][ T6345] can0 (unregistered): slcan off ttyS3.
[  131.210850][ T5842] usb 4-1: string descriptor 0 read error: -71
[  131.300526][ T5906] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71
[  131.350210][ T5906] usb 1-1: USB disconnect, device number 3
[  131.415469][ T6355] bridge_slave_0: left allmulticast mode
[  131.467890][ T6355] bridge_slave_0: left promiscuous mode
[  131.485849][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.496906][ T5842] usb 4-1: USB disconnect, device number 5
[  131.613842][ T6369] xt_HMARK: spi-set and port-set can't be combined
[  131.633739][ T6355] bridge_slave_1: left allmulticast mode
[  131.639920][ T6355] bridge_slave_1: left promiscuous mode
[  131.667452][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.676985][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.796375][ T6355] bond0: (slave bond_slave_0): Releasing backup interface
[  131.913792][ T6355] bond0: (slave bond_slave_1): Releasing backup interface
[  131.990265][ T6355] team0: Port device team_slave_0 removed
[  132.013628][ T6355] team0: Port device team_slave_1 removed
[  132.046740][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.058489][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.090819][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.098822][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.949823][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  132.957145][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  133.193975][ T6395] No such timeout policy "syz0"
[  135.411074][ T6421] veth1_macvtap: left promiscuous mode
[  135.416675][ T6421] macsec0: entered promiscuous mode
[  135.448767][ T6421] veth1_macvtap: entered promiscuous mode
[  135.457143][ T6421] macsec0: left promiscuous mode
[  136.368061][ T6430] overlayfs: failed to resolve './file1': -2
[  136.977037][ T6429] netlink: 'syz.0.122': attribute type 3 has an invalid length.
[  137.128489][ T6435] netlink: 'syz.2.123': attribute type 7 has an invalid length.
[  137.259342][ T6435] : entered promiscuous mode
[  137.900283][ T6449] No such timeout policy "syz0"
[  138.261943][ T6443] bridge_slave_0: left allmulticast mode
[  138.275090][ T6443] bridge_slave_0: left promiscuous mode
[  138.306439][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.396737][ T6443] bridge_slave_1: left allmulticast mode
[  138.402656][ T6443] bridge_slave_1: left promiscuous mode
[  138.409613][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.491157][ T6443] bond0: (slave bond_slave_0): Releasing backup interface
[  138.589109][ T6443] bond0: (slave bond_slave_1): Releasing backup interface
[  138.678995][ T6443] team0: Port device team_slave_0 removed
[  138.705947][ T6443] team0: Port device team_slave_1 removed
[  138.725162][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.735627][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.754323][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.784608][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.283402][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'.
[  139.445042][ T6488] fuse: Bad value for 'fd'
[  139.990782][ T5982] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  140.178913][ T5982] usb 1-1: Using ep0 maxpacket: 8
[  140.197743][ T5982] usb 1-1: config 1 has an invalid interface number: 128 but max is 1
[  140.230022][ T5982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.263661][ T5982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  140.725562][ T5982] usb 1-1: config 1 has no interface number 0
[  140.732760][ T5982] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  141.044119][ T6500] netlink: 'syz.2.139': attribute type 3 has an invalid length.
[  141.123656][ T6500] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.139'.
[  141.180935][ T5982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  141.211560][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.219742][ T5982] usb 1-1: Product: syz
[  141.391229][ T5982] usb 1-1: Manufacturer: syz
[  141.400998][ T5906] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  141.418821][ T5982] usb 1-1: SerialNumber: syz
[  141.447018][ T5982] cdc_wdm 1-1:1.128: skipping garbage
[  141.452537][ T5982] cdc_wdm 1-1:1.128: skipping garbage
[  141.457940][ T5982] cdc_wdm 1-1:1.128: invalid descriptor buffer length
[  141.530782][ T5982] cdc_wdm 1-1:1.128: probe with driver cdc_wdm failed with error -22
[  141.590901][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  141.643767][ T5906] usb 2-1: no configurations
[  141.667884][ T5906] usb 2-1: can't read configurations, error -22
[  141.678066][ T6510] No such timeout policy "syz0"
[  141.819183][ T5982] usb 1-1: USB disconnect, device number 4
[  141.830886][ T5906] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  142.008292][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  142.037429][ T5906] usb 2-1: no configurations
[  142.042455][ T5906] usb 2-1: can't read configurations, error -22
[  142.059948][ T5906] usb usb2-port1: attempt power cycle
[  142.470943][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  142.530904][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  142.571113][ T5906] usb 2-1: no configurations
[  142.575763][ T5906] usb 2-1: can't read configurations, error -22
[  142.720886][ T5906] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  142.782714][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  142.812360][ T5906] usb 2-1: no configurations
[  142.817290][ T5906] usb 2-1: can't read configurations, error -22
[  142.848535][ T5906] usb usb2-port1: unable to enumerate USB device
[  143.252283][ T6548] bridge0: entered promiscuous mode
[  143.267362][ T6548] bridge0: entered allmulticast mode
[  144.500885][ T6590] sock: sock_set_timeout: `syz.4.179' (pid 6590) tries to set negative timeout
[  145.038910][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  145.245871][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.295676][   T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  145.349481][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.459743][   T24] usb 4-1: config 0 descriptor??
[  145.465849][   T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  145.513887][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  145.685044][   T10] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  145.706974][   T10] usb 2-1: config 0 has no interface number 0
[  145.743543][   T10] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  145.841124][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.908171][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  145.912042][   T10] usb 2-1: Product: syz
[  145.941056][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  145.946616][   T10] usb 2-1: Manufacturer: syz
[  146.015399][   T10] usb 2-1: SerialNumber: syz
[  146.015965][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  146.142923][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  146.256924][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  146.296539][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  146.357185][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  146.359087][   T10] usb 2-1: config 0 descriptor??
[  146.377768][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  146.409762][   T24] pwc: recv_control_msg error -32 req 04 val 1500
[  146.460335][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[  146.479147][   T24] pwc: recv_control_msg error -32 req 02 val 2400
[  146.509754][   T24] pwc: recv_control_msg error -32 req 02 val 2600
[  146.537698][   T24] pwc: recv_control_msg error -32 req 02 val 2900
[  146.598875][   T10] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware
[  146.706090][ T6621] Zero length message leads to an empty skb
[  146.847426][   T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  146.870934][   T10] dib0700: firmware download failed at 7 with -22
[  147.002613][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  147.230599][   T24] pwc: Registered as video103.
[  147.231138][   T10] usb 2-1: USB disconnect, device number 10
[  147.249918][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8
[  147.367154][   T24] usb 4-1: USB disconnect, device number 6
[  147.581068][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[  148.921767][ T5838] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  148.934400][ T5838] Bluetooth: hci1: Injecting HCI hardware error event
[  148.945096][ T5838] Bluetooth: hci1: hardware error 0x00
[  150.152645][ T6650] netlink: 96 bytes leftover after parsing attributes in process `syz.3.201'.
[  150.394636][ T6656] netlink: 'syz.0.204': attribute type 30 has an invalid length.
[  150.395744][ T6653] netlink: 14 bytes leftover after parsing attributes in process `syz.1.203'.
[  150.429878][ T6656] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.439172][ T6656] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.448135][ T6656] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.457173][ T6656] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.603781][ T6656] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.613241][ T6656] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.622232][ T6656] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.631227][ T6656] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.520859][ T6653] hsr_slave_1 (unregistering): left promiscuous mode
[  152.070918][ T5838] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  153.121905][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  153.323542][ T5899] usb 5-1: config 0 has no interfaces?
[  153.329087][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  153.547793][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.569383][ T5899] usb 5-1: config 0 descriptor??
[  153.825929][ T5899] usb 5-1: USB disconnect, device number 3
[  155.960281][ T6706] misc userio: No port type given on /dev/userio
[  157.927120][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'.
[  157.940907][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  158.561726][   T10] usb 2-1: Using ep0 maxpacket: 8
[  158.602345][   T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  158.610585][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.656498][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.672534][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  158.685008][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.698298][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  158.707585][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.442544][   T10] usb 2-1: GET_CAPABILITIES returned 0
[  159.458422][   T10] usbtmc 2-1:16.0: can't read capabilities
[  159.923026][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  159.923044][   T30] audit: type=1326 audit(1754644093.345:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.4.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86fb8ebe9 code=0x0
[  160.012372][ T6720] usbtmc 2-1:16.0: usb_control_msg returned -71
[  160.017768][   T10] usb 2-1: USB disconnect, device number 11
[  160.476617][ T6734] hub 9-0:1.0: USB hub found
[  160.494767][ T6734] hub 9-0:1.0: 1 port detected
[  164.631712][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  164.641213][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  164.649753][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  164.662190][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  164.672265][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  165.114035][ T6795] veth1_to_bond: entered allmulticast mode
[  165.133121][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'.
[  165.431266][ T6612] Set syz1 is full, maxelem 65536 reached
[  165.440438][ T6795] veth1_to_bond (unregistering): left allmulticast mode
[  165.450741][ T5913] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  166.215443][ T5913] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  166.244455][ T5913] usb 2-1: config 0 has no interface number 0
[  166.270355][ T5913] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  166.310901][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.319046][ T5913] usb 2-1: Product: syz
[  166.464940][ T5913] usb 2-1: Manufacturer: syz
[  166.539495][ T5913] usb 2-1: SerialNumber: syz
[  166.752131][ T5848] Bluetooth: hci5: command tx timeout
[  166.857641][ T5913] usb 2-1: config 0 descriptor??
[  167.146759][ T6782] chnl_net:caif_netlink_parms(): no params data found
[  168.537371][ T5913] usb 2-1: Firmware version (0.0) predates our first public release.
[  168.556371][ T5913] usb 2-1: Please update to version 0.2 or newer
[  168.615411][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.624180][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.624766][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'.
[  168.631575][ T6782] bridge_slave_0: entered allmulticast mode
[  168.651110][ T6782] bridge_slave_0: entered promiscuous mode
[  168.662994][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.671587][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.680098][ T6782] bridge_slave_1: entered allmulticast mode
[  168.713109][ T6782] bridge_slave_1: entered promiscuous mode
[  168.774681][ T5913] usb 2-1: USB disconnect, device number 12
[  168.820804][ T5848] Bluetooth: hci5: command tx timeout
[  168.920024][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'.
[  168.968256][ T5834] syz-executor (5834) used greatest stack depth: 19832 bytes left
[  169.010027][ T6782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.177754][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'.
[  169.390343][ T6856] hub 8-0:1.0: USB hub found
[  169.397002][ T6856] hub 8-0:1.0: 1 port detected
[  169.918309][ T6782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.350557][ T6864] binder: BINDER_SET_CONTEXT_MGR already set
[  170.367099][ T6352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.400424][ T6864] binder: 6863:6864 ioctl 4018620d 200000004a80 returned -16
[  170.430149][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'.
[  170.487163][ T6782] team0: Port device team_slave_0 added
[  170.498177][ T6782] team0: Port device team_slave_1 added
[  170.598048][ T6352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.789416][ T6352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.901703][ T5848] Bluetooth: hci5: command tx timeout
[  171.443221][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  171.527237][ T6882] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  171.661310][ T5906] usb 4-1: Using ep0 maxpacket: 16
[  171.872075][ T5906] usb 4-1: config index 0 descriptor too short (expected 42, got 18)
[  171.977135][ T5906] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  172.017813][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  172.018519][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.047831][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.074086][    C0] vkms_vblank_simulate: vblank timer overrun
[  172.118545][ T6782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.143241][ T5906] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  172.156665][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  172.164883][ T5906] usb 4-1: Product: syz
[  172.169171][ T5906] usb 4-1: SerialNumber: syz
[  172.182653][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.189825][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.250842][ T5906] r8152-cfgselector 4-1: Unknown version 0x0000
[  172.280749][ T5906] r8152-cfgselector 4-1: config 0 descriptor??
[  172.289227][ T5906] hub 4-1:0.0: bad descriptor, ignoring hub
[  172.307959][ T6782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.319632][ T5906] hub 4-1:0.0: probe with driver hub failed with error -5
[  172.980872][ T5848] Bluetooth: hci5: command tx timeout
[  173.057163][ T6352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.234491][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.295016][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.310762][ T5913] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  173.443111][ T5842] r8152-cfgselector 4-1: USB disconnect, device number 7
[  173.472200][ T5913] usb 1-1: not running at top speed; connect to a high speed hub
[  173.502929][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.524526][ T6782] hsr_slave_0: entered promiscuous mode
[  173.553835][ T5913] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57
[  173.564007][ T6782] hsr_slave_1: entered promiscuous mode
[  173.571158][ T6782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.578777][ T6782] Cannot create hsr debugfs directory
[  173.595614][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.615928][ T5913] usb 1-1: Product: syz
[  173.620218][ T5913] usb 1-1: Manufacturer: syz
[  173.663313][ T5913] usb 1-1: SerialNumber: syz
[  175.622995][ T5913] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[  175.684446][ T2346] pvrusb2: Invalid write control endpoint
[  175.700966][ T5913] usb 1-1: USB disconnect, device number 5
[  175.843783][ T6921] program syz.0.276 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.922019][ T2346] pvrusb2: Invalid write control endpoint
[  175.941146][ T2346] pvrusb2: Invalid write control endpoint
[  175.957160][ T2346] pvrusb2: Invalid write control endpoint
[  175.969860][ T2346] pvrusb2: Invalid write control endpoint
[  175.991688][ T2346] pvrusb2: Invalid write control endpoint
[  176.007248][ T2346] pvrusb2: Invalid write control endpoint
[  176.023474][ T2346] pvrusb2: Invalid write control endpoint
[  176.054307][ T2346] pvrusb2: Invalid write control endpoint
[  176.072310][ T2346] pvrusb2: Invalid write control endpoint
[  176.095360][ T2346] pvrusb2: Invalid write control endpoint
[  176.109648][ T2346] pvrusb2: Invalid write control endpoint
[  176.126185][ T2346] pvrusb2: Invalid write control endpoint
[  176.140139][ T2346] pvrusb2: Invalid write control endpoint
[  176.156615][ T2346] pvrusb2: Invalid write control endpoint
[  176.172536][ T2346] pvrusb2: Invalid write control endpoint
[  176.185537][ T2346] pvrusb2: Invalid write control endpoint
[  176.201463][ T2346] pvrusb2: Invalid write control endpoint
[  176.223117][ T2346] pvrusb2: Invalid write control endpoint
[  176.244620][ T2346] pvrusb2: Invalid write control endpoint
[  176.273692][ T2346] pvrusb2: Invalid write control endpoint
[  176.311346][ T2346] pvrusb2: Invalid write control endpoint
[  176.350329][ T2346] pvrusb2: Invalid write control endpoint
[  176.372686][ T2346] pvrusb2: Invalid write control endpoint
[  176.400745][ T2346] pvrusb2: Invalid write control endpoint
[  176.407798][ T2346] pvrusb2: Invalid write control endpoint
[  176.415044][ T2346] pvrusb2: Invalid write control endpoint
[  176.426663][ T2346] pvrusb2: Invalid write control endpoint
[  176.435716][ T2346] pvrusb2: Invalid write control endpoint
[  176.442746][ T2346] pvrusb2: Invalid write control endpoint
[  176.448804][ T2346] pvrusb2: Invalid write control endpoint
[  176.467631][ T2346] pvrusb2: Invalid write control endpoint
[  176.476305][ T2346] pvrusb2: Invalid write control endpoint
[  176.521590][ T2346] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  176.611432][ T5982] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  176.677755][ T2346] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  176.694720][ T2346] pvrusb2: Invalid write control endpoint
[  176.716173][ T2346] pvrusb2: Invalid write control endpoint
[  176.726987][ T2346] pvrusb2: Invalid write control endpoint
[  176.735464][ T2346] pvrusb2: Invalid write control endpoint
[  176.756121][ T2346] pvrusb2: Invalid write control endpoint
[  176.772529][ T2346] pvrusb2: Invalid write control endpoint
[  176.780866][ T5982] usb 2-1: Using ep0 maxpacket: 32
[  176.799328][ T6921] syz.0.276 (6921): drop_caches: 2
[  176.811294][ T2346] pvrusb2: Invalid write control endpoint
[  176.819296][ T5982] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  176.841572][ T5982] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  176.885505][ T2346] pvrusb2: Invalid write control endpoint
[  176.899813][ T2346] pvrusb2: Invalid write control endpoint
[  176.917354][ T5982] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  176.937826][ T2346] pvrusb2: Invalid write control endpoint
[  176.944038][ T2346] pvrusb2: Invalid write control endpoint
[  176.966923][ T5982] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  176.991095][ T2346] pvrusb2: Invalid write control endpoint
[  176.996881][ T2346] pvrusb2: Invalid write control endpoint
[  177.025935][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0
[  177.032865][ T2346] pvrusb2: Invalid write control endpoint
[  177.049186][ T2346] pvrusb2: Invalid write control endpoint
[  177.055762][ T2346] pvrusb2: Invalid write control endpoint
[  177.065247][ T2346] pvrusb2: Invalid write control endpoint
[  177.074837][ T5982] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  177.076012][ T2346] pvrusb2: Invalid write control endpoint
[  177.093176][ T5982] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  177.096851][ T2346] pvrusb2: Invalid write control endpoint
[  177.108086][ T2346] pvrusb2: Invalid write control endpoint
[  177.108262][ T5982] usb 2-1: Product: syz
[  177.116436][ T2346] pvrusb2: Invalid write control endpoint
[  177.130611][ T2346] pvrusb2: Attached sub-driver cs53l32a
[  177.133645][ T5982] usb 2-1: Manufacturer: syz
[  177.148873][ T5982] usb 2-1: SerialNumber: syz
[  177.178473][ T5982] usb 2-1: config 0 descriptor??
[  177.179184][ T2346] pvrusb2: Invalid write control endpoint
[  177.188052][ T5982] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  177.218346][ T2346] pvrusb2: Invalid write control endpoint
[  177.218494][ T5982] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  177.230810][ T2346] pvrusb2: Invalid write control endpoint
[  177.246392][ T2346] pvrusb2: Invalid write control endpoint
[  177.252774][ T2346] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  177.270236][ T2346] pvrusb2: Device being rendered inoperable
[  177.276647][ T2346] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  177.295828][ T2346] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  177.324410][ T6352] bond0 (unregistering): Released all slaves
[  177.577116][ T6352] : left promiscuous mode
[  177.700344][   T24] usb 2-1: USB disconnect, device number 13
[  177.700483][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  177.721466][ T6937] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  177.781476][   T24] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  178.360107][ T1077] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x16
[  178.483315][ T6782] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  178.497444][ T6782] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  178.825065][ T6782] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  178.847859][ T6782] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  180.364066][ T6999] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  180.390815][ T6999] CIFS mount error: No usable UNC path provided in device string!
[  180.390815][ T6999] 
[  180.401714][ T6999] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  180.704042][ T6352] hsr_slave_0: left promiscuous mode
[  180.801980][ T6352] hsr_slave_1: left promiscuous mode
[  181.021172][ T6352] veth1_macvtap: left promiscuous mode
[  181.027066][ T6352] veth0_macvtap: left promiscuous mode
[  181.110951][ T6352] veth1_vlan: left promiscuous mode
[  181.170161][ T6352] veth0_vlan: left promiscuous mode
[  182.328713][ T7021] tty tty27: ldisc open failed (-12), clearing slot 26
[  182.517677][   T30] audit: type=1326 audit(1754644115.935:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdbb8ebe9 code=0x7ffc0000
[  182.667827][   T30] audit: type=1326 audit(1754644115.935:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdbb8ebe9 code=0x7ffc0000
[  182.804829][   T30] audit: type=1326 audit(1754644115.965:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f5fdbb8ebe9 code=0x7ffc0000
[  182.935183][   T30] audit: type=1326 audit(1754644115.965:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdbb8ebe9 code=0x7ffc0000
[  183.201321][   T30] audit: type=1326 audit(1754644115.965:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7023 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdbb8ebe9 code=0x7ffc0000
[  185.010766][ T5848] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  185.019378][ T5848] Bluetooth: hci4: Injecting HCI hardware error event
[  185.028033][ T5848] Bluetooth: hci4: hardware error 0x00
[  187.222054][ T5848] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  191.323423][   T30] audit: type=1326 audit(1754644124.745:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  191.363675][ T6782] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.389461][   T30] audit: type=1326 audit(1754644124.775:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  191.887163][ T6782] 8021q: adding VLAN 0 to HW filter on device team0
[  191.937892][   T30] audit: type=1326 audit(1754644124.775:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  191.993515][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.000753][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.050781][   T30] audit: type=1326 audit(1754644124.775:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  192.078016][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.085237][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.126615][   T30] audit: type=1326 audit(1754644124.775:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  192.181908][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  192.218639][   T30] audit: type=1326 audit(1754644124.775:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  192.380842][ T5913] usb 5-1: Using ep0 maxpacket: 16
[  192.388802][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short
[  192.399034][ T5913] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.425433][   T30] audit: type=1326 audit(1754644124.775:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  192.457275][ T5913] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  192.491680][ T6782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.502750][ T5913] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  192.650749][ T5913] usb 5-1: config 1 interface 0 has no altsetting 0
[  192.663180][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  192.678783][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.691159][ T5913] usb 5-1: Product: syz
[  192.695527][ T5913] usb 5-1: Manufacturer: syz
[  192.700323][ T5913] usb 5-1: SerialNumber: syz
[  192.737087][   T30] audit: type=1326 audit(1754644124.775:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  193.373427][ T7100] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  193.430736][   T30] audit: type=1326 audit(1754644124.775:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb80a78ebe9 code=0x7ffc0000
[  193.460494][   T30] audit: type=1326 audit(1754644124.805:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7090 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb80a72add9 code=0x7ffc0000
[  193.585745][ T6352] IPVS: stop unused estimator thread 0...
[  193.733904][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9
[  194.297152][ T6782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.357640][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.612728][ T5192] bcm5974 5-1:1.0: could not read from device
[  194.623030][   T24] usb 5-1: USB disconnect, device number 4
[  194.659822][ T5192] bcm5974 5-1:1.0: could not read from device
[  194.800408][ T5997] bcm5974 5-1:1.0: could not read from device
[  195.314773][ T7139] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer.
[  195.860972][ T5982] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  196.071576][ T5982] usb 5-1: config 0 has an invalid interface number: 103 but max is 0
[  196.079899][ T5982] usb 5-1: config 0 has no interface number 0
[  196.128209][ T5982] usb 5-1: config 0 interface 103 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  196.183760][ T6782] veth0_vlan: entered promiscuous mode
[  196.187014][ T7160] futex_wake_op: syz.1.331 tries to shift op by 144; fix this program
[  196.200857][ T5982] usb 5-1: config 0 interface 103 has no altsetting 0
[  196.219891][ T5982] usb 5-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=24.95
[  196.233200][ T6782] veth1_vlan: entered promiscuous mode
[  196.249540][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.624038][    C0] vkms_vblank_simulate: vblank timer overrun
[  197.287455][ T5982] usb 5-1: Product: syz
[  197.298262][ T5982] usb 5-1: Manufacturer: syz
[  197.303133][ T5982] usb 5-1: SerialNumber: syz
[  197.851011][ T5982] usb 5-1: config 0 descriptor??
[  197.866806][ T5982] usb 5-1: bad CDC descriptors
[  197.872459][ T5982] cdc_acm 5-1:0.103: Zero length descriptor references
[  197.884503][ T5982] cdc_acm 5-1:0.103: probe with driver cdc_acm failed with error -22
[  198.079219][ T6782] veth0_macvtap: entered promiscuous mode
[  198.142063][ T6782] veth1_macvtap: entered promiscuous mode
[  198.513905][ T5913] usb 5-1: USB disconnect, device number 5
[  198.668951][ T6782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.755246][ T6782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.793723][ T6782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.836216][ T6782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.865396][ T6782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.902400][ T6782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.989183][ T7175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  199.498511][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.512603][ T5995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.474244][ T5995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.521140][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.512322][ T7230] comedi comedi0: pcl816: I/O port conflict (0x2f00,16)
[  205.859744][ T5982] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  206.134712][ T5982] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  206.171621][ T5982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.181943][ T5982] usb 6-1: config 0 has no interface number 0
[  206.282123][ T5982] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  206.310996][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.319761][ T5982] usb 6-1: Product: syz
[  206.353209][ T5982] usb 6-1: Manufacturer: syz
[  206.375631][ T5982] usb 6-1: SerialNumber: syz
[  206.412918][ T5982] usb 6-1: config 0 descriptor??
[  206.451758][ T5982] hub 6-1:0.31: bad descriptor, ignoring hub
[  206.457812][ T5982] hub 6-1:0.31: probe with driver hub failed with error -5
[  206.499709][ T5982] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  206.556515][ T5982] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized!
[  206.596930][ T5982] usb 6-1: Failed to create links for entity 6
[  206.614315][ T5982] usb 6-1: Failed to register entities (-22).
[  206.696880][ T5982] usb 6-1: USB disconnect, device number 2
[  206.740500][ T7244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.388422][ T5851] Bluetooth: hci3: command 0x0406 tx timeout
[  207.402816][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  211.063702][ T7302] netlink: 'syz.3.367': attribute type 4 has an invalid length.
[  211.101906][ T7304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.135229][ T7308] syz_tun: entered allmulticast mode
[  211.138069][ T7302] netlink: 'syz.3.367': attribute type 4 has an invalid length.
[  211.346702][ T7316] comedi comedi0: pcl816: I/O port conflict (0x2f00,16)
[  215.681914][ T7364] comedi comedi0: pcl816: I/O port conflict (0x2f00,16)
[  216.750072][ T7376] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  218.325164][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  218.334286][ T7379] Illegal XDP return value 4294967274 on prog  (id 120) dev N/A, expect packet loss!
[  218.677894][   T10] usb 4-1: Using ep0 maxpacket: 8
[  218.697233][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  218.708551][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  219.304435][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  219.314226][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  219.325350][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  219.335262][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  219.360406][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.468382][   T10] usb 4-1: config 0 descriptor??
[  219.517713][ T7374] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  219.613791][ T5848] Bluetooth: hci0: urb ffff8880273fe500 submission failed (90)
[  219.867453][ T5842] usb 4-1: USB disconnect, device number 8
[  221.239955][ T7425] usb usb8: usbfs: process 7425 (syz.1.403) did not claim interface 0 before use
[  221.302725][ T7435] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.403' resets device
[  221.478847][ T1212] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  222.428365][ T7444] netlink: 80 bytes leftover after parsing attributes in process `syz.1.410'.
[  222.601063][ T1212] usb 4-1: Using ep0 maxpacket: 16
[  222.657468][ T1212] usb 4-1: unable to get BOS descriptor or descriptor too short
[  222.690542][ T1212] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.718378][ T1212] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  222.777634][ T1212] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.846973][ T1212] usb 4-1: config 1 interface 0 has no altsetting 0
[  222.879008][ T1212] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  222.888111][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.918891][ T1212] usb 4-1: Product: syz
[  222.932602][ T1212] usb 4-1: Manufacturer: syz
[  222.937252][ T1212] usb 4-1: SerialNumber: syz
[  222.996675][ T7430] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  223.684337][ T1212] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10
[  226.332386][ T5192] bcm5974 4-1:1.0: could not write to device
[  227.420053][ T1212] usb 4-1: USB disconnect, device number 9
[  228.438108][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[  232.944635][ T7516] x_tables: duplicate underflow at hook 1
[  234.183484][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'.
[  235.051770][ T5842] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  236.372633][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.393726][ T5842] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  236.403365][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.415794][ T5842] usb 2-1: config 0 descriptor??
[  237.692400][ T5842] usbhid 2-1:0.0: can't add hid device: -71
[  237.712486][ T5842] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  237.732329][ T7569] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  237.772082][ T5842] usb 2-1: USB disconnect, device number 14
[  238.517751][ T5842] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  238.790758][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  238.815215][ T5842] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  239.287105][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.299342][ T5842] usb 2-1: config 0 descriptor??
[  239.404836][ T5842] usb 2-1: can't set config #0, error -71
[  239.466538][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[  239.622032][ T5842] usb 2-1: USB disconnect, device number 15
[  239.847833][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  240.227673][   T10] usb 1-1: Using ep0 maxpacket: 16
[  240.321995][   T10] usb 1-1: config index 0 descriptor too short (expected 42, got 18)
[  240.360327][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  240.491377][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  240.544739][   T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  240.563629][   T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  240.608432][   T10] usb 1-1: Product: syz
[  240.622521][   T10] usb 1-1: SerialNumber: syz
[  240.637825][ T7609] netlink: 'syz.3.452': attribute type 1 has an invalid length.
[  240.694648][   T10] r8152-cfgselector 1-1: Unknown version 0x0000
[  240.850832][   T10] r8152-cfgselector 1-1: config 0 descriptor??
[  240.875705][   T10] hub 1-1:0.0: bad descriptor, ignoring hub
[  240.901236][   T10] hub 1-1:0.0: probe with driver hub failed with error -5
[  240.950342][ T7617] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  240.964048][ T7617] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  241.105771][ T7609] gretap1: entered promiscuous mode
[  241.371772][ T7609] bond1: (slave gretap1): making interface the new active one
[  241.750217][ T5916] r8152-cfgselector 1-1: USB disconnect, device number 6
[  241.884965][ T7609] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  242.333986][ T7632] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  244.455336][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'.
[  245.132437][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  245.132454][   T30] audit: type=1326 audit(1754644175.393:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7646 comm="syz.0.457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x0
[  246.608336][ T7661] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  248.302916][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[  248.714656][ T1212] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  248.928735][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'.
[  249.086125][ T1212] usb 1-1: Using ep0 maxpacket: 16
[  249.892738][ T1212] usb 1-1: config index 0 descriptor too short (expected 42, got 18)
[  249.902250][ T1212] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  249.913803][ T1212] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  249.939369][ T5848] Bluetooth: hci5: Unable to find connection for big 0x00
[  249.970472][ T1212] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  249.999894][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  250.018755][ T1212] usb 1-1: Product: syz
[  250.023162][ T1212] usb 1-1: SerialNumber: syz
[  250.043088][ T1212] r8152-cfgselector 1-1: Unknown version 0x0000
[  250.055868][ T1212] r8152-cfgselector 1-1: config 0 descriptor??
[  250.064528][ T1212] hub 1-1:0.0: bad descriptor, ignoring hub
[  250.071141][ T1212] hub 1-1:0.0: probe with driver hub failed with error -5
[  250.294847][ T1212] r8152-cfgselector 1-1: USB disconnect, device number 7
[  255.114071][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'.
[  255.449951][ T5842] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  256.122944][ T5842] usb 4-1: Using ep0 maxpacket: 16
[  256.130978][ T5842] usb 4-1: config index 0 descriptor too short (expected 42, got 18)
[  256.143675][ T5842] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  256.155166][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  256.170704][ T5842] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  256.208242][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  256.216462][ T5842] usb 4-1: Product: syz
[  256.291148][ T5842] usb 4-1: SerialNumber: syz
[  256.372139][ T5842] r8152-cfgselector 4-1: Unknown version 0x0000
[  256.436940][ T5842] r8152-cfgselector 4-1: config 0 descriptor??
[  256.614615][ T5842] hub 4-1:0.0: bad descriptor, ignoring hub
[  256.690860][ T5842] hub 4-1:0.0: probe with driver hub failed with error -5
[  256.798149][ T7760] caif0: entered allmulticast mode
[  256.860241][ T5842] r8152-cfgselector 4-1: USB disconnect, device number 10
[  257.273903][ T5906] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  257.679186][ T5906] usb 6-1: Using ep0 maxpacket: 16
[  258.249040][ T5906] usb 6-1: unable to get BOS descriptor or descriptor too short
[  258.597437][ T5842] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  258.648897][ T5848] Bluetooth: Unknown LE signaling command 0x2b
[  258.658006][ T5848] Bluetooth: Wrong link type (-22)
[  258.674169][ T5906] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.709905][ T5906] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  258.724497][ T5906] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  258.738652][ T5906] usb 6-1: config 1 interface 0 has no altsetting 0
[  258.759604][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  258.805699][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.813743][ T5906] usb 6-1: Product: syz
[  258.822586][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.832793][ T5842] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  258.858668][ T5906] usb 6-1: Manufacturer: syz
[  258.863404][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.874542][ T5906] usb 6-1: SerialNumber: syz
[  258.888424][ T5842] usb 1-1: config 0 descriptor??
[  258.951423][ T7765] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  259.616130][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input11
[  259.920182][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  259.981498][ T5842] usbhid 1-1:0.0: can't add hid device: -71
[  259.987745][ T5842] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  260.107177][ T5842] usb 1-1: USB disconnect, device number 8
[  260.294607][ T5192] bcm5974 6-1:1.0: could not read from device
[  260.314826][   T24] usb 6-1: USB disconnect, device number 3
[  260.481956][ T5192] bcm5974 6-1:1.0: could not read from device
[  260.500043][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  260.868675][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.072407][ T5906] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  261.093502][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.487769][ T5906] usb 5-1: config 0 descriptor??
[  261.497583][ T5906] pwc: Askey VC010 type 2 USB webcam detected.
[  262.390713][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.500'.
[  262.413460][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00
[  262.436187][ T5906] pwc: recv_control_msg error -32 req 02 val 2700
[  262.591195][ T5906] pwc: recv_control_msg error -32 req 02 val 2c00
[  262.628766][ T5906] pwc: recv_control_msg error -32 req 04 val 1000
[  262.728493][ T7830] input: syz1 as /devices/virtual/input/input12
[  262.910371][ T5982] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  263.202612][ T5906] pwc: recv_control_msg error -32 req 04 val 1300
[  263.212501][ T5906] pwc: recv_control_msg error -32 req 04 val 1400
[  263.221867][ T5906] pwc: recv_control_msg error -32 req 02 val 2000
[  263.229104][ T5906] pwc: recv_control_msg error -32 req 02 val 2100
[  263.242990][ T5982] usb 6-1: Using ep0 maxpacket: 16
[  263.243476][ T5906] pwc: recv_control_msg error -32 req 04 val 1500
[  263.266103][ T5906] pwc: recv_control_msg error -32 req 02 val 2500
[  263.273788][ T5906] pwc: recv_control_msg error -32 req 02 val 2400
[  263.275951][ T5982] usb 6-1: config index 0 descriptor too short (expected 42, got 18)
[  263.368134][ T5982] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  263.381500][ T5982] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  263.498348][ T5982] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  263.500230][ T5906] pwc: recv_control_msg error -71 req 02 val 2900
[  263.507900][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  263.507926][ T5982] usb 6-1: Product: syz
[  263.507940][ T5982] usb 6-1: SerialNumber: syz
[  263.540999][ T5982] r8152-cfgselector 6-1: Unknown version 0x0000
[  263.572234][ T5982] r8152-cfgselector 6-1: config 0 descriptor??
[  263.602542][ T5982] hub 6-1:0.0: bad descriptor, ignoring hub
[  263.640911][ T5906] pwc: recv_control_msg error -71 req 02 val 2800
[  263.647979][ T5982] hub 6-1:0.0: probe with driver hub failed with error -5
[  263.659136][ T5906] pwc: recv_control_msg error -71 req 04 val 1100
[  263.666166][ T5906] pwc: recv_control_msg error -71 req 04 val 1200
[  263.861770][ T5906] pwc: Registered as video103.
[  264.484484][   T24] r8152-cfgselector 6-1: USB disconnect, device number 4
[  264.515872][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13
[  264.586663][ T5906] usb 5-1: USB disconnect, device number 6
[  267.030157][   T30] audit: type=1800 audit(1754644195.844:73): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.508" name="bus" dev="overlay" ino=549 res=0 errno=0
[  269.912720][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'.
[  271.041135][ T5842] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  271.258677][ T5842] usb 5-1: Using ep0 maxpacket: 16
[  271.277264][ T5842] usb 5-1: config index 0 descriptor too short (expected 42, got 18)
[  271.305876][ T5842] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  271.333729][ T5842] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  271.388410][ T5842] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  271.415194][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  272.415141][ T5842] usb 5-1: Product: syz
[  272.423108][ T5842] usb 5-1: SerialNumber: syz
[  272.457304][ T5842] r8152-cfgselector 5-1: Unknown version 0x0000
[  272.464819][ T5842] r8152-cfgselector 5-1: config 0 descriptor??
[  272.479413][ T5842] hub 5-1:0.0: bad descriptor, ignoring hub
[  272.491669][ T5842] hub 5-1:0.0: probe with driver hub failed with error -5
[  273.236117][   T24] r8152-cfgselector 5-1: USB disconnect, device number 7
[  278.388309][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'.
[  281.153409][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.549'.
[  283.624607][ T8056] fuse: Bad value for 'fd'
[  285.842386][ T8066] hub 8-0:1.0: USB hub found
[  285.854956][ T8066] hub 8-0:1.0: 1 port detected
[  286.605109][ T8073] syz.0.558 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  287.163839][ T5842] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  287.507644][ T5842] usb 5-1: Using ep0 maxpacket: 16
[  287.538850][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short
[  287.556276][ T5842] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.586945][ T5842] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  287.633411][ T5842] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.137161][ T5842] usb 5-1: config 1 interface 0 has no altsetting 0
[  288.160812][ T5842] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  288.173873][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.296920][ T5842] usb 5-1: Product: syz
[  288.304673][ T8085] hub 8-0:1.0: USB hub found
[  288.309902][ T8085] hub 8-0:1.0: 1 port detected
[  288.325639][ T5842] usb 5-1: Manufacturer: syz
[  288.344770][ T5842] usb 5-1: SerialNumber: syz
[  288.372318][ T8069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  288.658617][ T5842] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input14
[  290.376115][ T5916] usb 5-1: USB disconnect, device number 8
[  290.382427][ T5192] bcm5974 5-1:1.0: could not read from device
[  290.596779][ T5192] bcm5974 5-1:1.0: could not read from device
[  292.767763][ T8164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  293.196593][ T8162] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  293.203382][ T8162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  293.250611][ T8162] vhci_hcd vhci_hcd.0: Device attached
[  293.335915][ T8164] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11)
[  293.342565][ T8164] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  293.443464][ T8169] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8)
[  293.450037][ T8169] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  293.460900][ T5842] vhci_hcd: vhci_device speed not set
[  293.525587][ T8164] vhci_hcd vhci_hcd.0: Device attached
[  293.567158][ T5842] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  293.693890][ T8162] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(5)
[  293.700451][ T8162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  294.139652][ T8169] vhci_hcd vhci_hcd.0: Device attached
[  294.238727][ T8162] vhci_hcd vhci_hcd.0: Device attached
[  294.915982][ T8183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  295.235610][ T8166] vhci_hcd: connection reset by peer
[  295.237766][ T8171] vhci_hcd: connection closed
[  295.241027][ T8170] vhci_hcd: connection closed
[  295.254324][ T8177] vhci_hcd: connection closed
[  295.314137][   T13] vhci_hcd: stop threads
[  295.334158][   T13] vhci_hcd: release socket
[  295.354206][   T13] vhci_hcd: disconnect device
[  295.427085][   T13] vhci_hcd: stop threads
[  295.431946][   T13] vhci_hcd: release socket
[  295.474373][   T13] vhci_hcd: disconnect device
[  295.500162][   T13] vhci_hcd: stop threads
[  295.512584][   T13] vhci_hcd: release socket
[  295.539884][   T13] vhci_hcd: disconnect device
[  295.553983][   T13] vhci_hcd: stop threads
[  295.567674][   T13] vhci_hcd: release socket
[  295.577439][   T13] vhci_hcd: disconnect device
[  295.612002][ T5916] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  296.067998][ T5916] usb 6-1: Using ep0 maxpacket: 16
[  296.115928][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short
[  296.160462][ T5916] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.188851][ T5916] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  296.254482][ T5916] usb 6-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  296.288023][ T5916] usb 6-1: config 1 interface 0 has no altsetting 0
[  296.310178][ T5916] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  296.326339][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.344267][ T5848] Bluetooth: hci3: adv larger than maximum supported
[  296.344329][ T5848] Bluetooth: hci3: Malformed LE Event: 0x0d
[  296.370862][ T5916] usb 6-1: Product: syz
[  296.375640][ T5916] usb 6-1: Manufacturer: syz
[  296.388932][ T5916] usb 6-1: SerialNumber: syz
[  296.435701][ T8201] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  296.844757][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input15
[  297.772177][ T5192] bcm5974 6-1:1.0: could not read from device
[  297.778778][   T10] usb 6-1: USB disconnect, device number 5
[  297.794250][ T5192] bcm5974 6-1:1.0: could not read from device
[  297.818430][ T8223] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  297.826817][ T8223] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  297.838746][ T5997] bcm5974 6-1:1.0: could not read from device
[  298.034592][ T8223] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  298.059238][ T8223] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  298.352774][ T8223] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  298.362718][ T8223] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  299.578493][ T5842] vhci_hcd: vhci_device speed not set
[  300.001588][ T5848] Bluetooth: hci2: command 0x0406 tx timeout
[  300.047942][ T8223] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  300.247756][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  300.504564][ T5838] Bluetooth: hci5: command 0x0405 tx timeout
[  302.241346][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  302.894746][ T5848] Bluetooth: hci3: command 0x0406 tx timeout
[  302.901007][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  305.122062][ T5838] Bluetooth: hci5: command 0x0405 tx timeout
[  307.845285][   T30] audit: type=1326 audit(1754644234.069:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8323 comm="syz.0.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb80a78ebe9 code=0x0
[  307.866413][    C1] vkms_vblank_simulate: vblank timer overrun
[  308.142713][ T8332] futex_wake_op: syz.4.627 tries to shift op by 144; fix this program
[  311.785016][ T5916] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  312.217792][ T5916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.234961][ T5916] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  312.318530][ T5916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  312.356652][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.775566][ T5916] usb 1-1: Product: syz
[  312.779786][ T5916] usb 1-1: Manufacturer: syz
[  312.784416][ T5916] usb 1-1: SerialNumber: syz
[  312.794860][ T5916] cdc_mbim 1-1:1.0: skipping garbage
[  313.230091][ T8355] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  314.101915][   T30] audit: type=1326 audit(1754644239.907:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8376 comm="syz.5.641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0177b8ebe9 code=0x0
[  314.219321][ T8355] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  314.249882][ T5916] cdc_mbim 1-1:1.0: setting tx_max = 184
[  314.264199][ T5916] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  314.795791][ T5916] wwan wwan0: port wwan0mbim0 attached
[  314.865761][ T5916] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 6e:9b:e6:5f:e3:4a
[  315.661184][ T5906] usb 1-1: USB disconnect, device number 9
[  315.695043][ T5906] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  316.047578][ T5906] wwan wwan0: port wwan0mbim0 disconnected
[  322.652824][  T926] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  322.834126][  T926] usb 6-1: Using ep0 maxpacket: 16
[  322.866213][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  322.921251][  T926] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  323.184658][  T926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  323.285325][   T24] usb 1-1: Using ep0 maxpacket: 16
[  323.321567][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  323.343375][  T926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  323.474048][  T926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.483499][  T926] usb 6-1: Product: syz
[  323.487979][   T24] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.499362][  T926] usb 6-1: Manufacturer: syz
[  323.504057][  T926] usb 6-1: SerialNumber: syz
[  323.529069][   T24] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  323.572510][   T24] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  323.598355][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  323.653409][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  323.673593][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.750858][   T24] usb 1-1: Product: syz
[  323.815538][   T24] usb 1-1: Manufacturer: syz
[  323.865234][   T24] usb 1-1: SerialNumber: syz
[  324.103804][  T926] usb 6-1: 0:2 : does not exist
[  324.162500][ T8459] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  324.237625][  T926] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  324.365521][  T926] usb 6-1: USB disconnect, device number 6
[  324.433578][   T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input16
[  324.513784][ T5192] bcm5974 1-1:1.0: could not read from device
[  324.515197][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.605313][   T24] usb 1-1: USB disconnect, device number 10
[  324.616475][ T5192] bcm5974 1-1:1.0: could not read from device
[  324.645630][ T5192] bcm5974 1-1:1.0: could not read from device
[  325.782696][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  329.844649][ T8521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  330.863230][ T8527] input: syz1 as /devices/virtual/input/input17
[  332.090963][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'.
[  332.336762][ T5842] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  332.540245][ T5842] usb 1-1: Using ep0 maxpacket: 16
[  332.581504][ T5842] usb 1-1: config index 0 descriptor too short (expected 42, got 18)
[  332.709604][ T5842] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  332.940841][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  332.957500][ T5842] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  332.967368][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  332.976180][ T5842] usb 1-1: Product: syz
[  332.988928][ T5842] usb 1-1: SerialNumber: syz
[  333.374569][ T5842] r8152-cfgselector 1-1: Unknown version 0x0000
[  333.417313][ T5842] r8152-cfgselector 1-1: config 0 descriptor??
[  333.441839][ T5842] hub 1-1:0.0: bad descriptor, ignoring hub
[  333.447828][ T5842] hub 1-1:0.0: probe with driver hub failed with error -5
[  333.529107][ T8562] netlink: 40 bytes leftover after parsing attributes in process `syz.5.688'.
[  333.608973][ T1212] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  333.795136][ T1212] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  333.814325][ T1212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.848145][ T5842] r8152-cfgselector 1-1: USB disconnect, device number 11
[  333.969319][ T1212] usb 4-1: config 0 has no interface number 0
[  334.458210][ T1212] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  334.467460][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.476048][ T1212] usb 4-1: Product: syz
[  334.480345][ T1212] usb 4-1: Manufacturer: syz
[  334.485038][ T1212] usb 4-1: SerialNumber: syz
[  334.492999][ T1212] usb 4-1: config 0 descriptor??
[  334.503921][   T30] audit: type=1326 audit(1754644259.010:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.4.692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86fb8ebe9 code=0x0
[  334.515793][ T1212] vmk80xx 4-1:0.255: driver 'vmk80xx' failed to auto-configure device.
[  335.003196][  T926] usb 4-1: USB disconnect, device number 11
[  340.117231][ T8641] input: syz1 as /devices/virtual/input/input18
[  341.070625][ T8657] atomic_op ffff888033b55998 conn xmit_atomic 0000000000000000
[  342.589807][ T8669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.720'.
[  343.068330][ T1338] Bluetooth: hci0: Frame reassembly failed (-84)
[  343.120954][ T8674] Bluetooth: hci0: Frame reassembly failed (-84)
[  343.259434][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  343.435037][ T1212] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  343.471920][ T8686] futex_wake_op: syz.0.729 tries to shift op by 144; fix this program
[  344.821697][ T1212] usb 5-1: Using ep0 maxpacket: 8
[  344.823468][ T1212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  344.823486][ T1212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  344.823498][ T1212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  344.823512][ T1212] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  344.823534][ T1212] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  344.823546][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.082326][ T1212] usb 5-1: GET_CAPABILITIES returned 0
[  345.090709][ T1212] usbtmc 5-1:16.0: can't read capabilities
[  345.228008][ T5848] Bluetooth: hci0: command 0x1003 tx timeout
[  345.235700][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  345.309701][ T1212] usb 5-1: USB disconnect, device number 9
[  346.694369][ T8694] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  346.701029][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  346.708987][ T8694] vhci_hcd vhci_hcd.0: Device attached
[  346.799289][ T8695] vhci_hcd: connection closed
[  346.814937][ T1165] vhci_hcd: stop threads
[  346.995414][ T1165] vhci_hcd: release socket
[  347.071681][ T1165] vhci_hcd: disconnect device
[  347.100748][ T1212] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  347.119984][ T1212] usb 43-1: enqueue for inactive port 0
[  347.216290][ T1212] vhci_hcd: vhci_device speed not set
[  347.577654][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.390493][   T30] audit: type=1326 audit(1754644271.995:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8718 comm="syz.3.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fdbb8ebe9 code=0x0
[  351.106439][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'.
[  351.417462][   T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  352.133172][   T24] usb 4-1: Using ep0 maxpacket: 16
[  352.161051][   T24] usb 4-1: config index 0 descriptor too short (expected 42, got 18)
[  352.180694][   T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  352.389000][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  352.655618][ T8763] netlink: 68 bytes leftover after parsing attributes in process `syz.5.750'.
[  353.257769][   T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  353.268884][   T24] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  353.278598][   T24] usb 4-1: Product: syz
[  353.283139][   T24] usb 4-1: SerialNumber: syz
[  353.554267][   T24] r8152-cfgselector 4-1: Unknown version 0x0000
[  353.575114][   T24] r8152-cfgselector 4-1: config 0 descriptor??
[  353.630861][   T24] hub 4-1:0.0: bad descriptor, ignoring hub
[  353.636912][   T24] hub 4-1:0.0: probe with driver hub failed with error -5
[  354.239177][   T10] r8152-cfgselector 4-1: USB disconnect, device number 12
[  356.349231][ T8808] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  358.604257][ T8826] input: syz1 as /devices/virtual/input/input19
[  360.096694][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  360.855589][   T10] usb 1-1: Using ep0 maxpacket: 16
[  360.977576][   T10] usb 1-1: config index 0 descriptor too short (expected 42, got 18)
[  361.029893][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30
[  361.589122][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219
[  361.636721][   T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06
[  361.659256][   T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  361.675800][   T10] usb 1-1: Product: syz
[  361.684852][   T10] usb 1-1: SerialNumber: syz
[  361.901297][   T10] r8152-cfgselector 1-1: Unknown version 0x0000
[  361.908369][   T10] r8152-cfgselector 1-1: config 0 descriptor??
[  361.922791][   T10] hub 1-1:0.0: bad descriptor, ignoring hub
[  361.929908][   T10] hub 1-1:0.0: probe with driver hub failed with error -5
[  361.959334][ T5916] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  362.524183][   T10] r8152-cfgselector 1-1: USB disconnect, device number 12
[  362.653285][ T5916] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  362.738332][ T8860] sctp: [Deprecated]: syz.4.780 (pid 8860) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.738332][ T8860] Use struct sctp_sack_info instead
[  363.634941][ T5916] usb 6-1: config 0 has no interface number 0
[  363.641688][ T5916] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  363.660448][ T5916] usb 6-1: config 0 interface 214 has no altsetting 0
[  363.671924][ T5916] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f
[  363.682254][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.690601][ T5916] usb 6-1: Product: syz
[  363.695070][ T5916] usb 6-1: Manufacturer: syz
[  363.700361][ T5916] usb 6-1: SerialNumber: syz
[  363.708289][ T5916] usb 6-1: config 0 descriptor??
[  363.826769][ T8849] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  364.074869][ T8849] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  364.633958][ T8870] random: crng reseeded on system resumption
[  365.286488][ T8882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.787'.
[  365.316834][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  366.583385][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71
[  366.596707][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71
[  366.623289][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  367.081968][ T8895] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  367.644085][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  367.673684][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  367.965199][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  368.159726][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  368.325523][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  368.809102][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  368.850658][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  368.992206][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  369.275618][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  369.419527][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  369.467983][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  369.503910][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  369.536681][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  369.599540][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  369.641429][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  369.686300][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  369.704989][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  369.736766][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  369.803132][ T8921] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  369.823070][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  370.209803][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  370.221910][ T5916] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  370.260752][ T5916] ax88179_178a 6-1:0.214 eth5: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 46:00:00:00:00:00
[  370.322158][ T5916] usb 6-1: USB disconnect, device number 7
[  370.369181][ T5916] ax88179_178a 6-1:0.214 eth5: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter
[  371.940683][ T5913] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  372.144829][ T5913] usb 5-1: Using ep0 maxpacket: 16
[  372.204881][ T5913] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  372.282141][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  372.317836][ T5913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  372.343634][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.355217][ T5913] usb 5-1: Product: syz
[  372.362048][ T5913] usb 5-1: Manufacturer: syz
[  372.367584][ T5913] usb 5-1: SerialNumber: syz
[  372.650507][ T5913] usb 5-1: 0:2 : does not exist
[  372.708956][ T5913] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  372.908705][ T5913] usb 5-1: USB disconnect, device number 10
[  373.745029][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.532477][   T30] audit: type=1326 audit(1754644298.292:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8992 comm="syz.1.825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9e0d8ebe9 code=0x0
[  378.290416][ T5842] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  379.448935][ T5842] usb 5-1: Using ep0 maxpacket: 16
[  379.480718][ T5842] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  379.497658][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  379.522206][ T5842] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  379.531612][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.539815][ T5842] usb 5-1: Product: syz
[  379.572506][ T5842] usb 5-1: Manufacturer: syz
[  379.577166][ T5842] usb 5-1: SerialNumber: syz
[  379.926276][ T5842] usb 5-1: 0:2 : does not exist
[  379.982460][ T5842] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  380.059617][ T5842] usb 5-1: USB disconnect, device number 11
[  380.889463][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  382.927504][   T30] audit: type=1326 audit(1754644304.298:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9048 comm="syz.4.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86fb8ebe9 code=0x0
[  385.268815][ T9077] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  387.108220][ T9095] tipc: Started in network mode
[  387.113392][ T9095] tipc: Node identity 4, cluster identity 4711
[  387.192527][ T9095] tipc: Node number set to 4
[  387.304861][   T30] audit: type=1326 audit(1754644308.405:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9097 comm="syz.4.858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc86fb8ebe9 code=0x0
[  388.420204][ T9086] binder_alloc: 9085: binder_alloc_buf, no vma
[  390.455865][ T9123] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  391.719335][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  392.395639][ T9139] veth1_macvtap: left promiscuous mode
[  392.401468][ T9139] macsec0: entered promiscuous mode
[  392.919795][ T9153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.868'.
[  393.939663][ T9147] No such timeout policy "syz0"
[  397.340403][ T5848] Bluetooth: hci5: unexpected event for opcode 0x1408
[  398.154654][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.888'.
[  398.877704][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  399.187986][   T24] usb 6-1: Using ep0 maxpacket: 16
[  399.505317][ T9215] veth1_macvtap: left promiscuous mode
[  399.511547][ T9215] macsec0: entered promiscuous mode
[  399.618934][ T9216] veth1_macvtap: entered promiscuous mode
[  399.625027][ T9216] macsec0: left promiscuous mode
[  401.667359][ T5848] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  401.676315][ T5848] Bluetooth: hci5: Injecting HCI hardware error event
[  402.804406][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  402.871029][   T24] usb 6-1: no configurations
[  402.885424][   T24] usb 6-1: can't read configurations, error -22
[  403.132534][  T926] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  403.270709][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  403.451049][ T9241] overlayfs: failed to resolve './file1': -2
[  404.022419][  T926] usb 5-1: Using ep0 maxpacket: 16
[  404.073955][  T926] usb 5-1: unable to get BOS descriptor or descriptor too short
[  404.516637][  T926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.532307][   T10] usb 4-1: Using ep0 maxpacket: 32
[  404.539042][  T926] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  404.585999][  T926] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  404.602397][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a
[  404.634142][  T926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.647539][   T10] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  404.676191][   T10] usb 4-1: Product: syz
[  404.683611][  T926] usb 5-1: Product: syz
[  404.688029][  T926] usb 5-1: Manufacturer: syz
[  404.714907][   T10] usb 4-1: config 0 descriptor??
[  404.745936][  T926] usb 5-1: SerialNumber: syz
[  404.791635][   T10] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  404.819619][ T9245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.901'.
[  404.847474][   T10] gspca_stv06xx: st6422 sensor detected
[  404.985397][ T5913] usb 5-1: USB disconnect, device number 12
[  406.459025][   T10] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71
[  406.675279][   T10] usb 4-1: USB disconnect, device number 13
[  407.131262][ T9275] veth1_macvtap: left promiscuous mode
[  407.137244][ T9275] macsec0: entered promiscuous mode
[  411.792875][ T9315] veth1_macvtap: entered promiscuous mode
[  411.802215][ T9315] macsec0: left promiscuous mode
[  412.254896][ T5848] Bluetooth: hci5: unexpected event for opcode 0x1004
[  413.628708][  T926] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  414.013638][  T926] usb 6-1: Using ep0 maxpacket: 32
[  414.034910][  T926] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  414.080930][  T926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.126995][  T926] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  414.199576][  T926] usb 6-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  414.253919][  T926] usb 6-1: config 0 interface 0 has no altsetting 0
[  414.281704][  T926] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  414.312171][  T926] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  414.346180][  T926] usb 6-1: Product: syz
[  414.462553][  T926] usb 6-1: Manufacturer: syz
[  414.467417][  T926] usb 6-1: SerialNumber: syz
[  414.477682][  T926] usb 6-1: config 0 descriptor??
[  414.490670][  T926] ldusb 6-1:0.0: Interrupt in endpoint not found
[  414.727629][  T926] usb 6-1: USB disconnect, device number 10
[  416.475114][ T9367] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  416.475114][ T9367]    program syz.3.934 not setting count and/or reply_len properly
[  416.584709][ T5848] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  416.594978][ T5848] Bluetooth: hci5: Injecting HCI hardware error event
[  416.778723][ T9369] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  421.692968][ T9404] netlink: 'syz.4.945': attribute type 7 has an invalid length.
[  421.707134][ T9404] : entered promiscuous mode
[  421.970317][ T9412] netlink: 'syz.4.948': attribute type 3 has an invalid length.
[  422.126742][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  422.308269][    T9] usb 2-1: Using ep0 maxpacket: 16
[  422.315883][    T9] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  422.331212][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  422.347055][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  422.358869][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.372794][    T9] usb 2-1: Product: syz
[  422.377750][    T9] usb 2-1: Manufacturer: syz
[  422.383122][    T9] usb 2-1: SerialNumber: syz
[  422.646647][    T9] usb 2-1: 0:2 : does not exist
[  422.667978][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  422.743795][    T9] usb 2-1: USB disconnect, device number 16
[  422.853635][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  425.381769][ T9441] veth1_macvtap: left promiscuous mode
[  425.387533][ T9441] macsec0: entered promiscuous mode
[  431.422014][ T9502] input: syz1 as /devices/virtual/input/input21
[  433.115771][ T9520] netlink: 'syz.1.973': attribute type 2 has an invalid length.
[  433.660523][   T24] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  434.351702][   T24] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  434.399296][   T24] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88
[  434.471754][   T24] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt
[  434.565135][   T24] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  434.613589][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.649571][ T9537] futex_wake_op: syz.5.978 tries to shift op by 144; fix this program
[  434.668917][ T9526] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  436.044281][   T51] Bluetooth: hci0: command 0xfc11 tx timeout
[  436.050863][ T5848] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[  437.134924][   T24] usb 2-1: string descriptor 0 read error: -71
[  437.600441][   T24] usb 2-1: USB disconnect, device number 17
[  437.867088][ T9550] input: syz1 as /devices/virtual/input/input22
[  439.886589][ T5848] Bluetooth: hci3: unexpected event for opcode 0x1408
[  440.236191][  T926] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  440.319601][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'.
[  440.389077][ T9570] fuse: Bad value for 'fd'
[  440.556734][ T5838] Bluetooth: hci5: hardware error 0x00
[  440.610415][  T926] usb 4-1: Using ep0 maxpacket: 32
[  440.650554][   T24] ==================================================================
[  440.658782][   T24] BUG: KASAN: slab-use-after-free in __mutex_unlock_slowpath+0xd4/0x700
[  440.667404][   T24] Read of size 8 at addr ffff88807dfd42d0 by task kworker/1:0/24
[  440.675299][   T24] 
[  440.677958][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  440.677991][   T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  440.678003][   T24] Workqueue: events l2cap_chan_timeout
[  440.678042][   T24] Call Trace:
[  440.678054][   T24]  <TASK>
[  440.678064][   T24]  dump_stack_lvl+0x189/0x250
[  440.678086][   T24]  ? rcu_is_watching+0x15/0xb0
[  440.678108][   T24]  ? __kasan_check_byte+0x12/0x40
[  440.678126][   T24]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.678144][   T24]  ? rcu_is_watching+0x15/0xb0
[  440.678161][   T24]  ? lock_release+0x4b/0x3e0
[  440.678179][   T24]  ? __virt_addr_valid+0x1c8/0x5c0
[  440.678199][   T24]  ? __virt_addr_valid+0x4a5/0x5c0
[  440.678219][   T24]  print_report+0xca/0x240
[  440.678243][   T24]  ? __mutex_unlock_slowpath+0xd4/0x700
[  440.678261][   T24]  kasan_report+0x118/0x150
[  440.678279][   T24]  ? __mutex_unlock_slowpath+0xd4/0x700
[  440.678300][   T24]  kasan_check_range+0x2b0/0x2c0
[  440.678317][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  440.678336][   T24]  __mutex_unlock_slowpath+0xd4/0x700
[  440.678355][   T24]  ? kasan_quarantine_put+0xdd/0x220
[  440.678379][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.678396][   T24]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  440.678422][   T24]  ? kfree+0x18e/0x440
[  440.678450][   T24]  ? _raw_write_unlock+0x3f/0x50
[  440.678467][   T24]  ? l2cap_chan_timeout+0x1ac/0x390
[  440.678491][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  440.678509][   T24]  process_scheduled_works+0xade/0x17b0
[  440.678538][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  440.678562][   T24]  worker_thread+0x8a0/0xda0
[  440.678591][   T24]  kthread+0x70e/0x8a0
[  440.678613][   T24]  ? __pfx_worker_thread+0x10/0x10
[  440.678630][   T24]  ? __pfx_kthread+0x10/0x10
[  440.678655][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  440.678670][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.678685][   T24]  ? __pfx_kthread+0x10/0x10
[  440.678706][   T24]  ret_from_fork+0x3fc/0x770
[  440.678723][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  440.678741][   T24]  ? __switch_to_asm+0x39/0x70
[  440.678760][   T24]  ? __switch_to_asm+0x33/0x70
[  440.678779][   T24]  ? __pfx_kthread+0x10/0x10
[  440.678800][   T24]  ret_from_fork_asm+0x1a/0x30
[  440.678826][   T24]  </TASK>
[  440.678832][   T24] 
[  440.905209][   T24] Allocated by task 9191:
[  440.910406][   T24]  kasan_save_track+0x3e/0x80
[  440.915812][   T24]  __kasan_kmalloc+0x93/0xb0
[  440.920924][   T24]  __kmalloc_cache_noprof+0x230/0x3d0
[  440.926309][   T24]  l2cap_conn_add+0xaa/0x8d0
[  440.930923][   T24]  l2cap_chan_connect+0x6c8/0xe30
[  440.936139][   T24]  l2cap_sock_connect+0x5c5/0x7a0
[  440.941186][   T24]  kernel_connect+0x116/0x180
[  440.946124][   T24]  rfcomm_dlc_open+0x8fe/0xed0
[  440.951074][   T24]  rfcomm_sock_connect+0x2f7/0x610
[  440.956373][   T24]  __sys_connect+0x316/0x440
[  440.961036][   T24]  __x64_sys_connect+0x7a/0x90
[  440.966108][   T24]  do_syscall_64+0xfa/0x3b0
[  440.970914][   T24]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.977166][   T24] 
[  440.979500][   T24] Freed by task 5838:
[  440.983473][   T24]  kasan_save_track+0x3e/0x80
[  440.988153][   T24]  kasan_save_free_info+0x46/0x50
[  440.993350][   T24]  __kasan_slab_free+0x62/0x70
[  440.998299][   T24]  kfree+0x18e/0x440
[  441.002392][   T24]  hci_conn_hash_flush+0x10d/0x230
[  441.007670][   T24]  hci_dev_close_sync+0xaef/0x1330
[  441.013120][   T24]  hci_error_reset+0x127/0x3e0
[  441.018053][   T24]  process_scheduled_works+0xade/0x17b0
[  441.024409][   T24]  worker_thread+0x8a0/0xda0
[  441.029287][   T24]  kthread+0x70e/0x8a0
[  441.033546][   T24]  ret_from_fork+0x3fc/0x770
[  441.038417][   T24]  ret_from_fork_asm+0x1a/0x30
[  441.043378][   T24] 
[  441.045804][   T24] The buggy address belongs to the object at ffff88807dfd4000
[  441.045804][   T24]  which belongs to the cache kmalloc-1k of size 1024
[  441.059867][   T24] The buggy address is located 720 bytes inside of
[  441.059867][   T24]  freed 1024-byte region [ffff88807dfd4000, ffff88807dfd4400)
[  441.073751][   T24] 
[  441.076068][   T24] The buggy address belongs to the physical page:
[  441.082673][   T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dfd0
[  441.091537][   T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  441.100049][   T24] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  441.107600][   T24] page_type: f5(slab)
[  441.111574][   T24] raw: 00fff00000000040 ffff88801a441dc0 dead000000000100 dead000000000122
[  441.120154][   T24] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  441.128840][   T24] head: 00fff00000000040 ffff88801a441dc0 dead000000000100 dead000000000122
[  441.137720][   T24] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  441.146673][   T24] head: 00fff00000000003 ffffea0001f7f401 00000000ffffffff 00000000ffffffff
[  441.155634][   T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  441.164556][   T24] page dumped because: kasan: bad access detected
[  441.171158][   T24] page_owner tracks the page as allocated
[  441.177062][   T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 61, tgid 61 (kworker/u8:4), ts 198670135432, free_ts 198657878790
[  441.196729][   T24]  post_alloc_hook+0x240/0x2a0
[  441.202052][   T24]  get_page_from_freelist+0x21d5/0x22b0
[  441.207722][   T24]  __alloc_frozen_pages_noprof+0x181/0x370
[  441.213572][   T24]  alloc_pages_mpol+0x232/0x4a0
[  441.218638][   T24]  allocate_slab+0x8a/0x3b0
[  441.223351][   T24]  ___slab_alloc+0xbfc/0x1480
[  441.228579][   T24]  __kmalloc_noprof+0x305/0x4f0
[  441.233823][   T24]  ieee802_11_parse_elems_full+0x152/0x2aa0
[  441.240118][   T24]  ieee80211_ibss_rx_queued_mgmt+0x462/0x2ae0
[  441.247349][   T24]  ieee80211_iface_work+0x806/0xfe0
[  441.252912][   T24]  cfg80211_wiphy_work+0x2dc/0x460
[  441.258853][   T24]  process_scheduled_works+0xade/0x17b0
[  441.264862][   T24]  worker_thread+0x8a0/0xda0
[  441.269571][   T24]  kthread+0x70e/0x8a0
[  441.274176][   T24]  ret_from_fork+0x3fc/0x770
[  441.278959][   T24]  ret_from_fork_asm+0x1a/0x30
[  441.283999][   T24] page last free pid 926 tgid 926 stack trace:
[  441.290250][   T24]  __free_frozen_pages+0xc65/0xe60
[  441.295380][   T24]  __put_partials+0x161/0x1c0
[  441.300516][   T24]  put_cpu_partial+0x17c/0x250
[  441.305555][   T24]  __slab_free+0x2f7/0x400
[  441.309971][   T24]  qlist_free_all+0x97/0x140
[  441.314674][   T24]  kasan_quarantine_reduce+0x148/0x160
[  441.320513][   T24]  __kasan_slab_alloc+0x22/0x80
[  441.325527][   T24]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  441.331763][   T24]  __alloc_skb+0x112/0x2d0
[  441.336278][   T24]  mld_newpack+0x13c/0xc40
[  441.340831][   T24]  add_grhead+0x5a/0x2a0
[  441.345239][   T24]  add_grec+0x13b2/0x1670
[  441.349746][   T24]  mld_ifc_work+0x6e6/0xde0
[  441.354522][   T24]  process_scheduled_works+0xade/0x17b0
[  441.360283][   T24]  worker_thread+0x8a0/0xda0
[  441.364891][   T24]  kthread+0x70e/0x8a0
[  441.369000][   T24] 
[  441.371337][   T24] Memory state around the buggy address:
[  441.377082][   T24]  ffff88807dfd4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  441.385229][   T24]  ffff88807dfd4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  441.393288][   T24] >ffff88807dfd4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  441.401515][   T24]                                                  ^
[  441.408179][   T24]  ffff88807dfd4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  441.416243][   T24]  ffff88807dfd4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  441.424511][   T24] ==================================================================
[  441.767948][  T926] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  441.784175][  T926] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  441.800952][  T926] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  441.810981][  T926] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  441.824360][  T926] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.012059][  T926] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  442.110259][  T926] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  442.182010][  T926] usb 4-1: Product: syz
[  442.186668][  T926] usb 4-1: Manufacturer: syz
[  442.200674][  T926] usb 4-1: SerialNumber: syz
[  442.402875][  T926] usb 4-1: config 0 descriptor??
[  442.419762][   T24] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  442.427243][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  442.437428][   T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  442.448109][   T24] Workqueue: events l2cap_chan_timeout
[  442.453607][   T24] Call Trace:
[  442.457166][   T24]  <TASK>
[  442.460227][   T24]  dump_stack_lvl+0x99/0x250
[  442.464947][   T24]  ? __asan_memcpy+0x40/0x70
[  442.469612][   T24]  ? __pfx_dump_stack_lvl+0x10/0x10
[  442.475131][   T24]  ? __pfx__printk+0x10/0x10
[  442.479952][   T24]  panic+0x2db/0x790
[  442.484064][   T24]  ? __pfx_panic+0x10/0x10
[  442.488572][   T24]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  442.494565][   T24]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  442.500981][   T24]  ? print_memory_metadata+0x314/0x400
[  442.506706][   T24]  ? __mutex_unlock_slowpath+0xd4/0x700
[  442.512723][   T24]  check_panic_on_warn+0x89/0xb0
[  442.517678][   T24]  ? __mutex_unlock_slowpath+0xd4/0x700
[  442.523342][   T24]  end_report+0x78/0x160
[  442.527683][   T24]  kasan_report+0x129/0x150
[  442.532363][   T24]  ? __mutex_unlock_slowpath+0xd4/0x700
[  442.538109][   T24]  kasan_check_range+0x2b0/0x2c0
[  442.543144][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  442.548963][   T24]  __mutex_unlock_slowpath+0xd4/0x700
[  442.554347][   T24]  ? kasan_quarantine_put+0xdd/0x220
[  442.559634][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  442.564960][   T24]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  442.570953][   T24]  ? kfree+0x18e/0x440
[  442.575037][   T24]  ? _raw_write_unlock+0x3f/0x50
[  442.580008][   T24]  ? l2cap_chan_timeout+0x1ac/0x390
[  442.585324][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  442.591158][   T24]  process_scheduled_works+0xade/0x17b0
[  442.596892][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  442.603080][   T24]  worker_thread+0x8a0/0xda0
[  442.607679][   T24]  kthread+0x70e/0x8a0
[  442.611747][   T24]  ? __pfx_worker_thread+0x10/0x10
[  442.616849][   T24]  ? __pfx_kthread+0x10/0x10
[  442.621438][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  442.626716][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  442.632550][   T24]  ? __pfx_kthread+0x10/0x10
[  442.637242][   T24]  ret_from_fork+0x3fc/0x770
[  442.641869][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  442.646991][   T24]  ? __switch_to_asm+0x39/0x70
[  442.651775][   T24]  ? __switch_to_asm+0x33/0x70
[  442.657161][   T24]  ? __pfx_kthread+0x10/0x10
[  442.662043][   T24]  ret_from_fork_asm+0x1a/0x30
[  442.667206][   T24]  </TASK>
[  442.670757][   T24] Kernel Offset: disabled
[  442.675497][   T24] Rebooting in 86400 seconds..